Privacy Policy

1. Who We Are

ReachOutOwner ("OffCardoo," "we," "us") operates the OffCardoo application and website. This policy sets out what personal data we collect, why we collect it, and what rights you have over it under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and other applicable Indian law.

2. What We Collect

• Account details: name, email, and password (stored hashed), plus your Google account identifier if you sign in with Google.
• Card details: only the name/type of each card you add. We never collect card numbers, CVVs, expiry dates, or OTPs.
• Usage data: the merchant categories you search, used to power recommendations.
• Payment data: Pro/Premium subscriptions are billed via Razorpay. We receive confirmation of payment and plan status only — Razorpay handles your card/UPI details directly under its own PCI-DSS compliant systems.
• Friends & Family data: if you connect with another user, we store that connection and which cards' offers you've chosen to share with them.

3. Why We Use It

Strictly to run your account, power recommendations, process payments, and enable Friends & Family sharing you opt into. We do not sell personal data to third parties.

4. Consent

Creating an account means you consent to this policy. You can withdraw consent at any time by deleting your account (Section 7) — withdrawing consent may mean we can no longer provide the service to you, as the DPDP Act contemplates.

5. How Long We Keep It

We keep your account data while your account is active. If you delete your account, personal data is erased within 7 working days, except records we're legally required to keep for tax/audit purposes for 5 years."]

6. Where Your Data Goes

Infrastructure providers — hosting, the Google Sheets/Cloud database behind our card-offer catalog, and Razorpay for payments — donot process data outside India.

7. Your Rights

Under the DPDP Act, you can:

• Access the personal data we hold about you
• Correct or update inaccurate data
• Erase your data by deleting your account
• Withdraw consent at any time
• Nominate someone to act on your behalf if you die or become incapacitated
• Raise a grievance with our Grievance Officer below, and escalate to the Data Protection Board of India if unresolved

8. Data Breaches

If a breach affects your personal data, we'll notify you and the Data Protection Board of India as the DPDP Act requires.

9. Grievance Officer

Shubham Bihani · HR Manager
Email: offcardoo@gmail.com
Address: 21 Malpani House, Kissan Marg, Tonk Road, Jaipur, Rajasthan. Pin 302015.