Privacy Policy

1. Information We Collect & Privacy-First Architecture

CredSutra is architected as a 100% static site generation (SSG) platform without runtime databases. We enforce strict data minimization:

• Zero Personal Financial Data Collection: We never ask for, collect, process, or store credit card numbers, CVVs, net banking credentials, OTPs, PAN numbers, or credit scores.
• No User Account Requirements: You can access all card reviews, reward yield calculators, comparison matrices, and devaluation timelines without creating an account or providing identifying credentials.
• Anonymized Telemetry: Aggregate, anonymized traffic logs (browser type, device viewport, referrer, pages visited) may be processed solely to optimize platform performance and cache distribution.
• Communications Data: If you contact us via email, we process your email address and message solely to respond to your inquiry and maintain compliance logs.

2. Client-Side Storage & Cookie Transparency

We do not deploy invasive cross-site tracking cookies or advertising fingerprinting scripts. We utilize standard browser local storage strictly for client-side user experience:

• Theme Preference (`cs_theme`): Stores your preferred visual mode (dark / light).
• Card Comparison Tray (`cs_compare_tray`): Retains temporary card selections during active comparison workflows.
• Spend Calculator State (`cs_spend_calculator`): Computes reward simulations locally within your device memory without transmitting values to external servers.

3. Data Principal Rights (Under DPDP Act, 2023)

In compliance with Sections 11, 12, and 13 of the Digital Personal Data Protection Act, 2023, you have the following statutory rights regarding any personal data you voluntarily provide (such as communication emails):

• Right to Access Information (Section 11): You have the right to obtain confirmation of whether your data is being processed and a summary of such data.
• Right to Correction & Erasure (Section 12): You may request the correction of inaccurate personal data or the permanent erasure of communication logs.
• Right of Grievance Redressal (Section 13): You may register grievances regarding data processing directly with our designated Grievance Officer.
• Right to Nominate (Section 14): You have the right to nominate an individual who shall exercise your rights in the event of death or incapacity.

4. Outbound Links & RBI Regulated Financial Portals

CredSutra provides outbound links to official bank portals and issuing financial institutions. When you click an application or partner link:

• You are securely redirected to the licensed issuing institution (e.g. HDFC Bank, SBI Card, ICICI Bank, Axis Bank, American Express).
• Any sensitive personal or financial information submitted during the application process is governed exclusively by that institution's privacy policy and the Reserve Bank of India (RBI) regulatory framework.
• CredSutra has no access to and never intercepts information entered on third-party banking domains.

5. Data Security Standards

All traffic between your browser and CredSutra is encrypted using industry-standard TLS 1.3 / 256-bit SSL encryption. Our static serverless infrastructure eliminates common server-side database vulnerabilities and unauthorized data access vectors.