Privacy policy

Last Updated: September 30, 2026

Doxa ("Doxa", "we", "us", or "our") respects your privacy and is committed to protecting your personal information.

This Privacy Policy explains how we collect, use, store, disclose, and protect information when you use the Doxa mobile application, website, and related services (collectively, the "Services").

By using Doxa, you agree to the practices described in this Privacy Policy.

Information We Collect

Depending on how you use Doxa, we may collect the following categories of information:

Account Information

When you create an account, we may collect:

• Name
• Email address
• Phone number
• Login credentials or authentication information
• Profile information you choose to provide

Credit Card Information

To help you identify and use the most suitable credit card for different purchases, you may provide information about your credit cards, including:

• Card issuer and card name
• Card network
• Reward categories
• Annual fee
• Benefits and features
• Reward points, cashback, miles, or other benefits
• Card limits or other information you voluntarily provide

Doxa does not require your full card number, CVV, PIN, or card password for the core functionality of the Service. You should not provide your CVV, PIN, OTP, or banking password to Doxa.

If we introduce a feature that requires access to financial accounts or transaction information, we will disclose the information collected and obtain any consent required by applicable law.

Spending and Transaction Information

You may choose to provide information about your spending, such as:

• Transaction amount
• Merchant or merchant category
• Date and time of a transaction
• Spending category
• Payment method
• Rewards earned
• Cashback or points received

We use this information to help determine which cards may provide relevant rewards or benefits for your spending.

Device and Technical Information

We may automatically collect certain technical information, including:

• Device type and model
• Operating system
• App version
• IP address
• Browser type
• Crash reports
• Device identifiers
• Log information
• Approximate location derived from technical information, where permitted

Information You Provide Through Interactions

We may collect information when you:

• Contact customer support
• Submit feedback
• Participate in surveys
• Report an issue
• Communicate with us
• Use features within the Services

How We Use Information

We may use collected information to:

• Create and manage your account
• Provide and personalize Doxa's Services
• Analyze your spending patterns
• Help identify potentially suitable credit cards for particular spending categories
• Calculate or display potential rewards and benefits
• Improve our recommendations and product experience
• Maintain and improve the Services
• Detect fraud, abuse, and security threats
• Troubleshoot technical problems
• Respond to customer support requests
• Send service-related communications
• Send marketing communications where permitted and where you have provided the required consent
• Comply with applicable laws and legal obligations

Doxa does not make lending, credit approval, or other financial eligibility decisions on behalf of banks or card issuers.

Card Recommendations

Doxa may analyze information you provide about your spending and credit cards to identify potentially relevant rewards, benefits, or savings opportunities.

Recommendations may be based on factors such as:

• Merchant category
• Transaction amount
• Card reward structure
• Cashback rates
• Reward points
• Promotional offers
• Card benefits
• Information you provide about your preferences

Rewards, fees, offers, and card terms may change. Doxa does not guarantee that a particular transaction will receive a particular reward or benefit.

You are responsible for reviewing the applicable terms and conditions provided by the relevant card issuer before making financial decisions.

How We Share Information

We may share information with third parties only when reasonably necessary to operate, maintain, secure, or improve our Services, or when otherwise permitted or required by law.

These parties may include:

Service Providers

We may use third-party providers for services such as:

• Cloud hosting
• Database infrastructure
• Authentication
• Analytics
• Customer support
• Error monitoring
• Communications
• Security
• Payment processing, where applicable

These providers may process information on our behalf and are expected to maintain appropriate security and confidentiality.

Financial Institutions and Partners

Where applicable, we may share limited information with card issuers, financial institutions, merchants, or other partners when necessary to provide a feature you have requested or where you have provided appropriate consent.

Legal Requirements

We may disclose information if required to do so by applicable law, regulation, court order, governmental authority, or legal process, or where disclosure is reasonably necessary to protect our rights, users, or the security of the Services.

Business Transfers

If Doxa is involved in a merger, acquisition, financing, restructuring, sale of assets, or similar transaction, personal information may be transferred as part of that transaction, subject to applicable law.

No Sale of Personal Information

We do not sell your personal information to third parties.

Aggregated and De-identified Information

We may use aggregated or de-identified information for analytics, research, product development, or other legitimate business purposes, provided that such information cannot reasonably be used to identify you.

Financial Information

Doxa may process information relating to your credit cards and spending because this information is necessary for certain features of the Services.

We will take reasonable measures to protect financial information in our possession.

Never share your card PIN, CVV, OTP, banking password, or other authentication credentials with Doxa.

If you connect a financial account through a third-party provider, that provider's privacy policy and terms may also apply.

Cookies and Similar Technologies

Our website and Services may use cookies, SDKs, pixels, local storage, and similar technologies to:

• Keep you signed in
• Remember preferences
• Understand how the Services are used
• Improve performance
• Detect fraud and security issues
• Measure the effectiveness of communications or marketing

You may be able to control cookies through your browser or device settings.

Data Security

We use reasonable technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration, loss, or destruction.

However, no method of electronic transmission or storage is completely secure. Therefore, we cannot guarantee absolute security.

You are responsible for keeping your account credentials confidential and should notify us promptly if you believe your account has been compromised.

Data Retention

We retain personal information only for as long as reasonably necessary to:

• Provide the Services
• Maintain your account
• Fulfill the purposes described in this Privacy Policy
• Resolve disputes
• Prevent fraud and abuse
• Comply with legal, accounting, tax, or regulatory obligations
• Enforce our agreements

When information is no longer required, we may delete, anonymize, or securely dispose of it, subject to applicable law.

Your Rights

Subject to applicable law, you may have rights regarding your personal information, including the ability to:

• Request access to information we hold about you
• Request correction of inaccurate or incomplete information
• Request deletion of personal information where legally permitted
• Withdraw consent where processing is based on consent
• Request information about how your data is processed
• Raise a grievance regarding our processing of your personal information

To exercise applicable rights, contact us using the details provided below.

We may need to verify your identity before processing certain requests.

Children's Privacy

The Services are not intended for children under the age permitted to use the Services under applicable law.

We do not knowingly collect personal information from children in violation of applicable law.

If you believe a child has provided us with personal information, please contact us so that we can take appropriate action.

Third-Party Links and Services

The Services may contain links to third-party websites, applications, financial institutions, card issuers, or other services.

We are not responsible for the privacy practices, security, or content of third-party services.

We encourage you to review the privacy policies of third parties before providing them with personal information.

International Data Transfers

Some of our service providers may process or store information outside India.

Where personal information is transferred internationally, we will take appropriate measures required by applicable law to protect that information.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

When we make changes, we will update the "Last Updated" date above. Where required by applicable law, we will provide additional notice or obtain consent.

Your continued use of the Services after an updated Privacy Policy becomes effective means that you acknowledge the updated policy.

Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us.

Email: guneshmunjal09@gmail.com