Privacy Policy

PointsBinder (“we”, “us”, or “our”) operates the website pointsbinder.com, a Canadian credit card comparison and personal tracker tool. We are committed to protecting your personal information and complying with the Personal Information Protection and Electronic Documents Act (PIPEDA) and Canada’s Anti-Spam Legislation (CASL).

Questions about this policy can be directed to: privacy@pointsbinder.com

We collect only what is necessary to provide the service:

• Account information: your email address when you create an account.
• Card tracking data: credit card names, application dates, minimum spend amounts, spending progress, annual fee dates, and notes you enter into your dashboard. This data is entered voluntarily by you.
• Email notification preferences: your choices about which reminder emails you receive.
• Usage data: anonymous page views, session duration, and navigation patterns collected via Google Analytics 4. This data does not identify you personally. You can opt out via your browser’s “Do Not Track” setting or a browser extension such as uBlock Origin.

We do not collect payment information, Social Insurance Numbers, credit scores, or any financial account credentials.

• To operate your account and provide the card tracking dashboard.
• To send you transactional reminder emails (MSR deadlines, annual fee alerts) that you have opted into.
• To improve the website based on anonymous usage analytics.
• To comply with our legal obligations.

We do not sell, rent, or trade your personal information to third parties. We do not send marketing emails without your explicit consent.

We use the following third-party services to operate PointsBinder. Each has its own privacy policy:

• Supabase (supabase.com) — our database and authentication provider. Data is stored on servers in the us-east-2 AWS region. Supabase is SOC 2 Type 2 certified.
• Resend (resend.com) — transactional email delivery. Used only to send reminder emails you have opted into.
• Vercel (vercel.com) — website hosting and infrastructure. Your IP address may be logged by Vercel’s edge network in the course of serving web requests.
• Google Analytics 4 (google.com/analytics) — anonymous usage statistics. Data is processed under Google’s standard terms and may be transferred outside Canada.

We send reminder emails only to users who have created an account and have notifications enabled in their dashboard settings. These are considered transactional messages related to your use of the service.

Every reminder email includes an unsubscribe link. Clicking it will immediately disable all email notifications. You can also manage your preferences at any time from your dashboard.

We retain your personal information for as long as your account is active. If you delete your account, your data is deleted from our database within 30 days. Anonymous analytics data held by Google Analytics is subject to Google’s own retention settings (default: 14 months).

You have the right to:

• Request access to the personal information we hold about you.
• Request correction of inaccurate information.
• Request deletion of your account and associated data.
• Withdraw consent to the collection or use of your information (subject to legal or contractual restrictions).

To exercise any of these rights, email us at privacy@pointsbinder.com. We will respond within 30 days.

PointsBinder uses session cookies required for authentication (set by Supabase) and analytics cookies set by Google Analytics 4. We do not use advertising cookies or third-party tracking pixels. You can disable cookies in your browser settings, but doing so may prevent you from staying logged in.

We may update this policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Continued use of the site after changes are posted constitutes acceptance of the updated policy.

Questions, concerns, or requests regarding this privacy policy should be directed to:

PointsBinder
privacy@pointsbinder.com