Privacy First. By Design and Architecture.

We strictly separate what you choose to broadcast from what remains private. Only fields you explicitly populate in the Profile Studio (such as public phone, headline, WhatsApp, bio, or social handles) are visible on username.cardmitra.com. Your login password, private settings, and payment details are never exposed.

We collect your email address for authentication, account identifiers, profile fields you provide, and optional shipping address details if you order physical cards. We also collect basic non-identifiable telemetry (tap count, browser channel) to show you personal analytics.

When a peer submits their contact information via your profile's 'Exchange Contact Details' form, they must actively check a consent box. Their details are forwarded exclusively to your private dashboard inbox and are never sold to data brokers or advertising third parties.

CardMitra persists account records using PostgreSQL with Row-Level Security (RLS). All data in transit is encrypted using TLS 1.3, and NFC hardware cards store tokenized redirect URIs rather than unencrypted credentials.

You can update, pause, or wipe your profile data at any time from your Account Settings. You may request permanent account and record deletion with immediate unlinking of all physical cards.

CardMitra complies with the Digital Personal Data Protection (DPDP) Act of India. We act as a data fiduciary for your account information and process data solely to provide smart networking tools.