Last updated: 2026-05-23
Privacy Policy
Rudraayaan AI Technologies Private Limited ("Card9", "we", "us") operates the Card9 platform. This Privacy Policy describes the personal data we collect, how we use it, who we share it with, and your rights under the Digital Personal Data Protection Act, 2023 ("DPDP Act") and applicable Indian law.
1. Data we collect
- Seller (shop owner) data: name, mobile number, optional email and Gmail account, shop name and subdomain, optional UPI / PhonePe handle, optional GST number, and business address.
- Buyer data: mobile number (verified via OTP), optional name, email, and delivery address.
- Operational data: orders, enquiries, and messages routed through the platform; IP address; basic device fingerprint for fraud / rate-limit purposes.
- Cookies: a signed session cookie at
.card9.inand optional analytics cookies. No third-party advertising cookies. See our Cookie & Tracking Policy.
2. How we use it
- Operate the shop / buyer accounts and route orders to the seller.
- Send transactional SMS, email, and WhatsApp messages required by the order.
- Detect and prevent abuse, fraud, and spam.
- Improve the platform via aggregate, non-identifying analytics.
We do not sell your personal data to third parties.
3. Sharing & sub-processors
We share data only with the sub-processors we need to operate the platform: Supabase (database + auth), Twilio (OTP SMS), Resend (transactional email), Hostinger/AWS (infrastructure), and Google (OAuth login, where opted-in). When a buyer messages a seller on WhatsApp, the buyer's WhatsApp number is shared with that specific seller by the buyer's own action.
4. Your rights under DPDP Act 2023
You have the right to: access your personal data, correct or update inaccurate data, request erasure of your data, withdraw consent, and lodge a grievance. Email any such request to support@card9.in. We will respond within the statutory timeline.
5. Grievance Officer
In accordance with the DPDP Act 2023 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, our designated Grievance Officer is:
- Name: Padma
- Email: support@card9.in
- Address: H No. 14/964/64/A/1, Krishna Nagar Colony, Ameenpur, Ramachandrapuram, Medak, Telangana 502032, India
6. Retention
Account and transaction records are retained for as long as the account is active, plus the periods required by Indian tax and consumer-protection law. Erasure requests are honored subject to these legal retention requirements.
7. Changes to this policy
Material changes will be notified by email or by an in-product banner. The "Last updated" date at the top of this page reflects the most recent revision.