Privacy Policy
This policy describes what the Cardly Finance website ("Cardly") collect, why, and how it is handled.
What we collect
- Email address. You sign in with an email. It identifies your account and separates your cards and treasury from other users. It is stored on your device and sent with every request to our server.
- Payment data. When you pay for a card, we record the on-chain transaction hash, token, amount, and the USD value at the time. Blockchain transactions are public by nature.
- Card data. Virtual cards are issued through our card-issuing partner. Full card numbers, expiry dates and CVVs are fetched from the partner only when you tap "Reveal" and are never stored by Cardly.
- Technical data. Our hosting provider logs standard request metadata such as IP address and user agent for security and reliability.
What we do not collect
- No passwords, no wallet private keys or seed phrases. Payments are signed inside your own wallet app.
- No contacts, location, photos, or device identifiers.
- No advertising or third-party analytics SDKs.
How data is used
Solely to operate the service: verify your deposit on Solana, issue and manage your virtual card, and show your balance, cards and transactions to you.
Sharing
Your email (as an account identifier) is shared with our card-issuing partner to create and look up your cards. Live asset prices are fetched from DexScreener without sending any personal data. We do not sell or rent personal data.
Retention and deletion
Account records are retained while your account is active. To delete your account and associated data, message us on X from the account linked to your sign-in email. Blockchain records cannot be deleted.
Security
All traffic uses HTTPS. Card-issuer credentials live only on our server and are never exposed to the app. Signing out removes your email from the device.
Children
Cardly is not directed at people under 18.
Changes
We will update this page when the policy changes and revise the effective date above.