Privacy Policy

The data controller is Beijing Shunzhun Technology Co., Ltd., the operator of OneTap ("we", "us") Contact: support@onetap.cool We have not appointed a DPO; for data protection questions use the contact above Where Paddle processes payment, tax and fraud-prevention data as Merchant of Record, Paddle acts as an independent controller under its own privacy policy

Account data (email, optional profile details) — to create and manage your account — legal basis: contract (Art. 6(1)(b)) Usage and device data (feature usage, diagnostic logs, IP address, browser/system type) — to operate, secure and improve the Service — legal basis: legitimate interest (Art. 6(1)(f)) in keeping the Service secure and reliable; you may object as described below Your content (uploaded demos, generated clips) — to provide the Service — legal basis: contract Support communications — to respond to you — legal basis: contract and legitimate interest Cookies — strictly necessary sign-in and preference cookies only; we do not use advertising or third-party tracking cookies — legal basis: legitimate interest / consent where required Providing account data is a contractual requirement; without it we cannot provide the Service

All payments are processed by Paddle as Merchant of Record Paddle collects and processes your payment details, billing address and tax information under its own privacy policy and is the independent controller of that data We receive only what we need to manage your purchase (plan, status, transaction reference) and never store full card numbers

We do not sell personal data and we do not share it for cross-context behavioral advertising We share data only with: Paddle (payments, billing, tax, refunds — independent controller); hosting and infrastructure providers acting as our processors under data processing agreements; and authorities where required by law A list of processor categories is available on request

Your data may be processed outside your country (including outside the EEA/UK) Where required, transfers are made under appropriate safeguards such as EU Standard Contractual Clauses, the UK Addendum or adequacy decisions You may request information about the safeguards applicable to your data via the contact above

We retain personal data no longer than necessary for each purpose: account data — while your account is active, deleted within 30 days after closure (unless law requires longer); billing records — as required by tax/accounting law (typically up to 7–10 years, held by Paddle as controller of payment data); usage and diagnostic data — up to 24 months; support correspondence — up to 24 months; your content — until you delete it or close your account (plus the 30-day deletion window) Anonymized data may be kept indefinitely

If you are in the EEA, UK or Switzerland you have the right to: access your personal data; rectification; erasure; restriction of processing; data portability; object to processing based on legitimate interests (including profiling); not be subject to solely automated decisions with legal or similarly significant effect; and withdraw consent at any time where processing is based on consent (withdrawal does not affect prior processing) AI coaching outputs are advisory only and do not produce legal or similarly significant effects To exercise your rights, email support@onetap.cool; we respond within one month (extendable by two months for complex requests) You also have the right to lodge a complaint with your local supervisory authority (in the UK, the ICO at ico.org.uk; EU authorities are listed by the EDPB at edpb.europa.eu)

In the 12 months we have collected the following categories of personal information (as defined by the CCPA): identifiers (email, IP), commercial information (plan, purchase history), internet or other electronic activity (usage data), and professional/support communications We collect these for the purposes in section 2 We do not "sell" or "share" personal information for cross-context behavioral advertising If you are a California resident you may request access, correction, deletion, and portability of your personal information, and we will not discriminate against you for exercising these rights Email support@onetap.cool to exercise CCPA rights; we will verify your request and respond within 45 days You may use an authorized agent where permitted by law

We protect your data using industry-standard measures including encryption in transit (TLS), access controls, least-privilege principles and processor due diligence In case of a personal data breach we will notify you and the competent supervisory authority as required by law

The Service is not directed at children under 16, and we do not knowingly collect personal data from children under 16 If you believe a child has provided us data, contact us and we will delete it Users under 18 should use the Service with parental involvement

We may update this policy from time to time; material changes will be announced by email or through the Service at least 14 days in advance Previous versions are available on request Questions, requests and complaints: use the email below; we usually reply within 24 hours on business days