Privacy policy

Tapstall gives sellers an online store and an order book. This page explains what we collect about sellers and about the people who order from them, what we do with it, and your rights under Ghana's Data Protection Act, 2012 (Act 843).

The short version

• We collect what's needed to run your store and your orders, and nothing to sell or advertise with.
• We don't sell anyone's data, show ads, or use tracking or analytics cookies.
• A shop's customers deal with that shop. We keep their details for the shop, and don't contact them for ourselves.
• You can ask to see, correct or delete your data at any time.

Who we are

Tapstall is based in Ghana. Reach us on WhatsApp at 050 064 6358, or by email at [email protected]. That's also where to send any request about your data.

Sellers: what we collect

• Your account: your phone number and your name.
• Your store: its name and link, your WhatsApp number for orders, your region, town and area, your description and logo, and whether it's in the shops directory.
• What you sell: products, prices, stock, photos, and what items cost you (which only the store's owner sees).
• Your records: the orders, payments and customers you record, and your promo codes and reviews.
• Getting paid: the Mobile Money number and name you add for receipts.
• Your team: the names and numbers of helpers you add.
• Signing in: when you sign in, the time, your IP address and your browser or device, so we can stop misuse and show you where you're signed in.

Buyers: what a shop collects

When you order from a shop on Tapstall, or ask it for a quote, the shop receives:

• your name and phone number
• your delivery details, if you give them: address, landmark, location and notes
• what you ordered, the date you need it and what it's for, if you say

Your order page never shows your number or address to anyone else. If you review an order, only your first name appears with it. If you ask to hear when something is back in stock, the shop gets your number for that.

The shop decides how your details are used, for example to deliver and to message you. Tapstall stores them on the shop's behalf. Ask the shop first about anything to do with your order, and contact us if they don't help.

On your phone, the shop remembers your name and number for next time, and what's in your basket, in cookies (below). Nothing about your visit is shared with other shops.

What we use it for

• running your store, your orders and your reports
• texting you sign-in codes, and telling a store's owner when our team acts on their store
• keeping the service safe: limiting repeated attempts, and spotting abuse
• showing your store in the shops directory, only if you turn that on
• helping you when you ask us

We count how often each store page is viewed, per day, without recording who viewed it.

Who it goes to

Only the services we need to run Tapstall, and only what each one needs:

• OVHcloud hosts our servers and database, in France.
• Cloudflare protects and delivers our pages, and stores product photos and logos.
• mNotify, in Ghana, sends our text messages.
• Google Drive keeps our nightly backups, encrypted before they leave our server.
• Paystack will handle payments if a shop takes payments online. This isn't switched on yet; we'll update this page first.

When you tap to message a shop, you're using WhatsApp, under WhatsApp's own terms. We share data with the police or courts only when Ghanaian law requires it.

Some of these services store data outside Ghana. Data travels encrypted (HTTPS), and access is limited to what each service needs to do its job.

How long we keep it

• Your account and store, for as long as you use Tapstall.
• A store's orders and customers, for as long as the store exists: they're the seller's business records.
• Sign-in records (IP address and device) and sign-in codes, for 90 days.
• Photos you remove are deleted from storage straight away.
• Backups, for 30 days.

To close your account, message or email us. We delete your account and stores within 30 days, and they leave our backups within 30 days after that.

Cookies

We only use cookies that the service needs to work. There are no advertising or analytics cookies.

• Seller app: keeping you signed in, and remembering an invite link you followed.
• Shops: your basket, an order you've started, a promo code, the date you picked, and your name and number for next time.
• Everywhere: whether you chose light or dark.

Clearing your browser's cookies removes them.

How we protect it

• Every page is served over HTTPS.
• You sign in with a code sent to your phone, so there's no password to steal. Codes and sessions are stored scrambled (hashed).
• Each store's data is kept apart: no one can see another store's orders or customers.
• Our team signs in with a second step, an authenticator app, and what they do is logged.

Your rights

Under Ghana's Data Protection Act, you can ask us to:

• tell you what we hold about you, and give you a copy
• correct it
• delete it, or stop using it

Message us on WhatsApp or email [email protected], and we'll reply within 30 days. For an order, ask the shop as well. If you're unhappy with our answer, you can complain to Ghana's Data Protection Commission.

Children

Selling on Tapstall is for people aged 18 and over.

Changes

When this policy changes, we'll update the date at the top. If a change affects how we use your data in a way you'd want to know about, we'll tell sellers in the app first.