Privacy Policy
Last updated 12 June 2026
Phennexia LLC (Sheridan, Wyoming, United States) ("AhlaTap", "we") operates the AhlaTap Service. This policy describes what personal data we collect, why, how we protect it, and the rights you have.
1. Data we collect
- Account data, name, email, password hash, role, company.
- Profile content, anything you publish on a profile (title, photo, contact, socials, links).
- Lead data, contact details people choose to share with you through a profile.
- Commerce data, orders and billing metadata (payments are handled by Stripe; we do not store card numbers).
- Usage data, aggregate profile views, saves and taps, used for your analytics.
2. How we use data
To provide and secure the Service, process payments, send transactional email (verification, receipts, order and lead notifications), provide analytics, and comply with law. We do not sell your personal data.
3. Controller and processor roles
For your account and profile data, AhlaTap is the controller. For lead data you capture from your visitors, you are the controller and AhlaTap is the processor, we process that data only on your instructions to provide the Service. A Data Processing Agreement is available to Company customers on request.
4. Sub-processors
We use the following sub-processors to run the Service:
| Sub-processor | Purpose | Location |
|---|---|---|
| Stripe | Payments & subscriptions | US / EU |
| Resend | Transactional email | US |
| Cloudflare R2 | Image & file storage | Global edge |
| MongoDB Atlas | Application database | Configurable region |
| Vercel | Application hosting | Global edge |
5. Legal bases
We rely on: performance of a contract (to provide the Service), legitimate interests (to secure and improve it), consent (for lead capture and marketing email), and legal obligation (tax, accounting). Lead capture forms record a consent timestamp.
6. Retention
We keep account and profile data while your account is active and for a reasonable period afterward to meet legal and accounting obligations. You can delete profiles, leads and your account at any time; deletion requests are honoured promptly.
7. Your rights
Under PDPL and GDPR you may, subject to law:
- access the personal data we hold about you;
- correct inaccurate data;
- request erasure ("right to be forgotten");
- export your data in a portable format;
- object to or restrict certain processing;
- withdraw consent at any time.
To exercise any right, email contact@ahlatap.com. If you are an end-user whose details a company captured through AhlaTap, contact that company (the controller) first; we will assist them.
8. Security
Passwords are hashed (bcrypt), sessions are signed, transport is encrypted (HTTPS), and access to production data is restricted. No system is perfectly secure, but we take reasonable technical and organisational measures to protect your data.
9. Cookies
We use a single essential cookie to keep you signed in. We do not use third-party advertising or tracking cookies. Aggregate analytics are first-party and tied to profiles, not to identified individuals.
10. International transfers
Our sub-processors may process data outside your country. Where required, transfers are covered by appropriate safeguards such as standard contractual clauses.
11. Contact
Privacy questions or requests? Email contact@ahlatap.com.