Privacy Policy

Last updated: October 5, 2026

This Privacy Policy describes how UNITED SOFTWARE LTDA, a company registered in Brazil under CNPJ 11.094.498/0001-15 (“we”, “us”), collects, uses, shares and protects the personal data of users of the TableTap app (the “App”).

By using the App, you acknowledge that you have read and understood this Policy.

1. Data we collect

Data you provide:

• Registration: full name, ID document or passport number, date of birth, mobile phone number, e-mail address and password (stored encrypted).
• Payment: credit card details (number, expiration date, CVC and cardholder name) and billing address (ZIP code, street, number, additional information, neighborhood, city and state). Full card details are sent to our payment processor and are not stored on our servers.
• Identity verification: images of your ID document and a selfie/facial biometrics, collected and processed by our verification partner (Didit) to confirm your identity and legal drinking age.

Data generated by use:

• Transaction history: credits purchased, products and beverages consumed, volumes served, venue, date and time.
• Technical data: app version, device model and operating system, IP address and access logs.

Camera: the App requests camera access solely to scan QR codes on taps and products and, where applicable, for identity verification. We do not record audio or store camera images for any other purpose.

The App does not collect your location or contacts, and does not use third-party advertising or cross-app tracking.

2. How we use your data

• To create and maintain your account and authenticate you (including SMS verification codes);
• To verify your identity and confirm you are of legal age to purchase alcoholic beverages;
• To process credit purchases and payments, and charge for what you pour at the taps;
• To issue tax documents required by law;
• To show your transaction history and provide support;
• To prevent fraud and keep the platform secure;
• To comply with legal and regulatory obligations.

3. Data sharing

We do not sell your personal data. We share it only with:

• Payment processors (e.g. Stripe), to process card transactions;
• Identity verification provider (Didit), for document and biometric checks;
• SMS providers (e.g. Twilio), to send verification codes;
• Infrastructure and hosting providers (e.g. Amazon Web Services);
• Partner venues where you consume, limited to the details of transactions made at that venue;
• Public authorities, when required by law or court order.

4. Storage and security

Data is transmitted over encrypted connections (HTTPS/TLS) and stored on access-controlled servers. We apply reasonable technical and organizational measures to protect your data against unauthorized access, loss or alteration.

5. Retention

We keep your data while your account is active. After account deletion, data is deleted or anonymized, except where we must retain it to comply with legal obligations (such as tax and financial transaction records and access logs, for the periods required by law).

6. Your rights

Depending on your jurisdiction, you may request access to, correction of, portability of, or deletion of your personal data, as well as information about how it is shared, and you may withdraw consent at any time.

7. Account and data deletion

You can request deletion of your account and associated data by e-mailing ti@palmtap.com.br with the subject “Account deletion”, from your registered e-mail address or stating your registered phone number. We will confirm the request and complete the deletion within 15 days, except for data we must retain by law (section 5). Any remaining credits will be handled according to the Terms of Use.

8. Minors

The App is intended only for users aged 18 or older (or the legal drinking age in your jurisdiction, if higher), as it involves purchasing alcoholic beverages. We do not knowingly collect data from minors, and any such account will be closed.

9. Changes to this policy

We may update this Policy from time to time. The date of the latest update is always shown at the top of this page. Material changes will be announced in the App.

10. Contact

UNITED SOFTWARE LTDA
CNPJ: 11.094.498/0001-15
E-mail: ti@palmtap.com.br
Address: R. Venâncio Aires, 1449, Sala 02, Centro, Santa Cruz do Sul – RS, 96810-100, Brazil