Legal

Privacy Policy

Last updated: 21 July 2026

Draft for review: this is placeholder content and requires final review by qualified legal counsel before public launch.

1. Introduction

This Privacy Policy explains how BharatCard collects, uses, stores, and protects your personal information when you use our virtual card and virtual number services.

2. Information We Collect

Account information: your name, email address, and a securely hashed password. We never store passwords in plain text.

Transaction information: wallet balance, deposits, purchases, and an auditable record of every balance change.

Verification information: email verification status; where required by regulation, identity (KYC) information you submit.

Technical information: device and log data such as IP address and browser type, used for security and abuse prevention.

3. How We Use Your Information

To provide the service: creating your account, operating your wallet, issuing cards, and delivering virtual numbers.

To secure the platform: verifying your email, preventing fraud and abuse, and enforcing rate limits.

To communicate with you: verification codes, service notifications, and support responses.

4. What We Never Do

We never sell your personal data. We never store plain-text passwords or verification codes — only cryptographic hashes. Your data is not shared with the services you verify against using virtual numbers.

5. Data Storage & Security

Account data is stored in a managed database with access restricted to the application. Passwords and verification codes are stored as salted scrypt hashes; sessions use signed HTTP-only cookies; every user can access only their own records.

6. Data Retention

We retain account and transaction records for as long as your account is active and as required for legal, accounting, and anti-fraud purposes. You may request deletion of your account via Support, subject to those obligations.

7. Cookies

We use strictly necessary cookies for authentication (signed, HTTP-only session cookies). We do not use third-party advertising cookies.

8. Your Rights

Depending on your jurisdiction, you may have rights to access, correct, export, or delete your personal data, and to object to certain processing. Contact Support to exercise these rights.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the platform before they take effect.

10. Contact

For privacy questions or requests, contact us via the Support page.