Privacy Policy

Effective Date: April 13, 2026

1. Introduction

This Privacy Policy ("Privacy Policy" or "Policy") describes how OneTap Maintenance Corporation and its subsidiaries and affiliates (together, "OneTap Maintenance Corporation," "we," "us," or "our") collect, use, retain, disclose, and delete your Personal Information when you access or use the OneTap Maintenance Corporation websites, mobile applications, and related services (collectively, the "Platform"). It also explains your legal rights and options with respect to your information depending on where you reside.

By using the Platform, you confirm that you have read and understood this Privacy Policy. This Privacy Policy is incorporated into, and forms part of, the OneTap Maintenance Corporation Terms of Service (together, the "Agreement"). Capitalized terms used but not defined in this Privacy Policy have the meanings set forth in the Terms of Service.

The Platform is available only within the United States. Personal Information collected through the Platform is stored and processed within the United States. If you access the Platform from outside the United States, you do so at your own risk and acknowledge that your information will be transferred to and processed in the United States.

2. Personal Information We Collect

We collect Personal Information directly from you when you provide it, and automatically from your use of the Platform. "Personal Information" means information that can directly or indirectly identify, or can reasonably be used to identify, an individual, to the extent regulated under applicable privacy laws.

The categories of Personal Information we collect include:

Contact Information. Your first and last name, email address, physical address, and phone number, collected when you create an account or contact us.

Billing and Payment Account Information. Credit or debit card numbers, expiration dates, security codes, zip codes, external bank account and routing numbers, and information provided in connection with linking an external bank account through a third-party account linking service for ACH or electronic funds transfers.

Identity and Business Information. Date of birth, social security number, tax identification number (EIN or SSN), business entity type (sole proprietorship, LLC, corporation, or other), business name, business address, and photographs of government-issued identification documents such as a passport, state ID, or driver's license. Service Providers are required to provide business entity and identity information as a condition of registration.

Promotional Information. Information you provide when participating in surveys, contests, promotions, or similar offerings.

Job Applicant Information. Employment and education history from resumes, writing and work samples, references, and responses to application questions, collected when you apply for a position with OneTap.

User Generated Content. Content submitted via email, OneTap Chat messages, photos, and other communications between you and us or between you and other Users, including photos and documentation related to the performance of Services.

Booking Information. Information about the Service or job you are seeking, including the time, date, and location. For Service Providers, we also collect information about your services, qualifications, experience, and skills.

OneTap Chat Data. Service request details, descriptions, messages exchanged between Users and the OneTap AI assistant, the OneTap Customer Experience team, and (following service acceptance) Service Providers, and other information submitted through the OneTap Chat for the purpose of generating TrueRate Estimates, coordinating Services, and facilitating communication. OneTap Chat communications are monitored and retained as described in the Communication Policy.

TrueRate Estimator Data. Pricing data generated by the OneTap AI TrueRate Estimator, estimate acceptance or declination history, and related algorithmic outputs and pricing records.

Virtual Bank Card Transaction Data. Materials purchases made through the Virtual Bank Card issued in connection with Services, transaction amounts, merchant information, and related payment data. Virtual Bank Card data may be shared with our banking partner (Core Bank) and applicable payment networks as required to process transactions.

AI Matching Data. Data used by the Platform's AI matching technology to assign Service Providers to service requests, including qualifications, experience, licensing status, review ratings, cancellation history, and availability.

Background Check Information. Qualification status (pass or fail) as determined by third-party background check providers. OneTap does not store or retain underlying background check reports or detailed criminal history records.

Cookie and Tracking Data. Data collected through cookies, pixel tags, SDKs, and similar tracking technologies, as described in detail in our Cookie Policy.

Device Data. Information about your device or browser type, operating system, internet service provider, regional and language settings, and device identifiers such as IP address and advertising IDs.

Location Data. Location derived from your IP address or, where permitted, more precise location data from your device.

Service Use Data. Your activities on the Platform, browsing behavior, feature usage patterns, and interactions with communications.

Third-Party Information. Information provided by partners, data providers, social networks, or other third parties related to your use of the Platform or that we combine with information we collect directly.

3. How We Use Your Personal Information

We use your Personal Information for business and commercial purposes, including:

To operate, maintain, and make available the Platform and its features;
To connect you with other Users to facilitate the booking, coordination, and completion of Services;
To generate TrueRate Estimates using our AI-powered pricing technology;
To personalize your experience on the Platform;
For billing, payment processing, and fraud prevention;
To conduct identity verification and background checks as permitted by applicable law;
To ensure the safety, security, and integrity of the Platform and its Users;
For analysis, improvement, and development of the Platform, including training and improving AI systems;
To contact you with transactional, operational, and promotional communications;
To provide customer support and resolve disputes and complaints;
To advertise OneTap products or services, including through interest-based advertising on third-party platforms;
To enforce the Terms of Service and all incorporated policies;
To comply with applicable legal obligations and respond to lawful governmental requests; and
As otherwise permitted under applicable law or with your consent.

