Privacy Policy

1 · Effective Date

This Privacy Policy is effective as of June 8, 2026. It explains how autocard (“autocard,” “we,” “us,” or “our”) collects, uses, shares, and protects your information when you use the autocard mobile app, website, and related services (together, the “Service”). By creating an account or using the Service, you agree to the practices described in this policy.

2 · Information We Collect

We collect the following types of information to power your recommendations and rewards analytics:

• Account information — the details you provide when you sign up, such as your name, email address, phone number, and the credentials used to log in to autocard.
• Transaction history — purchase dates, amounts, merchants, and categories from the financial accounts you choose to link, retrieved on a read-only basis through Plaid.
• Credit card account information — the cards you hold or add, including issuer, product type, reward structure, the last four digits, and available balance or limit details where provided by your institution.
• Rewards and spending information — points and cash back you've earned, spending broken down by category, and the reward preferences or goals you set in the app.
• Device and usage information — your device type, operating system, app version, IP address, identifiers, log data, and how you interact with the Service.

We do not collect or store your bank login credentials. See the next section for how account connections work.

3 · Financial Account Connections Through Plaid

autocard uses Plaid Technologies, Inc. (“Plaid”) to connect to your financial accounts. When you link an account, you authorize autocard and Plaid to access selected account and transaction information from the financial institution you choose.

You enter your bank login details directly with Plaid — never with autocard. autocard does not receive, see, or store your bank login credentials. Access is read-only, which means autocard and Plaid cannot move money or make transactions on your accounts.

Plaid collects and handles your information under its own privacy policy. We encourage you to review it here: Plaid Privacy Policy.

4 · How We Use Information

We use the information we collect solely to:

• recommend the best credit card for each purchase and situation;
• optimize your rewards and surface points you may be leaving behind;
• provide spending analytics and insights;
• operate, maintain, and improve the Service;
• provide customer support and respond to your requests.

We do not use your financial data for advertising, and we do not sell it.

5 · Data Sharing and Disclosure

We do not sell your personal information. We share information only with the service providers who help us run autocard, and only as needed to provide the Service:

• Plaid — to connect and refresh your linked financial accounts.
• Cloud hosting providers — to securely store and process data.
• Analytics providers — to understand and improve how the Service is used.
• Customer support providers — to help us respond to your questions.

These providers are bound by contracts that limit their use of your information to providing services to us. We may also disclose information when required by law, to comply with legal process, or to protect the rights, safety, and security of our users or the Service. If autocard is ever involved in a merger, acquisition, or sale of assets, we will notify you before your information becomes subject to a different privacy policy.

6 · Data Retention

We keep your information only as long as we need it to provide the Service and for the purposes described in this policy. Linked account and transaction data is retained while your account is active so we can deliver recommendations and analytics.

If you disconnect a financial account, we stop retrieving new data from it and delete or de-identify the associated transaction data within 30 days. When you delete your account, we delete your personal information within 30 days. In both cases, we may retain limited records where necessary to meet legal, accounting, or security obligations.

7 · Data Security

We protect your information using industry-standard safeguards, including encryption of data in transit and at rest, strict access controls, network protections, and regular security reviews. Access to personal and financial data is limited to authorized personnel who need it to operate the Service. While no method of transmission or storage is ever completely secure, we work continuously to protect your information and to detect and respond to potential threats.

8 · User Rights and Choices

You have control over your information. Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct information that is inaccurate;
• request a copy of your data in a portable format;
• delete your information;
• object to or restrict certain processing.

You can exercise these rights from within the app or by emailing us at hello@autocard.dev. We will not discriminate against you for exercising your privacy rights.

9 · Disconnecting Linked Accounts

You can disconnect any linked financial account at any time. In the app, open Settings, select the connected account, and choose Disconnect. Disconnecting revokes autocard's and Plaid's access to that account going forward.

You can also revoke access directly through Plaid at my.plaid.com. After you disconnect, we stop retrieving new data and handle previously collected data as described in Data Retention.

10 · Data Deletion Requests

You can request deletion of your personal information at any time. To delete your account and associated data, use the Delete Account option in the app's settings, or email us at hello@autocard.dev. Once we verify your request, we will delete your personal information within 30 days, except for limited records we are required to keep for legal, accounting, or security purposes. Deleting your account also disconnects all linked financial accounts.

11 · Children's Privacy

autocard is not intended for anyone under the age of 18, and we do not knowingly collect personal information from children. If we learn that we have collected information from a child under 18, we will delete it promptly. If you believe a child has provided us with personal information, please contact us at hello@autocard.dev.

12 · Changes to this Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you through the app or by email before the changes take effect, and we will update the Effective Date at the top of this policy. Your continued use of the Service after an update means you accept the revised policy.

13 · Contact Information

If you have questions, concerns, or requests about this Privacy Policy or your information, please reach out:

• autocard Privacy Team
• Email: hello@autocard.dev

We aim to respond to all privacy inquiries within 30 days. For general questions, email us at hello@autocard.dev.