How payments work & your data

Cardly NFC Scanner lets you add a payment link to your digital card so people can pay you easily after opening it by link, QR code or NFC tap. Cardly NFC Scanner is not a payment institution, bank or money transmitter, and it never becomes a party to your transactions. This notice explains exactly how it works and how your data is protected.

A link-based model — not a card form

You add a payment link or identifier from a licensed provider you already use (for example Stripe, PayPal, Wise, Revolut, Venmo, Cash App, Papara, iyzico or Shopier), or a bank IBAN for a manual transfer. When a visitor taps “Pay”, they are taken to that provider's own secure, regulated checkout page to complete the payment. The money moves directly between the payer and your provider — never through Cardly NFC Scanner.

Card details are never collected or stored

Cardly NFC Scanner never asks for, sees, processes or stores card numbers, CVV codes, expiry dates or bank credentials. Because we deliberately never touch this data, there is no cardholder data on our servers to be retained, sold, shared or breached. All sensitive card handling and PCI-DSS compliance is performed by your chosen payment provider, who is authorised and regulated to do so.

You are in control — delete anytime

The only payment information Cardly NFC Scanner stores is the payment link or IBAN you chose to publish on your own card. You can edit or remove it yourself at any moment from your dashboard. When you remove it or delete the card, it is permanently deleted and is no longer shown to anyone. Under the GDPR you retain your rights of access, rectification, erasure and portability over this information at all times.

Your responsibilities & legal use

  • You may only add a payment link that genuinely belongs to you and that you are legally entitled to use to receive funds.
  • You are solely responsible for the goods, services, taxes, refunds, chargebacks and any disputes relating to payments you receive. Cardly NFC Scanner is not involved in and is not liable for those transactions.
  • Payment links must comply with your provider's terms and all applicable laws. Any use for fraud, money laundering, illegal goods or services, or other unlawful activity is strictly prohibited and may result in immediate removal and account suspension.
  • Your relationship for the payment itself is governed by the terms and privacy policy of the payment provider you selected; please review theirs as well.

Data we do process

To display your card we store the payment link/IBAN and its label. Aggregate, non-identifying view counts may be recorded to show you how often your card is opened. We do not build payer profiles and we never receive the payer's financial details. Our full privacy commitments are set out in our Terms & Privacy.

Questions about payments or your data?