Privacy Policy

When you ask us to find cards, we may collect your name, mobile number, PAN, consent choices and the offer you select. We also receive the referring page, requested page, timestamps, referrer and campaign parameters such as UTM source, medium, campaign, content and term.

For abuse prevention, we create a one-way keyed hash of your IP address for short-lived rate limiting. We do not store the raw IP address in the waitlist record. Do not share Aadhaar numbers, bank passwords, card PINs, CVVs, one-time passwords or payment credentials with us.

We use the details you submit to verify contact information, match and present relevant card offers, send updates you consent to receive, prevent misuse and improve the service.

Your PAN is encrypted before it is stored. It is used only for the verification purpose explained when we collect it. We retain a timestamped record of your consent and signup context.

We may use contracted providers for database hosting, infrastructure, security, verification, communications and advertising measurement (Meta, as described below). They may process information only to provide those services, subject to applicable contracts and law.

YourFirstCard currently operates an early-access journey. When applications open, a bank or card platform will collect application and KYC information under its own privacy notice.

Essential browser and hosting technologies are used to deliver pages, maintain security and operate requested features.

We use the Meta Pixel and Meta Conversions API to measure our advertising and to show our ads to people who have visited YourFirstCard. The pixel sets a cookie in your browser and tells Meta about pages you view and actions you take here, such as viewing or comparing cards, watching our film, talking to Arya, joining the waitlist or clicking Apply. When you join the waitlist or share your number with Arya, our server also tells Meta, sending your mobile number only in hashed (scrambled) form along with your IP address and browser details. We never send your name or PAN to Meta. Meta processes this information under its own terms and privacy policy.

You can block or clear cookies in your browser settings, manage ads in your Meta account under Ad preferences, or email us to stop our server sharing your hashed number with Meta.

We keep submitted details only for as long as reasonably necessary to provide the requested service, honour preferences, meet legal obligations, handle disputes and protect the service.

We use reasonable safeguards, including access controls and encryption of PAN at rest. No online service can promise absolute security.

Subject to applicable law, you may ask for access, correction or erasure, withdraw consent, raise a grievance and nominate another person to exercise rights where permitted.

Email privacy@spense.tech. We may need to verify your identity before acting on a request.

YourFirstCard is intended for people aged 18 or older. We do not knowingly offer the card-discovery journey to children.

We may update this policy when the service, providers or legal requirements change. The latest update date appears at the top of this page.