Trust & Transparency

Privacy Policy

Your privacy and data ownership are fundamental to how TapFolio is built. Here is a clear breakdown of how we safeguard your identity and connections.

Last Updated: August 2026Version 2.4

Encrypted & Secure

All profile transmissions and API endpoints use TLS 1.3 encryption.

Granular Privacy

You control which fields (email, phone, socials) are visible publicly.

No Data Selling

We never sell, rent, or monetize your personal or networking data.

One-Click Deletion

Permanently delete your profile, avatars, and history at any time.

1. Introduction

Welcome to Tapfolio ("we," "our," or "us"). We are dedicated to providing modern, dynamic professional networking tools while giving you total ownership of your personal and business data.

This Privacy Policy explains how information is collected, processed, encrypted, and safeguarded when you use our mobile applications, access our web platform at tapfolio.me, or scan any of our physical NFC-enabled networking cards.

2. Information We Collect

We only collect information that is strictly required to power your dynamic profile, configure your physical smart card, and track your networking performance:

Account & Identity Credentials

Full name, email address, password hash, and unique profile handle.

Professional Profile Information

Designation, company, bio, phone number, WhatsApp link, website, social handles (LinkedIn, X, Instagram, YouTube), and avatar image.

Google Single Sign-On (OAuth)

If you authenticate via Google, we securely receive your verified email, display name, and avatar picture.

Tap & Engagement Analytics

Aggregated tap timestamps, rough city-level geolocation (when shared), and link click counts to populate your analytics dashboard.

3. How We Use Your Data

We process your data strictly to deliver and enhance the core TapFolio product experience:

  • Instantly render your responsive digital profile when your physical NFC card or QR code is scanned.
  • Maintain your connection records, lead capture inbox, and analytics charts.
  • Send essential security notifications, password resets, and hardware order updates.
  • Prevent fraudulent interactions, unauthorized API spam, or terms of service violations.

4. Cookies & Session Storage

We prioritize user privacy and avoid third-party marketing trackers:

On the Web, we use secure, encrypted HttpOnly session cookies to maintain your dashboard login state. On mobile applications, authentication tokens are stored inside your device’s secure hardware keychain. We do not use tracking pixels, cross-site trackers, or advertising cookies.

5. Data Sharing & Third Parties

Your profile information is made available to people you choose to connect with when they tap your card or open your link. You have individual privacy switches to hide sensitive fields like phone number or email address.

We work only with vetted, enterprise-grade cloud providers for infrastructure:

  • Database & Cloud Hosting: Secure SOC2-compliant servers with automated TLS encryption at rest and in transit.
  • Authentication Services: Google Identity Services for secure Single Sign-On.

6. User Rights & Data Ownership

You retain complete ownership of all personal and professional information entered into Tapfolio. You have the right to:

  • Access and review your data anytime in your dashboard
  • Update your contact links, company, role, or avatar in real time
  • Export your connection history to standard CSV/vCard format

7. Account & Data Deletion

We uphold your right to be forgotten. You can permanently delete your account and all associated profile data at any moment.

Self-Service Account Deletion Flow:

  1. Open the Tapfolio App or log in to your web dashboard.
  2. Navigate to Settings > Account Security.
  3. Select Delete Account and review the confirmation prompt.
  4. Type DELETE to confirm permanent erasure.

Upon confirmation, all database records, authentication credentials, and uploaded media are permanently wiped within seconds.

8. Security Infrastructure

Security is built into every layer of the TapFolio ecosystem:

  • Read-Only NFC Hardware: NFC chips are locked to prevent malicious overwriting or tampering in the field.
  • End-to-End Encryption: All client-to-server traffic is forced over HTTPS with modern cipher suites.
  • Rate Limiting & Protection: API gateways actively shield against brute force attacks and credential stuffing.

9. Contact Information

For questions regarding this policy, data protection inquiries, or assistance with account management:

Email: tapfolio.in@gmail.com

Entity: TapFolio Inc.