Privacy Policy

This policy applies to data collected through the TAP-ONE website, dashboard, onboarding process, and any communication with our team, for businesses and their representatives using TAP-ONE in India.

In accordance with Rule 3(2) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 (opens in new tab) ("DPDP Act"), we have appointed the following Grievance Officer to address complaints or concerns about your data:

We use the information we collect to:

• Onboard your business and create and manage your account
• Deliver the Service — build and maintain your website, Google Business Profile, reviews, bookings, digital menu, and other TAP-ONE features
• Provide customer support and respond to your requests
• Process billing and payments
• Detect and prevent fraud, abuse, and security threats
• Analyze usage and improve the performance and reliability of the Service
• Send you service-related communications (see our "Communications" section below)
• Send marketing communications only where permitted by applicable law, and with an option to opt out
• Comply with applicable legal and regulatory obligations

We do not sell your data. We share information only with trusted service providers and other parties where necessary to operate TAP-ONE or where legally required, including:

• Razorpay, our payment gateway, to process payments
• Cloud hosting and infrastructure providers
• Domain registrars
• Email, SMS, and WhatsApp Business communication providers
• Analytics providers, to help us understand and improve the Service
• Government authorities and law enforcement, where legally required
• Professional advisers (e.g. legal, accounting), where necessary

These parties are only given access to the information necessary to perform their function and are expected to safeguard your data.

We use cookies and similar technologies for authentication, security, remembering your preferences, and analytics. See our Cookie Policy for full details, including how to manage or disable cookies.

• Customer account information is retained until you request account deletion.
• Data for cancelled accounts is retained for up to 90 days after cancellation, after which it is deleted, unless a longer period is required by law.
• Financial records are retained as legally required under applicable Indian law.
• Support conversations may be retained for service quality monitoring and dispute resolution.

We use reasonable administrative, technical, and physical safeguards to protect your information. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Subject to applicable law, including the DPDP Act, you have the right to access, correct, update, or request deletion of your personal data, and to withdraw consent for its processing where consent is the basis for that processing. To exercise these rights, contact us using the details in Section 11.

TAP-ONE is intended for use by businesses and individuals who are at least 18 years of age. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal data, please contact us so we can take appropriate action.

We may update this Privacy Policy from time to time to reflect changes in our services, legal obligations, or operational practices. The "Last Updated" date above indicates when it was most recently revised. Material changes may be communicated through our website, dashboard, or email. Continued use of TAP-ONE after changes take effect constitutes acceptance of the revised policy.

This policy is governed by the laws of the Republic of India, and any disputes relating to it are subject to the exclusive jurisdiction of the courts of Jaipur, Rajasthan. For questions about this policy or your data, contact us at: