AwardTape Privacy Policy

Datil Technologies Inc. / Effective November 1, 2026

This policy explains what personal information AwardTape collects, how we use it, who we disclose it to and how, how we protect it, and the choices you have.

1. Who we are

Datil Technologies Inc., a Delaware corporation, operates AwardTape and controls the personal information described here. Mailing address: 66 West Flagler Street, Suite 900, PMB 12079, Miami, FL 33144, United States. Privacy contact: [email protected].

2. What we collect

Email address, when you sign up for Tape Recap, request an API key, buy credits, or sign in. For free API keys we store your email with the key, so we can send you the key, allow one free key per address, and help you get it back if you lose it. Signup forms also record the page you signed up from (for example "home" or "bid-page").
API key and credit details: a one-way hash of each API key (never the key itself), credits bought and left, the payment reference, and when the key was created and last used.
API usage log: for each paid call, the endpoint, time, payment method and amount. For stablecoin payments, the network, the paying wallet address and the transaction hash, which are public on that network.
Account details for earlier subscriptions: for subscriptions bought before November 1, 2026, the plan, status, renewal date and a Stripe customer reference, received from Stripe.
Payment details, collected by Link and Stripe at checkout: name, card or other payment method, billing country and postal code. Link and Stripe hold your full card details. We receive only what you bought, the amount, the payment status and, at most, the card brand and last 4 digits.
Sign-in data: one-time sign-in links and session tokens, which we keep only as one-way hashes. Links expire after 15 minutes and sessions after 30 days.
Account activity log: sign-ins, exports and billing events, with time and IP address, to secure accounts and answer support questions.
Technical data: our host, Cloudflare, processes IP addresses, browser type, pages requested and timestamps to deliver the site and block abuse. Cloudflare Web Analytics gives us aggregate page counts and sets no cookies.
Email engagement: Buttondown records delivery and unsubscribes, and may record opens and clicks, on Tape Recap emails. For account emails we record each send, delivery problems and unsubscribes; and run no open or click tracking.
Messages you send us, such as support emails to [email protected].

We collect no sensitive personal information, and AwardTape is built for business readers.

3. Cookies

AwardTape sets up to 2 cookies, both needed for the service: the sign-in session for your account (HttpOnly, Secure, SameSite), which lasts up to 30 days or until you sign out; and, after you get an API key or buy credits in a browser, a dashboard cookie that holds your API key so the dashboard can show your balance and top up that key (Secure, SameSite=Lax, up to 30 days). Clear it by signing out or deleting site cookies. AwardTape runs no advertising or cross-site tracking cookies. Link and Stripe set their own cookies on the checkout page to process payments and prevent fraud.

4. How we use it

To provide the service: issue API keys, count and deduct credits, sign you in, and deliver exports.
To send the emails you asked for: Tape Recap, the free Evening Brief, and sign-in links.
To send service and billing emails: purchase confirmations and receipts, and, for earlier subscriptions, renewal and cancellation notices.
To keep AwardTape secure, prevent fraud and abuse, and enforce our Terms.
To answer support requests and to operate and improve the site.
To meet legal, tax and accounting obligations.

Where the GDPR or UK GDPR applies, our legal bases are: performance of our contract with you (API keys, credits and accounts), your consent (Tape Recap and other marketing emails, which you can withdraw at any time), our legitimate interests (security, fraud prevention, improving the service), and legal obligations (tax and accounting records).

5. Who we disclose it to, and how

We disclose personal information only to the service providers below, and only what each needs to run AwardTape. Data moves to them over encrypted connections (HTTPS/TLS), through their secure APIs and integrations.

Link and Stripe (stripe.com, link.com): checkout, payments, tax, receipts, management of earlier subscriptions, and payment support. Link is the merchant of record and handles payment data under its own privacy policy and Stripe's privacy policy.
Cloudflare (cloudflare.com): hosting, content delivery, security, the AwardTape database, aggregate analytics, and the subscriber list, and delivery of sign-in emails from [email protected] and the free Evening Brief emails from [email protected]. Exercise your data rights at /privacy/rights/.
Google Workspace (google.com): the inbox that receives messages sent to [email protected].

We may also disclose information when the law requires it, to protect the rights, safety and security of AwardTape and its users, or to a successor in a merger, acquisition or sale of the AwardTape business, under this policy. We do not sell personal information, and we do not share it for cross-context behavioral advertising.

6. How long we keep it

Tape Recap subscribers: until you unsubscribe. We then keep only a suppression record so we never email you again.
API key and credit records: while the key has credits or was used in the last 24 months, unless you ask us to delete them sooner.
API usage log and payment ledger: as long as tax and accounting law requires, typically 7 years.
Account data for earlier subscriptions: while the account is active, then up to 24 months after the subscription ends.
Billing and tax records: as long as tax and accounting law requires, typically 7 years.
Account activity log: 12 months. Sign-in links: 15 minutes. Sessions: 30 days.
Support emails: up to 3 years.

7. How we protect it

Every page and API runs over HTTPS with HSTS and a strict Content Security Policy.
Card data goes straight to Link and Stripe, which are certified to PCI DSS Level 1. Card numbers never reach AwardTape's servers.
Sign-in uses one-time links that expire after 15 minutes. We keep only one-way hashes of links and session tokens, and the session cookie is HttpOnly and Secure.
Our systems use restricted, least-privilege API keys, and secrets live in encrypted environment settings, outside the code.
Access to production systems and data is limited to the people who run AwardTape.
If a breach affects your personal information, we notify you and the authorities as the law requires.

No system is perfectly secure, and we keep improving these measures.

8. Your rights and choices

Unsubscribe from any AwardTape email with the link at the bottom. Signup is double opt-in.
There is nothing to cancel for credits; they are one-time purchases. Cancel an earlier subscription online at any time (see Support).
Ask to access, correct, delete or export your personal information, or object to or restrict its use, by emailing [email protected] from the address on your account.

California residents. Under the CCPA you have the right to know what personal information we collect, use and disclose; to delete it; to correct it; and to opt out of its sale or sharing (we do neither). We collect the categories listed in section 2 (identifiers, commercial information, internet activity) from you, Stripe and our providers, for the purposes in section 4, and disclose them to the providers in section 5 for business purposes. We treat Global Privacy Control signals as an opt-out request. We never discriminate against you for using these rights. An authorized agent may make a request for you with your written permission.

EEA, UK and Swiss residents. You have the rights of access, rectification, erasure, restriction, portability and objection, and you may withdraw consent at any time. You may also complain to your local data protection authority.

We verify requests by confirming control of the account email, and we answer within 30 days (45 days where the CCPA allows).

9. International transfers

AwardTape is run from the United States, and our providers may process data in the United States and other countries. Where the law requires, transfers rely on safeguards such as the providers' Standard Contractual Clauses or the EU-U.S. Data Privacy Framework.

10. Children

AwardTape is a service for adults and professionals, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, email [email protected] and we delete it.

11. Changes

We post updates on this page with a new effective date and email subscribers about material changes before they take effect.

12. Contact

Datil Technologies Inc. / 66 West Flagler Street, Suite 900, PMB 12079, Miami, FL 33144, United States / [email protected]