Privacy Policy

TapConnect ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our digital business card platform and related services.

This policy is designed to comply with the Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA), and its Implementing Rules and Regulations (IRR).

By using TapConnect, you consent to the collection and use of your information as described in this Privacy Policy.

TapConnect Technologies acts as the data controller for personal information collected through our Service.

Contact Details: • Email: support@tapconnect.ph • Address: Cebu City, Philippines

Data Protection Officer: For privacy-related inquiries, please contact our Data Protection Officer at privacy@tapconnect.ph.

We collect different types of information to provide and improve our Service:

Personal Information (provided by you): • Name and email address • Password (stored as a secure hash) • Phone number (optional) • Profile photo • Job title, company name, and professional bio • Social media usernames and links • Custom links you add to your profile • Location information (city, country - optional)

Analytics Data (collected automatically): • IP address (anonymized after 30 days) • Device type and operating system • Browser type and version • Date and time of profile views • Geographic location (city/country level) • Referrer information • Pages visited and actions taken

AI Interaction Data: • Prompts provided to our AI bio generator • Generated bio content • Timestamps of AI usage

Payment Information: • Payment method details (processed by PayMongo) • Transaction history • Billing address (if applicable)

Note: We do not store full credit card numbers. Payment processing is handled securely by PayMongo.

We use your information for the following purposes:

Service Provision: • Create and manage your account • Display your digital business card profile • Process NFC card activations • Enable profile customization features

Analytics and Insights: • Provide profile view statistics • Track link click performance • Generate engagement reports for premium users

AI Features: • Generate personalized professional bios • Improve AI model recommendations

Communication: • Send account-related notifications • Respond to support inquiries • Send promotional emails (with your consent)

Security and Compliance: • Detect and prevent fraud • Enforce our Terms of Service • Comply with legal obligations

Under the Philippines Data Privacy Act, we process your personal information based on:

Consent: When you create an account, upload content, or opt-in to communications.

Contractual Necessity: When processing is necessary to provide the services you requested (e.g., displaying your profile, processing payments).

Legitimate Interest: When we have a legitimate business reason that doesn't override your privacy rights (e.g., improving our services, preventing fraud).

Legal Obligation: When we must comply with applicable laws or regulations.

You may withdraw your consent at any time by contacting us or adjusting your account settings.

We share your information with trusted third-party service providers:

Cloudinary (Image Hosting) • Purpose: Store and optimize profile photos • Data shared: Profile images • Location: United States • Privacy Policy: cloudinary.com/privacy

DeepSeek AI (Bio Generation) • Purpose: Generate AI-powered professional bios • Data shared: Name, title, company, and profile context • Location: China • Note: Data is processed only when you use the AI bio feature

PayMongo (Payments) • Purpose: Process premium subscriptions and payments • Data shared: Payment method, billing information • Location: Philippines (PCI-DSS compliant) • Privacy Policy: paymongo.com/privacy

Vercel (Hosting) • Purpose: Host and serve our web application • Data shared: Usage logs, IP addresses • Location: United States • Privacy Policy: vercel.com/legal/privacy-policy

Railway (Backend Infrastructure) • Purpose: Host our database and API services • Data shared: All service data • Location: United States • Privacy Policy: railway.app/legal/privacy

We ensure all third-party providers maintain appropriate security measures and comply with applicable data protection laws.

We retain your information for as long as necessary to provide our services and fulfill the purposes described in this policy:

Active Accounts: • Profile data: Retained while account is active • Analytics data: 2 years from collection date • AI interaction logs: 1 year from interaction date

Deleted Accounts: • Profile data: Deleted within 30 days of account deletion • Anonymized analytics: May be retained indefinitely for statistical purposes • Payment records: Retained for 7 years for tax/legal compliance

NFC Card Data: • Card activation records: Retained indefinitely for fraud prevention • Card assignment history: Retained while card is active

You may request deletion of your data at any time (see "Your Rights" section).

Under the Philippines Data Privacy Act, you have the following rights:

Right to Be Informed You have the right to know how your personal data is being collected, used, and processed.

Right to Access You can request a copy of all personal data we hold about you.

Right to Rectification You can update or correct inaccurate personal data through your dashboard or by contacting us.

Right to Erasure (Right to Be Forgotten) You can request deletion of your personal data, subject to legal retention requirements.

Right to Data Portability You can export your profile data in a machine-readable format (vCard, JSON).

Right to Object You can object to processing of your data for direct marketing purposes.

Right to Withdraw Consent You can withdraw consent for optional data processing at any time.

Right to Lodge a Complaint You can file a complaint with the National Privacy Commission (NPC) at privacy.gov.ph.

To exercise these rights, contact us at privacy@tapconnect.ph. We will respond within 30 days.

We use cookies and similar technologies to enhance your experience:

Essential Cookies: • Session management • Authentication tokens • Security features

Analytics Cookies: • Track page views and user interactions • Measure feature usage • Improve service performance

Preference Cookies: • Remember your display preferences • Store language settings

We Do NOT Use: • Third-party advertising cookies • Cross-site tracking pixels • Social media tracking widgets

You can control cookies through your browser settings. Disabling certain cookies may affect the functionality of our Service.

We implement industry-standard security measures to protect your information:

Technical Measures: • TLS/SSL encryption for data in transit • Encryption at rest for sensitive data • Secure password hashing (bcrypt) • JWT token-based authentication • Regular security audits and updates

Organizational Measures: • Access controls and role-based permissions • Employee training on data protection • Incident response procedures • Regular backup and disaster recovery

Your Responsibilities: • Use a strong, unique password • Enable two-factor authentication (when available) • Keep your login credentials confidential • Report suspicious activity immediately

While we strive to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

Your information may be transferred to and processed in countries outside the Philippines, including:

• United States (Cloudinary, Vercel, Railway) • China (DeepSeek AI - only for AI bio generation)

When we transfer your data internationally, we ensure: • Appropriate safeguards are in place • The receiving country has adequate data protection laws • Contractual protections are established with service providers

By using our Service, you consent to the transfer of your information to these countries for the purposes described in this policy.

TapConnect is not intended for users under 18 years of age. We do not knowingly collect personal information from children.

If you are a parent or guardian and believe your child has provided us with personal information, please contact us at support@tapconnect.ph. We will take steps to delete such information from our systems.

If we discover we have collected personal information from a child under 18, we will promptly delete that information.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or other factors.

When we make material changes: • We will notify you via email or through the Service • We will update the "Last Updated" date at the top of this policy • Significant changes will be highlighted for 30 days

We encourage you to review this Privacy Policy periodically. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

If you have questions, concerns, or complaints about this Privacy Policy or our data practices, please contact us:

General Inquiries: • Email: support@tapconnect.ph

Privacy-Specific Concerns: • Email: privacy@tapconnect.ph • Subject line: "Privacy Inquiry"

Address: TapConnect Technologies Cebu City, Philippines

Filing a Complaint: If you are not satisfied with our response, you may file a complaint with the National Privacy Commission:

National Privacy Commission (NPC) 3rd Floor, Core G, GSIS Headquarters Financial Center, Roxas Boulevard Pasay City, Philippines Website: privacy.gov.ph Email: complaints@privacy.gov.ph

We take all privacy concerns seriously and will respond within 30 days of receiving your inquiry.