Privacy Policy

Last updated: 7/14/2026

1. Introduction

Welcome to Cardifier. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website and use our service.

2. Information We Collect

We may collect personal data that you provide to us directly, such as your email address, account details, and financial preferences to provide our cashback optimization services. We also automatically collect certain usage data when you interact with our platform.

3. Third-Party Data Usage and Sale

To provide our core services, we share necessary data with service providers. In addition, we may aggregate, anonymize, and sell certain non-identifiable usage data to third-party analytics services and research firms. Specifically:

  • Data Sale for Analytics: We may sell aggregated behavioral and usage patterns to third parties to help them conduct market research. We ensure this data is anonymized so it cannot be linked back to you personally.
  • Google Analytics: We use Google Analytics to understand how visitors engage with our platform, which helps us improve our user experience.
  • Service Providers: We share necessary operational data with secure vendors and hosting partners who assist us in operating our platform.

We ensure that all third parties are contractually obligated to protect your data in accordance with applicable data protection laws.

4. Legal Basis for Processing (GDPR)

If you are a resident of the European Economic Area (EEA), our legal basis for collecting and using your personal data depends on the data we collect and the context in which we collect it. We process data when:

  • We need to perform a contract with you.
  • You have given us explicit, freely given consent to do so (specifically required before we sell or share any of your data for third-party analytics).
  • The processing is in our legitimate interests and not overridden by your rights.
  • We need to comply with the law.

5. Vietnam Data Protection Compliance

In accordance with the Law on Personal Data Protection 2025 (Law No. 91/2025/QH15) and Decree No. 356/2025/NĐ-CP of Vietnam:

  • We strictly adhere to the principles of lawful, fair, and transparent data processing.
  • We will never sell or share your personal data without obtaining your prior, explicit, and verifiable consent.
  • Any cross-border data transfer complies with the requirements set forth in the Decree, ensuring adequate safeguards are in place.
  • We respect your right to consent, be informed, access, delete, and restrict the processing of your personal data as defined under Vietnamese law.

6. Your Data Rights & "Do Not Sell" (CCPA)

Depending on your location (including under GDPR, Vietnam PDP laws, and the California Consumer Privacy Act), you may have the following rights regarding your personal data:

  • Right to Opt-Out ("Do Not Sell My Personal Information"): You have the absolute right to direct us not to sell or share your personal information at any time.
  • Right to Withdraw Consent: You can withdraw your consent for data processing or sale at any time without penalty.
  • The right to access, update, or delete the information we have on you.
  • The right of rectification, restriction, and data portability.

7. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

legal@cardifier.cloud