Cardra · Legal
Privacy Policy
Last updated 19 August 2026
Draft — not yet reviewed by counsel. This describes how Cardra works today in plain language. It is not a binding agreement and must be replaced before Cardra takes on customers.
What we collect
At sign-up: your name, email address, phone number, and how you heard about Cardra. At verification: your legal business name, entity type, EIN, registered address, and any selling accounts you choose to share.
While you use Cardra: the bids you place, the fills recorded against them, and ordinary session records — the IP address and browser of each sign-in — so you and we can see where an account is logged in.
What we deliberately do not store
We do not store bank account or card numbers. Where you register a way to pay or be paid, we keep only a label you choose and the last four digits, which is enough to recognise the instrument on a statement and not enough to use it.
Text messages
We text you only if you asked us to at sign-up. That choice is recorded with the moment you made it, and you can stop the messages at any time by replying STOP. Consent to marketing is never required to open an account.
Why we hold it
To verify that a business is real before it can trade, to route and settle bids, to reach you about your orders, and to understand which channels bring us buyers. We do not sell your information.
Who can see it
Cardra staff reviewing verifications and routing bids. Your margin, sourcing rates, and internal notes are visible to Cardra only — never to another buyer.
Keeping it
We keep account and transaction records for as long as the account exists and as long afterwards as we are required to. Ask us and we will tell you what we hold about you.
