Privacy Policy

TAP-ONE is a software platform that helps businesses collect Google reviews using branded QR codes, AI-assisted review drafting, analytics, and review management tools.

Our primary users include:

Customers scanning QR codes ("End Users") may also interact with our platform without creating an account.

A. Business Account Information

When creating or managing a TAP-ONE account, we may collect:

• Business name
• Business category
• Email address
• Encrypted password
• Google Review URL
• Subscription information
• Logo uploaded by you
• AI preferences
• Language preferences
• QR code settings
• Dashboard preferences

B. Usage Information

To operate and improve our Services, we may automatically collect:

• IP address
• Browser type
• Device information
• Operating system
• Time zone
• Session timestamps
• Login history
• Dashboard activity
• Feature usage
• QR code scans
• Referring pages
• Error logs

C. Customer Review Information

When a customer scans a TAP-ONE QR code, we may collect:

• Star rating
• Generated review draft
• Edited review (if submitted)
• Private feedback (where enabled)
• Time of submission
• Device type
• Browser information
• Approximate geographic region derived from IP
• QR scan information

D. Payment Information

Payments are securely processed through Razorpay.

We may retain transaction identifiers, invoices, subscription status, and payment references for accounting, fraud prevention, and customer support.

E. Communications

If you contact us, subscribe to updates, or request support, we may collect:

• Name
• Email address
• Message contents
• Attachments
• Support history

We use information to:

• Create and manage your account
• Generate QR codes
• Deliver AI-assisted review suggestions
• Display dashboard analytics
• Process subscriptions
• Provide customer support
• Improve platform performance
• Detect fraud and abuse
• Prevent spam
• Secure user accounts
• Communicate service updates
• Send transactional emails
• Comply with legal obligations

TAP-ONE uses artificial intelligence to generate review suggestions based on:

• Business category
• Selected language
• Rating
• Tone preferences
• General business information

AI-generated content is intended only as a writing assistant.

Customers remain fully responsible for:

• Reviewing
• Editing
• Approving
• Posting

their reviews before submission to Google.

Our platform simply assists customers by:

1. Collecting a rating.
2. Generating an optional review draft.
3. Copying the review text.
4. Redirecting the customer to their business's Google Review page.

The customer decides whether to paste, edit, or submit the review.

Google reviews remain subject to Google's own Terms of Service and Privacy Policy.

We use cookies and similar technologies to:

• Keep users signed in
• Remember preferences
• Improve website performance
• Secure sessions
• Measure platform usage

We also use Google Analytics to better understand how visitors interact with our Services. Google Analytics may collect information such as browser type, device information, pages visited, session duration, and approximate location. This information helps us improve our Services and user experience.

You may disable cookies through your browser settings, although some features may not function properly. See our Cookie Policy for more detail.

To provide our Services, we work with trusted third-party providers, including:

These providers process information only as necessary to perform services on our behalf or as otherwise described in their own privacy policies.

We may share information:

• With service providers operating our platform
• With payment processors
• When required by law
• During mergers, acquisitions, or restructuring
• To protect users, our platform, or legal rights

We retain information only for as long as reasonably necessary. Generally:

• Active accounts are retained while your subscription remains active.
• Deleted accounts are removed within approximately 30 days, unless retention is required by law.
• Payment records may be retained for accounting and tax compliance.
• Some anonymised analytical information may be retained to improve our Services.

We implement reasonable technical and organisational safeguards to protect your information, including:

• HTTPS encryption in transit
• Encryption at rest for data stored with our infrastructure providers (e.g. Supabase)
• Secure authentication
• Restricted administrative access
• Monitoring for suspicious activity
• Regular software updates
• Industry-standard security practices

Although we strive to protect your information, no method of electronic storage or transmission over the Internet is completely secure.

In the event of a personal data breach that is likely to affect your rights or interests, we will take reasonable steps to:

• Assess the nature and scope of the breach promptly.
• Notify affected users without undue delay, using the email address or dashboard associated with their account.
• Notify the Data Protection Board of India, and any other regulator required under applicable law, where such notification is legally required.
• Take reasonable remedial measures to contain and address the breach.

Notifications will describe, to the extent known, the nature of the breach and the steps being taken in response.

Depending on applicable law, you may have the right to:

• Access your information
• Correct inaccurate information
• Delete your account
• Request a copy of your information
• Withdraw consent where applicable
• Object to certain processing activities
• Lodge a complaint with the Data Protection Board of India, established under the Digital Personal Data Protection Act, 2023, or such other authority as may have jurisdiction

Requests may be submitted by contacting us.

TAP-ONE is designed primarily for businesses.

Individuals under the age of 18 should use our Services only with appropriate parental or guardian consent and supervision, in accordance with the Digital Personal Data Protection Act, 2023, and other applicable law.

We do not knowingly collect personal information from children in violation of applicable laws.

If you believe a child has provided personal information to us, please contact us so that appropriate action can be taken.

Our Services are currently intended primarily for users located in India.

Where information is processed outside India by trusted service providers, we take reasonable steps to ensure appropriate safeguards are in place.

Business owners are responsible for:

• Providing accurate business information
• Using TAP-ONE lawfully
• Respecting customer privacy
• Obtaining any permissions required by applicable law
• Complying with Google's review policies

We may update this Privacy Policy from time to time.

When material changes are made, we will update the "Last Updated" date above and may notify registered users through email or the dashboard where appropriate.

Continued use of the Services after changes become effective constitutes acceptance of the updated Privacy Policy.

If you have any questions, requests, or concerns regarding this Privacy Policy, please contact us:

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India, including applicable provisions of the Digital Personal Data Protection Act, 2023, and other relevant laws. Regulatory oversight of data protection matters rests with the Data Protection Board of India.

Any disputes arising out of or relating to this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts located in Rajasthan, India.