Privacy notice
Who we are
Tapline is a market-information service for the natural rubber trade, run from Thailand. We decide how the information below is used (in the words of Thailand's Personal Data Protection Act, we are the data controller). You can reach us through the Feedback button at the top of the app.
What we keep
- Your account: your email address and your password. The password is stored only in scrambled (hashed) form; nobody can read it.
- What you make in Tapline: scorecards, signals, reads, weights and notes; prices you type in or import; your own series and spreads; web links you connect to a series; your own news items; journal entries; and a daily record of each scorecard's result.
- Your use of Tapline: the days you open it, and when a read on a signal changes (by you or automatically). We use these to count, in totals, how many people use Tapline and how. We do not use any other tracking or advertising tools.
- Feedback you send with the Feedback button, together with your email address so we can reply.
- On your device: your browser keeps your sign-in and a few conveniences (which scorecard was open, whether you closed the welcome). Clearing your browser's site data removes them.
Who can see it
- Other users: none of it. Each user's data is walled off by the database itself, not only by the screen.
- The room (only if you turn sharing on): your role, your market and your reads on Tapline's built-in signals are pooled with other people's. Only totals are shown, and only for groups of three people or more. Your prices, notes, journal and your own signals are never pooled.
- Tapline staff: the staff tools show the list of accounts (email, plan, sign-up day, last visit) and usage totals. They do not show anyone's scorecards, prices, notes or journal. The people who run Tapline could technically reach the database directly; we do not look at your private data, except to fix a problem you ask us to fix or when the law requires it.
- Service providers: the database runs on Supabase and the website on Vercel. Their servers may be outside Thailand. They keep the data for us and may not use it for anything else. When the check that you are human is switched on, Cloudflare Turnstile looks at your browser and network address while you sign in, sign up or reset your password, only to tell people from automated programs.
- We do not sell your data, and we do not share it with anyone else unless the law requires us to.
Why we keep it
To run Tapline for you (our agreement with you), to keep it secure and improve it (our legitimate interest), and for anything else only with your consent. Pooling your reads into the room happens only when you turn sharing on, and you can turn it off at any time.
How long
For as long as you have an account. Things you move to Trash stay there until you empty it. When you ask us to close your account, we delete your account and everything in it within 30 days. Copies in the providers' backups expire on their own schedule.
Your rights
You may ask to see the data we hold about you, to get a copy, to correct it, to have it deleted, or to withdraw your consent. Ask through the Feedback button at the top of the app. You may also complain to Thailand's Personal Data Protection Committee.
Changes
Tapline is in a pilot and this notice may change. If a change affects how your data is used, we will tell you in the app before it takes effect.