Privacy policy

Privacy Policy Effective date: September 6, 2026 1. Who is responsible Card Turbo is responsible for personal information it handles to operate this website and its approval-reward and referral programs. For privacy questions, access or correction requests, deletion requests, or complaints, contact support@cardturbo.com and identify your request as a privacy matter. 2. Information we collect Account information: name, email address, account identifier, country market, role and registration date. For password accounts, the service stores a password hash rather than the plaintext password. If you choose Google sign-in, we receive your Google account identifier, name, email and email-verification status; we do not receive your Google password or request access to your Gmail messages or contacts. Optional profile information: street address, apartment or suite, city, province or state, postal or ZIP code, and address country, when you provide them. Program records: saved card comparisons, referral codes and attribution, referred-account relationships, card application tracking references, offer details, reward and commission records needed to calculate rewards, verification status, payout requests, delivery email, payout method, currency, transaction references and administrative audit records. Technical information: connection IP address, the country market recorded at signup, security and error information, and request information needed to operate and troubleshoot the service. The country recorded at signup is a market designation and is not proof of citizenship or exact physical residence. We do not request precise GPS location. Communications: information you send to support. Avoid sending full credit-card numbers, CVV/security codes, government identification numbers, banking passwords or other sensitive documents unless a secure, necessary collection process has been specifically arranged. 3. Location and browser storage Country subdomains such as ca.cardturbo.com and us.cardturbo.com determine the selected market. Where needed, our server uses the connection IP address with ipwho.is to estimate a country; that provider receives the IP address for the lookup. Unsupported or unavailable location results default to Canada. An address you save does not automatically change the account's payout market. We use session and authentication cookies, including temporary Google sign-in correlation cookies, to keep sign-in working and protect the process. A browser draft-preview cookie records your preview choices. Browser local or session storage can retain theme, country, saved comparisons, referral attribution, campaign labels and a return location while you sign in. Deleting cookies or browser storage may sign you out or remove unsaved preferences and tracking information. The browser preview preference expires after 12 hours; sign-in sessions generally last up to 12 hours and may renew with activity. 4. Why we use information We use information to create and secure accounts, authenticate users, show the appropriate market and currency, save comparisons, attribute applications and referrals, verify eligibility, calculate and deliver rewards, prevent duplicate payouts and abuse, provide support, resolve disputes and meet legal obligations. Optional addresses support account administration and any fulfillment process that requires them. We do not use a saved address as a credit application. We rely on your choices and consent where required, and on other lawful grounds where applicable to operating the requested service, security or legal compliance. You can decline Google sign-in and use a password account instead. You can leave the address blank. Withdrawing consent for information necessary to administer a reward may limit our ability to complete that service; we will explain relevant consequences when handling your request. 5. Who receives information Authorized administrators can access information needed to operate accounts, investigate issues and fulfill rewards. Hosting, infrastructure and service providers process information to support the website. Google receives information when you choose its sign-in service under Google's own policies. When you follow an application link, the issuer or affiliate partner receives the information you submit on its site and may receive a tracking identifier linking the application to Card Turbo. Partners may send us attribution, approval, verification and commission information. We do not receive the complete credit application merely because you follow our link, and we do not run a credit check ourselves. For payouts we share the amount, currency, destination and other necessary fulfillment details with the selected payment or gift-card provider. Depending on the method, this may involve PayPal, participating Interac institutions, Amazon or a provider of Visa gift cards. Provider terms and privacy practices apply to their processing. We may disclose information when legally required, to protect rights and security, or in connection with a business transfer subject to appropriate safeguards and applicable notice requirements. We do not sell personal information or currently run third-party behavioural advertising pixels on the site. If advertising or analytics practices change, we will update this notice and obtain consent or provide choices where required. Merely viewing a card does not make the issuer your account provider. 6. Referrals and privacy The service links a referral code to a referring account so that qualifying rewards can be calculated. A referrer may see your display name and signup date, aggregate referral counts and earned-reward activity, including the associated card offer and reward amount, but is not given your password, payout destination, address or signup IP through the member referral page. Do not publish other people's personal information when sharing links. 7. Storage, retention and safeguards Information may be stored or processed outside your province, state or country through hosting or service providers and may be subject to the laws and lawful access processes of those locations. We use controls such as encrypted HTTPS connections, password hashing, restricted administrative access and request protections. No service can guarantee absolute security. We retain account information while it is needed to provide the account and program, and retain relevant transaction, dispute, security and compliance records for as long as needed for those purposes or required by law. Retention depends on the record and outstanding obligations rather than one blanket period. Backups may retain previous records until their normal rotation; removal from active records may not immediately remove a backup copy. When information is no longer needed, it should be deleted or de-identified through the applicable retention process. 8. Your choices and rights You can update your address through My Account and manage available browser preferences. Contact support@cardturbo.com to request access to your information, correction of inaccurate records, account closure, deletion, or withdrawal of consent. Depending on applicable law, additional rights may apply. We may verify identity proportionately before responding, and we will explain any legal exception or necessary retention. Account closure does not automatically settle a pending reward or payout; tell us if your request involves an outstanding claim. You can disconnect Card Turbo through your Google account's third-party access settings. Disconnecting Google does not by itself delete the Card Turbo account or transaction history. You can also contact the relevant privacy or consumer regulator; contacting us first is not a condition of exercising a legal right. 9. Age and changes The service is intended for people of the age of majority who can apply for eligible financial products. It is not directed to children. If you believe a child has provided information, contact us so we can review and address it. We may update this policy as the service changes. The effective date identifies the current version. Material changes will receive appropriate notice and, where required, a new consent request before information is used for a new purpose.

When you create an account, we record your connection IP address and the country market where you registered for account security and program administration. This information is restricted to administrators.