This Privacy Policy explains how Devchandra Sah, operating as CardAdvisor ("CardAdvisor", "we") handles information when you use this website. We are committed to data minimisation: the core recommendation engine works without any account or personal identifier.
1. What we collect
- Spending profile inputs — spend categories, monthly amounts, income range, and card preferences you enter in the profiler. These are not directly identifying and are stored against a random session ID, not your name or email.
- Email address — only if you opt in to T&C change alerts, submit a card suggestion, or create an account. Used solely for that stated purpose.
- Usage analytics — page views and feature usage events to help us improve the product. Collected in aggregate; not linked to your identity unless you are logged in.
- Technical & activity data — your IP address, an approximate location (city/country) derived from it, and your device/browser type, recorded with activity events for security, abuse-prevention, and analytics. We do not store precise GPS location. This data is automatically purged after 90 days.
We do not collect your actual salary, phone number, Aadhaar number, PAN, credit card numbers, or bank account details.
2. How we use it
To generate personalised card recommendations, send the alerts or updates you requested, respond to suggestions and feedback, secure the service against abuse, and improve the product experience. We never sell your data to third parties, and there are no paid placements in our rankings.
3. Your rights (DPDP Act 2023)
Under India's Digital Personal Data Protection Act 2023, you have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Request erasure of your personal data
- Withdraw consent at any time (e.g. unsubscribe from alerts)
- Nominate a person to exercise these rights on your behalf
To exercise any of these rights, contact our Grievance Officer at devchandra1987@gmail.com. We will respond within 48 hours on business days.
4. Cookies & local storage
We use browser local storage to remember your profiler session (so you don't lose progress on page refresh) and your wallet card list. We may use cookies for session management and anonymous, aggregated analytics. We do not use advertising cookies, cross-site tracking cookies, or sell cookie data to any party.
5. Retention & security
We retain personal data only as long as needed for the purpose it was collected. Activity-log data (IP address, approximate location, device type) is automatically purged after 90 days. Email addresses for alert subscriptions are retained until you unsubscribe. We apply reasonable technical and organisational safeguards; however, no method of internet transmission is 100% secure.
In the event of a data breach that is likely to harm your interests, we will notify affected users and the relevant authority as required by applicable law.
6. Third-party processors
We use the following service providers who may process your data on our behalf:
- Hosting: Oracle Cloud Infrastructure (servers in India/US regions)
- Analytics: Self-hosted analytics — data does not leave our servers
- IP geolocation: Used to derive approximate city/country from your IP for analytics and security purposes; no precise location is stored
"Apply" links take you to the card issuer's own website, which is governed by their own privacy policy. We have no control over data collected there.
7. Contact & Grievance Officer
Grievance Officer: Devchandra Sah, CardAdvisor
Email: devchandra1987@gmail.com
Response time: within 48 hours on business days
This policy is governed by the laws of India, including the Digital Personal Data Protection Act 2023 and the Information Technology Act 2000.