This policy sets out what you may not do with OnlyTap, how to report content, what we do with each report and what follows from it. It is part of the terms of service and you accept it with them. It complies with Regulation (EU) 2022/2065, the Digital Services Act.
1. Prohibited uses
You may not use OnlyTap, or its links, QR codes, chips or pages, to:
- Commit fraud or phishing: deceive those who open a link to take their money, passwords or data.
- Distribute malware, viruses or any other harmful software, or lead to pages that do.
- Publish or link to content that is illegal or infringes the rights of others, such as intellectual property, image or privacy.
- Impersonate another person, brand or business, or suggest a relationship with them that does not exist.
- Send spam, harass or threaten.
- Get around the limits of your plan with several accounts, or create accounts in bulk or automatically.
This applies to what you publish on OnlyTap and to the destinations your links lead to.
2. How to report
Anyone, with or without an account, can report, at app.onlytap.es/report, content they reached through OnlyTap, by a link, a QR code or a chip. Write the address that opened; if you cannot see it or an app opened, the name of the business and where the QR code or chip was. Add the reason and what is wrong. A report is the notice provided for in Article 16 of the Digital Services Act. Name and email are optional. If you give your email, we confirm that we have received the report and tell you what we decide and how to appeal if you disagree. The reported business does not see who reported it.
You can also write to reportar@onlytap.es.
3. What we do with a report
Every report is reviewed by a person. We look at the page or the link's destination, compare it with this policy and the law, and decide. Reports that do not hold up are closed with no changes.
We also check link destinations with Google Web Risk when they are saved and every night. If Google marks a link or a page as dangerous, for malware, social engineering or unwanted software, it is deactivated automatically, at once. This is the only automated decision: everything else is decided by a person.
4. Consequences
Depending on how serious it is and whether it happens again, we may:
- Deactivate the link: it stops opening, also from its QR code and its chips.
- Unpublish the page.
- Close the account, if the breach is serious or repeated: the subscription is cancelled and its links stop opening, also from its QR codes and its chips.
If we close your account for breaching this policy, we do not refund what has already been paid.
5. Notice and appeal
If we deactivate a link, unpublish a page or close an account, we write to your account's email with the measure, the rule of this policy or the law that was broken, the facts we relied on, whether the decision was automated and how to appeal. To appeal, reply to that email and explain why you disagree. A person will review it, we will answer and, if you are right, we undo it. You can also go to the courts.
We do not notify you when the law or an authority prevents it, or when doing so would put an investigation or someone's safety at risk.
6. Authorities
If we become aware of anything that gives rise to a suspicion of a criminal offence threatening someone's life or safety, we inform the authorities at once, with the information we have (Article 18 of the Digital Services Act). We also comply with orders from authorities and courts.
7. Point of contact
The point of contact for users and authorities, under Articles 11 and 12 of the Digital Services Act, is reportar@onlytap.es. You can write to us in Spanish or English. A person answers, not an automated system.
8. Changes to this policy
If we change it, we will ask you to accept it again when you sign in, as with the terms.