Linktaq

Privacy Policy

Last updated 14 July 2026

This policy explains what personal data Linktaq collects, why we collect it, and how it is protected. We collect only what's needed to fulfill orders, operate your digital profile, and improve the service.

1. Information we collect

Account data: name, email, phone number, and password (hashed, never stored in plain text).

Order data: shipping address, order history, and payment status (payment card details are handled entirely by Razorpay and never touch our servers).

Digital profile data: any content you add to your NFC profile — photo, bio, links, contact details — which is publicly visible to anyone who taps or scans your card.

Usage data: device type, browser, approximate location (country/city) and referrer, collected when your NFC profile is viewed, to power your analytics dashboard.

2. How we use your data

We use your data to process orders, operate your account and digital profile, send transactional emails (order confirmations, OTP codes, shipping updates), provide analytics on your NFC card performance, and — only with your consent — send marketing emails you can unsubscribe from at any time.

3. Data sharing

We share data with service providers strictly to operate Linktaq: Razorpay (payments), Cloudinary (media hosting), our email delivery provider (transactional email), and MongoDB Atlas (database hosting). We do not sell your personal data to third parties.

4. Data retention

Account and order data is retained for as long as your account is active and as required by tax and accounting law thereafter. You may request deletion of your account and associated data at any time, subject to legal retention requirements.

5. Your rights

You may access, correct, export, or delete your personal data from your account dashboard, or by contacting us at linktaq@gmail.com or +91 72009 21109. Note that your public NFC profile content is visible to anyone who taps your card until you remove it or deactivate the card.

6. Security

Passwords are hashed with bcrypt, sessions use httpOnly cookies, and all traffic is encrypted in transit via HTTPS. Access to production data is restricted to authorized personnel only.