Privacy Policy

This Privacy Policy explains how TapCard ("we", "us", "our") collects, uses, shares, and protects information when you use our website (tapcard.pk), dashboard, APIs, and related services (the "Service"). By using the Service, you agree to this policy.

a) Information you provide

• Account details: name, email, business name, phone number, password.
• Billing details: invoicing information (payment card data is handled by our payment processors and never stored on our servers).
• Support communications: messages you send via our support page or email.

b) End-customer data (data you upload)

When you use TapCard to issue loyalty cards, you may upload information about your customers — typically name, phone number, email, stamp / cashback / membership balances, and transaction history. This data is processed by TapCard on your behalf(you are the data controller; we are the processor).

c) Automatically collected

• Device, browser, IP address, and approximate location.
• Usage data: pages visited, features used, timestamps.
• Cookies and similar technologies (see Section 7).

• To provide, operate, and maintain the Service.
• To process payments and manage subscriptions.
• To send transactional emails and support replies.
• To send product updates, marketing, and announcements (you can opt out anytime).
• To monitor and improve performance, security, and abuse prevention.
• To comply with legal obligations.

When a customer adds a TapCard pass to Apple Wallet or Google Wallet, the wallet provider may receive certain technical information necessary to deliver the pass and updates. Push notifications are sent through Apple's and Google's infrastructure and are subject to their privacy practices.

We do not sell personal information. We share data only with:

• Service providers who help us run the Service (hosting, email, analytics, payment processing) under confidentiality and data-protection obligations.
• Apple and Google for delivery of wallet passes and push notifications.
• Law enforcement or regulators when required by law or to protect rights, safety, or property.
• Successors in the event of a merger, acquisition, or asset sale, with notice to you.

We retain account and end-customer data for as long as your account is active or as needed to provide the Service. After account closure, we retain limited information as required to comply with legal, accounting, or reporting obligations, then delete or anonymize it.

We use first-party cookies and similar technologies to keep you signed in, remember preferences, and measure usage. You can control cookies through your browser settings; disabling them may affect functionality.

We use industry-standard safeguards including encryption in transit (HTTPS / TLS), access controls, and audit logging. No method of transmission or storage is 100% secure; we cannot guarantee absolute security but we work hard to protect your data.

Subject to applicable law, you may:

• Access, correct, or delete your personal information.
• Object to or restrict certain processing.
• Request a copy of your data in a portable format.
• Withdraw consent at any time (this won't affect prior processing).
• Opt out of marketing emails using the unsubscribe link.

To exercise any of these rights, email sudais.shafiq22@gmail.com.

If you are an end-customer of a business that uses TapCard, the business is responsible for its own privacy practices regarding your data. Please contact that business for requests related to your personal data. We will support businesses in responding to legitimate requests.

The Service is not directed to children under 13 (or the equivalent minimum age in your jurisdiction). We do not knowingly collect personal information from children. If you believe we have, please contact us so we can delete it.

Your data may be processed in countries outside Pakistan where our service providers operate. We take steps to ensure appropriate safeguards are in place.

We may update this Privacy Policy from time to time. Material changes will be notified by email or in-app notice. The "Last updated" date at the top reflects the latest revision.

Questions or concerns? Email sudais.shafiq22@gmail.com or visit our support page.