# Tapy

> AI-assisted website builder for marketing and brochure sites: chat-driven production, live preview, HTTPS publish on `*.tapy.dev`, optional custom domain and business email, ZIP/GitHub export.

This file is a **consolidated reference for machine consumption**. It merges key product copy and **English** legal texts as implemented in the `tapy-frontend-v3` repository (snapshot aligned with on-page “Last updated” dates where present). **Prices, promos, and wording on the live site take precedence**—confirm at https://tapy.to/fiyatlandirma and the linked legal pages. The limitations article at https://tapy.to/sinirlamalar is published in **Turkish**; the “Limitations and scope” section below is an English summary of that page’s intent, not a certified translation. For a short link-only map, use https://tapy.to/llms.txt.

## Product overview

**Positioning.** Tapy brings AI-assisted production, secure publishing, optional brand domain and email, design discipline, and portable code together in one product: describe what you need in chat; Tapy produces structure, copy, and layout; the preview updates in sync with the assistant. Work is isolated per project and thread.

**Build.** No complex form builders are required—natural language drives the site. Preview matches what visitors should see. Each experiment can live in its own project; duplicate what worked and revisit older ideas without tab chaos.

**Launch and brand.** One-button publish with HTTPS by default. Connect your own domain via DNS from the panel. Business email: inboxes like support@, sales@, contact@ with guided MX/TXT steps—no self-hosted mail server required.

**Design and ownership.** You can lock palette and typography with a design set before chatting. Export the project as **ZIP** or push to **GitHub** for backup, handoff, or self-hosting.

**How it works (high level).** Sign up → open a project → describe the site in chat (detail improves results) → preview and refine → publish. You can attach a screenshot for layout inspiration, share a URL for something similar (within content policies), or upload DOCX/PDF so Tapy can shape pages around your content. Example brief (law firm): home, team, practice areas, contact; navy and white; professional typography; mobile-friendly. Live marketing example built from a similar brief: https://savunur.tapy.dev — outputs vary by prompt and model.

## Pricing snapshot (from product copy; verify live)

- **Free:** ₺0 — one site on `tapy.dev`, **2** AI credits (Pro model), no custom domain, no hosted email, no direct support.
- **Pro Monthly:** ₺599 — **15** AI credits/month (Pro model), **1** site, custom domain, **3** mailboxes (1 GB each), direct support, SSL.
- **Pro Yearly:** ₺5.899 — **180** AI credits/year (Pro model), **1** site, custom domain and email; promo copy may mention **TAPY10** for yearly discount (10%)—confirm at checkout.
- **Studio (Yearly):** multi-site plan — **5** sites, **180** AI credits/year, **5** custom domain connections, **15** mailboxes (1 GB each), direct support, SSL. (Yearly free domain registration perk where applicable: premium TLDs excluded; up to ~$15 USD retail while subscription is active—see live pricing page.)

## Limitations and scope (English summary of https://tapy.to/sinirlamalar)

Tapy is an AI tool for **marketing and brochure-style websites**, not a general-purpose application platform.

**Out of scope**

- **E-commerce:** no catalog, cart, payment rails, shipping, invoicing, stock, or returns. Use dedicated commerce platforms for online sales.
- **Backend-heavy apps:** no user accounts on *your* site backed by Tapy databases, no SaaS dashboards, customer portals, booking engines with server-side logic, etc. Tapy produces **static / mostly static** sites.
- **AI agents / automation:** Tapy uses AI *for building the site*; it does not build autonomous agents, CRM bots, or automation chains for you.
- **Complex web apps:** no real-time multi-user collaboration, layered authorization systems, file managers, or similar—those need full software projects.
- **Multi-language sites:** not “one site, many locale URLs” as a first-class automated product feature.
- **Traditional CMS:** not WordPress-like ongoing blogging from a separate admin with categories and authors; content changes go through Tapy’s editor.

**In scope (examples).** Professional presence: law, dietitian, studio schedule, developer portfolio, restaurant menu and hours, freelancer references—answering who you are, what you do, and how to reach you.

