Privacy Policy

Welcome to D2CTap ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Order Management System.

By using our service, you agree to the collection and use of information in accordance with this policy. If you do not agree with our policies and practices, please do not use our service.

We collect the following personal information when you register and use our service:

• Full name and email address
• Phone number
• Password (encrypted and hashed — never stored in plain text)
• Meesho supplier account credentials and identifiers
• Payment information (processed securely through Razorpay — we do not store card details)

We automatically collect certain information when you use our service:

• IP address, browser type and version, device information
• Pages visited and features used
• Time and date of access, time spent on pages

When you submit claims, we temporarily store images and videos you upload. These files are processed and transmitted to Meesho's servers. We do not permanently store your claim images or videos beyond the processing period.

• Service Delivery — To provide, operate, and maintain our OMS
• Account Management — To manage your account, verify Meesho supplier accounts, and process claims
• Payment Processing — To process subscription payments through Razorpay
• Communication — To send service-related emails, notifications, and support messages
• Improvement — To analyze usage patterns and improve features and performance
• Security — To monitor for suspicious activity and prevent fraud or unauthorized access
• Legal Compliance — To comply with applicable laws, regulations, and legal processes

• Razorpay — For secure payment processing. Subject to Razorpay's privacy policy.
• Meesho — Your supplier credentials and claim data are transmitted to Meesho's servers to process claims on your behalf.

We may disclose your information if required by law or in response to valid legal processes, government requests, or to protect our rights, property, or safety.

We implement appropriate technical and organizational security measures:

• Password encryption using bcrypt hashing (10 rounds)
• Secure session management with encrypted cookies
• HTTPS/SSL encryption for all data transmission
• Regular security audits and updates
• Access controls and authentication mechanisms

No method of transmission over the internet is 100% secure. While we strive to protect your personal information, we cannot guarantee absolute security.

We retain your personal information for as long as necessary to provide services, comply with legal obligations, resolve disputes, and enforce our agreements.

When you close your account or request deletion, we will delete or anonymize your personal information within 30 days, except where required to retain it for legal purposes.

You have the following rights regarding your personal information:

• Access — Request a copy of the personal information we hold about you
• Correction — Request correction of inaccurate or incomplete information
• Deletion — Request deletion of your personal information (subject to legal obligations)
• Portability — Request your data in a machine-readable format
• Objection — Object to processing of your personal information for certain purposes
• Withdrawal — Withdraw consent for data processing where applicable

To exercise these rights, contact us at bot@d2ctap.com.

We use session cookies to maintain your login session and improve user experience:

• Essential Cookies — Required for authentication and service functionality
• Performance Cookies — Help us understand how you use our service

You can control cookies through your browser settings. Disabling cookies may affect service functionality.

Our service is not intended for users under the age of 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

Your information is processed and stored in India. By using our service, you consent to the transfer of your information to India. We ensure appropriate safeguards are in place for such transfers.

We may update this Privacy Policy from time to time. We will notify you by posting the updated policy on this page, updating the "Last Updated" date, and sending email notification for significant changes.

Continued use of the service after changes constitutes acceptance of the updated policy.