Privacy policy

There are two kinds of people in this system and they are treated differently.

A CUSTOMER is a business that signs up for TapQual. We hold your name, email, business name, WhatsApp number and billing status because we cannot provide the service otherwise.

A LEAD is somebody who messages that business on WhatsApp. Their data belongs to the customer, not to us. We process it on their behalf and never sell it, share it between customers, or use it to train anything.

Their WhatsApp number and profile name as WhatsApp supplies them, the answers they tapped, the score those answers produced, the messages exchanged in the conversation, and the country and timezone we infer from the number so nothing is sent at their midnight.

If they arrived by clicking an ad we also store the click reference Meta attaches, which is what lets the customer's ad account learn that the lead was real.

We do not store payment details for leads, and we do not ask them for any.

Every conversation begins because the lead messaged first — either directly or by tapping an ad. We record that moment with a timestamp and a plain-English sentence describing what happened, and keep it for five years.

That record exists for one situation: somebody complains they were messaged, and the business needs to show they started it. It is never deleted by a customer, and it is not visible to them.

A lead who replies STOP, UNSUBSCRIBE, MUTE or REMOVE ME is opted out immediately and permanently. No further automated message is sent to that number by that business, ever, and no setting can undo it from the customer's side.

To be removed entirely rather than opted out, email [email protected] from any address and tell us the number. We will delete the conversation and the lead record within 30 days, and tell you when it is done. The consent record is the only thing that survives, for the reason above.

Meta, because the messages are WhatsApp messages and there is no version of this product where they are not. Their handling is governed by their own terms with the customer.

Anthropic, when a customer on a plan with AI enabled has a lead who types a question instead of tapping. The message and the customer's own knowledge base are sent to be interpreted. Nothing is retained for training.

Razorpay or Stripe for customer payments. We never see or store a full card number.

Our hosting and database providers, under contract. Nobody else, and we do not sell data to anyone for any purpose.

Lead and conversation data: for as long as the customer's account is active, and 90 days after it closes, then deleted.

Consent records: five years, as described above.

Billing records: as long as Indian tax law requires.

A customer can delete all of their own lead data at any time from their account, and export it as a CSV before doing so.

On servers in India and, for some infrastructure providers, the European Union. Transfers outside India are covered by the standard contractual protections those providers publish.

You can ask for a copy of what we hold about you, ask us to correct it, or ask us to delete it. Email [email protected]. We answer within 30 days and we do not charge for it.

If you are a lead rather than a customer, the business you messaged is the first place to ask — but write to us and we will act on it regardless.

This website sets no advertising or tracking cookies. The application sets one item of local storage to keep you signed in and one to remember your theme. That is the whole list.

If we change this materially we will email every customer before it takes effect, not after. The date at the top is the date of the current version.