Privacy Policy

Introduction

Welcome to CardCycle. We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our credit card management application at cardcycle.app.

Information We Collect

Financial Data

Through our secure integration with Plaid, we access your credit card account information including:

• Credit card account details (balances, limits, due dates)
• Transaction history and spending patterns
• Billing cycle information
• APR and interest rate information
• Payment history and minimum payment amounts

Account Information

• Email address (for account creation and authentication)
• Name (if provided during signup)
• Authentication tokens and session data

Usage Data

• App usage patterns and feature interactions
• Device information and browser type
• IP addresses and general location data

How We Use Your Information

We use your information to:

• Provide credit card management and tracking services
• Display your account balances, due dates, and spending analytics
• Calculate APR costs and payment projections
• Sync and update your financial data in real-time
• Ensure account security and prevent unauthorized access
• Improve our services and user experience
• Send important account notifications and updates

Data Security

We take your financial security seriously and implement multiple layers of protection:

• Plaid Integration: Your banking credentials never touch our servers. We use Plaid's secure, bank-grade infrastructure
• Encryption: All data is encrypted in transit using TLS/SSL and at rest using industry-standard encryption
• Access Controls: Strict access controls ensure only authorized personnel can access systems
• Regular Audits: We conduct regular security audits and vulnerability assessments
• Data Minimization: We only collect and store data necessary for our services

Third-Party Services

Plaid

We use Plaid to securely connect to your financial institutions. Plaid's privacy policy governs their collection and use of your financial data. You can review Plaid's privacy policy at plaid.com/legal/privacy/.

Supabase

We use Supabase for secure data storage and authentication. Your data is stored in compliance with industry security standards and data protection regulations.

Stripe

We use Stripe to process CardCycle subscription payments. Stripe receives the billing information needed to charge your plan. CardCycle does not store the full card number you use to pay for the product. Stripe's privacy policy governs their processing of payment data.

Google

If you sign in with Google, Google authenticates you and may share your name and email address with CardCycle so we can create and maintain your account.

Data Sharing and Disclosure

We do not sell, rent, or trade your personal or financial information to third parties. We may share your information only in the following limited circumstances:

• With your explicit consent
• To comply with legal obligations or court orders
• To protect our rights, privacy, safety, or property
• In connection with a business transfer or merger (with prior notice)
• With trusted service providers under strict confidentiality agreements

Your Rights

You have the following rights regarding your data:

• Access: Request access to your personal data
• Correction: Request correction of inaccurate data
• Deletion: Request deletion of your data (subject to legal requirements)
• Portability: Request a copy of your data in a portable format
• Restriction: Request restriction of processing under certain circumstances
• Withdrawal: Withdraw consent for data processing at any time

Data Retention

We retain your data only as long as necessary to provide our services or as required by law. When you delete your account, we will delete your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes.

Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal information from children under 18. If we become aware that we have collected such information, we will take steps to delete it promptly.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this Privacy Policy periodically.

Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us at: