Legal
Privacy Policy
Last updated June 2026
Who we are
Master Brand Audit is a service of Tappmedia NYC LLC. This policy explains what we collect, how we use it, and the rights you have. Questions can be sent to donald@tappmedianyc.com.
Information we collect
We collect the information you submit: your name, email, business details, the URLs and handles you provide for an audit, files you upload, and the content of your brand assets. We collect payment information through Stripe, which processes it securely; we do not store full card numbers. We collect basic usage analytics through Google Analytics 4.
AI processing by Milo
Milo is an AI engine. The information you submit for an audit, build, or website project is processed by AI models to generate your deliverables. Milo's output is reviewed by Donald Tapper before delivery. We do not use your confidential brand data to train third-party models, and your submissions are used to produce your results.
The Milo AI assistant
If you purchase the Website + Agentic AI package, Milo is deployed on your website and converses with your visitors. Milo discloses that it is an AI at the start of every conversation. Lead information captured by Milo (such as a visitor's name and email) is stored so you can follow up and is visible in your dashboard.
Voice calls and TCPA
The Website + Agentic AI package can place voice confirmation calls through VAPI. Milo discloses that it is an AI on every call. Calls are placed only to leads who have provided prior consent to be contacted. As our client, you are responsible for obtaining that consent in compliance with the Telephone Consumer Protection Act (TCPA) before Milo calls on your behalf.
Cookies
We use cookies to measure performance and improve your experience. You can accept cookies through the banner or manage them in your browser. Essential cookies are required for the authenticated app to function.
How we share data
We do not sell your personal information. We share data only with the service providers that run the platform: Stripe for payments, Supabase for data storage, Make.com for automation, VAPI for voice calls, and Anthropic for AI processing. For Done For You implementation, you share platform logins through a secure password manager link (LastPass or 1Password); those credentials are never stored in our database.
Your GDPR rights (EU/EEA)
If you are in the European Union or European Economic Area, you have the right to access, correct, delete, restrict, and port your personal data, and to object to processing. To exercise these rights, email donald@tappmedianyc.com and we will respond within the timeframes required by law.
Your CCPA rights (California)
If you are a California resident, you have the right to know what personal information we collect, to request deletion, and to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, email donald@tappmedianyc.com.
Data retention and security
We retain your data for as long as your account is active or as needed to provide the service and meet legal obligations. We use industry-standard security practices. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Children
The service is intended for businesses and is not directed to children. We do not knowingly collect data from children.
Contact
For any privacy question or request, contact Donald Tapper at donald@tappmedianyc.com.