Privacy Policy

One Tap Payments Pty Ltd (“One Tap”, “we”, “us”) operates the One Tap platform at onetappayments.app. We are subject to the Australian Privacy Act 1988 (Cth) and the Australian Privacy Principles.

We collect information you provide when creating an account: name, email address, date of birth, residential address, and government-issued identity documents (for identity verification). We also collect transaction data generated when your One Tap card is used, and standard technical data such as IP address, device type, and browser.

We use your information to provide and operate the One Tap service — issuing your virtual card, generating tax invoices, and maintaining your account. We also use it to comply with our legal obligations including anti-money laundering (AML) and know-your-customer (KYC) requirements.

We do not sell your personal information to third parties. We do not use your data for advertising.

We share data with a small number of service providers necessary to operate the platform:

• Thredd (GPS) — card issuing and payment processing
• Sumsub — identity verification (KYC)
• Neon / PostgreSQL — database hosting
• Vercel — application hosting

Each provider is contractually bound to protect your data and may only process it for the purpose we specify. We may also disclose information where required by law or to prevent fraud.

We retain your account data for as long as your account is active, plus a further 7 years to satisfy Australian financial record-keeping obligations. Identity verification records are retained as required by our AML obligations. You may request deletion of your account at any time, subject to these legal requirements.

You have the right to access, correct, or request deletion of your personal information. To exercise these rights, contact us. We will respond within 30 days.

We use industry-standard security measures including TLS encryption in transit, encrypted storage, and strict access controls. Identity documents processed during KYC are handled exclusively by Sumsub and are not stored on One Tap servers.

For any privacy questions or concerns: contact us