Privacy Policy

The Card Company ("TCC") is committed to protecting your privacy. This Privacy Policy describes how we collect, use, store, and share your personal information when you use the TCC app and related services.

By using TCC, you consent to the collection and use of your information as described in this policy. If you do not agree with any part of this policy, please discontinue use of the TCC app.

Personal Information: We collect information you provide directly, including your name, mobile number, email address, date of birth, government-issued identity documents (such as PAN and Aadhaar), and financial details required for KYC compliance.

Non-Personal Information: We may collect device information, IP addresses, browser type, operating system, usage patterns, and other technical data that does not directly identify you. This data helps us improve the performance and security of the platform.

Transaction Data: We collect records of all transactions performed through the TCC app, including amounts, timestamps, merchant details, and payment methods.

We use your personal information to: create and manage your TCC account; process payments and transactions; comply with KYC, AML, and other regulatory obligations; personalise your app experience; communicate service updates, offers, and notifications; and prevent fraud and ensure platform security.

We do not sell or rent your personal information to third parties for their marketing purposes without your explicit consent.

Your data is stored on secure servers located in India. We retain your personal information for as long as your account is active or as required by applicable law and regulatory obligations.

All data transmission is encrypted using industry-standard protocols. We implement appropriate technical and organisational measures to safeguard your information against unauthorised access, disclosure, alteration, or destruction.

We may share your information with: regulated financial institutions and payment networks (such as RBI-regulated entities, NPCI, and card networks) as required for transaction processing; KYC and identity verification partners; fraud detection and risk management partners; and government or regulatory authorities as required by law.

Any third party with whom we share data is bound by confidentiality obligations and is permitted to use your data only for the specific purpose for which it was shared.

TCC employs industry-standard security measures including encryption, secure servers, firewalls, and access controls to protect your personal information.

While we strive to protect your data, no method of electronic transmission or storage is 100% secure. You are responsible for maintaining the confidentiality of your account credentials.

You may request deletion of your TCC account and associated personal data by writing to care@thecardcompany.in. Account deletion requests will be processed within 90 days, subject to any pending transactions, regulatory obligations, or legal holds.

Note that certain information may be retained even after account deletion as required by applicable law, including RBI guidelines on record keeping.

The TCC app may contain links to third-party websites or services. This Privacy Policy does not apply to those third-party services. We encourage you to review the privacy policies of any third-party platforms you visit.

We may update this Privacy Policy from time to time. Changes will be posted within the app or on our website, and your continued use of TCC after such changes constitutes your acceptance of the updated policy.

If you have any concerns or complaints regarding the processing of your personal data, you may contact our Grievance Officer:

Name: Garima Agarwal Email: nodal@thecardcompany.in

We will endeavour to address your concern within the timelines specified under applicable law.