Privacy Policy

Last updated 14 September 2026

Taplo is a product of Clickx Solutions (“Clickx”, “we”, “us”), a software company operating across Africa. This policy covers the Taplo service at taplo.africa and the guest ordering pages Taplo serves on a restaurant’s behalf.

There are two different groups of people in this policy and it matters which one you are. Restaurants are our customers: they hold an account with us. Guests are the people who scan a code in a restaurant. A guest has no Taplo account and we do not build a profile of them.

If you are a restaurant

When you open an account we hold:

• your name and email address, and a password we never see in plain text;
• your business name, country, branch names and addresses, and contact details;
• your team: each member’s email, name and role;
• everything you put into Taplo — menus, dishes, drinks, prices, photographs, table layouts and settings;
• your subscription: which plan, when it renews, and the last four digits and brand of the card, which our payment provider gives us. We never receive or store a full card number.

If you are a guest

You are not asked to create an account and we do not ask for your name unless a restaurant’s ordering flow needs it. When you scan a code we record the scan so the restaurant can see how its codes are used:

• the time, the code scanned and which menu was shown;
• your IP address, and the city, region, country and network operator derived from it;
• your device type, brand and model, your browser and operating system, and your browser’s language;
• the page you arrived from, if any.

We are stating this plainly because an IP address is personal information under Ghana’s Data Protection Act, 2012 (Act 843), and because a privacy policy that describes scan data as “anonymous analytics” would be untrue. We are changing this collection so that the address is stored only as an irreversible hash, which is enough to count a unique scan and not enough to identify a person. Until that change ships, the address is held as described above.

If you place an order, we also hold:

• what you ordered, any notes, the table, and the amounts and taxes;
• a random session identifier stored in your browser, so the basket survives a page reload. It is not linked to any identity;
• your name and phone number, only if you supply them — for a receipt or so a server can find you. Where consent is required for that, we record that you gave it;
• the content of any receipt we send you by SMS or WhatsApp, together with the number it went to.

Why we hold it

To provide the service

Show a menu, take an order, take a payment, send a receipt, and let a restaurant run its floor.

To bill our customers

Subscription and plan information, for restaurants only.

To report to the restaurant

Scan and sales figures. These are shown to the restaurant whose code was scanned, never pooled across restaurants and sold.

To keep the service working and secure

Error logs, rate limiting and fraud prevention.

We do not sell personal information. We do not use guest data for advertising and we do not run third-party advertising or tracking pixels on the guest ordering pages.

Who else processes it

Taplo is built on services that necessarily see some of this data. Each is used as a processor, on our instructions:

• Supabase — the database, file storage and account authentication.
• Vercel — hosting. Sees request metadata including IP addresses.
• Cloudflare — serves menu images and sits in front of them.
• Paystack — card and mobile money payments. A guest’s payment details go to Paystack, not to us.
• Resend — transactional email, such as verification and receipts.
• Anthropic — menu translation, where a restaurant turns it on. Menu text is sent; guest data is not.

Some of these operate outside Ghana, so this data may be processed abroad. We may also disclose information where the law requires it.

How long we keep it

We are being straightforward about this: Taplo does not yet have an automatic deletion schedule, so account data, menus, orders and scan records are kept until a restaurant asks us to remove them or closes its account. We are working towards defined retention periods, specifically a fixed window for guest scan records. Order and payment records are kept for as long as tax and accounting rules require, which in Ghana is generally six years.

Your rights

Under Act 843 you may ask what we hold about you, ask us to correct it, ask us to delete it, or object to how we use it. Write to info@clickxsolutions.com.

One practical note for guests: if you ordered in a restaurant, that restaurant is the one that decided to collect your order, and we hold it on their behalf. You can come to us and we will help, and we may need to involve them.

Cookies and storage

Taplo does not use advertising or analytics cookies. We use:

• a session cookie, so a signed-in restaurant stays signed in;
• browser storage on the guest page, holding the random session identifier and your basket.

Children

Taplo is sold to businesses and is not directed at children. We do not knowingly collect information from a child.

Changes

When this policy changes we will update the date above. If a change materially affects our customers we will tell them.

Contact

Clickx Solutions, Ghana. Email info@clickxsolutions.com.