Privacy Policy

This Privacy Policy explains how Syntix (“we”, “us”, “our”), the operator of the 10tap service available at 10tap.io (the “Service”), collects, uses, discloses and protects information about you when you use the Service.

By creating an account or using 10tap, you agree to the practices described in this Policy. If you do not agree, please do not use the Service.

1. Information we collect

a. Information you provide

Account details: name, email address and password (stored as a salted hash).
Billing details: when you top up your wallet, our payment partners (Razorpay, CloudPaya) collect payment instrument information on our behalf. We never receive or store full card numbers, UPI credentials or crypto private keys.
Support correspondence: messages sent through our contact form, email or other support channels.

b. Information collected automatically

Usage data: IP address, browser type, device identifiers, referring URLs, pages visited and timestamps.
Cookies & local storage: we use a signed authentication cookie to keep you logged in, and local storage for functional preferences. We do not use third-party advertising trackers.

c. Service-related data

Virtual phone numbers assigned to you, OTP messages received on those numbers and the service they were intended for.
Wallet transactions (top-ups, debits, refunds) along with the linked order or rental.

2. How we use information

To provide, operate and maintain the Service.
To process wallet top-ups, OTP purchases and rental orders and to relay requests to our upstream SMS providers.
To communicate with you about your account, transactions, updates and support requests.
To prevent fraud, abuse and violations of our Terms & Conditions.
To comply with applicable laws and lawful government requests.

3. Sharing of information

We do not sell your personal information. We share limited information only with:

Payment processors (Razorpay, CloudPaya) to process wallet top-ups. Their processing is governed by their respective privacy policies.
SMS / rental providers that actually provision the virtual numbers used for OTPs.
Infrastructure providers (hosting, database, email delivery) that operate under confidentiality obligations.
Law enforcement, when we believe in good faith that disclosure is required by law or to protect rights, property or safety.

4. Data retention

We keep account information for as long as your account is active. OTP messages and temporary number assignments are retained only as long as needed to deliver the Service and for reasonable dispute resolution and legal record-keeping. You may request deletion of your account at any time by writing to us at support@10tap.io; we will delete or anonymise personal data unless we are required to retain it by law.

5. Security

We use industry-standard safeguards including TLS in transit, access-controlled databases, salted password hashing and signed webhooks. No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

6. Your rights

Subject to applicable law, you may request access to, correction of, portability of, or deletion of your personal information. You may also object to or restrict certain processing. To exercise any of these rights, contact us at support@10tap.io.

7. Children

10tap is not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will remove it.

8. International transfers

10tap is operated from India and its servers may be located in other jurisdictions. By using the Service you consent to the transfer and processing of your information in those locations.

9. Changes to this Policy

We may update this Policy from time to time. Material changes will be notified by posting the updated Policy on this page with a new “Last updated” date and, where appropriate, by email.

10. Contact

Questions about this Policy? Reach us at support@10tap.io or via our contact page.