Privacy Policy

This policy applies to TapView’s public website, QR/NFC customer experiences, business and administrator portals, reporting, email services and related onboarding or support. It does not replace the privacy terms of Google, Razorpay or other third-party services that a person chooses to use separately.

Depending on how TapView is used, we may process:

• Business information: business name, category, contact person, designation, email, phone number, Google Business Profile information, plan and QR/location configuration.
• Account information: name, email, authentication identifiers, role and essential session information for administrators and eligible business owners.
• Customer interaction information: typed feedback, direct 1–5 star ratings, legacy questionnaire responses, voice transcripts, generated review drafts, input method, sentiment, estimated star band, negative-incident indicators, timestamps and associated QR/location.
• Business reply-generator input: a Google review that an eligible business owner manually pastes for one-time AI reply generation. TapView does not save the pasted review or generated reply in this manual workflow.
• Customer follow-up information: when a customer chooses the private-feedback path, their name, phone number, feedback details and contact consent.
• Voice recordings: temporary audio supplied when a customer chooses the voice option.
• Usage and operational information: impressions, direct or QR source, Google handoff destination, feature usage, delivery status, error codes and AI usage totals.
• Payment and subscription information: plan, amount, currency, payment status, renewal dates and provider references. Complete card, UPI PIN and online-banking credentials are handled by the payment provider and are not stored by TapView.
• Security information: a protected one-way network identifier used for rate limiting, plus technical logs that may be processed by our hosting and infrastructure providers.
• Communications: information included in emails or support requests sent to TapView.

• Provide, configure and secure TapView services.
• Attribute a scan or interaction to the correct business and permanent QR/location.
• Transcribe voice, generate review drafts and produce eligible reports or alerts.
• Route customers to the appropriate Google review destination.
• Pass consented customer follow-up requests to the relevant business so its management team can respond.
• Operate business accounts, subscriptions, renewals and payment records.
• Send transactional, security, reporting and service communications.
• Prevent abuse, enforce limits, investigate failures and maintain reliability.
• Comply with legal, accounting and regulatory obligations.

We do not sell personal data and do not use customer feedback for third-party advertising.

Eligible businesses may receive email summaries, serious-feedback alerts and aggregated performance reports. Routine summaries use category totals and high-level business insights rather than listing each customer interaction. A serious 1-star alert may contain the original feedback or transcript, consented contact information, configured staff/product references, QR/location and time details when needed to help the business act on the incident.

When a Lite owner manually pastes a Google review into the Reply Generator, TapView sends it to the AI provider only to generate the requested business-specific reply. Provider-side response storage is disabled, and TapView does not retain the pasted review or generated reply after returning it to the owner's browser.

• Accessed data: the selected account and location identifiers, reviews, existing replies and eligible profile-performance data.
• Use: match the exact business, show a recent review inbox, prepare eligible reply drafts, publish an owner-authorised reply and display eligible profile activity.
• Reply control: Connected Pro drafts require approval unless an eligible owner has separately and expressly enabled automatic publishing. Lite replies are copied to Google and published manually by the owner outside TapView.
• Security: OAuth refresh tokens are encrypted with AES-256-GCM before storage; Google connection data is server-only and protected from direct public/browser database access.
• Retention: Google Business Profile API content is cached only for the connected feature and automatically removed no later than 30 calendar days after its latest Google update or capture.
• Disconnection: using Disconnect requests Google-side revocation, permanently deletes TapView's encrypted credential, stops future access and deletes cached Google Business Profile API content for that connection.

On an eligible Pro workflow, Google review text may be sent to OpenAI only to prepare the business's requested reply draft. Provider-side response storage is disabled for that request. TapView does not use Google user data for advertising or sell it to third parties.

A complete feature-by-feature explanation is available on the Google Data Access page. TapView's use and transfer of information received from Google APIs is intended to follow the Google API Services User Data Policy, including its Limited Use requirements.

We may share information only as reasonably necessary with:

• The relevant TapView business: customer feedback, interaction context, consented follow-up contact details, reports and alerts according to the business’s plan.
• Supabase: database, authentication and temporary audio storage infrastructure.
• Vercel: website hosting, server execution and operational logs.
• OpenAI: transcription and AI-assisted review/report processing.
• Google: business-place verification, Business Profile connection, review and performance synchronization, authorised reply publication, review destinations and customer-directed Google Maps or browser handoffs.
• Resend: transactional email delivery and delivery events.
• Razorpay: payment, subscription, mandate, refund and payment-security processing when enabled.
• Professional advisers or authorities: where reasonably required to protect rights, investigate misuse or comply with law.

Providers may process information in India or other locations where they operate, subject to their safeguards and applicable law.

Voice audio is stored temporarily for transcription and is deleted after successful processing. Abandoned or failed temporary audio is scheduled for deletion after approximately 24 hours. The resulting transcript and interaction record may be retained separately.

Consented customer follow-up details are available to the relevant business for no more than 168 hours after the customer requests contact. They are removed immediately when the business marks the follow-up as completed. At the 168-hour deadline they stop appearing in the business portal and scheduled maintenance removes the expired database record.

Other records are kept only for as long as reasonably required to provide the service, maintain security and audit trails, resolve disputes, meet accounting or legal duties, and preserve permanent QR assignment architecture. Retention periods may differ by record type. Information may be deleted or anonymised when it is no longer required, subject to legitimate and legal retention needs.

TapView uses essential authentication cookies for administrator and business-owner login sessions. These are needed to keep portals secure and working. TapView does not currently use advertising cookies or sell browsing profiles to advertisers.

We use access controls, row-level database restrictions, server-only credentials, rate limits, encrypted network connections and other reasonable safeguards. No internet service can guarantee absolute security, so users should protect their credentials and notify us of suspected unauthorised activity.

Subject to applicable law and necessary verification, a person may ask about personal data associated with them, request correction or deletion, withdraw consent where processing relies on consent, or raise a privacy grievance. Some records may need to be retained for security, contractual, accounting or legal reasons.

Requests should identify the relevant business, QR/location, interaction date or account so that we can locate the correct record. We may request reasonable identity verification before acting.

TapView is a business service and is not directed at children. We do not knowingly create business or administrator accounts for minors. A person should not submit a child’s personal information through a review experience unless lawfully authorised to do so.

We may update this policy as TapView, its providers or applicable requirements change. The latest version and update date will remain available on this page.

Privacy requests and grievances can be sent to admin@tapviewai.in.