Pre-launch policy draft. The commercial refund window and final launch review are pending. These pages are available for local review; live checkout remains disabled.
Information you provide
Account data includes your name, email, optional phone and a securely hashed password when you set one. If you choose Google sign-in, we receive your basic name, email and verification status and store a private Google account identifier to recognize your sign-in. We do not receive your Google password or store Google access or refresh tokens for sign-in. Kit data includes the profile, social/work links, thumbnails, descriptions, contact details and performance counts you submit. Optional phone and sign-in email are not automatically published on your kit. Guest drafts are stored on our server and associated with an essential browser session cookie.
Private account activity
We store successful sign-in timestamps, a total login count and a login event history for account operations, security and internal usage analysis. These fields are not displayed in public kits or public account responses. Security rate-limit records help reduce repeated abusive requests. We do not record plaintext passwords in login history.
How the information is used
We use information to save drafts, render kits and previews, verify accounts, recover passwords, manage purchases, produce PDFs and operate the service. We use essential session and security cookies for authentication, ownership and request protection. The current local prototype does not run an advertising tracker. Any later optional analytics or marketing features need a separate review and appropriate notices.
What becomes public
Publishing makes the chosen kit content available at your username URL. Brand contact email is public only when you add it to the kit and publish. Social/work links lead to third-party websites. Public kits and downloaded PDFs may be copied by their recipients; unpublishing cannot remove copies outside our control.
Service providers
Dodo Payments processes checkout and subscription payments; CoolCards.in stores purchase references and status rather than raw card details. Where enabled, OpenAI receives the editing prompt and the limited editable copy/design context needed for a suggestion. Account passwords, billing secrets and private contact details are excluded from that kit-edit context. Our email provider handles verification and recovery delivery. Cloudflare Turnstile processes information needed for human verification when configured. These providers have their own privacy terms and may process data in other countries.
Social connections and metrics
A pasted profile URL is not an authorized social connection. Future official connections will require the relevant platform authorization and permissions. Only eligible data should be fetched or published. Creator-entered counts remain labeled as creator-provided. You can request disconnection and required data deletion; provider permissions and retention rules must be respected.
Retention and protection
We retain data while needed to operate your account and meet security, payment, dispute and applicable record-keeping obligations. Recovery tokens expire after 30 minutes and are stored as hashes. Access to private records is restricted; production encryption, backup retention and provider arrangements require launch review. Local development email previews and database backups are private and are not public documents.
Your choices and requests
You can edit your profile and kit, choose whether to publish, and unpublish a hosted kit. Contact support to request access, correction, deletion or account closure, or to raise a privacy concern. Some records may need to be retained for legal or payment obligations. Requesting deletion does not recall PDFs already shared with others. Do not send full card details or passwords to support.
Policy status and contact
CoolCards.in is a product by PS TECH GLOBAL. Send privacy and account-data requests to support@coolcards.in. This pre-launch policy requires final retention and production-processing review before the service opens publicly.