Legal
Privacy Policy
Effective date: 26 May 2026
CreditGully (“we”, “our”, or “us”) operates creditgully.com, a credit card comparison and rewards intelligence platform. This Privacy Policy explains what information we collect, how we use it, and the choices you have. It applies to all visitors and users of our website.
By using CreditGully, you acknowledge that you have read and understood this policy. This policy is governed by the Digital Personal Data Protection Act, 2023 (DPDPA) of India and other applicable Indian law.
1. Information We Collect
Information you provide to us
We collect information you voluntarily give us, which currently includes:
- Email address — if you sign up for our newsletter waitlist or any future subscription product.
We do not collect your name, phone number, financial data, credit score, or any payment information. We never ask for, store, or transmit your credit card details.
Information collected automatically
When you visit our website, certain data is collected automatically through standard web technologies:
- Log data — IP address, browser type, operating system, referring URLs, pages visited, and timestamps. This is standard server log data retained by our infrastructure provider (Supabase).
- Usage data — pages you view, links you click, tools you use (e.g., CardFinder), and time spent on pages.
- Device data — screen resolution, device type, and browser capabilities, used to optimise how the site renders.
- Cookies and local storage — see Section 4 below.
Information from third parties
If you click an affiliate link to a card issuer's website (HDFC Bank, SBI, Axis Bank, etc.), that issuer may collect information from you directly under their own privacy policy. We do not receive personal data back from issuers as a result of you clicking a link.
2. How We Use Your Information
We use the information we collect to:
- Operate and improve the website, tools, and editorial content.
- Send you newsletters or product updates only if you have opted in by providing your email address.
- Understand how visitors discover and use CreditGully so we can improve our recommendations.
- Detect and prevent abuse, fraud, or security incidents.
- Comply with our legal obligations under Indian law.
We do not sell your personal information to any third party. We do not use your data to build advertising profiles or serve targeted ads.
3. Affiliate Links and Compensation
CreditGully publishes affiliate links to credit card application pages. When you click a link and are approved for a card, we may receive a referral fee from the issuing bank. This compensation does not influence our editorial ratings or recommendations — our analysis is independent.
Clicking an affiliate link does not share your personal data with us. You will be navigated to the issuer's website, where their own privacy policy applies.
4. Cookies
We use a small number of cookies and browser storage mechanisms:
- Essential cookies — required for the website to function (e.g., session tokens used by Supabase infrastructure).
- Preference storage — local storage may be used to remember tool state (e.g., your CardFinder quiz answers) within a session. This data stays on your device and is not sent to our servers.
We do not currently use advertising cookies, social media tracking pixels, or cross-site analytics cookies. If this changes, we will update this policy and, where required, seek your consent.
You can configure your browser to refuse cookies or alert you when cookies are being set. Note that disabling cookies may affect how parts of the site function.
5. Third-Party Services
We use the following third-party services to operate CreditGully:
- Supabase — our database and backend infrastructure. Supabase processes server log data in connection with operating our API. See supabase.com/privacy.
- Vercel — our hosting platform. Vercel processes request logs as part of serving the website. See vercel.com/legal/privacy-policy.
If we add analytics, email marketing, or other services in the future, we will update this section and this policy accordingly.
6. Data Retention
Server logs are retained for a rolling period of up to 90 days and then deleted. If you provide your email address for our newsletter, we retain it until you unsubscribe or request deletion. You can request deletion at any time by emailing us (see Section 9).
7. Your Rights Under the DPDPA 2023
Under India's Digital Personal Data Protection Act, 2023, you have the right to:
- Access — request a summary of what personal data we hold about you.
- Correction — request correction of inaccurate personal data.
- Erasure — request deletion of your personal data, subject to any legal retention obligations.
- Withdrawal of consent — withdraw consent to processing at any time (e.g., unsubscribe from emails). Withdrawal does not affect the lawfulness of processing before withdrawal.
- Grievance redressal — raise a complaint with us. If unresolved, you may approach the Data Protection Board of India once it is established.
To exercise any of these rights, contact us at the address in Section 9. We will respond within 30 days.
8. Children's Privacy
CreditGully is not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has submitted personal data to us, please contact us and we will delete it promptly.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically. Continued use of CreditGully after changes are posted constitutes your acceptance of the updated policy.
10. Contact Us
If you have questions about this policy or wish to exercise your data rights, you can reach us at: