Privacy Policy

1. Introduction

TapDodo Technologies Pvt Ltd ("we," "our," or "us") operates the TapDodo platform, a restaurant management SaaS solution that provides QR code-based ordering systems for hospitality businesses. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

We are committed to protecting your privacy and ensuring transparency about our data practices. This policy applies to all users of the TapDodo platform, including business owners, staff members, and end customers.

2. Information We Collect

2.1 Business Account Information

When you register your business with TapDodo, we collect:

• Organization details (name, type, address)
• User account information (name, email, phone number)
• Business verification documents
• Payment information for subscription billing
• Venue and location details

2.2 Operational Data

During normal operation, we collect:

• Menu items and pricing information
• Order details and customer preferences
• Staff activity and role assignments
• Payment transaction data (processed securely through payment partners)
• QR code usage and scanning analytics

2.3 Customer Information

For end customers placing orders:

• Contact information (name, phone number)
• Order history and preferences
• Table or room assignment
• Feedback and ratings

2.4 Technical Information

• Device information and browser type
• IP address and location data
• Usage patterns and feature interaction
• Error logs and performance metrics

3. How We Use Your Information

3.1 Service Provision

• Process and fulfill customer orders
• Manage venue operations and staff assignments
• Generate QR codes and digital menus
• Process payments and manage subscriptions
• Provide customer support and technical assistance

3.2 Business Intelligence

• Generate analytics and business insights
• Track order patterns and customer preferences
• Monitor service performance and uptime
• Identify areas for service improvement

3.3 Legal and Administrative

• Comply with applicable laws and regulations
• Prevent fraud and ensure platform security
• Enforce our terms of service
• Respond to legal requests and court orders

4. Data Security

We implement comprehensive security measures to protect your information:

4.1 Technical Safeguards

• SSL/TLS encryption for all data transmission
• AES-256 encryption for data at rest
• JWT-based authentication with refresh tokens
• Rate limiting and DDoS protection
• Regular security audits and vulnerability assessments

4.2 Access Controls

• Role-based access control (RBAC)
• Multi-factor authentication for administrative access
• Regular access reviews and permission audits
• Logging and monitoring of all data access

4.3 Multi-Tenant Isolation

TapDodo operates on a multi-tenant architecture with strict data isolation. Your organization's data is never shared with other organizations using our platform. Each organization's data is logically separated and secured.

5. Data Retention

We retain your information for as long as necessary to provide our services and comply with legal obligations:

• Account Data: Retained while your account is active and for 7 years after account closure for legal compliance
• Order Data: Retained for 3 years for business analytics and tax compliance
• Payment Data: Retained according to payment processor requirements and tax regulations
• Analytics Data: Aggregated and anonymized data may be retained indefinitely for service improvement

Upon account termination, we will securely delete or anonymize your personal data within 30 days, except where longer retention is required by law.

6. Your Rights and Choices

6.1 Access and Portability

• Access your personal data through your account dashboard
• Export your business data in standard formats
• Request copies of data we hold about you

6.2 Correction and Updates

• Update your account information directly through the platform
• Correct inaccurate or incomplete data
• Request assistance from our support team for complex updates

6.3 Deletion and Restriction

• Delete your account and associated data
• Request deletion of specific data categories
• Restrict processing for certain purposes

7. Third-Party Services

We may share your information with trusted third parties who assist us in operating our platform:

• Payment Processors: Razorpay for secure payment processing
• Cloud Infrastructure: AWS for hosting and data storage
• Analytics Providers: For usage analytics and performance monitoring
• Customer Support: Tools to provide customer assistance

All third-party providers are bound by confidentiality agreements and data protection requirements.

8. Cookies and Tracking

We use cookies and similar technologies to:

• Maintain user sessions and authentication
• Remember user preferences and settings
• Analyze usage patterns and improve our service
• Provide personalized experiences

You can control cookie settings through your browser, but disabling certain cookies may limit functionality.

9. International Transfers

Your information may be transferred to and processed in countries other than your home country, including the United States where our cloud infrastructure is located. We ensure appropriate safeguards are in place for international transfers:

• Compliance with applicable data protection laws
• Contractual protections with service providers
• Industry-standard security measures

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. We will notify you of any material changes by:

• Email notification to registered users
• Prominent notice on our website
• In-app notifications for significant changes

Your continued use of TapDodo after any changes constitutes acceptance of the updated Privacy Policy.

11. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us: