Privacy Policy

This Privacy Policy describes how Finverse Technologies Private Limited (Finverse) collects, uses, and shares information on the Cardverse platform.

Privacy Policy for Cardverse (Finverse Technologies Pvt. Ltd.)

Effective Date: November 1, 2025

Finverse Technologies Private Limited ("Finverse", "we", "us", or "our") operates the Cardverse platform (available via cardverse.finverse.club and our mobile applications). This Privacy Policy explains how we collect, use, and share your personal information when you use the Cardverse mobile-first platform and the choices you have in relation to that data.

1. Information We Collect

Personal and Identification Details

When you register or use Cardverse, we may collect name, email address, mobile number, password, date of birth, gender, government IDs (PAN, Aadhaar, passport, driving license), nominee information, and other identification details. Sensitive personal data is collected only with your explicit consent.

Financial and Transaction Information

To enable financial features, we may collect billing address, bank account details, payment instrument details, income, expenses, transaction history and other payment-related information. We may request authorizations or standing instructions where necessary to process payments for services.

Service SMS & Emails

With your consent, Cardverse may access or read transactional/service SMS and service-related emails (for example, payment confirmations or OTPs). We do not access or read your personal, non-service SMS or emails.

Non-Personal and Usage Data

We automatically collect device information, IP address, browser/OS, requested URLs, aggregated usage statistics and other non-identifying data. We use cookies and similar technologies to analyze traffic, remember preferences and improve the Platform. Cookies alone do not collect personal data, but may be linked to personal information if you have provided it.

Location Information

As a mobile-first platform, Cardverse may collect device location (GPS, network-based) and device identifiers to provide location-based features. You can disable location services on your device, but some features may be impacted.

User Communications

Communications you send to us (feedback, chat messages, support requests, or content posted on the platform) are collected and retained to help us resolve disputes, provide support and improve services.

2. How We Use Your Information

We use collected data to provide, operate, and improve Cardverse, deliver requested services, communicate with you, personalize your experience, prevent fraud and comply with legal obligations. We only use personal data for the purposes communicated at the time of collection or with your consent.

3. Sharing of Information

We do not sell or trade your personal information. We may share data with:

  • Finverse affiliates and subsidiaries to provide and improve services.
  • Service providers and partners (payment processors, analytics, hosting) who process data on our behalf under contractual confidentiality obligations.
  • Legal or regulatory authorities when required by law, court order or to protect rights and safety.
  • In connection with mergers, acquisitions, or business transfers, subject to appropriate safeguards.

You explicitly consent to Finverse accessing and processing promotional SMS data (not personal SMS) for service-related profile verification and to share such data with banks or authorized service providers when necessary to deliver services.

4. Data Retention

We retain personal data only as long as necessary to fulfill the purposes of collection, comply with legal obligations, resolve disputes, and enforce our agreements. We periodically review retention and delete or anonymize data that is no longer required. Exceptions apply where legal or legitimate business reasons require retention.

5. Third-Party Sites and Cookies

Cardverse may link to third-party websites and services (for example, payment gateways). Those third parties have their own privacy practices, and we encourage you to review them. Third-party advertisers may use non-personal information (cookies, device IDs) to show relevant ads; they do not receive your name or contact details from us for such purposes.

6. Security of Your Information

We implement reasonable technical and organizational measures (such as HTTPS/SSL, access controls and monitoring) to protect personal data. While we strive to protect your information, no system is 100% secure. You are responsible for keeping your account credentials and devices secure.

7. Your Rights

You may exercise rights including access, correction, erasure, objection, portability and withdrawal of consent in accordance with applicable law. To exercise these rights, contact us using the details below.

8. Consent and Changes to This Policy

By using Cardverse, you acknowledge this Privacy Policy and consent to our data practices where required by law. We may update this Policy from time to time; material changes will be communicated to you.

9. Contact Us and Grievance Officer

For questions, requests or grievances, contact our Grievance Officer at: support@finverse.club

10. DPDP ACT, 2023 COMPLIANT

Finverse Technologies Pvt Ltd respects your privacy and processes personal data in accordance with the Digital Personal Data Protection Act, 2023.

Data Collected:

  • Name, mobile number, and email address.
  • Card-related metadata required for service facilitation.
  • Transaction references for compliance processing.
  • Device and usage data.

Purpose of Processing:

  • To provide compliance and claim assistance services.
  • To send alerts and service updates.
  • To meet legal and regulatory obligations.

Data Sharing & Security:

Data may be shared with insurers and service providers strictly for fulfilling requested services. Finverse does not sell personal data and uses industry-standard security measures.

User Rights:

  • Right to access personal data.
  • Right to correction and erasure.
  • Right to grievance redressal.
  • Right to nominate.

11. Governing Law & Jurisdiction

This Privacy Policy is governed by the laws of India and any disputes will be subject to the exclusive jurisdiction of the courts in Mumbai, India.

This Privacy Policy is prepared to reflect Cardverse’s mobile-first product model and Finverse Technologies Private Limited’s data practices.