Privacy Policy

What we collect

We collect your email address (for your account, receipts, and service alerts), metadata about linked cards (brand, last four digits, expiration, nickname, issuer, and schedule), and records of payment attempts. We retain delivery records and pending email content to retry service alerts reliably. We use this information to operate the service.

Card data

We never store full card numbers. Card details are tokenized and held by Stripe, our PCI Level 1 payment processor. We store only Stripe's reference tokens. See Stripe's privacy policy for how they handle payment data.

Who we share with

We use Stripe for payments and payment receipts, Supabase for authentication, Neon for application data, Resend for account and service emails, and Vercel for hosting. When enabled, PostHog receives product analytics, including page visits, interactions, account identifiers, and email addresses, to help us understand use of the service. We do not sell your data.

Public website analytics

We use Google Analytics to understand visits to our public pages and the websites that refer visitors. Google Analytics uses cookies to measure visits and engagement. Our integration sends public page addresses and titles and the referring website's origin; it excludes URL query strings and fragments, account identifiers, email addresses, card details, form values, and private account, sign-in, and payment pages. Advertising personalization, Google signals, and automatic interaction measurement are disabled. Google Analytics is not loaded when your browser sends Global Privacy Control or Do Not Track. You can also block analytics cookies or scripts in your browser.

See how Google uses information from sites that use its services.

Your choices

Removing a linked card from your dashboard stops new scheduled charges and detaches its payment method. We retain canceled-card metadata, payment-attempt records, and billing history for reconciliation and support. Email help@keepcardalive.com to request account deletion or other access to or deletion of your data. Payment processors may also retain transaction records under their own retention requirements.