Privacy Policy

TapStrat respects your privacy and follows the Data Privacy Act of 2012 (Republic Act No. 10173) and its implementing rules. This policy explains what personal data we collect, why, and the choices you have.

Your profile page is public by design

The details you put on your TapStrat profile page are public. Anyone who taps or scans your card, or has your link, can see them and save them to their phone. Only add details you're comfortable sharing. Anything you leave blank isn't shown. You can edit your page, hide it, or stop search engines from listing it any time from your account. Search engine listing is off by default.

What we collect

• Account details: your name, email and a securely hashed password.
• Order details: shipping name, address, mobile number, the card design details and logo you upload, and order history.
• Payment details: payment status and reference numbers. Card and e-wallet details are handled by our payment provider; we never see or store your full card number.
• Profile page details: whatever you choose to add, and a count of how many times your page was opened.
• Messages: custom card requests and anything you send us.
• Technical data: basic logs (like IP address and browser type) used to keep the site secure and prevent abuse.

How we use it

• To make, program and ship your order, and to send proofs and order updates.
• To show your profile page to the people you share it with.
• To answer your questions and custom requests.
• To keep the service secure and meet legal and tax requirements.

We don't sell your personal data, and we don't use it for third-party advertising.

Who we share it with

Only service providers that help us run TapStrat, under their own privacy and security obligations:

• Database and hosting (MongoDB Atlas, Vercel or Hostinger)
• Image storage for logos and proofs (Cloudinary)
• Email delivery (Resend)
• Payment processing (PayMongo, once live payments are enabled)
• Couriers, who receive your shipping name, address and mobile number

How long we keep it

We keep account and profile data while your account is active. Order records are kept for as long as Philippine tax and accounting rules require. You can ask us to delete your account at any time.

Your rights

Under the Data Privacy Act you can ask to access, correct, object to processing of, or delete your personal data, and to get a copy of it. You can also file a complaint with the National Privacy Commission. To make a request, email tapstratsolutions@gmail.com.

Security

Passwords are hashed, the site uses HTTPS, admin access is restricted, and uploads go to a separate image service. No system is perfectly secure; if a breach affects your data, we'll notify you and the National Privacy Commission as the law requires.

Cookies

We use only the cookies needed to keep you signed in. Your cart is saved in your own browser. We don't use advertising cookies.

Contact

Questions about privacy: tapstratsolutions@gmail.com or our contact page.