Privacy Policy
Tapaak
Last updated: August 2026
1. Information We Collect
We collect the following information when you use Tapaak:
- Account information: your name and email address. If you register with a password, your password is stored in hashed form. Login is also available via a one-time password (OTP) sent to your email.
- Business or profile information: business name, category, city, phone number, WhatsApp number, email address, description, services, and other details you provide when creating your website.
- Website content: text, service descriptions, FAQs, and other content generated or edited for your website.
- Uploaded files: logos and images you upload for your website, stored on cloud object storage.
- Website analytics events: page views, WhatsApp clicks, call clicks, email clicks, and Google Maps clicks associated with your published website.
- Technical information: server logs, IP addresses, and browser information collected automatically during use.
- Payment-related information: payment status, order references, and transaction identifiers received from our payment provider. We do not store your card or banking credentials.
2. How We Use Your Information
We use the information we collect to:
- Create and manage your account.
- Generate website content based on the business information you provide.
- Publish and host your website on a Tapaak subdomain.
- Store uploaded files and serve them as part of your website.
- Process payments and maintain transaction records.
- Provide website analytics to you.
- Provide customer support.
- Maintain the security and operational reliability of the service.
- Improve the service where applicable.
3. Payment Information
Payments are processed through Razorpay. Card and banking credentials are entered directly on Razorpay's platform and are not stored by Tapaak. We receive and store payment status, order references, and transaction identifiers from Razorpay to confirm and record your transaction.
4. Data Sharing
We do not sell your personal information. We may share information with:
- AI content generation provider (xAI): your business information is sent to xAI to generate website content. Please refer to xAI's privacy policy for information on how they handle submitted data.
- Payment provider (Razorpay): to process payments.
- Cloud infrastructure and storage providers (AWS): for hosting, database, and file storage.
- Law enforcement or regulatory authorities: where required by applicable law.
5. Data Retention
We retain your account and website data for as long as your account is active. If you delete a website, its associated content data is removed from our systems. Uploaded files associated with a deleted website may be removed from storage. Payment transaction records may be retained for accounting and legal compliance purposes.
If you wish to request deletion of your account and associated personal data, please contact us at support@tapaak.com.
6. Cookies and Session Tokens
Tapaak uses an HttpOnly cookie to store a session token (JWT) for authentication purposes. This cookie is necessary for the service to function and is not used for advertising or third-party tracking. We do not use third-party advertising cookies. Basic server logs are maintained for security and operational purposes.
7. Security
We take reasonable technical measures to protect your information, including the use of hashed password storage and secure session handling. However, no system is completely secure, and we cannot guarantee absolute security.
8. Your Rights
You may contact us at support@tapaak.com to request access to, correction of, or deletion of your personal information, subject to applicable law and our operational requirements.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make changes, we will post the updated policy on this page and revise the 'Last updated' date.
10. Contact
For privacy-related questions, contact us at support@tapaak.com.