Privacy notice

Last updated: 29 September 2026. TapOrder is operated by YOUR REGISTERED BUSINESS NAME (SSM no.) ("we").

What we collect

Account data: the owner's email address, business name and country; staff display names. Staff don't give us an email or phone number.

Business data you enter: items, supplier names and their phone numbers or email addresses, stock counts, and the orders you send.

Billing: handled by Stripe. We never see or store your card details.

How we use it

Only to run TapOrder for you: signing you in, showing your data to you and your staff, and opening your orders in WhatsApp or email. We don't sell data and we don't show ads.

Your supplier contacts

Supplier details belong to your business. We act only as a processor for them: we use them solely to open the orders you send. We never contact your suppliers, share them, or use them for marketing.

Who else processes data

Supabase (database and sign-in), Cloudflare (hosting), Stripe (payments), and our email provider (sign-in codes). Each only processes data to provide their service to us.

Keeping it separate and secure

Each business can only ever see its own data; this is enforced by the database itself, not just the app. Staff access can be removed by the owner at any time and stops immediately.

Retention and deletion

We keep your data while your account is open. Ask us to delete your business and we'll remove it within 30 days, except records we must keep by law (such as invoices).

Your rights

You can ask to access or correct your personal data, or withdraw consent, by emailing hello@example.com. This notice is written with Malaysia's Personal Data Protection Act 2010 in mind.