**Contact forms.** Despite “no backend” for *your* site, **contact form submissions are delivered to you** (including optional **WhatsApp** notifications when configured)—so leads can reach you quickly without you operating form endpoints.

**Focus.** Speed, ease of use, modern hosting, optional custom domain, and clear boundaries rather than “everything platform.”

## Privacy Policy (English, as in app)

_Last updated label on site: February 15, 2026 — https://tapy.to/gizlilik_

### 1. Data Controller

The data controller responsible for processing your personal data under this Privacy Policy is Tapy.

Email: destek@tapy.to  
Web: tapy.to

### 2. Personal Data Collected

2.1. Identity and Contact Information  
• Full name  
• Email address  
• WhatsApp phone number (optional, for notifications)

2.2. Account and Authentication Data  
• Hashed password  
• Email verification status  
• Session tokens (JWT)

2.3. Usage and Technical Data  
• IP address  
• Browser type and version, operating system  
• Platform interactions  
• AI chat history (within project scope)  
• Error logs

2.4. Payment Data  
Payments are processed through Stripe Inc. Tapy does not store sensitive payment details such as card numbers or CVV codes.

2.5. User-Generated Content  
• Project files (HTML, CSS, JavaScript, images)  
• Content editor data  
• Published website content

### 3. Purposes of Processing

• Account creation and authentication — Performance of contract  
• Service provision and project hosting — Performance of contract  
• AI-powered website creation — Performance of contract  
• Payment and billing — Performance of contract, legal obligation  
• Forwarding contact form data via WhatsApp — Explicit consent  
• Technical support and customer service — Legitimate interest  
• Platform security (rate limiting, logging) — Legitimate interest

### 4. Sharing with Third Parties

Tapy does not sell or commercially transfer your personal data to third parties. Data is shared only with the following:

• **Anthropic:** Chat messages are sent to the Anthropic API for website creation. Anthropic does not use this data for model training.  
• **Stripe:** Billing details required for payment processing. PCI DSS Level 1 certified.  
• **Kapso (WhatsApp):** Form data is forwarded for contact form notifications.  
• **Google Cloud / Cloudflare:** Server hosting and security. Data is stored encrypted.  
• **Legal requirements:** May be shared upon court order or regulatory authority request.

### 5. International Data Transfers

Your personal data may be transferred outside Turkey depending on server locations and third-party providers. Such transfers are carried out within the framework of applicable data protection law.

### 6. Security Measures

• All data transmission is protected with TLS 1.2+ encryption  
• Passwords are stored using one-way bcrypt hashing  
• JWT-based authentication and session management  
• Rate limiting on API access  
• Security headers: CSP, HSTS, X-Frame-Options  
• Access to data is restricted on a minimum privilege basis

### 7. Retention Periods

• Account information: While account is active + 30 days after deletion  
• Project data and files: While account is active + 30 days after deletion  
• Chat history: Until the project is deleted  
• Billing and payment records: 10 years (Tax Procedure Law)  
• Server access logs: 2 years  
• Contact form data: 1 year

### 8. Your Rights

You have the following rights regarding your personal data:

• Right to know whether your data is being processed  
• Right to information about the purpose and scope of processing  
• Right to know third parties to whom data has been transferred  
• Right to request correction of inaccurate or incomplete data  
• Right to request deletion or destruction of data  
• Right to claim damages in case of unlawful processing  

To exercise these rights, contact destek@tapy.to. Requests are answered within 30 days.

### 9. Children's Privacy

Tapy does not provide services targeting individuals under 18. We do not knowingly collect personal data from minors.

### 10. Policy Changes

This Privacy Policy may be revised from time to time. Material changes will be notified to your registered email address at least 15 days before taking effect.

### 11. Contact

For any questions about this Privacy Policy or your data rights: destek@tapy.to

## Terms of Service (English, as in app)

_Last updated label on site: February 15, 2026 — https://tapy.to/kullanim-kosullari_

### 1. Parties and Definitions

This Terms of Service Agreement ("Agreement") enters into force between Tapy ("Platform", "we", "our", "Tapy") and the natural or legal person ("User", "you", "your") who registers for or uses the Platform.

