Privacy Policy

Cardly ("we," "our," or "us") operates the website at cardlyfinance.com (the "Site"). This Privacy Policy describes what information we collect, how we use it, and the choices you have. We aim to keep this short and in plain English. If anything is unclear, please contact us using the email on our Contact page.

We collect a limited amount of information, in the following categories:

• Information you provide directly. When you use the AI Selector, the answers you submit (spending, goals, fee tolerance, etc.) are sent to our servers and forwarded to a large-language-model provider in order to generate a recommendation. These inputs are not associated with your name, account, or contact details.
• Automatically collected information. Like most websites, our hosting provider may log standard request data (IP address, browser type, referring URL, timestamp) for security, debugging, and abuse prevention.
• Cookies and similar technologies.See the "Cookies" section below.

We do not sell personal information. We do not run advertising networks on the Site. We do not require you to create an account to use any feature.

The Site may use the following cookies and similar technologies:

• Session and preference cookies. Strictly necessary cookies that remember your filter selections and other UI preferences within a session.
• Affiliate-tracking cookies.When you click an "Apply" link for a credit card, the issuer or an affiliate-network partner (such as CardRatings) may set a cookie on your browser so they can attribute the click and pay us a commission if you are approved. We do not control the contents of those cookies.
• Analytics. We use Vercel Analytics, a privacy-respecting analytics tool, to understand traffic patterns in aggregate. This data is not tied to your identity. If we add or change analytics providers, we will update this section.

You can disable cookies in your browser settings. Doing so may affect some features of the Site (such as remembering filters), but core browsing will still work.

• To provide and improve the Site and its features.
• To generate AI-driven card recommendations when you use the Selector (your inputs are passed to our LLM provider for inference and are not retained for training).
• To attribute referrals from affiliate links and receive commissions from partner programs (see our Affiliate Disclosure).
• To detect and prevent abuse, fraud, or illegal activity.
• To comply with applicable laws and respond to lawful requests.

We rely on a small number of third parties to operate the Site:

• Hosting: Vercel (deployment, edge delivery, request logs).
• AI inference: Anthropic (the AI Selector sends your answers to Claude, an Anthropic LLM, to generate recommendations).
• Affiliate networks:CardRatings and individual card issuers, when you click an "Apply" link.
• Analytics: Vercel Analytics.

Each of these has its own privacy practices. We choose providers we believe are reputable, but we are not responsible for their policies.

You can clear or block cookies, opt out of analytics in your browser, and choose not to use the AI Selector if you would prefer not to share inputs with an LLM provider.

U.S. residents (CCPA / CPRA):California residents have the right to know what personal information we hold, to request deletion, and to opt out of any "sale" or "sharing" of personal information. We do not sell or share personal information as those terms are defined under California law. To exercise any right, email us using the address on the Contact page.

EU / UK residents (GDPR / UK GDPR): If you are in the EU or UK and interact with the Site, you have the right to access, correct, or delete personal data we hold about you, and to lodge a complaint with your local data protection authority. Our lawful basis for limited processing is legitimate interest (operating the Site) and, where applicable, your consent (e.g., optional analytics). To exercise these rights, contact us using the email on the Contact page.

The Site is not directed at children under 13, and we do not knowingly collect personal information from children. If you believe a child has provided us with information, contact us and we will delete it.

We retain access logs only as long as needed for security and abuse prevention, typically no more than 90 days. We use industry-standard safeguards, including HTTPS and reputable hosting and inference providers. No system is perfectly secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects the most recent change. Material changes will be announced on the Site.

For privacy questions or to exercise any of the rights described above, please email us at info@cardlyfinance.com, or use the Contact page.

Operator: Hillel Sonnenschine, sole proprietor (Brooklyn, NY). Governing law: State of New York.