Privacy Policy

1. Information We Collect & Privacy-First Engineering

CredSutra ek 100% static site generation (SSG) platform hai jisme runtime server database nahi hota. Hum strict privacy standards follow karte hain:

• Zero Personal Financial Data: Hum aapke credit card numbers, CVVs, passwords, OTPs, PAN numbers ya credit scores kabhi store ya collect nahi karte.
• No Account Required: Aap bina kisi signup ya profile banaye sabhi card reviews, reward yield calculators aur comparison matrices access kar sakte hain.
• Anonymized Telemetry: Performance optimize karne ke liye sirf anonymized browser traffic metrics track ki ja sakti hain.
• Direct Communication: Agar aap X par humse connect karte hain, toh query resolve hone ke baad safe compliance log maintain hoti hai.

2. Client-Side Local Storage & Cookies

Hum invasive tracking cookies use nahi karte. Browser ka standard local storage sirf client-side features ke liye use hota hai:

• Theme Preference (`cs_theme`): Aapka dark ya light mode choice save karta hai.
• Card Comparison Tray (`cs_compare_tray`): Selected cards ko compare tray me temporarily store karta hai.
• Spend Calculator Data (`cs_spend_calculator`): Calculations aapke device memory me execute hoti hain, server par nahi bheji jaati.

3. Data Principal Rights (Under DPDP Act 2023)

DPDP Act 2023 ke Sections 11, 12, aur 13 ke tehat aapke statutory rights:

• Right to Access (Section 11): Process hone wale personal data ka summary lene ka haq.
• Right to Correction & Erasure (Section 12): Galat data correct karane ya permanent delete karane ka haq.
• Right of Grievance Redressal (Section 13): Data processing grievances ko direct Grievance Officer ke samne raise karne ka haq.
• Right to Nominate (Section 14): Emergency me rights exercise karne ke liye kisi ko nominate karne ka haq.

4. Outbound Links & Official Bank Portals

CredSutra official bank portals ke links provide karta hai. Jab aap partner link par click karte hain:

• Aap direct licensed issuing institution (e.g. HDFC, SBI, ICICI, Axis, Amex) par safely redirect hote hain.
• Application me enter kiya gaya data strictly unhi banks ki privacy policy aur RBI regulations dwara govern hota hai.
• CredSutra third-party bank sites par enter kiya gaya data na access karta hai na intercept karta hai.

5. Data Security Standards

Site ka sabhi web traffic TLS 1.3 / 256-bit SSL encrypted hai. Serverless architecture ki wajah se traditional database breach risks eliminate ho jate hain.