Data Retention Policy

Last Updated: February 3, 2025

Compliant with DPDP Act 2023, India

Key Principle:

We retain personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, and resolve disputes. After the retention period, all data is permanently deleted.

1. Data Retention Periods

Data Type	Retention Period	Reason
Contact Form Submissions	90 days after resolution	Customer support and follow-up
Newsletter Subscriptions	Until unsubscribe	Ongoing communication
Referral Program Data	2 years after last activity	Reward processing and verification
Website Analytics	26 months (anonymized)	Usage analysis and improvement
Server Logs	30 days	Security and troubleshooting
Cookie Data	13 months maximum	User preferences and analytics
Email Communications	1 year	Record keeping and support
Complaint Records	3 years	Legal compliance and resolution

2. Data We Do NOT Retain

We explicitly do NOT collect or retain:

Banking or credit card information
PAN card or Aadhaar numbers
Financial account details
Credit scores or reports
Income or salary information
Any sensitive personal data

Reason: We are a comparison platform only. All applications are completed on official bank websites.

3. Automatic Data Deletion

We have implemented automated systems to ensure data is deleted after retention periods:

Daily Cleanup: Expired server logs deleted automatically
Monthly Review: Contact form data older than 90 days deleted
Quarterly Audit: Inactive referral data reviewed and deleted
Annual Purge: Complete review of all stored data

4. User-Requested Deletion

You can request immediate deletion of your data at any time:

Email: privacy@cardearnconnect.com
Subject: "Data Deletion Request"
Response Time: Within 30 days

We will confirm deletion via email once completed.

5. Exceptions to Deletion

We may retain data beyond standard periods only when:

Required by law or regulation
Needed for ongoing legal proceedings
Necessary to prevent fraud or abuse
Required for tax or accounting purposes

In such cases, data is securely archived and access is strictly limited.

6. Backup and Archive Deletion

When data is deleted:

Removed from active databases immediately
Removed from backup systems within 90 days
Removed from archived logs within 180 days
Permanent deletion with no recovery possible

7. Third-Party Data

For data processed by third parties (e.g., Google Analytics):

We use anonymized data only
Data is automatically deleted per their retention policies
We do not have access to identifiable user data

8. Compliance and Audits

We conduct regular audits to ensure compliance:

Monthly: Review of retention practices
Quarterly: Data inventory and cleanup
Annually: Full compliance audit

9. Contact Us

For questions about data retention:

Email: privacy@cardearnconnect.com
Data Protection Officer: dpo@cardearnconnect.com

← Back to Home