CardMintra Privacy Policy

Date – 30/11/2025

(CardMintra Fintech Services Pvt. Ltd.)

CardMintra.com (“Website”) and the CardMintra mobile application (collectively, “Platform”) are operated by CardMintra Fintech Services Pvt. Ltd. (“CardMintra”, “we”, “us”, “our”). We understand the importance of your privacy and are committed to maintaining the confidentiality, integrity, and security of your personal information.

This Privacy Policy explains how CardMintra collects, uses, stores, shares, and protects your information when you visit or use our Platform.
By accessing or using our services, you agree to follow the terms outlined in this Privacy Policy.

This Policy does not apply to companies that CardMintra does not own or control, or to people CardMintra does not employ or manage.

This Privacy Policy is prepared in accordance with applicable Indian laws, associated regulations, RBI Digital Lending Guidelines (dated 2nd September 2022), and any other applicable regulatory guidelines.

Storage of Personal Information

CardMintra, along with its parent company, representatives, affiliates, and business partners, stores and processes your data on servers located within India, in compliance with RBI Digital Lending guidelines.

We only collect customer data with your explicit consent and strictly on a need-basis.

What Personal Information We Collect

We may collect information that you voluntarily submit on our Platform, including:

First name, last name
Gender
Income details
Email address
Mobile number
Date of birth
PAN
Employment information
City, state, and other location details
Any data required by our partner Banks/NBFCs to process your application

You may choose not to provide certain information, but this may restrict your ability to use some features.

Device Permissions (Mobile App)

With your explicit consent, CardMintra may request one-time access to:

Camera
Microphone
Location
Any other facility required for onboarding by CardMintra or its Partners

We do not collect or store biometric data unless permitted under statutory guidelines.

Usage & Purpose of Collecting Personal Information

CardMintra collects information when:

You register on CardMintra
You apply for a product or service
You visit our pages
You participate in promotions

Upon registration or use, you are not anonymous to us.

By registering on CardMintra, you give consent to CardMintra, our partner Banks/NBFCs, and advertisers to:

Contact you via call/SMS/email/WhatsApp
Show you banner/video/text ads on third-party sites
Communicate product information and promotional offers

This applies even if you are registered under DND/DNC, for 365 days from registration or last login.

CardMintra does not sell products directly; we only help you compare and apply for products offered by partner Banks/NBFCs. Product approval is solely at the discretion of the respective partner institution.

CardMintra will always disclose why consent is required at each stage.

We will never access your files, photos, media, contact list, call logs, or telephony functions without explicit permission.

Restriction on Use or Sharing of Personal Information

We use your information to:

Provide and improve our services
Personalize your Platform experience
Conduct analytics and measure usage
Prevent fraud and unauthorized activity
Resolve issues and troubleshoot
Meet legal and regulatory requirements
Enforce our terms and conditions

Revocation of Consent

You may withdraw your consent anytime by writing to:

📩 info@cardmintra.com

If consent is withdrawn, CardMintra may stop providing services requiring that information.

Data may still be retained where required:

For servicing your product
As mandated by law
As required for investigations or compliance

Disclosure to Third Parties

CardMintra does not sell or rent your personal information.

However, your data may be shared with:

Employees and authorized personnel
Partner Banks/NBFCs
Credit Information Companies (CICs)
Verified service providers
Affiliates and successors in case of merger, acquisition, or restructuring

All third parties are required to maintain confidentiality and follow data-protection standards.

Data Retention

We retain information as long as necessary:

To provide services
To comply with legal obligations
To support partner servicing requirements

Basic identification details may be retained permanently.

All other data is securely destroyed once retention periods expire.

Log Files & Analytics

CardMintra uses log files that may collect:

IP address
Browser type
ISP
Referring/exit pages
Device type
Date/time
Clickstream data

This is used only to improve services, analytics, and website performance.

Data Security

CardMintra employs multiple layers of:

Electronic
Physical
Procedural
Technical safeguards

We follow industry-standard practices for data security.

However, no transmission over the internet is 100% risk-free. Users are responsible for keeping their login credentials secure.

In case of a security breach, stakeholders and authorities will be notified as required by law.

Exclusions of Liability

CardMintra is not responsible for:

Errors, inaccuracies, or omissions in data
Third-party data or offers displayed on the Platform
Losses due to inability to access the Platform
Losses caused by events beyond our control
Decisions taken based on third-party advertisements or content

CardMintra does not guarantee approvals or verify every third-party provider. Users must independently verify all terms, documents, and service provider details.

Third-Party Advertisements & Services

CardMintra displays advertisements from independent third-party partners.
We do not guarantee:

Their services
Their legitimacy
Their delivery commitments

Users must verify:

Contact details
Documents
Written commitments
Terms and conditions

CardMintra will not mediate disputes between users and advertisers.

Android App Permissions (If Applicable)

SMS Permission

Collects only transactional SMS (no OTP/personal messages) to assess:

Income stability
Spending patterns
Credit risk profile

Installed Apps

Used for fraud detection and risk profiling (e.g., VPN, gaming apps).

Location

Used once to verify address and prevent fraud.
Not collected in the background.

Device Info

Hardware/OS details used to prevent fraud.
IMEI/serial numbers are not collected.

Privacy Policy Changes

CardMintra may update this policy from time to time. Changes will be posted on this page.

Grievance Redressal Officer

CardMintra Fintech Services Pvt. Ltd.
📍 Address: (Add your official company address here)
📞 Phone: +91-__________
📩 Email: info@cardmintra.com

Customer Support

Working Hours: Monday to Friday, 10:00 AM – 6:00 PM
Email: info@cardmintra.com