4. How We Disclose Your Personal Information

We share your Personal Information with third parties for the following purposes:

Subsidiaries and Affiliates. We share information with our subsidiaries and affiliates to promote, operate, and improve the Platform and our services.

Service Providers and Processors. We share information with third-party service providers who process Personal Information on our behalf, including providers of email communications, identity verification and background checks, fraud prevention, customer support, data analytics, marketing and advertising, hosting and technical infrastructure, payment processing and collections, and onboarding and account management. These providers are contractually required to process Personal Information only as directed by us and in accordance with applicable law.

Other Platform Users. We share limited information with other Users where necessary to facilitate Services, including sharing a Service Provider's name, profile photograph, and rating with a Client upon job matching, and sharing relevant service details with Service Providers upon assignment.

Banking Partner. We share Personal Information with Core Bank (our Sponsor Bank) and applicable payment networks as necessary to provide banking services, including Virtual Bank Card issuance, deposit account management, and payment processing, in accordance with applicable law and our banking partner agreement.

Advertising and Marketing Partners. We share information with advertising and marketing partners, including through the use of cookies and tracking technologies described in the Cookie Policy, for purposes of targeted advertising, audience measurement, and marketing analytics. See Section 5 (Sale and Sharing of Personal Information) for your opt-out rights.

Promotions and Offers. When you voluntarily participate in promotions, contests, or special offers, we may share information as described in connection with that promotion.

Legal Obligations. We disclose Personal Information when required by applicable law, court order, or valid legal process, including to respond to subpoenas, regulatory inquiries, or law enforcement requests. Where legally permissible, we will notify you of such a request.

Protection of Rights and Safety. We disclose Personal Information where necessary to protect the rights, safety, or property of OneTap, our Users, or the public, or to investigate, prevent, or act against potential fraud, abuse, or illegal activity.

Business Transactions. In connection with a merger, acquisition, sale of assets, financing, reorganization, or similar business transaction involving OneTap Maintenance Corporation, Personal Information may be transferred as part of the transaction. We will notify you of any such transfer where required by applicable law.

5. Sale and Sharing of Personal Information

OneTap Maintenance Corporation may share or sell Personal Information (as "sell" or "share" is defined under the California Consumer Privacy Act, as amended by the California Privacy Rights Act ("CCPA/CPRA"), and comparable state privacy laws) to third parties, including marketing and advertising partners, for commercial purposes including targeted advertising, analytics, and business development.

You have the following rights with respect to the sale or sharing of your Personal Information:

Right to Opt Out of Sale / Sharing. You may opt out of the sale or sharing of your Personal Information at any time by contacting us at privacy@onetapfix.com or through the opt-out mechanism provided on the Platform. We will process your opt-out request within fifteen (15) business days. Opting out does not affect our ability to share Personal Information for non-commercial purposes, such as to facilitate Services or comply with legal obligations.

Right to Know. You may request information about the categories and specific pieces of Personal Information we have collected, sold, or shared about you over the preceding twelve (12) months, including the categories of third parties to whom we disclosed your information.

Right to Non-Discrimination. We will not discriminate against you for exercising any of your privacy rights. You will not be denied services, charged different prices, or provided a different level of service as a result of exercising your opt-out rights, except as permitted by applicable law.

6. Retention of Personal Information

We retain your Personal Information for as long as necessary to provide Services, fulfill the purposes described in this Privacy Policy, comply with legal obligations, resolve disputes, and enforce our agreements. The specific retention period for each category of Personal Information depends on the nature of the information and the purpose for which it was collected.

When Personal Information is no longer needed for these purposes, we will delete or de-identify it in accordance with our data retention practices, subject to any legal obligations that require continued retention. Requests for deletion may be submitted as described in Section 7 below.

Personal Information contained in backup systems, archived data, and routine electronic records may be retained for longer periods consistent with our data retention practices, and will remain subject to the confidentiality obligations of this Privacy Policy.

7. Your Rights and Choices

Depending on where you reside, you may have certain rights with respect to your Personal Information. To exercise any of the rights described below, you may submit a request through the Platform or by contacting us at privacy@onetapfix.com. We may verify your identity before processing your request, and we will respond within the timeframes required by applicable law.

Opt-Out of Promotional Communications. You may opt out of receiving promotional emails or messages at any time using the unsubscribe link or opt-out instructions included in those communications. We may continue to send transactional and operational communications necessary to your use of the Platform.

