Security & privacy

Share more. Expose nothing.

How we protect your profile, your contacts and the people you meet.

What's on the card

Each card's NFC chip is encoded with a link to your Tapqora profile (and locked after encoding, so it can't be rewritten). It does not store your name, number or any other personal data. The QR code on the back opens the same link.

If you lose your card

Pause or deactivate it from your dashboard. Anyone tapping it then sees a page saying the card is inactive — never your profile.

What people can see

Only the fields you publish on your profile. You can edit or hide any detail, or unpublish your profile entirely, at any time.

How data is protected

All pages and API calls use HTTPS. Account data is stored with Supabase in London, and access is restricted by row-level security so each user can only read their own records.

Payments

Card payments are processed by Stripe, a PCI DSS Level 1 certified provider. We never see or store your full card number.

Contacts shared with you

When someone shares their details from your profile, those details go to you. We don't use them for our own marketing or sell them.

Your rights

Under UK GDPR you can access, correct, export or delete your data. Email privacy@tapqora.com and we'll respond within one month.

Responsible disclosure

Found a security issue? Email privacy@tapqora.com with details. Please don't access other users' data or disrupt the service while testing.

Full details are in our privacy policy and cookie policy.