1. Introduction

CardMax (“we”, “our”, or “us”) is an AI-powered credit card advisory platform designed for Indian consumers. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

2. Information We Collect

Information you provide directly:

• Account information (email address) when you sign up
• Credit card preferences and selections you make on the platform
• Messages you send to our AI chatbot

Information collected automatically:

• Browser type, device information, and operating system
• Pages visited, time spent, and navigation patterns
• IP address and approximate location (country/city level)
• Cookies and similar tracking technologies

3. How We Use Your Information

• To provide and improve our credit card comparison and recommendation services
• To personalize your experience (e.g., remembering your card selections)
• To respond to your AI chatbot queries with relevant card information
• To analyze usage patterns and improve our platform
• To communicate important updates about our service

4. Data Storage & Security

Your data is stored securely using industry-standard practices. We use the following third-party services to operate our platform:

• Supabase — Database hosting and user authentication
• Google Gemini API — AI chatbot responses and embeddings
• Vercel — Website hosting and deployment

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction. However, no method of electronic transmission or storage is 100% secure.

5. Cookies

We use essential cookies to maintain your session and preferences. We may also use analytics cookies to understand how visitors interact with our platform. You can control cookie preferences through your browser settings.

6. Third-Party Links

Our platform contains links to bank websites and card application pages. These third-party sites have their own privacy policies, and we are not responsible for their content or practices. We encourage you to review the privacy policy of any external site you visit.

7. Your Rights

Under applicable Indian data protection laws (IT Act 2000, DPDP Act 2023), you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and associated data
• Withdraw consent for data processing at any time

To exercise any of these rights, please contact us at the email address provided below.

8. Data Retention

We retain your personal data only for as long as necessary to provide our services or as required by law. Chat history and session data are retained for up to 90 days. Account data is retained until you request deletion.

9. Children's Privacy

CardMax is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from minors.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated “Last updated” date. Continued use of our platform after changes constitutes acceptance of the revised policy.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your data, please reach out:

Email: support@cardmax.in