Privacy Policy

1. What Information Do We Collect?

In short: We collect information you provide directly and information needed to operate and protect the platform.

Personal information may include your name, phone number, email address, username, password or authentication information, country, account profile details, gift card submission details, transaction records, payout instructions, messages with support, and any documents or images you choose to submit for verification.

Application and device data may include device model, operating system, browser type, IP address, app version, language, network information, device identifiers, crash logs, pages or features used, approximate location derived from IP address, and push notification preferences.

All information you provide should be accurate and kept up to date. If you choose to enable app permissions or notifications, you can usually change those choices in your device settings.

2. How Do We Process Your Information?

We process information to create and authenticate accounts, maintain user profiles, calculate quotes, verify card submissions, complete transactions and payouts, prevent fraud, respond to support requests, send service messages, improve website and app performance, maintain records, enforce our terms, and comply with applicable law.

We may also use aggregated or anonymized information for analytics, product improvement, rate optimization, and security monitoring.

3. What Legal Bases Do We Rely On?

Where privacy law requires a legal basis, we rely on one or more of the following: your consent, performance of a contract with you, legitimate business interests, legal obligations, protection of rights and safety, and prevention of fraud or misuse.

If we rely on consent, you may withdraw that consent at any time. Withdrawal does not affect processing already completed before the withdrawal.

4. When and With Whom Do We Share Personal Information?

We may share information only when needed to operate CardDoneX or meet legal requirements. Recipients may include hosting and cloud providers, payment or payout processors, fraud prevention and verification providers, analytics and support tools, professional advisers, regulators, courts, law enforcement, or a successor in connection with a merger, acquisition, financing, restructuring, or sale of assets.

We do not sell your personal information. Third parties that process data for us are expected to handle it according to our instructions and appropriate confidentiality and security requirements.

5. How Do We Handle Social Logins?

If CardDoneX offers sign-in through a third-party account, we may receive profile information from that provider, such as your name, email address, profile image, or other information you permit. We use that information only for account access, authentication, and service purposes.

6. How Long Do We Keep Your Information?

We keep personal information only as long as needed for the purposes described in this notice, including while your account is active, while transactions or disputes are open, and as required for tax, accounting, anti-fraud, security, recordkeeping, or legal obligations.

When information is no longer needed, we delete it, anonymize it, or securely isolate it until deletion is possible.

7. How Do We Keep Your Information Safe?

We use reasonable technical and organizational safeguards designed to protect information against unauthorized access, loss, misuse, alteration, or disclosure. These safeguards may include access controls, encryption in transit, monitoring, secure hosting, and operational security procedures.

No internet or storage system can be guaranteed to be completely secure. You should use CardDoneX only through secure networks and keep your login credentials confidential.

8. Do We Collect Information From Minors?

CardDoneX is not intended for children under 18. We do not knowingly collect personal information from or market to minors. If we learn that we collected information from a minor, we will take reasonable steps to deactivate the account and delete the information where required.

9. What Are Your Privacy Rights?

Depending on where you live, you may have rights to access, correct, update, delete, restrict, object to, or receive a copy of certain personal information. You may also have the right to withdraw consent or complain to a data protection authority.

You can review or update account information through your account settings. To make a privacy request, contact support. We may need to verify your identity before fulfilling a request.

10. Controls for Do-Not-Track Features

Some browsers and mobile systems offer Do-Not-Track signals. Because there is no uniform legal or technical standard for responding to these signals, CardDoneX does not currently respond to them. If a standard is adopted, we will update this notice as appropriate.

11. Do United States Residents Have Specific Privacy Rights?

Certain U.S. state privacy laws may provide rights to know whether we process your personal information, access it, correct inaccuracies, delete it, obtain a copy, opt out of certain processing, and avoid discrimination for exercising privacy rights.

We do not sell personal information. If you submit a request through an authorized agent, we may require proof that the agent is allowed to act on your behalf.

12. Do Other Regions Have Specific Privacy Rights?

Users in the EEA, UK, Switzerland, Canada, South Africa, Nigeria, and other regions may have additional rights under local law, including access, correction, deletion, objection, portability, restriction, or complaint rights. We will review requests according to applicable law.

13. Do We Make Updates to This Notice?

Yes. We may update this Privacy Policy when our services, practices, or legal obligations change. The latest version will be identified by the "Last updated" date. Material changes may be posted on the website or communicated through the app.

14. How Can You Contact Us About This Notice?

If you have questions or comments about this Privacy Policy, contact CARDDONEX DIGITAL PRODUCT LTD at [email protected].

15. How Can You Review, Update, or Delete Your Data?

You may review or update your account information by logging in at app.carddonex.com. To request access, correction, deletion, or withdrawal of consent, contact support. We may keep certain records when required for security, fraud prevention, legal compliance, accounting, dispute handling, or enforcement of our terms.