1. Introduction
One91 Network Pte. Ltd. ("we", "us", "Company") operates TachoPay (tachopay.com). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform. We are committed to protecting your privacy in compliance with the Personal Data Protection Act 2012 (PDPA) of Singapore and applicable international data protection laws.
2. Information We Collect
2.1 Information You Provide
- Account information: Name, email address, phone number when you register
- Transaction details: Recipient phone numbers, operator selections, amounts, bill account numbers
- Payment information: Processed securely by Stripe. We do not store your full card number, CVV, or card expiry date on our servers
- Communication: Any messages you send to our support team
2.2 Information Collected Automatically
- Device information: Browser type, operating system, device type
- Usage data: Pages visited, features used, transaction history
- IP address: For security, fraud prevention, and approximate location
- Cookies: Session management and authentication tokens
3. How We Use Your Information
- To process your topup and bill payment transactions
- To communicate transaction status, receipts, and confirmations
- To provide customer support and respond to inquiries
- To detect and prevent fraud, unauthorized transactions, and abuse
- To comply with legal obligations and regulatory requirements
- To improve our services, user experience, and platform performance
- To send service-related notifications (not marketing, unless you opt in)
4. Information Sharing
We do not sell your personal data. We may share information with:
- Payment processors: Stripe, for processing card payments securely
- Telecom operators and billers: Recipient phone numbers and account details necessary to fulfill your transaction
- API providers: Third-party services that process recharges and bill payments on our behalf
- Legal authorities: When required by law, regulation, or legal process
- Service providers: Hosting, analytics, and infrastructure partners who assist in operating our platform, bound by confidentiality agreements
4A. Payment Data (Stripe)
When you add funds to your account using a credit or debit card, your payment is processed by Stripe, Inc. — a PCI-DSS Level 1 certified payment processor.
- Your card number, CVV, and expiry date are sent directly to Stripe and never touch our servers.
- We receive only: card brand (e.g., Visa), last 4 digits, expiry month/year, and a Stripe token for processing.
- 3D Secure (3DS) authentication data is handled entirely by Stripe and your card issuer.
- Stripe may share limited data with us for fraud prevention and transaction verification.
- For details on how Stripe handles your data, see Stripe's Privacy Policy.
5. Data Security
We implement industry-standard security measures to protect your data:
- All data transmitted via HTTPS/TLS encryption
- Payment processing handled by PCI-DSS compliant Stripe
- Access controls and authentication for internal systems
- Regular security reviews and monitoring
- Database encryption at rest
While we strive to protect your information, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security.
6. Data Retention & Account Deletion
We retain your personal data for as long as your account is active or as needed to provide services. Transaction records are retained for a minimum of 7 years for compliance with Singapore AML/CFT regulations and tax law (MAS Notice 626).
You can request permanent deletion of your TachoPay account and associated personal data at any time using our Account Deletion Request page. Deletion is processed within 30 days. Transaction records (anonymised where possible) will be retained per the regulatory obligations above.
7. Cookies
We use essential cookies for authentication and session management. These are strictly necessary for the platform to function. We do not use third-party advertising or tracking cookies.
8. Your Rights
Under applicable data protection laws, you have the right to:
- Access your personal data that we hold
- Correct inaccurate or incomplete data
- Request deletion of your data via the Account Deletion form (subject to legal requirements)
- Withdraw consent for data processing
- Request a copy of your data in a portable format
- Object to processing of your data for specific purposes
To exercise these rights, contact us at privacy@tachopay.com.
9. International Data Transfers
Your data may be processed in countries outside Singapore where our service providers operate. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.
10. Children's Privacy
Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child, we will take steps to delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. We encourage you to review this page periodically.
12. Contact Us
For privacy-related questions or requests:
One91 Network Pte. Ltd. (UEN: 201005367C)
276 Yishun Street 22, #03-260, Singapore 760276
Data Protection Officer
Email: privacy@tachopay.com
Website: tachopay.com