Privacy policy

Effective 11 October 2026

The short version

  • There’s no account. We never ask for your name, email, phone number or card numbers.
  • Your profile (income, spending, cards, points) is stored on your device, not on our servers.
  • Data leaves your device only when you use three features: Ask Vantage, reading a bank alert, and reporting outdated card info. Each sends only what it needs.
  • No ads, no advertising trackers, and we don’t sell your data.

Who we are

Vantage is a web app (at vantage-co.in/app) and this website. It is operated by [OPERATOR NAME] (“we”, “us”). For the purposes of India’s Digital Personal Data Protection Act, 2023 (DPDP Act), we are the data fiduciary for the limited personal data described in this policy.

Vantage gives general information to help you choose and use credit cards. It is not financial advice, and we are not affiliated with any bank or card issuer.

What stays on your device

Everything you enter to set up and use Vantage is saved in your browser’s local storage on your device. It is not sent to our servers, except as described in the next section.

  • Your annual income, as you enter it.
  • Your monthly spending by category and, if you add it, by merchant.
  • The cards you hold, any nicknames you give them, and the last 4 digits you choose to add (used to match bank alerts to the right card).
  • Points balances, your redemption preference and any savings goal.
  • Spends you log: amount, merchant, category, card and date.
  • App settings, such as fee overrides and suggestions you’ve dismissed.

What leaves your device, and when

Three features need our server. Nothing is sent unless you use them. Our server runs on Vercel; the AI features use a hosted AI model from NVIDIA.

Ask Vantage (the in-app assistant)

When you ask a question, the app sends our server:

  • Your conversation in that chat: up to your last 12 messages and replies, each cut to 1,000 characters.
  • A summary worked out on your device so answers use your real numbers: your income rounded to the nearest ₹1 lakh, your monthly spending by category, the names of the cards you hold and their points balances, your savings goal and progress, nearby spend milestones, and Vantage’s card recommendations for you. If your question names a card, public details of that card are included too.

It does not include the last 4 digits of your cards or your logged spends. Our server passes the request to NVIDIA’s hosted AI model service (currently the Llama 3.1 Nemotron Ultra model) to write the answer, and sends the answer back to you. We don’t store your questions or the answers. The chat itself isn’t saved on your device either: it’s cleared when you close it.

Reading a bank alert

If you paste a bank SMS or email to log a spend, the text you paste (up to 2,000 characters) is sent to our server. We first try to read it with built-in bank templates. Only if those can’t read it confidently is the text sent on to NVIDIA’s hosted AI model to pick out the amount, currency, merchant, card’s last 4 digits, date and type of transaction. Those details come back to your device, where they are matched to your cards. We don’t store the alert text, and the app doesn’t keep it either.

Alerts can contain things like the last digits of a card or an account balance. Remove anything you’d rather not send before you paste. Vantage never reads your SMS or email on its own: only what you paste is sent.

Reporting outdated card info

If you flag that a card’s details look wrong, the app sends: which card, what kind of problem (fee, rewards, caps, benefits, discontinued or other), an optional note of up to 280 characters, an optional source link, and the app’s version number. No name, account, device ID or wallet data is included.

Reports are stored in our database and combined per card: a count, a count by type, the time of the latest report, and the latest note, link and app version (each new report replaces the previous note). To stop one person inflating a card’s count, we keep a one-way hash of your IP address together with the card for 24 hours, after which it is deleted automatically. Please don’t put personal information in the note.

Links you open

Vantage may link to a bank’s official website, for example to apply for a card. Once you leave Vantage, that site’s own privacy policy applies.

This website and the web app

This website and the web version of the app are hosted by Vercel. Like any web host, Vercel processes standard request information (such as IP address, browser type, the page requested and the time) to deliver and protect the service, and keeps short-lived logs under its own policies. Our server also uses your IP address briefly, in memory, to limit how many requests can be made per minute. It isn’t stored.

The web app at /app uses Vercel Web Analytics to count page views. It collects the page, referrer, approximate country, and browser, operating system and device type. It uses no cookies, and Vercel tells visitors apart only with a hash of the request that resets every day. The pages of this website (this policy and the home page) have no analytics.

What we don’t do

  • No accounts, no sign-up and no login.
  • No ads, no advertising or tracking SDKs, and no tracking cookies.
  • We don’t sell, rent or share your data for advertising.
  • We don’t ask for your name, email, phone number, PAN, card number, bank login or location.
  • We don’t read your SMS, email, contacts or photos.

Service providers

We use a small number of providers to run Vantage. They process data for us only to provide their service, under their own terms and privacy policies:

  • Vercel: website and app hosting, our server functions, request logs and web analytics.
  • Upstash (through Vercel’s storage integration): the database that holds card reports and the 24-hour duplicate-check keys.
  • NVIDIA: the hosted AI model used by Ask Vantage and, when needed, to read bank alerts.

These providers may process data outside India, including in the United States. We may also disclose information if the law requires it.

How long data is kept

Retention by type of data
Your profile on your deviceUntil you reset it in the app or clear your browser data.
Ask Vantage messagesNot stored by us. Handled only for the time it takes to answer.
Bank alert textNot stored by us or by the app. Handled only for the time it takes to read it.
Card reportsNo automatic expiry. Kept while useful for keeping card data accurate. They aren’t linked to you.
Duplicate-check key (hashed IP + card)Deleted automatically after 24 hours.
Hosting logs and analyticsKept by Vercel for the periods set out in its own policies.

Your rights

Under the DPDP Act you have the right to:

  • ask what personal data of yours we process, and how;
  • have it corrected, completed, updated or erased;
  • have a grievance about how we handle your data addressed;
  • nominate someone to exercise these rights for you if you die or become unable to.

Most of your data never reaches us, so you can see, change and delete it yourself in the app. For anything we hold, email hello@vantage-co.in. Because card reports aren’t linked to a person, we may need you to tell us the card and what your note said so we can find it.

Deleting your data

  • In the app: open Settings and choose Reset all data. This clears your cards, spending, logged spends and preferences.
  • In your browser: clear site data for vantage-co.in in your browser settings.
  • Card reports: email us and we’ll remove a note you sent.

Security

Everything between the app and our server travels over HTTPS. The keys for our AI and database providers live only on our server, never in the app. Our endpoints check every input, refuse browser requests from any website other than ours, and limit how often they can be called.

Data on your device is protected by your device’s own security; Vantage doesn’t add its own encryption to it. Use a screen lock, and don’t use Vantage on a shared browser profile if you don’t want others to see your profile.

Children

Vantage is meant for adults. Credit cards in India are generally available only to people aged 18 or over, and Vantage isn’t directed at children. We don’t knowingly process children’s personal data. If you think a child has sent us information, contact us and we’ll delete it.

Changes to this policy

If we change how Vantage handles data, we’ll update this page and the effective date at the top. If a change is significant, we’ll also say so in the app before it takes effect.

Contact and grievances

For questions, requests or grievances about your data, email hello@vantage-co.in. Put “Grievance” in the subject line for a complaint. We will respond within the time limits set by Indian law. If you’re not satisfied with our response, you can complain to the Data Protection Board of India.