Privacy Policy

1. Information We Collect

1.1 Personal Information

When you create an account or sign up for our services, we collect:

• Full name and email address
• Billing address and payment information
• Account credentials (username and encrypted password)
• Phone number for SMS alert delivery

1.2 Financial Information

To provide card protection services, we collect and monitor:

• Credit and debit card numbers you choose to monitor
• Transaction data including merchant names, amounts, dates, and locations
• Bank account information linked to monitored cards
• Credit report data from authorized credit bureaus

1.3 Technical Information

Our systems automatically collect:

• Device information (type, operating system, browser)
• IP address and general location data
• Log data including access times and pages viewed
• Cookies and similar tracking technologies (see our Cookies Policy)

2. How We Use Your Information

We use collected information exclusively for the following purposes:

• Monitoring card transactions for fraudulent activity
• Sending real-time fraud alerts via email and SMS
• Generating fraud risk reports and account summaries
• Providing customer support and responding to inquiries
• Improving our fraud detection algorithms and services
• Complying with legal obligations and preventing illegal activity
• Processing billing and managing subscriptions

We do not use your information for targeted advertising, marketing analytics, or any purpose unrelated to card protection services.

3. Information Sharing and Disclosure

3.1 Service Providers

We share limited information with trusted third-party service providers who assist in delivering our services:

• Cloud hosting providers for secure data storage
• Payment processors for subscription billing
• SMS delivery services for transaction alerts
• Credit bureaus for identity verification and credit monitoring

These providers are contractually obligated to use your information only for the specific services they provide and must maintain equivalent security standards.

3.2 Legal Requirements

We may disclose your information if required by law, court order, or government regulation, or if we believe disclosure is necessary to:

• Comply with legal process or law enforcement requests
• Protect our rights, property, or safety
• Prevent fraud or security threats
• Enforce our Terms of Use

3.3 What We Never Do

We explicitly do not:

• Sell your personal or financial information to any third party
• Share transaction data with advertisers or marketing companies
• Use your information to build advertising profiles
• Provide your data to data brokers or aggregators

4. Data Security

We implement industry-standard security measures to protect your information:

• AES-256 encryption for all data in transit and at rest
• Multi-factor authentication for account access
• Regular security audits by independent third-party firms
• SOC 2 Type II compliance certification
• Strict access controls limiting employee access to sensitive data
• Continuous monitoring for security breaches or unauthorized access

While we employ robust security measures, no system is completely secure. We cannot guarantee absolute security but commit to immediately notifying affected users in the event of any data breach.

5. Data Retention

We retain your information for as long as your account remains active and for a reasonable period thereafter to comply with legal obligations and resolve disputes.

• Transaction monitoring data: Retained for 7 years per financial regulations
• Account information: Retained until account deletion plus 90 days
• Communication records: Retained for 3 years
• Fraud incident reports: Retained for 10 years

You may request deletion of your account and associated data at any time by contacting us at [email protected]. Some information may be retained in encrypted backups for up to 90 days after deletion.

6. Your Rights

Under Australian privacy law and the Australian Privacy Principles (APPs), you have the following rights:

• Access: Request copies of all personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your account and associated data
• Data Portability: Request a machine-readable export of your data
• Opt-Out: Unsubscribe from marketing communications (fraud alerts cannot be opted out while service is active)
• Complaint: Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

To exercise any of these rights, contact us at [email protected]. We will respond to all requests within 30 days.

7. International Data Transfers

Your information is primarily stored on servers located in Australia. Some service providers may process data in other countries with adequate data protection laws. All international transfers comply with Australian privacy law requirements and include appropriate safeguards.

8. Children's Privacy

Our services are not intended for individuals under 18 years of age. We do not knowingly collect personal information from minors. If we discover we have inadvertently collected such information, we will delete it immediately.

9. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Material changes will be communicated via email to all active account holders at least 30 days before taking effect. Continued use of our services after changes become effective constitutes acceptance of the revised policy.

10. Contact Information

For questions, concerns, or requests related to this Privacy Policy or our data practices, contact us at:

Email: [email protected]
Address: Level 12, 234 Collins Street, Melbourne VIC 3000, Australia