Privacy Policy

Last updated: 28 July 2026

1. Who operates TapNest and the scope of this policy

TapNest is a digital services brand operated by Joyson Computers, a sole proprietorship based in Pune, Maharashtra, India. Joyson Computers operates the TapNest platform and services.

This policy applies to the TapNest website, public business profiles, administrator and Business Owner portals, enquiries, appointment requests, notifications, analytics, managed profile services, and Google Business Profile management communications. A customer may separately be responsible for how they use personal information they receive through their own business profile.

2. Information we process

Account and customer information

We may process names, email addresses, authentication and session data, role and profile assignments, support communications, plan terms, revision records, and internal service notes needed to create, secure, administer, and support an account or managed service.

Public business-profile content

A published profile intentionally makes customer-approved business information public. This can include the business and owner names, designation, category, descriptions, contact details, address and map link, hours, logos, covers, images, videos, social links, products, offers, testimonials, content blocks, documents, appointment information, and payment-display details such as a payee QR code, UPI ID, or bank details supplied for display.

Internal notes, account credentials, profile assignments, revision records, private operational records, and unpublished profile content are not intentionally made public.

Enquiries and appointment requests

When a visitor submits a form, we process the information entered, which may include a name, email address, phone number, enquiry type, subject, message, selected service, requested date or time, consent record, source page, and basic request context. Authorized administrators and currently assigned Business Owners can access relevant records so the business can respond.

Plans, revisions, and payment-display information

We maintain plan assignments, term dates, revision allowances and usage, change reasons, service history, and related administrative records. TapNest does not provide an online checkout and does not store customer payment-card credentials or process customer payment transactions. Payment details shown on a public profile are display information configured by that business.

Google Business Profile management information

If a customer engages TapNest for Google Business Profile management, we may process business information, authorized instructions, approved content, correspondence, reporting information available for the profile, and records needed to establish the agreed scope and authorization. TapNest does not require a customer's Google password or one-time password.

Technical, security, analytics, and communications information

We use essential session and security information, which can include an IP address and user agent in the server-side session record. Operational forms and audit records may store a keyed hash of an IP address, a limited user-agent string, source URL, action details, and timestamps. First-party analytics can store keyed session and IP hashes, referrer host, broad device category, optional country code, allowlisted event metadata, and timestamps. Raw IP addresses are not stored in analytics and browser fingerprinting is not used.

Optional browser push notifications

We may also process notification preferences, in-app notifications, email delivery records, and privacy-limited delivery logs. When optional browser push is enabled and a visitor chooses to allow notifications, LaraPush processes a push subscription identifier and may process delivery and engagement information. Browser permission can be declined or later withdrawn through browser or device settings.

3. How we use information

We use information to provide and publish requested services; authenticate users; manage profiles, plans, revisions, enquiries, appointments, and notifications; deliver customer-authorized work; provide support; maintain security and auditability; measure first-party service usage; troubleshoot failures; meet legal obligations; prevent misuse; resolve disputes; and improve the reliability and usability of TapNest.

4. Customer authority and instructions

Customers must have authority to provide business information, personal information, media, testimonials, documents, payment-display details, and other content submitted to TapNest. For Google Business Profile management, the customer must own, co-own, or otherwise be authorized to manage the profile and must give express written or digital authorization before TapNest acts as a manager.

5. Public and private information

Information included in an active, published business profile is available to anyone with the public URL and may be indexed, copied, cached, or shared by visitors and independent search or social services. Customers should not submit confidential or unnecessary personal information for public display. Private portal and operational records remain subject to role and assignment controls, although no online system can be guaranteed completely secure.

6. Cookies and similar technologies

TapNest uses essential cookies and sessions for authentication, security, form handling, and short-term first-party view deduplication. The current platform does not use Google Analytics, advertising pixels, cross-site behavioural advertising, or browser fingerprinting. Optional browser push requires the visitor's browser permission as described above.

7. How information may be shared

Information may be disclosed only as reasonably needed to provide the service: to the relevant customer and authorized users; infrastructure, hosting, storage, email, notification, and communications providers; Google where an authorized Google Business Profile service requires it; services deliberately opened by a visitor such as WhatsApp, maps, social networks, websites, or video platforms; professional advisers; and public authorities or other parties where required by law, safety, fraud prevention, or legal process. Those independent services apply their own terms and privacy practices.

8. Data Retention & Deletion

Information is retained while needed to provide, secure, support, and administer TapNest, and for legitimate legal, tax, accounting, security, fraud-prevention, and dispute-resolution purposes. When a paid subscription expires, the public profile and related public service become unavailable. Eligible profile data may be retained privately for a 30-day recovery period so the customer can renew without recreating the profile. This recovery period is data retention only and does not provide public access. Renewal during the recovery period restores normal availability under the renewed plan.

TapNest does not currently implement an automatic profile-deletion schedule after that recovery period. Eligible profile or customer data may later be deleted or anonymised through an administrator-supported process. A customer may request deletion of eligible personal data, but some records may be retained for legal obligations, tax or accounting, security, fraud prevention, dispute resolution, or other lawful purposes. Limited residual copies may remain in routine backups until overwritten in the ordinary course; deleted data will not be restored from a backup for ordinary business use.

9. Your choices and rights

Subject to applicable law and the phased commencement of relevant legal requirements, a person may ask for access, correction, updating, or deletion of eligible personal information; withdraw consent where processing depends on consent; raise a grievance; or nominate another person where the law provides that right. We may need to verify identity and authority before acting. A request may be limited where retention or processing is permitted or required by law.

10. Security

TapNest uses measures appropriate to the current service architecture, including authenticated portals, role and profile-assignment checks, server-side validation, hashed passwords, limited audit logging, privacy-reduced analytics identifiers, private document delivery controls, and controlled storage paths. Access is limited to people and systems that need it for authorized work. No transmission, storage, or security measure can eliminate all risk.

11. Children

TapNest is a business service and is not directed to children. Customers must not knowingly submit a child's personal information for public display without the authority and safeguards required by applicable law. If such information is identified, contact the privacy address below.

12. Changes and contact

We may update this policy as TapNest, its providers, or applicable requirements change. The revised date will be shown on this page. Material changes may also be communicated through an appropriate service channel.

Privacy & Data Requests

Email privacy@tapnest.in. For a consumer grievance, email grievance@tapnest.in or see the Grievance Redressal page. Related service conditions are in the Terms & Conditions and Cancellation & Refund Policy.