Privacy Policy

CardReview.org · Last updated: May 13, 2026

Introduction

CardReview.org ("CardReview," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains what information we collect, how we use it, and what rights you have regarding your personal information.

We built CardReview specifically to help people review their credit card statements with confidence. We understand that you are sharing sensitive financial documents with us, and we take that responsibility seriously. We will never sell your data, and we delete your uploaded statements as soon as your review is complete.

Please read this policy carefully. By using CardReview.org, you agree to the practices described here.

1. Information We Collect

Information You Provide

Account information: When you create an account, we collect your name, email address, and password (stored in encrypted form). If you sign in with Google, we receive your name and email address from Google.

Credit card statements: When you upload a statement for review, we temporarily process the contents of that document. This may include transaction details such as merchant names, dates, and charge amounts. We do not collect your full credit card number, bank account number, Social Security number, or any other sensitive financial identifiers beyond what appears in the statement you choose to upload.

Onboarding responses: We collect your answers to our brief onboarding quiz, which may include how you receive your statements and your general familiarity with reviewing charges. This information is used to personalize your experience.

Communications: If you contact us by email or through our contact form, we keep a record of that communication.

Information We Collect Automatically

Usage data: We collect basic information about how you use the site, including pages visited, features used, and actions taken. This helps us improve the product.

Device information: We collect basic technical information such as your browser type, operating system, and general location (city or region level only, not your precise address).

Cookies: We use cookies to keep you signed in and to remember your preferences. We do not use advertising cookies or third-party tracking cookies.

2. How We Use Your Information

We use your information to:

• Provide the CardReview service — analyzing your statement and returning results to you
• Send you your monthly statement review reminder email (if you have an active subscription)
• Send you a copy of your review results by email
• Maintain your account and review history
• Improve and develop the CardReview product
• Respond to your questions and support requests
• Comply with legal obligations

We do not use your information to:

• Sell or rent your data to any third party
• Show you advertising of any kind
• Share your financial information with any third party except as described in Section 4

3. How We Store and Protect Your Information

Statement deletion: Your uploaded credit card statement — whether a PDF or photo — is permanently deleted from our servers as soon as your AI review is complete. We do not store the original document after processing.

What we do retain: After deleting your original statement, we store the results of your review — including the list of flagged charges, your acknowledgments, and your review status for each month. This is necessary to power your streak calendar and review history.

Encryption: All data transmitted between your browser and our servers is encrypted using HTTPS. Sensitive data stored in our database is encrypted at rest.

Access controls: Your data is accessible only to you and, if you have enabled it, any trusted family member you have explicitly invited to view your dashboard. Our staff access to user data is strictly limited and logged.

Third-party infrastructure: We store data using Supabase, a secure cloud database provider. Payments are processed by Stripe. Both providers maintain their own security certifications and privacy practices.

4. Information Sharing

We do not sell your personal information. We do not share your financial data with advertisers, data brokers, or marketing companies.

We may share limited information only in these circumstances:

Service providers: We work with a small number of trusted technology providers (including Supabase for database hosting and Stripe for payment processing) who help us operate the service. These providers are contractually required to protect your data and may only use it to provide services to CardReview.

Legal requirements: We may disclose your information if required to do so by law, court order, or valid legal process, or if we believe disclosure is necessary to protect the rights, property, or safety of CardReview, our users, or the public.

Business transfers: In the event that CardReview is acquired or merged with another company, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

5. Family Member Access

If you choose to invite a trusted family member to view your dashboard, they will have read-only access to your review history and streak calendar. They cannot upload statements, make changes to your account, or take any actions on your behalf. You can remove their access at any time from your account settings.

6. Your Rights and Choices

You have the following rights regarding your personal information:

Access: You can view your account information and review history at any time by logging into your account.

Correction: You can update your name and email address in your account settings.

Deletion: You can request deletion of your account and all associated data at any time by contacting us at privacy@cardreview.org. We will delete your account and all stored review data within 30 days of your request.

Email preferences: You can turn off monthly reminder emails at any time in your account settings under Notifications.

California residents: If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to delete your personal information, and the right to opt out of the sale of your personal information (we do not sell personal information). To exercise these rights, contact us at privacy@cardreview.org.

7. Children's Privacy

CardReview is designed for adults and is not intended for use by anyone under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@cardreview.org.

8. Data Retention

We retain your account information and review history for as long as your account is active. If you cancel your subscription, your account and data remain accessible unless you explicitly request deletion.

Original uploaded documents (PDFs and photos) are deleted immediately after processing and are never retained.

9. Third-Party Links

Our website may contain links to third-party websites, such as your bank's dispute page. We are not responsible for the privacy practices of those websites. We encourage you to read their privacy policies before providing any information to them.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date at the top of this page and, if the changes are significant, notify you by email. Your continued use of CardReview after any changes constitutes your acceptance of the updated policy.

11. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:

Email: hello@cardreview.org
Website: cardreview.org/contact

We will respond to all privacy-related inquiries within 5 business days.

CardReview.org is committed to protecting your financial privacy. If something in this policy is unclear, please reach out — we're happy to explain anything in plain English.