Privacy policy

This policy explains what personal data TapReview collects, why, and what you can do about it. We collect as little as we can, and we follow India’s Digital Personal Data Protection Act, 2023.

Who we are

TapReview is run by The Expo Company, UG-66, La-Citadel Complex, Near CNG Pump, Puna Patiya, Surat, Gujarat 395010 (“we”, “us”). For customers who leave a rating, we process data on behalf of the business whose card they tapped; that business decides how to follow up with them.

Customers who use a review card

When you tap or scan a staff member’s card, we record:

• which card was used, when, and the business and branch it belongs to;
• your star rating, the options you picked and any comment you wrote;
• whether you copied a draft and opened Google, and the draft you copied;
• a random device ID kept in your browser, used to link these steps and to limit each phone to three ratings a day. It is not linked to your name.

Private feedback. Only if you choose to send private feedback after a 1–3 star rating, we also collect your name and mobile number, with your consent that the business may contact you about that feedback. The owner and the managers of that branch can see them; staff cannot.

Review drafts. To write drafts, we send the business name, the staff member’s display name, your star rating, the options you picked and your comment to an AI service. We never send your name or number.

Google reviews. Reviews you post on Google are covered by Google’s own privacy policy. If the business has connected its Google Business Profile, we read the reviews on that profile (including the reviewer’s public name) to show them in the business’s panel and match them to staff.

Businesses and their staff

For owners, branch managers and staff who use the business panel, we store their name, mobile number, role, branches, and a PIN. PINs are stored only as a one-way hash, so nobody, including us, can read them. We keep a record of sign-ins and of sensitive actions (such as PIN resets) for security.

For billing we store the business’s plan, orders and subscription status. Payments are handled by Razorpay; we never see or store card or bank details.

Website visitors

If you send us a message through the contact form, we store what you entered and use it only to reply to you. We keep a one-way hash of your IP address with it to stop spam, never the address itself. Our servers keep short technical logs to keep the service running and secure.

We don’t use advertising or analytics trackers on this website.

Who we share data with

We don’t sell personal data. We share it only with the business whose card you used (as described above) and with service providers that help us run TapReview:

• Razorpay, for payments and subscriptions;
• Google, for business locations and, if a business connects its profile, its reviews;
• Anthropic, the AI service that writes review drafts;
• our hosting and email providers (to confirm).

We may also disclose data where the law requires it.

Cookies and browser storage

The business panel and our admin tools use a single sign-in cookie each, which is required for them to work. The review page stores the random device ID described above in your browser. We use no other cookies.

How long we keep data

Ratings and feedback are kept while the business uses TapReview, so it can see its history and reports. Contact-form messages are kept as long as we need them to deal with your enquiry. Exact retention periods, and what happens when a business leaves, are to confirm.

Your rights

You can ask us for a summary of the personal data we hold about you, ask us to correct or erase it, or withdraw consent you gave (for example, to be contacted about private feedback). If your request is about feedback you gave a business, we may pass it to that business, which is responsible for it.

Contact and grievances

Write to support@theexpoco.com or call +91 80979 57955. Grievance officer: name to confirm, at the same email address. If you’re not satisfied with our answer, you can complain to the Data Protection Board of India.