Privacy notice
Template: please read it and change anything that does not match how you work. Last updated: November 2026.
1. Who we are
OneTap ID, Sri Lanka. WhatsApp +94 75 765 8977 · info.onetapid@gmail.com. We run onetapid.com, the dashboard at dashboard.onetapid.com and the business pages people open from OneTap cards and QR codes.
2. Business owners (our customers)
When you create an account we keep your name, email, phone number, business details and the content you add to your page (text, photos, menu, prices, opening hours). We use this to run your page and your account, to send you account emails (sign-in codes, receipts, renewal reminders) and to give support. Payments are handled by Onepay; we never see or store card details.
3. People who order, book or check a job on a business page
When you place an order, book a table, an appointment or a room, or leave a repair job, the form asks for your name and phone number, and sometimes your email, address and a note. These details go to that business so it can handle your request. The business decides how it uses them and is responsible for them. OneTap ID stores them on the business’s behalf and uses your email only to send the confirmation code and updates about that request. We do not sell these details or use them for advertising.
4. Visit counts
Business pages count visits, taps and button clicks so owners can see how their page is doing. These counts do not include your name, and we do not use advertising trackers. Link previews from apps like WhatsApp and Facebook are not counted.
5. Cookies and storage on your device
The dashboard uses a session cookie to keep you signed in. Business pages may keep your cart and theme choice in your browser so they are still there when you come back. You can clear them at any time from your browser settings.
6. Phone alerts
If a business owner turns on phone alerts, their browser gives us a notification address for that device. We use it only to send new-order and booking alerts, and remove it when alerts are switched off.
7. How long we keep data
Account data is kept while the account is open. Orders, bookings and jobs stay in the business’s dashboard until the business deletes them or the account is closed. Unconfirmed requests are removed automatically.
8. Your choices
To see, correct or delete the details you gave a business, contact that business first; they can remove your details from their dashboard in one step. You can also write to us at info.onetapid@gmail.com and we will help. Business owners can download all their data from the dashboard (Customers → Your data) at any time.
9. Security
Pages are served over HTTPS, passwords are stored hashed, sign-in is rate-limited and emails are confirmed with one-time codes. No system is perfect; if something goes wrong we will tell the people affected.
10. Changes
If we change this notice we will update the date at the top. Questions: info.onetapid@gmail.com.