Privacy Policy

What we collect

• Browsing without an account — the card pages, comparisons, and calculator work without signing up. We collect standard server logs (IP address, user agent, pages requested) for security and performance.
• Account data — if you create an account: email, phone number, and the cards you tell us you hold.
• Uploaded statements — if you use the optimizer, statement files are parsed in memory and never stored. We keep the transactions we extract, plus the file's name and a fingerprint (hash) used to prevent duplicate uploads, until you delete them or your account. This data is used only to compute your rewards and missed-reward insights.

What we don't do

• We do not sell your personal data to anyone.
• We do not share your statements or transactions with banks, lenders, or advertisers.
• We never ask for your card number, CVV, OTP, or net-banking credentials.

Where data lives

Data is stored with reputable cloud infrastructure providers, protected by encryption in transit and at rest and by access controls. A current list of sub-processors is available on request. We keep data only as long as your account exists or as required by law.

Your choices

You can permanently delete your entire account and all its data yourself, any time, from Settings → Danger zone — or by emailing support@vyaya.in. Deletion removes your personal data from our production systems; backups expire on a rolling schedule. We honour rights available under India's Digital Personal Data Protection Act, 2023.

Who we are & grievances

Vyaya is operated from India. For any question, complaint or grievance about your data — including access, correction and erasure under the Digital Personal Data Protection Act, 2023 — write to grievance@vyaya.in and we will respond within 7 days. Full legal entity details are being published here shortly.

Changes

If this policy changes materially, we'll update this page and the date above. Questions: support@vyaya.in.