Last updated: 16 October 2026
TapCard AI ("we") provides NFC digital business cards, a CRM and a mobile app to businesses in Singapore. Contact our Data Protection Officer at privacy@tapcard.sg.
Account data: name, email, company, role and a hashed password.
Card content you publish: title, phone, email, links, bio and photo.
Card visitors: when someone opens, taps, scans or clicks on a card we record the time, source (NFC, QR, link, wallet), the view and an anonymous browser identifier. Visitors who submit the contact form give their name, contact details and message, with consent (PDPA); their earlier activity on that card is then linked to them.
Questions typed into a card's AI assistant.
CRM data our customers store about their own contacts.
Mobile app: a push-notification token for the phone, so we can alert you when someone interacts with your card.
Payments are processed by HitPay; we never see or store full card numbers.
To provide the service (cards, CRM, visitor alerts, AI follow-up suggestions), to bill, to support you and to keep the service secure. We do not sell personal data or use it for third-party advertising.
Hosting; HitPay (payments); Resend (email); Anthropic (AI features process the text you or your visitors submit); Apple and Google (push notifications, wallet passes); HubSpot only if a customer connects their own account. Some providers process data outside Singapore under contractual safeguards.
You can update or delete your card content in the app at any time, unsubscribe from marketing emails via the link in each email, and turn off push notifications in your phone settings. To access, correct or delete your account and data, email privacy@tapcard.sg; we respond within 30 days.
We keep data while your account is active and for up to 12 months after closure unless the law requires longer. Data is encrypted in transit; passwords are hashed.
We will post changes on this page and notify account holders of material changes.