Overview
Perkly Inc. (“we,” “our,” or “us”) operates Perkly, a credit card benefit optimization platform. We are committed to protecting your privacy and being transparent about how your information is handled. This Privacy Policy explains what data we collect, how we use it, and your rights.
1. Information We Collect
Information You Provide
- Account information: Your name, email address, and password when you create an account.
- Credit card information: Card names, issuers, networks, annual fee amounts, and benefit details you manually enter or select from our catalog. We never store full Primary Account Numbers (PAN), PINs, or CVV codes.
- SUB tracking data: Sign-up bonus targets, spending progress, and deadlines you enter.
- Spend optimization inputs: Purchase amounts and categories you submit for optimization recommendations.
Information Collected Automatically
- Usage data: Pages visited, features used, and interactions with the Service.
- Device information: Browser type, operating system, device type, and IP address.
- Performance data: Error logs and crash reports to diagnose and fix technical issues.
2. How We Use Your Information
We use your information to:
- Provide, maintain, and improve the Service
- Send notifications about benefit expirations, resets, and payment due dates
- Track your sign-up bonus progress and spending milestones
- Generate spend optimization and card recommendations
- Ensure account security and prevent unauthorized access
- Provide customer support and respond to your requests
- Send transactional emails (welcome, password reset, subscription receipts)
- With your consent, send optional product updates and feature announcements (you can opt out at any time)
3. Information Sharing
We do not sell, rent, or trade your personal information to third parties. We may share your information only in these limited circumstances:
- Service providers: Trusted partners who help operate the Service, including Supabase (secure data storage and authentication), Vercel (hosting), Resend (email delivery), ValKey (caching and job queues), Stripe (payment processing), and GlitchTip (error tracking). These providers receive only the minimum data necessary and are contractually obligated to protect your information.
- Legal requirements: If required by law, subpoena, or court order.
- Business transfers: In connection with a merger, acquisition, or sale of assets.
4. Data Security
We implement industry-standard security measures to protect your information:
- All data is encrypted in transit using HTTPS/TLS
- Sensitive data is encrypted at rest using AES-256
- Passwords are hashed using bcrypt
- Access to personal information is restricted on a need-to-know basis
- Regular security assessments and updates
- JWT-based authentication with short-lived access tokens and refresh tokens
While we implement reasonable safeguards, no method of electronic transmission or storage is completely secure. We cannot guarantee absolute security.
5. Data Retention
We retain your information for as long as your account is active or as needed to provide the Service. When you delete your account, your data is permanently deleted from our systems promptly. Data may be retained where required by law or for legitimate business purposes (e.g., billing records).
6. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access the personal information we hold about you
- Request correction of inaccurate information
- Request deletion of your information (via account settings or by contacting us)
- Export your data in a machine-readable format
- Opt out of optional communications
- Withdraw consent for data processing where applicable
- Lodge a complaint with a data protection authority
To exercise your rights, use the self-service options in your account settings or contact us at support@myperkly.app.
7. Cookies
We use a minimal set of cookies and browser storage mechanisms for essential functionality:
- Authentication: Secure, HTTP-only session cookies to keep you signed in. Required for the Service to function.
- Preferences: UI state and theme preferences stored in browser localStorage.
- Analytics: We use privacy-respecting analytics to understand aggregate usage patterns. No personal data is collected through analytics.
We do not use third-party advertising cookies or cross-site tracking cookies. You can clear cookies and localStorage at any time through your browser settings.
8. Children's Privacy
Perkly is not directed at individuals under the age of 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date and notify you via email or through the Service. We encourage you to review this policy periodically. By providing contact information, a user may receive email notifications about policy changes.
10. Contact Us
If you have questions about this Privacy Policy or our data practices, please contact us at support@myperkly.app.
Perkly Inc.
San Francisco, California