This policy explains what data Card Jaano collects when you visit this site, why we collect it, who else sees it, and what you can make us do about it.
We’ve written it in plain English rather than legal boilerplate. Where a term is unavoidable, it’s explained the first time it appears.
In one line: we don’t sell your data, we don’t ask you to register, and the only personal information most readers ever give us is an email address because you chose to send one.
1. Who we are
Card Jaano (“we”, “us”) publishes credit card research at cardjaano.com.
Under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Digital Personal Data Protection Rules, 2025 notified on 13 November 2025 we are the Data Fiduciary for personal data collected through this site. That means we decide why and how it’s processed, and we’re accountable for it.
Contact: connect@cardjaano.com Address: Bhopal, Madhya Pradesh, 462026, India
2. What this policy covers
This policy applies to cardjaano.com only.
It does not apply to bank and issuer websites we link to, to affiliate application pages, or to YouTube, Instagram, and other platforms where we post. Once you click through to an issuer’s application form, you’re on their site under their privacy policy, and any data you enter there income, PAN, Aadhaar, address goes to them, not to us. We never see it.
3. What we collect
3.1 Information you give us
| What | When | Why |
|---|---|---|
| Your email address, name, and message | You email connect@cardjaano.com | To reply to you |
| Your email address | You subscribe to updates, if we run a list | To send what you asked for |
| Comment name, email, and text | You comment on an article, if comments are enabled | To publish and moderate the comment |
That’s it. We never ask for and never want your card number, CVV, PIN, OTP, bank passwords, PAN, Aadhaar number, salary slips, or account statements. If a page or email claiming to be Card Jaano asks you for these, it isn’t us report it to connect@cardjaano.com.
3.2 Information collected automatically
Like almost every website, our hosting and analytics tools record technical data when you visit:
- IP address (often truncated or anonymised before we see it)
- Browser type, operating system, and device type
- Approximate location, usually to city level, derived from IP
- Pages you viewed, time on page, and the link or search that brought you
- Date and time of the visit
We use this in aggregate which articles are read, which are ignored, whether the site works on your phone. We do not use it to identify you personally, and we don’t try to.
3.3 What we don’t collect
We don’t run credit checks, we don’t access your credit report or CIBIL score, we don’t process applications, and we hold no financial account data about you whatsoever. We are a publisher, not a lender, broker, or issuer.
4. Cookies and third-party services
Cookies are small files a site stores in your browser. Some are needed for the site to function; others track behaviour for analytics or advertising.
We use, or may use, the following third parties. Each has its own privacy policy, and each may set its own cookies:
| Service | What it does | Their policy |
|---|---|---|
| Google Analytics | Aggregate traffic statistics | policies.google.com/privacy |
| Google AdSense | Serves display ads, may personalise them | policies.google.com/technologies/ads |
| Hostinger | Serves the site, keeps security logs | https://www.hostinger.com/legal/cookie-policy |
| Affiliate networks | Track whether an application came from our link | See section 5 |
[ACTION NEEDED: delete any of the above you don’t actually use, and add any you do a policy listing services you don’t run is as inaccurate as one omitting services you do.]
Controlling cookies. You can block or delete cookies in your browser settings at any time; the site will still work, though some features may not. You can also opt out of personalised Google ads at google.com/settings/ads, and turn off Google Analytics across all sites with Google’s browser add-on.
Where required, we show a consent banner before non-essential cookies are set, and you can withdraw that consent as easily as you gave it.
5. Affiliate links
Some links on this site are affiliate links. When you click one, the affiliate network or issuer may set a cookie to record that the click came from Card Jaano, so that if you go on to apply, we’re credited with a commission.
What that cookie carries is a referral identifier and a timestamp not your name, your application details, or anything you enter on the bank’s form. The issuer tells us that an application happened, not who made it or what was in it.
You pay nothing extra either way, and the card’s terms are identical whether you apply through our link or directly.
6. Why we process your data, and on what basis
Under the DPDP Act we process personal data on the basis of your consent, or for legitimate uses the Act permits. Specifically:
| Purpose | Basis |
|---|---|
| Replying to an email you sent | Your consent you contacted us voluntarily |
| Sending a newsletter | Your consent, given at signup, withdrawable anytime |
| Publishing your comment | Your consent |
| Analytics and site improvement | Your consent via the cookie banner |
| Advertising | Your consent via the cookie banner |
| Security logs, fraud prevention, legal compliance | Legitimate use / legal obligation |
We do not use your data for automated decision-making or profiling that produces any legal or similarly significant effect on you.
