Privacy Policy & DPDP Compliance
Compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act, 2023 - India) | Effective Date: November 2026
Digital Personal Data Protection Act (DPDP Act, 2023) Commitment
TAPROX operates strictly as a responsible Data Fiduciary. We process personal and business data solely for specified, lawful business purposes with full data principal transparency and complete self-service data erasure rights.
1. Definitions & Scope
In accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”):
- “Data Fiduciary” refers to TAPROX Technologies, determining the purpose and means of personal data processing.
- “Data Principal” refers to the registered seller, business owner, or individual to whom the personal data relates.
- “Personal Data” refers to any data about an individual who is identifiable by or in relation to such data.
2. Lawful Grounds and Purpose of Data Collection
TAPROX collects and processes personal data strictly for reasonable, specified purposes for which you provide explicit consent during onboarding:
- Creating and hosting your verified digital business profile and dynamic QR / NFC routing destinations.
- Processing hardware order fulfillment, laser engraving, and shipping physical NFC cards to your address.
- Facilitating secure online payments via our authorized payment partner, Razorpay.
- Recording anonymous engagement metrics (views, vCard downloads, and shares) without invasive user profiling.
3. Data Principal Rights Under DPDP Act, 2023
As a Data Principal under the DPDP Act, you are legally entitled to exercise the following fundamental rights:
Right to Access & Summary (Sec. 11)
Review all personal data, catalog items, and account activity stored on TAPROX servers via your Seller Dashboard.
Right to Correction & Erasure (Sec. 12)
Update inaccurate information or permanently erase your profile and account using our self-serve deletion tool.
Right of Grievance Redressal (Sec. 13)
Directly escalate privacy concerns to our designated Grievance Officer with guaranteed timely resolution.
Right to Nominate (Sec. 14)
Designate a legal representative to exercise your data rights in the event of incapacity.
4. Native Self-Serve Account Deletion (Right to Erasure)
In compliance with Section 12 of the DPDP Act, TAPROX provides an automated, self-serve Delete Account utility accessible inside your Seller Account Settings.
When an account erasure request is triggered:
- Your business profile, products, photo gallery, and vCard records are permanently expunged.
- Any physical NFC cards linked to your account are immediately unassigned and deactivated.
- Authentication credentials and session tokens are invalidated instantly.
- An immutable cryptographic audit trail of the erasure action is recorded for compliance verification.
5. Data Security & Storage Architecture
All data is stored in enterprise-tier PostgreSQL databases powered by Supabase with AES-256 bit encryption at rest and TLS 1.3 encryption in transit. Physical NFC chips contain only a permanent route URL without unencrypted personal records.
We do not sell, rent, monetize, or disclose your personal data to third-party advertising networks.
6. Grievance Redressal Officer (DPDP Act, 2023)
In accordance with the Digital Personal Data Protection Act, 2023, the details of our designated Grievance Officer are set forth below:
Grievance Desk
Legal & Compliance Officer
TAPROX Technologies
Direct Inquiries Email
Statutory Telephone Support
* Privacy inquiries and grievance notifications are acknowledged within 48 hours and resolved within statutory timelines under the DPDP Rules.