Right to Access. You may request a copy of the Personal Information we hold about you and information about how it is collected, used, and shared.

Right to Correct. You may update or correct your account information at any time through your account settings, or by contacting us at privacy@onetapfix.com.

Right to Delete. You may request deletion of your Personal Information, subject to exceptions permitted by applicable law, including information we are required to retain to comply with legal obligations, resolve disputes, or enforce our agreements.

Right to Data Portability. Where required by applicable law, you may request that we provide your Personal Information in a portable, machine-readable format.

Right to Opt Out of Sale / Sharing. As described in Section 5, you may opt out of the sale or sharing of your Personal Information for targeted advertising or other commercial purposes.

Right to Limit Use of Sensitive Information. Where required by applicable law, you may request that we limit our use of sensitive Personal Information (such as government-issued ID numbers or financial account information) to purposes for which it was collected.

Right to Non-Discrimination. You will not be discriminated against for exercising your privacy rights.

Authorized Agent. Residents of states with applicable privacy laws may designate an authorized agent to submit requests on their behalf. We may require verification of both the agent's authority and your identity before processing a request submitted by an authorized agent.

8. Security

OneTap Maintenance Corporation implements and maintains commercially reasonable administrative, technical, and physical safeguards designed to protect the confidentiality, integrity, and availability of Personal Information. These safeguards include encryption of sensitive data in transit and at rest, access controls, and periodic security assessments.

However, no security measure is perfect or impenetrable, and OneTap cannot guarantee that Personal Information will never be accessed, disclosed, altered, or destroyed in an unauthorized manner. To the maximum extent permitted by applicable law, OneTap expressly disclaims liability for unauthorized access to or disclosure of Personal Information that is not caused solely by OneTap's failure to maintain commercially reasonable safeguards.

If you believe your account has been compromised or your Personal Information has been improperly accessed, please contact us immediately at privacy@onetapfix.com.

9. Jurisdiction-Specific Provisions

California Residents (CCPA / CPRA)

California residents have rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the right to know, the right to delete, the right to correct, the right to opt out of sale or sharing, the right to limit use of sensitive Personal Information, and the right to non-discrimination. To exercise these rights, contact privacy@onetapfix.com. California residents may also request information regarding disclosure of Personal Information to third parties for direct marketing purposes under California Civil Code § 1798.83.

Other U.S. State Residents

If you reside in a state with an applicable comprehensive privacy law (including but not limited to Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other states that may enact comparable legislation), you may have additional rights regarding your Personal Information, including the right to access, correct, delete, or opt out of certain processing activities such as targeted advertising, profiling, or sale of your data. OneTap Maintenance Corporation will honor rights requests in accordance with applicable state law. To exercise your rights, contact privacy@onetapfix.com.

Enterprise Customers

For Enterprise Customers, additional data processing terms — including sub-processor obligations, data subject request handling, and security incident notification — are set forth in Section 7.5 (Data Processing) of the Enterprise Master Services Agreement and any applicable Data Processing Addendum. In the event of a conflict between this Privacy Policy and a Data Processing Addendum with respect to Enterprise Customer data, the Data Processing Addendum controls.

10. Children's Privacy

The Platform is not directed to children under the age of 13, and we do not knowingly collect Personal Information from children under 13. If we become aware that we have collected Personal Information from a child under 13 without parental consent, we will take steps to delete that information promptly. If you believe we have inadvertently collected information from a child under 13, please contact us at privacy@onetapfix.com.

11. Third-Party Links and Services

The Platform may contain links to third-party websites, applications, or services that are not operated by OneTap Maintenance Corporation. This Privacy Policy does not apply to third-party services, and we are not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third-party services you access through the Platform.

12. Changes to This Privacy Policy

OneTap Maintenance Corporation reserves the right to modify this Privacy Policy at any time, in its sole discretion. Changes will become effective upon posting of the revised Policy to the Platform or upon notice to Users by email or in-app notification. The "Last Updated" date on this document reflects the most recent revision. Your continued use of the Platform following any modification constitutes your acceptance of the updated Privacy Policy. For material changes that require your consent under applicable law, we will seek your consent before implementing the change.

13. Contacting Us

If you have questions about this Privacy Policy, our data practices, or wish to exercise your privacy rights, please contact us at:

Email: privacy@onetapfix.com
Mail: OneTap Maintenance Corporation, Attn: Privacy, 1133 Polk Ave, STE 120, Nashville, TN 37210
Phone: (615) 263-9898

See the Contact Details for additional contact information. We will respond to privacy requests within the timeframes required by applicable law, and in no event later than forty-five (45) days from receipt of a verifiable request.