7. Who we share it with
We do not sell your personal data. We do not rent it, and we don’t trade email lists.
We share data only with:
- Service providers who run parts of the site for us, such as hosting, analytics, email delivery, and only as far as they need it to do that job.
- Law enforcement or courts, where we’re legally required to disclose.
- A successor, if the site is ever sold or transferred, in which case this policy follows the data or you’ll be notified of the change.
8. Where your data goes
Some of our service providers, including Google, process data on servers outside India. The DPDP Rules permit transfer of personal data outside India except to countries or territories the Central Government has specifically restricted by notification, and we comply with any such restrictions in force.
9. How long we keep it
| Data | Retention |
|---|---|
| Emails you send us | Up to 3 years, then deleted |
| Newsletter subscription | Until you unsubscribe, plus 30 days |
| Comments | While the article is published, or until you ask for removal |
| Analytics data | Per the provider’s default, typically 14 months |
| Security and server logs | Up to 12 months |
We erase personal data when the purpose it was collected for is served, unless a law requires us to keep it longer.
10. Security
We use HTTPS across the site, keep our platform and plugins updated, restrict access to the inbox and site admin to authorised people, and use strong authentication on those accounts.
No website can promise perfect security, and we won’t pretend otherwise. What we can tell you is that the worst case here is limited by design: we hold no card numbers, no bank credentials, and no financial account data, because we never collect them.
If a breach affecting your personal data occurs, we will notify you and the Data Protection Board of India as the DPDP Rules require, including a plain-language description of what happened, what data was involved, and what you should do.
11. Your rights
Under the DPDP Act, if we hold personal data about you, you can:
- Access it: ask what we hold and what we’ve done with it.
- Correct it: have inaccurate or incomplete data fixed, updated, or completed.
- Erase it: have it deleted, unless a law requires us to retain it.
- Withdraw consent at any time, as easily as you gave it. Withdrawal doesn’t undo processing that already happened lawfully.
- Nominate someone to appoint another person to exercise these rights on your behalf in the event of your death or incapacity.
- Complain to us first, and to the Data Protection Board of India if we don’t resolve it.
To exercise any of these, email connect@cardjaano.com with the subject line “Data Request”. We’ll respond within 30 days. We may need to confirm your identity first for an email-based request; that usually just means replying from the address the data is attached to.
There’s no fee for this.
12. Grievance redressal
If you’re unhappy with how we’ve handled your data or your request:
Grievance Officer: Amit Kumar Bansal Email: connect@cardjaano.com Address: Bhopal, Madhya Pradesh, 462026, India
Write with “Grievance” in the subject line. We’ll acknowledge within 48 hours and resolve within 30 days.
If you’re still not satisfied, you can complain to the Data Protection Board of India, which has been operational since November 2025 and can be approached directly by data principals.
13. Children
This site is intended for adults. Credit cards in India are not issued to anyone under 18, and nothing here is directed at children.
Under the DPDP Act, anyone under 18 is a child, and processing a child’s personal data requires verifiable consent from a parent or lawful guardian. We do not knowingly collect personal data from anyone under 18. If you believe a child has sent us personal data, email connect@cardjaano.com and we will delete it.
We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.
14. Links to other sites
We link to issuer websites, MITC documents, RBI circulars, and other sources. Once you leave cardjaano.com, this policy stops applying and theirs starts. We don’t control what they collect and aren’t responsible for their practices but we do recommend reading a bank’s privacy policy before handing over your PAN and income details on an application form.
15. Changes to this policy
We’ll update this page when our practices or the law changes, and the “Last updated” date at the top will change with it. For anything material a new category of data, a new purpose, a new recipient we’ll flag it prominently rather than editing quietly.
16. Contact
Questions about this policy, or about anything we hold on you:
Card Jaano is a publisher of general information about credit cards. We are not a bank, NBFC, card issuer, or financial adviser, and nothing on this site is personalised financial advice.