Privacy Policy

This policy explains how Fastap ("Fastap", "we") handles personal data when you use our website, digital business cards, NFC card store, marketplace and booking features. We process personal data under the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them.

1. Who this policy covers

• Card owners: people and businesses who create an account and publish a digital card.
• Visitors: people who open a card, save a contact, send an enquiry, make a booking or buy something.
• Sellers, franchise agents and companies who use the marketplace, agent or company panels.

2. What we collect

Information you give us

• Account details: name, e-mail, mobile number, password (stored only as a one-way hash).
• Card content you choose to publish: photo, designation, address, social links, services, portfolio, documents and similar.
• Orders: billing and delivery name, address, PIN code, state, phone and e-mail, and the names or logos to print on cards.
• Seller KYC: legal name, PAN, the last four digits of Aadhaar (we never store the full Aadhaar number), GSTIN, bank account and IFSC, and the documents you upload. PAN and bank account numbers are stored encrypted.
• Enquiries and bookings a visitor sends to a card owner: name, phone, e-mail, message, preferred date and time.

Information collected automatically

• Card activity such as views, shares and contact saves, and the approximate location a visitor chooses to share.
• Device and log data: IP address, browser type and pages visited, used for security and to fix problems.
• Cookies needed to keep you signed in and to protect forms. We do not sell cookie data.

Payments

Payments are processed by our payment partners (PhonePe and Razorpay). We receive the payment status, amount, payment method and transaction reference. We never see or store your full card number, CVV, UPI PIN or net-banking password.

3. Why we use it

• To create and run your account and publish your card.
• To deliver orders, issue GST invoices, process refunds and pay sellers and agents.
• To pass a visitor's enquiry or booking to the card owner it was meant for, and to send confirmations and reminders.
• To verify sellers (KYC) and meet tax and legal obligations such as GST, TCS and TDS.
• To keep the platform secure, prevent fraud and answer support requests.

We process personal data on the basis of your consent, which you give when you sign up or submit a form, and where the law requires or allows it (for example tax records).

4. Who we share it with

• The card owner receives what a visitor sends through their card (enquiries, bookings, orders).
• Payment partners (PhonePe, Razorpay) to take payments and refunds.
• Courier partners receive delivery details for NFC card orders.
• Marketplace sellers receive the buyer details needed to fulfil an order.
• Service providers who host our servers or send our e-mails, under confidentiality obligations.
• Authorities when the law or a valid legal order requires it.

We do not sell personal data.

5. Public information on your card

Anything you publish on your card is visible to anyone who opens it. You can hide your e-mail, phone and individual sections from your dashboard at any time. Visitors' enquiries and bookings are never shown on a public card.

6. How long we keep it

• Account and card data: while your account is active. When you delete your account, your card goes offline immediately and your personal data is erased, apart from what we must keep by law.
• Orders, invoices and payment records: 8 years, as required by GST and income-tax law.
• KYC records: as long as the seller account is active and for the period required by law afterwards.
• Security logs: up to 12 months.

7. Your rights

You can:

• see and correct your data from your dashboard;
• withdraw consent and delete your account from Settings → Delete account;
• ask us for a summary of the personal data we hold about you;
• nominate a person to exercise your rights in case of death or incapacity;
• raise a grievance with our Grievance Officer (details below), and after that with the Data Protection Board of India.

8. Children

Our services are meant for people aged 18 or over. We do not knowingly create accounts for children.

9. Security

We use HTTPS, hashed passwords, encryption for PAN and bank details, private storage for KYC documents and access controls with audit logs for our staff. No system is perfectly secure; if a breach affects you we will inform you and the authorities as the law requires.

10. Changes to this policy

We will post any change on this page and update the date above. If a change is significant we will also tell you by e-mail.