Privacy Policy

Last updated: March 17, 2026

TABO ("we," "us," or "our") operates the tabo.cards website and NFC smart business card platform. This Privacy Policy explains how we collect, use, and protect your information.

1. Information We Collect

Account Information

When you create an account, we collect your email address, display name, and username. If you sign in with Google, we receive your name and email from your Google account.

Profile Information

You may choose to add your job title, company, bio, phone number, website, avatar photo, and social media links to your profile. This information is publicly visible on your profile page.

Contact Exchange Data

When someone shares their contact information with you through your profile, we store their name, email, and optionally phone number so you can access your contacts in the dashboard.

Usage & Analytics Data

We collect anonymized analytics including:

  • Profile views and link clicks
  • NFC tap events (timestamp and anonymized location)
  • Browser user agent and referrer (anonymized)

IP addresses are hashed before storage and cannot be reversed to identify you.

NFC Card Data

If you activate an NFC card, we associate the card's hardware identifier (UID) with your account to enable tap-to-share functionality.

2. How We Use Your Information

  • To provide and maintain the TABO platform
  • To display your public profile when your NFC card is tapped or profile link is visited
  • To store contacts exchanged through your profile
  • To show you analytics about your profile's performance
  • To send transactional emails (welcome, password reset)
  • To improve our service and fix issues

3. Information Sharing

We do not sell your personal information. We share data only with:

  • Supabase — our database and authentication provider
  • Vercel — our hosting platform
  • Resend — our email delivery service

These providers process data solely on our behalf and under contractual obligations.

4. Data Retention

We retain your account data for as long as your account is active. You can delete your account at any time, which will remove your profile, contacts, and analytics data. NFC card associations will be cleared so the card can be reassigned.

5. Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate information on your profile
  • Delete your account and associated data
  • Export your contacts
  • Object to data processing

6. Cookies

We use essential cookies only — specifically for authentication session management. We do not use tracking cookies or third-party advertising cookies.

7. Security

We protect your data with encryption in transit (TLS), row-level security policies on our database, hashed IP addresses for analytics, and secure authentication via Supabase Auth.

8. Changes to This Policy

We may update this policy from time to time. We will notify registered users of significant changes via email.

9. Contact Us

If you have questions about this Privacy Policy, contact us at hello@tabo.cards.