Information we use
When you sign in, we use your Indian mobile number to send a one-time authentication code through WhatsApp. The lookup value stored in the database is protected with an app-keyed hash, while the recoverable number is encrypted and only its final four digits are displayed in the account. We store the time of verification and consent. We do not ask for or store your card number, CVV, PIN, UPI PIN, banking OTP, bank password, statement, email inbox or transaction login.
My Card Wallet stores only the public catalogue IDs of cards you choose, such as the product name and issuer. It does not store the physical card number, credit limit, balance or transactions. If you save a calculation, we store the calculator name, numerical inputs, displayed results, rule version and date. Avoid entering names, account numbers or other unnecessary personal details. Cardholder ratings store the scores and optional review text you submit. Reviews are moderated before they contribute to public community scores.
Points, referrals and redemptions
The rewards system records every point credit and debit, referral-code use, referral qualification and reward redemption. A referral shows the inviter only the new member’s masked final four digits and status. The reward operator can see the information required to moderate reviews and fulfil or cancel redemption orders. Referral activity never changes the mathematical value score of a credit card. Fraud controls may use account, request and activity records to detect copied reviews, self-referrals, automated activity or duplicate identities.
Why we use it
Account data is used to authenticate you, display your private history and wallet, prevent abuse and maintain the integrity of reviews and rewards. Saved calculation data is used to return the history you requested and may be analysed in aggregated, de-identified form to improve formulas and page usability. WhatsApp contact details are used for authentication messages; signing in does not give permission for promotional messaging.
Retention and control
You may remove individual wallet cards and saved calculations from your account. “Delete my account” removes the user record and cascades deletion to the wallet, saved calculations, reviews, point history and redemption records where database rules allow. Short-lived OTP challenges expire after ten minutes and are unusable after successful verification; operational logs and backups may remain for limited security and recovery periods. Published review content may be removed during moderation when it contains personal or unsafe information.
Service providers and security
Hosting, MySQL database, WhatsApp delivery and reward-fulfilment providers process only the information needed to operate their part of the service. Access should be limited through cPanel permissions and production secrets must stay in the server’s environment file. No internet service can guarantee absolute security; Accurate Paisa uses encryption, hashed OTPs, attempt limits, immutable point entries, database transactions, CSRF protection and authenticated ownership checks to reduce risk.
Questions
For privacy, account or data-removal questions, email info@accuratepaisa.com. This address is the official contact for accuratepaisa.com. India-specific legal review should confirm the final operator identity, postal address, consent wording, retention and grievance obligations before public launch.