• "Service": AI-powered website creation, editing, publishing, hosting and all related digital services offered through the Tapy platform.  
• "User Content": All text, images, code, designs and data created, uploaded or transmitted by the User on the Platform.  
• "Project": Website projects created by the User on the Platform and all associated files.  
• "AI Output": Code, designs, text and other content generated by the Platform's AI models.  
• "Subdomain": Addresses in the [project].tapy.dev format assigned to user projects.

### 2. Scope of Service

Tapy offers users AI-powered website creation via a chat interface, visual content editing, publishing projects on a tapy.dev subdomain or the user's own custom domain, contact form integration and WhatsApp notification services.

Tapy reserves the right to change, update or limit the scope, features and technical infrastructure of the Service without prior notice. Users will be notified within a reasonable period before material changes.

The Service is provided "as-is" and "as-available". Tapy makes no express or implied warranties that the Service will be uninterrupted, error-free or free from security vulnerabilities.

### 3. Account Creation and Security

3.1. A valid email address is required to use the Service. The User warrants that the information provided during registration is accurate, current and complete.

3.2. Accounts may only be created by natural persons or legal entities through authorised representatives. Creating accounts via automated tools (bots, scripts, etc.) is strictly prohibited.

3.3. The User is responsible for maintaining the confidentiality of account credentials. The User is solely responsible for all actions taken through the account, including unauthorised access.

3.4. If unauthorised use of the account is detected, the User must immediately notify destek@tapy.to. Tapy cannot be held responsible for actions taken prior to such notification.

### 4. Plans, Payment and Refunds

4.1. Tapy offers free and paid subscription plans. The scope, limits and pricing of each plan are specified on the Platform.

4.2. Paid plans renew automatically on the selected billing cycle (monthly or annually). Payments are processed through a secure third-party payment provider (Stripe).

4.3. Subscriptions may be cancelled before the end of the current billing period. Upon cancellation, the User continues to have access to paid features until the period ends.

4.4. Refunds: Paid plans are digital services and subscriptions. Except where mandatory applicable law requires otherwise, fees are non-refundable once access to the Service has been provided.

4.5. Tapy reserves the right to change pricing. Price changes do not affect the current subscription period and will be communicated at least 30 days in advance.

### 5. Intellectual Property

5.1. Platform Rights: All intellectual property rights in the Tapy platform, including its design, source code, algorithms, AI models, infrastructure, logo and trademarks, belong exclusively to Tapy.

5.2. User Content: Ownership of content uploaded to or created on the Platform remains with the User. However, the User grants Tapy a licence to use such content for providing and improving the Service.

5.3. AI Outputs: Code, designs and content generated by the Platform's AI models are made available to paying Users for use in their own projects. Tapy makes no warranties regarding the originality or third-party rights compliance of AI outputs.

5.4. Code Export: Users on paid plans may export their project source code and host it independently.

### 6. User Content and Responsibility

6.1. The User is solely responsible for all content created, published and shared on the Platform.

6.2. The User is solely responsible for the accuracy of information on published websites and compliance with applicable legal requirements.

6.3. Visitor data collected through contact forms is forwarded directly to the User, who is responsible as data controller for processing it in accordance with applicable data protection law.

### 7. Prohibited Uses

The User agrees not to use the Platform for:

• Activities that are illegal under Turkish law or international law  
• Fraud, identity theft, phishing or social engineering attacks  
• Hosting or distributing malware  
• Publishing content that infringes third-party intellectual property rights  
• Hate speech, incitement to violence or obscene content  
• Attempting to bypass platform security mechanisms  
• Using bots or scraping tools that overload the platform infrastructure  

Tapy reserves the right to remove content or close accounts without prior notice upon detecting violations.

### 8. AI Usage

8.1. Tapy uses third-party AI models (Anthropic Claude, etc.) in the website creation process.

8.2. AI-generated outputs are for informational and assistance purposes. Tapy makes no warranties regarding their accuracy or fitness for a particular purpose.

8.3. AI usage is subject to the usage quota of the selected plan. Tapy applies rate limiting to prevent abuse.

### 9. Publishing, Domains and Hosting

9.1. Free plan projects are published on a [project].tapy.dev subdomain. Paid plan users may connect their own custom domain.

