Privacy Policy

Last updated: 12 November 2026

This policy explains what Taptile collects, why, who sees it, and what you can ask us to do. We follow India's Digital Personal Data Protection Act, 2023. We keep data to a minimum: customers do not create accounts and we do not ask customers for their name, phone or email.

1. Who is responsible

Taptile is operated by Taptile, a business run by two founders in Hyderabad, Telangana, India. Contact for privacy questions and complaints (Grievance contact): gettaptile@gmail.com.

2. If you are a customer scanning a Taptile card or QR

What we collect

• Anonymous activity: that the page was opened, which language you picked, and which buttons you tapped (for example, "went to Google" or "called"). This is counted per business. It is not linked to your name or phone.
• What you type or pick for a review draft: your selected options and any words you type or speak are sent to our AI provider to write a draft. We do not save your text on our servers. We only record that a draft was made.
• Private messages: if you choose "Tell the owner privately", we store your message so the business owner can read it. Please do not include personal details unless you want the owner to have them. We do not ask for your name or contact.
• A technical identifier for abuse protection: to stop spam we keep a scrambled (hashed) version of your network address for a short time to limit how often the page can be used. We cannot turn it back into your address.

What stays on your phone

Your language choice is saved in your browser so the page remembers it. Taptile does not use advertising or tracking cookies for customers.

Reviews on Google

When you open Google to post a review, you leave Taptile. Google's own privacy policy applies there. You post the review yourself.

3. If you are a business owner

• Business details: business name, category, Google Place ID or review link, and the details you add to your page (tagline, phone, WhatsApp, Instagram, Maps and menu links, Wi-Fi name and password). Anything you add to your page is public to anyone who opens it.
• Sign-in: we store a scrambled form of your private link. Your browser keeps a sign-in cookie so you stay logged in.
• Smart Connect Card: the details you enter for the card page, and a scrambled form of your PIN.
• Competitor tracking: if you add competitors, we read their public Google rating and review count and store daily totals. This is public business information, not personal data.
• Payments: when you buy a plan, the payment is handled by our payment provider. We do not see or store your card or UPI details.

4. Why we use data

• to run the page, the AI draft helper and your dashboard;
• to show you counts of scans, clicks and messages;
• to keep the service secure and stop spam or misuse;
• to bill you and answer support requests.

We do not sell personal data. We do not use customer messages or drafts to build advertising profiles.

5. Who else handles data

We use service providers to run Taptile. They process data for us and not for their own purposes:

• Cloudflare: hosting and our database;
• Groq (or a similar AI provider): turns the options and words you give into a review draft;
• Google: public place information for competitor tracking, when enabled;
• WhatsApp (Meta): for owner messages, if you turn them on;
• Razorpay: payments, when billing is enabled.

Some of these providers process data outside India. We may also share data if the law requires it.

6. How long we keep it

• Private messages marked done: deleted after 90 days. Messages not marked done stay until you mark them or the account is deleted.
• Competitor daily totals: 120 days.
• Abuse-protection identifiers: minutes to a few hours.
• Business and activity counts: until the business account is deleted.
• Billing records: as long as tax law requires.

7. Your rights

Under the DPDP Act you can ask to know what data we hold about you, correct it, have it deleted, and complain about how it is handled. Because customers are anonymous, we may not be able to find a particular customer's message unless you tell us roughly when and for which business you sent it. Write to gettaptile@gmail.com and we will reply within a reasonable time, and no later than the law allows. If you are not satisfied, you can complain to the Data Protection Board of India.

Business owners can ask us to delete their account and page at any time.

8. Children

Taptile is meant for use by customers and business owners and is not directed at children. We do not knowingly collect data from children.

9. Security

We use encrypted connections, store sign-in and PIN secrets in scrambled form, and limit who can reach the admin tools. No system is perfectly secure. If a breach affects your data, we will tell you and the authorities as the law requires.

10. Changes

We may update this policy. The date above shows the latest version, and we will tell active owners about important changes.