cupbar.cafe · QuickTap
Privacy Policy
How QuickTap handles business accounts, ecommerce, social sign-in and privacy requests.
Last updated:QuickTap is a product of dpuzzles Pvt Ltd.
Who handles your information
This policy covers QuickTap’s business administration service, ecommerce websites and mobile apps, and shared social sign-in. QuickTap is a product of the company identified below. That company handles platform registration, subscriptions, support and service security. For shop customer accounts, orders and customer service, the merchant identified on the storefront or order documents is responsible; QuickTap processes service information on the merchant’s behalf.
Your shop account and orders belong to this shop. Using the same social provider at another QuickTap shop does not automatically merge your customer accounts or share your orders.
Business accounts and tenant administration
Business administrators and staff provide account identifiers, contact and company details, authentication information, roles and permissions, subscription and billing records, and support requests. Businesses may enter customer, supplier, employee, inventory, sales and accounting records into the modules they use. QuickTap processes these records to provide the subscribed services and authorized integrations.
The business decides which records to enter and which staff or integrations may access them. Contact your business administrator about records controlled by that business. For your QuickTap platform account or platform privacy questions, contact the company below. Shop social sign-in is a separate feature and does not grant access to tenant administration.
Information used by the shop
When you use relevant features, we process the name, email, phone number, addresses and delivery instructions you provide; cart contents, product options, orders, payment status, shipment information, reviews and uploaded review images; and your notification preferences. Payment providers process payment credentials through their own payment flow. The shop receives transaction references and payment results.
Address search and maps may send your search text and map interactions to the configured maps provider. Your current location is requested only through your browser or device permission; an address you save or submit may include map coordinates for delivery eligibility and shipping calculation.
Technical information may include request IP addresses, browser/device information, security events, and a notification installation identifier and delivery token when you enable push notifications.
How information is used and shared
Information supports account access, checkout, order fulfillment, delivery, receipts, account recovery, customer support, review display, notification preferences and fraud prevention. Reviews and their images may be displayed publicly with the review’s author information after the shop’s moderation process.
Access is limited to the merchant’s authorized staff, QuickTap personnel supporting the service, and providers needed for the features you use: hosting, payments, delivery, maps, email and notifications. Push delivery may use Apple Push Notification service, Firebase Cloud Messaging, Huawei Push Kit or your browser’s push service. Email may use QuickTap’s delivery service or the merchant’s configured email service.
The social sign-in integration does not sell provider data, use it for advertising profiles, or use it to train general-purpose AI models. Google information is used for the disclosed account and service functions; its use and transfer must follow the Google API Services User Data Policy, including applicable Limited Use requirements. Social sign-in does not itself subscribe you to marketing.
Providers may process information in countries other than yours under their own privacy terms. The merchant and QuickTap must observe applicable privacy obligations when arranging service processing or responding to legally required disclosures.
Storage, security and retention
The website/app uses browser or app storage for your signed-in session, cart, language, appearance and notification choices, and temporary sign-in verification. Clearing storage may sign you out or remove saved preferences. Social providers may use their own cookies when you visit their authorization pages. Merchant-added content or integrations may have additional practices disclosed by the merchant.
The service uses HTTPS, protected credentials, access controls and tenant separation. No service can guarantee absolute security. Sign-in attempts expire after ten minutes; temporary identity details are cleared on successful completion and expired attempts are scheduled for hourly removal. Social sign-in audit events are scheduled for removal after 90 days.
Account, order, review and communication records are retained as needed to provide service and meet applicable accounting, legal, security and dispute requirements. There is no single retention period for every merchant or record. A deletion request may leave records that must be retained, and backup copies may remain until the applicable backup retention cycle ends. Ask the merchant about retention that applies to your records.
Your choices and notifications
Update your profile and saved addresses in Account settings. Manage order notifications and offers in Account → Notifications & preferences. You can also revoke push or location permissions in your browser/device settings. Security, verification and password-recovery messages may still be needed to operate your account.
To disconnect a provider, open Account → Account settings → Connected accounts. Keep a password with an email address or another available connected provider before removing your last sign-in method. You can separately revoke the app’s access in your Google, Apple, Facebook or X account settings. Disconnecting or revoking provider access does not delete your shop account, past orders or the provider’s own records.
Access, correction and deletion requests
To request a copy, correction or deletion of your customer information or social-login connection, contact the shop using the details below or the contact shown on your order receipt. Include the shop name, the email or phone associated with your account, the provider name if relevant, and what you want changed or deleted. Do not send passwords, payment credentials or provider access tokens.
The merchant may verify that you control the account and involve QuickTap to handle service records. It should explain completion, any required retained records, or any reason it cannot fulfill the request. Requests are handled within applicable legal deadlines; this page does not claim that deletion is automatic. Depending on applicable law, you may also request restriction, object to processing, withdraw consent, or complain to the relevant privacy authority.
Children and policy changes
The shop’s account and social sign-in features are not intended for children who cannot lawfully consent to these services. A parent or guardian who believes a child supplied personal information should contact the merchant.
This page displays its last-updated date. Material changes should be communicated through the service or an appropriate contact channel. New uses of provider data requiring consent must not start until the required consent has been obtained.
Contact & requests
For shop accounts, orders, privacy questions or deletion requests, contact the merchant: cupbar.cafe
Use the merchant contact shown on your order receipt or other communications from the shop.
For QuickTap platform privacy requests: dpuzzles Pvt Ltd · info@quicktap.cloud
Include the shop name and your account identifier. Never send passwords or access tokens.
Google, Apple, Facebook and X sign-in
Social sign-in is optional. You can use the shop’s email/password sign-in instead. Selecting a provider opens its authorization screen; we do not receive your provider password. The provider may identify the shared application as QuickTap.
Google: we request basic profile and email permissions (openid, email and profile). We use the account identifier, name, email and email-verification status to create or authenticate your shop account. We do not request access to Gmail, Drive, contacts or calendars. Identity responses may include other basic profile fields; the shop does not save a Google profile photo through this integration.
Apple: we use your Apple account identifier and the name and email you choose to share, where supplied. You can use Apple’s private email relay instead of sharing your personal email.
Facebook: we request public_profile and email and use your app-specific account identifier, name and email when supplied. This feature does not retrieve friends, messages or posts, or publish to your account.
X: we use your account identifier, display name and username. This integration does not obtain an email from X. The authorization screen may list permission to read posts; our sign-in feature retrieves only your basic account profile and does not fetch posts or messages or publish content.
We store a protected representation of your provider identifier, the provider connection and relevant account details to recognize you on future sign-ins. Provider access and refresh tokens are not retained by this sign-in integration. If your email already exists, sign in to that shop account and explicitly connect the provider in Account settings.