9.2. Tapy.dev subdomains are Tapy's property and are assigned to users under a licence.

9.3. Ownership, DNS configuration and renewal of custom domains connected by the User are entirely the User's responsibility.

9.4. Tapy makes reasonable efforts to host published sites but does not guarantee 100% uptime.

### 10. Limitation of Liability

10.1. Tapy is not liable for any direct, indirect or incidental damages arising from the use or inability to use the Service.

10.2. Tapy's total liability is limited to the total fees paid by the User in the 12 months preceding the event giving rise to the claim.

10.3. Tapy is not liable for damages resulting from the use of AI-generated content.

### 11. Account Termination

11.1. Users may close their account at any time from account settings.

11.2. Tapy may suspend or close accounts for breach of this Agreement, hosting illegal content or failure to meet payment obligations.

11.3. Upon closure, all account data is permanently deleted within 30 days.

### 12. Governing Law

12.1. This Agreement is governed by the laws of the Republic of Turkey.

12.2. Istanbul (Çağlayan) courts have exclusive jurisdiction over disputes arising from this Agreement.

### 13. Contact

For questions, suggestions or complaints about this Agreement: destek@tapy.to

## Cookie Policy (English, as in app)

_Last updated label on site: February 15, 2026 — https://tapy.to/cerez-politikasi_

### 1. What Are Cookies?

Cookies are small text files placed on your device by your browser when you visit a website. They allow the website to recognize you, manage your session, and remember your preferences.

Tapy uses cookies to ensure the platform works correctly, maintain security, and improve the user experience. Tapy does not use cookies for advertising or third-party tracking.

### 2. Essential (Technical) Cookies

These cookies are required for the platform's core functions and cannot be disabled. They are used without explicit consent as they are necessary for the performance of the contract.

| Cookie       | Duration | Purpose                    |
|-------------|----------|----------------------------|
| tapy_session| Session  | User session management    |
| auth_token  | 7 days   | JWT-based authentication   |
| csrf_token  | Session  | CSRF attack protection     |

### 3. Functional Cookies

These cookies enable advanced features and personalization of the platform.

| Cookie        | Duration | Purpose                                  |
|--------------|----------|------------------------------------------|
| editor_prefs | 1 year   | Editor preferences (theme, panel size)   |
| lang         | 1 year   | Language preference                      |

### 4. Third-Party Cookies

Tapy uses the following third-party services, which may set their own cookies:

- **Stripe:** Technical cookies for secure payment processing. Required for PCI DSS compliance.  
- **Cloudflare:** Technical cookies for DDoS protection and CDN (__cf_bm etc.) may be used.

Tapy does not use Google Analytics, Facebook Pixel or similar advertising/tracking cookies.

### 5. Managing Cookies

You can control cookies through your browser settings (Chrome, Firefox, Safari, Edge—see live page for paths).

**Important:** Disabling essential cookies means you will not be able to log in or use core platform features.

### 6. Local Storage

In addition to cookies, Tapy uses the browser's local storage. Data stored locally includes:

• Editor session state and draft content  
• UI preferences (panel sizes, theme)  
• Language preference (tapy_lang)  
• Project cache data  

Local storage data can be cleared via "Clear Site Data" in your browser settings.

### 7. Policy Changes

This Cookie Policy may be updated due to changes in cookies used or applicable regulations. Material changes will be announced on the Platform.

### 8. Contact

For questions about our cookie policy: destek@tapy.to

## Official pages (canonical paths)

- https://tapy.to/  
- https://tapy.to/ozellikler  
- https://tapy.to/fiyatlandirma  
- https://tapy.to/sinirlamalar  
- https://tapy.to/gizlilik  
- https://tapy.to/kullanim-kosullari  
- https://tapy.to/cerez-politikasi  
- https://tapy.to/iletisim  

English shortcuts (`/pricing`, `/features`, …) permanently redirect to the Turkish canonical URLs.

---

This file is maintained for **AI context** alongside human-readable pages. For disputes, compliance, or billing, rely on the documents and UI presented at **tapy.to** at the time of use.