Privacy Policy

This Privacy Policy describes how CreditPoints ("we," "us," or "our") collects, uses, and shares information about you when you use our website at creditpoints.cash (the "Site"). By using the Site, you agree to the practices described here.

For information about how we earn through affiliate programs, see our Affiliate Disclosure.

1. Information We Collect

Information you provide

• Account information — email address and password when you create an account.
• Profile data — spending estimates, travel goals, card preferences, and household size that you enter during onboarding. This data is stored locally and, if you're signed in, synced to your account.
• Communications — any messages or feedback you send us directly.

Information collected automatically

• Usage data — pages visited, features used, time on site, and navigation paths.
• Device data — browser type, operating system, screen resolution, and IP address.
• Cookies — see Section 4 below.
• Referral data — the URL that referred you to our site, including affiliate tracking parameters.

2. How We Use Your Information

• Provide and improve our tools, content, and recommendations.
• Sync your wallet, preferences, and benefit tracking across devices.
• Personalize editorial content and card suggestions based on your profile.
• Communicate with you about service updates, new features, and editorial content (you can unsubscribe at any time).
• Monitor and improve performance, security, and reliability of the Site.
• Comply with legal obligations and prevent fraud or abuse.

We do not sell your personal data to third parties.

3. How We Share Your Information

We share information only in the following limited circumstances:

• Service providers — companies that help us operate the Site (hosting on Vercel, authentication via Supabase, analytics). These providers are contractually restricted from using your data for their own purposes.
• Affiliate networks — when you click an affiliate link, the network's tracking technology records the click. We do not share your name or email with affiliate networks. See our Affiliate Disclosure for details.
• Legal compliance — if required by law, subpoena, or to protect the rights, property, or safety of CreditPoints or others.
• Business transfers — in the event of a merger, acquisition, or sale of assets, your data may be transferred as part of that transaction.

4. Cookies

We use the following types of cookies:

• Essential — required for authentication and basic Site functionality (e.g., staying logged in).
• Analytics — help us understand how visitors use the Site (e.g., which pages are most visited). We use anonymized, aggregate data only.
• Affiliate tracking — placed by our affiliate network partners when you click a product link. These cookies track whether you completed an application so we can receive commission credit. They do not contain personally identifiable information.

You can control cookies via your browser settings. Disabling cookies may impair some Site features (e.g., persistent login).

5. Data Retention

We retain account data for as long as your account is active or as needed to provide our services. After deletion, residual copies may remain in backups for up to 30 days. Analytics data is retained in aggregate, anonymized form.

6. Your Rights

Depending on your location, you may have the following rights:

• Access — request a copy of the personal data we hold about you.
• Correction — request that we correct inaccurate data.
• Deletion — request that we delete your data ("right to be forgotten").
• Opt out — unsubscribe from marketing emails at any time via the link in any email we send.
• California (CCPA) — you have the right to know what personal information is collected, the right to delete it, and the right to opt out of its "sale." We do not sell personal information.

To exercise any of these rights, email us at hello@creditpoints.cash.

7. Security

We use industry-standard safeguards (HTTPS, encrypted storage, access controls). No system is perfectly secure, however — we cannot guarantee absolute protection against unauthorized access.

8. Children's Privacy

The Site is not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it promptly.

9. Links to Third-Party Sites

The Site contains links to third-party websites, including credit card issuer sites. This Privacy Policy applies only to CreditPoints. We are not responsible for the privacy practices of external sites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the revised policy on this page with an updated "Last updated" date. Continued use of the Site after changes constitutes acceptance of the revised policy.

11. Contact

Questions or concerns about this Privacy Policy? Email us at hello@creditpoints.cash.