Privacy Policy
Last Updated: September 14, 2026 • Effective Date: September 14, 2026
1. Introduction & Overview
Welcome to TapOnce ("we," "our," or "us"). TapOnce is a digital identity and smart networking platform based in Bengaluru, Karnataka, India. We design, manufacture, and distribute Near Field Communication (NFC) smart business cards (including Essential PVC, Premium Matte, Stainless Metal, and Corporate tiers) and provide a cloud-hosted digital profile platform that enables professionals and businesses to instantly share contact information.
We value your trust and are committed to safeguarding your personal data. This Privacy Policy explains what information we collect when you visit our website, purchase our physical smart cards, or utilize our digital profile hosting services, how that data is used and protected, and your rights regarding your personal information.
2. Information We Collect
Depending on how you interact with TapOnce, we collect the following categories of information:
A. Order & Shipping Details
When you order a physical smart card, we collect your full recipient name, delivery street address, city, state, postal code (PIN code), contact telephone number, and email address to fulfill and courier your card.
B. Card Customization Data
To manufacture your customized smart card, we collect the details you provide for printing or laser engraving, such as your full name, job title, company name, and any uploaded corporate logos.
C. Payment Information (via Cashfree Payments)
All digital payments are processed through our PCI-DSS compliant payment gateway partner, Cashfree Payments. TapOnce does not store, process, or have access to your raw credit or debit card numbers, CVVs, or net banking passwords. We receive only transaction status tokens, order IDs, and payment confirmation IDs.
D. Digital Profile Information
When you configure your public digital profile, you may choose to submit your professional bio, headshot photo, contact phone numbers, email addresses, social profile handles (LinkedIn, Instagram, X, GitHub), portfolio links, and company website URLs. Note: Any information you place on your public digital profile is intentionally made viewable to individuals who tap your card or scan your QR code.
E. Telemetry & Analytics
We collect aggregated, non-personally identifiable metrics regarding card taps and profile views (such as timestamps, general geographic region, and device operating system) to provide you with networking analytics on your dashboard.
3. How We Use Your Information
We use the collected information strictly for legitimate operational purposes, including:
- Processing, manufacturing, and delivering your custom NFC smart cards.
- Hosting, rendering, and maintaining your cloud digital profile and dynamic QR codes.
- Transmitting order confirmation notices, shipping tracking numbers, and delivery updates via email or SMS.
- Enabling contact exchange and phonebook download (.vcf) functionality when someone interacts with your card.
- Providing customer support, warranty replacements, and addressing technical inquiries.
- Detecting and preventing fraudulent transactions, abuse, or unauthorized system access.
4. Data Sharing & Third Parties
We do not sell, rent, or trade your personal information to third-party data brokers or advertisers under any circumstances. We share data only with verified service providers necessary to operate our business:
- Payment Processors: Cashfree Payments (Cashfree Payments India Private Limited) for secure payment capture and verification.
- Logistics & Courier Partners: Verified shipping carriers (such as BlueDart, Delhivery, or India Post) solely to deliver your physical package.
- Cloud Infrastructure: Secure cloud hosting providers with end-to-end data encryption and high availability.
- Legal Compliance: If required by applicable Indian law, court order, or governmental authorities.
5. Cookies & Local Storage
We use essential session cookies and local browser storage to remember your light/dark theme preference, maintain user authentication state, and preserve cart items during checkout. You can configure your browser to reject cookies, though certain interactive features of the website may function with limited capability.
6. Data Retention Policies
We retain your account and digital profile data for as long as your profile remains active on our platform. Order records, invoices, and payment receipts are retained in accordance with Indian statutory, financial, and tax accounting obligations. If you choose to delete your account, your public profile is immediately deactivated, and your data is permanently expunged from our active production database.
7. Data Security & Encryption
We implement robust technical and organizational security measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. All web traffic is encrypted using Transport Layer Security (TLS 1.3 / HTTPS). Our databases are protected with role-based access control, cryptographic hashing, and automated security monitoring.
8. Your Rights & Choices
You maintain full ownership and control over your personal data. You have the right to:
- Access & Review: View all personal details and links associated with your account at any time.
- Edit & Correct: Update outdated contact details, titles, or social links in real time via your dashboard.
- Delete ("Right to be Forgotten"): Request complete deletion of your account and public digital profile by emailing sathiya@dxso.in.
- Opt-Out: Unsubscribe from non-essential marketing emails at any time using the unsubscribe link.
9. Children's Privacy
TapOnce services and smart cards are intended for professionals, university students, and business representatives aged 18 and older. We do not knowingly solicit or collect personal information from children under the age of 13.
10. Contact Us & Grievance Officer
If you have questions, feedback, or grievance concerns regarding this Privacy Policy or our data handling practices, please contact our Grievance Officer: