Privacy Policy

1. Introduction

IronChurn ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our credit card portfolio management platform ("the Service"). Please read this Privacy Policy carefully. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

2.1 Account Information

When you create an account, we collect your email address through our authentication provider (Clerk). This information is necessary to create and manage your account.

2.2 Financial Information (Optional)

You may optionally provide:

• Annual income
• Business revenue
• Monthly rent

This information is used solely to provide personalized credit card recommendations and is stored securely in our database.

2.3 Portfolio Data

You may provide information about your credit card portfolio, including:

• Credit card details (names, banks, application dates, approval dates, bonuses, annual fees, credit limits, etc.)
• Loyalty program balances (points and miles balances)
• Hard pull inquiries (dates, sources, credit bureaus)
• Referrals earned (points earned from referring others)
• Point redemptions (programs, dates, points used, cash prices)
• Application denials (card names, banks, dates, reasons)
• Bank account bonuses (banks, dates, amounts, terms)
• Custom point valuations (your personal valuations for different programs)

All portfolio data is stored securely and is only accessible to you through your authenticated account.

2.4 Preferences

We store your preferences, including:

• Strategy focus (travel, cashback, or mixed)
• Application frequency preference (aggressive, moderate, or conservative)
• Redemption style (sweet spots, cash equivalent, or luxury)
• Preferred categories and programs
• Referral link opt-in preference (whether you want to use referral links when applying for credit cards)

2.5 Automatically Collected Information

When you use the Service, we automatically collect certain information, including:

• Usage data and analytics (through Vercel Analytics)
• Error logs and performance data (through Sentry)
• Device information, browser type, and IP address
• Pages visited and features used

3. How We Use Your Information

We use the information we collect to:

• Provide, maintain, and improve the Service
• Process your transactions and manage your account
• Provide personalized credit card recommendations based on your preferences and portfolio
• Calculate velocity rule compliance (e.g., Chase 5/24, Amex 2/90)
• Track and display your portfolio data, including cards, balances, and redemptions
• Send you technical notices, updates, and support messages
• Monitor and analyze usage patterns to improve the Service
• Detect, prevent, and address technical issues and security threats
• Comply with legal obligations

4. Referral Links

When you opt-in to referral links (which is the default setting), we may use referral links when you click "Apply" on credit cards through the Service. These referral links help support IronChurn's operations. You can change your referral link preference at any time in your account settings. When referral links are used, we may receive compensation from credit card issuers, but this does not affect the terms, rates, or fees of any credit card offer. We do not share your personal information with credit card issuers through referral links.

5. Third-Party Services

We use the following third-party services that may collect or process your information:

5.1 Authentication (Clerk)

We use Clerk for user authentication. Clerk processes your email address and authentication credentials. Please review Clerk's Privacy Policy for more information.

5.2 Error Tracking (Sentry)

We use Sentry to track errors and monitor application performance. Sentry may collect error logs, device information, and user context (including email address) to help us diagnose and fix issues. Please review Sentry's Privacy Policy for more information.

5.3 Analytics (Vercel Analytics)

We use Vercel Analytics to understand how users interact with the Service. This service collects anonymized usage data. Please review Vercel's Privacy Policy for more information.

5.4 Database (Neon)

Your data is stored in a Neon PostgreSQL database. Neon processes and stores your data on our behalf. Please review Neon's Privacy Policy for more information.

6. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using HTTPS/TLS
• Secure authentication through Clerk
• Database access controls and security
• Regular security assessments

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your information, we cannot guarantee absolute security.

7. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you the Service. If you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal, regulatory, or legitimate business purposes.

8. Your Rights and Choices

You have the following rights regarding your personal information:

• Access: You can access and review your data at any time through the Service
• Correction: You can update or correct your information through your account settings
• Deletion: You can delete your account and all associated data at any time
• Export: You can export your data in JSON format (feature available in account settings)
• Opt-out: You can opt-out of referral links at any time in your account settings

To exercise these rights, please use the features available in the Service or contact us using the information provided below.

9. Children's Privacy

The Service is not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you become aware that a child has provided us with personal information, please contact us, and we will take steps to delete such information.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes. Changes to this Privacy Policy are effective when they are posted on this page.

11. California Privacy Rights

If you are a California resident, you have certain rights under the California Consumer Privacy Act (CCPA), including:

• The right to know what personal information we collect, use, and disclose
• The right to delete your personal information
• The right to opt-out of the sale of personal information (we do not sell personal information)
• The right to non-discrimination for exercising your privacy rights

To exercise these rights, please contact us using the information provided below.

12. International Users

The Service is hosted and operated in the United States. If you are accessing the Service from outside the United States, please be aware that your information may be transferred to, stored, and processed in the United States. By using the Service, you consent to the transfer of your information to the United States.

13. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us through the Service or via the contact methods available in the Service.