Privacy Policy
Effective 22 May 2026
The Card IQ Audit — a personalised credit-card audit service — is co-prepared by Himank Kansal (CardExpress, @cardexpress.in) and Himanshu Agarwal (All Things Credit Card, @allthingscreditcard). “The hosts”, “we” and “us” in this policy refer to both, jointly.
What we collect
Your name, email and phone number when you book the audit. The names of the credit cards you hold when you complete the post-registration cards form (card brand and product only — never card numbers, CVVs, expiry dates or bank credentials). Standard server logs (IP address, user agent, timestamps) for security and rate-limiting.
What we never collect
Card numbers, CVVs, expiry dates, OTPs, net-banking passwords, UPI PINs, or any other payment credential. Our payment processor handles the transaction end-to-end — those details never touch the hosts’ servers. The hosts do not operate any digital wallet and do not store user funds.
How we use it
To prepare and deliver your personalised credit-card audit (worked on jointly by both hosts). To send you the access link for the free Card IQ Quiz bonus event on 16 June 2026 via WhatsApp and email. To send transactional and audit-related communications. To aggregate anonymised statistics about audience preferences. The hosts do not sell your data to any third party.
Who we share it with
Razorpay (payments), Resend (transactional email), Firebase (encrypted storage), and analytics providers configured in our stack. Each processor is contractually bound to handle data only on the hosts’ instructions and only for the purposes above.
How long we keep it
Registration and audit data are retained for two years after your audit is delivered, after which they are deleted or anonymised. You may request earlier deletion at any time by writing to either host on Instagram (handles below).
Your rights
You can request a copy of the personal data we hold on you, ask us to correct or erase it, or withdraw any consent you have given, by DMing either host on Instagram — @cardexpress.in or @allthingscreditcard.
Cookies
We use a small number of cookies for session continuity and to measure how visitors find and use the site. No third-party advertising cookies. You can clear or block cookies in your browser settings; the registration flow does not depend on them.
Security
All traffic is served over HTTPS. Payment is processed via PCI-DSS compliant Razorpay infrastructure. Data at rest is encrypted by the hosts’ cloud providers. The hosts follow least-privilege access and two-factor authentication for all admin accounts.
Contact
Questions or concerns? Reach out to either host on Instagram — @cardexpress.in (Himank) or @allthingscreditcard (Himanshu). DMs are open.