Privacy Policy - CookieJar

CookieJar provides an API-based platform that delivers structured, continuously updated data about consumer financial products such as credit cards, savings accounts, fixed deposits, personal loans, travel insurance, car loans, home loans, and buy-now-pay-later products ("Services").

This Privacy Policy explains how we collect, use, disclose, and protect your personal data when you use our website, API, developer dashboard, and related services. It also describes your privacy rights and how to exercise them.

1. Collection of Personal Data

We collect the following categories of personal data:

Personal data you provide to us directly

Identity and Contact Data: Your name and email address when you create a CookieJar account or sign up for our waitlist. We may also collect or generate indirect identifiers (e.g., internal user IDs).
Payment Information: Your payment details if you purchase a paid API plan (Hobby, Pro, or Enterprise tier). Payment processing is handled by our third-party payment processor; we do not store full payment card details on our servers.
API Usage Data: Your API requests, including query parameters and search terms submitted through our endpoints. We log these to manage rate limits, track credit usage, and improve our Services.
Communication Information: If you contact us via email or other channels, we collect your name, contact details, and the contents of your messages.
Feedback: Any feedback, suggestions, or bug reports you provide about our Services.

Personal data we receive automatically

When you use our Services, we automatically receive certain technical data, including:

Device and Connection Information: Device type, operating system, browser type, IP address (including approximate location derived from it), and time zone.
Usage Information: Dates and times of access, pages viewed, links clicked, API endpoints called, and how you interact with our website and developer dashboard.
Log and Troubleshooting Information: Server logs, error reports, and performance data to help us diagnose and fix issues with our Services.
Cookies and Similar Technologies: We and our service providers use cookies and similar technologies to manage our Services, recognize returning users, and analyze usage patterns. See Section 8 for more details.

2. How We Use Your Personal Data

We use your personal data for the following purposes:

To provide, maintain, and improve our Services, including our API, developer dashboard, and documentation.
To create and manage your CookieJar account, including provisioning API keys and managing subscription tiers.
To process payments and manage billing for paid plans.
To enforce rate limits, track API credit usage, and prevent abuse of our Services.
To communicate with you about your account, service updates, and changes to our policies.
To prevent and investigate fraud, unauthorized access, and violations of our Terms of Service.
To debug, identify, and repair errors that affect the functionality of our Services.
To conduct analytics and research to improve the quality and coverage of our financial product data.
To comply with legal obligations and enforce our Terms of Service.

3. How We Disclose Personal Data

We may disclose your personal data to the following categories of third parties:

Service Providers: Third-party companies that help us operate our Services, including cloud hosting (e.g., infrastructure providers), payment processing, analytics, email delivery, and search infrastructure.
Authentication and Infrastructure Providers: Third-party services that process your account credentials and host our infrastructure on our behalf.
Corporate Transactions: If CookieJar is involved in a merger, acquisition, or sale of assets, your personal data may be transferred as part of that transaction.
Legal Requirements: We may disclose personal data to governmental or regulatory authorities as required by law, in response to lawful requests, or to protect the safety and rights of CookieJar, our users, or the public.
With Your Consent: We may disclose your personal data when you give us permission or direct us to do so.

CookieJar does not sell your personal data to third parties.

4. Your Rights and Choices

Depending on your location and the laws that apply in your country of residence, you may have certain rights regarding your personal data. These may include:

Access: The right to request a copy of the personal data we hold about you.
Correction: The right to request that we correct inaccurate or incomplete personal data.
Deletion: The right to request that we delete your personal data, subject to certain exceptions (e.g., legal obligations, fraud prevention).
Withdrawal of Consent: Where our processing of your personal data is based on consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing carried out before withdrawal.

The specific rights available to you depend on the data protection laws of your jurisdiction. To exercise any of these rights, please contact us at privacy@cookiejar.tech. We will respond to your request within the timeframe required by applicable law.

5. Data Transfers

CookieJar is based in Singapore. Your personal data may be transferred to and processed in countries other than your country of residence, as our infrastructure and service providers may be located in different jurisdictions. When we transfer personal data internationally, we take reasonable steps to ensure it is protected in accordance with this Privacy Policy and applicable data protection laws, including Singapore's Personal Data Protection Act (PDPA).

6. Data Retention and Security

We retain your personal data for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including to comply with legal obligations, resolve disputes, and enforce our agreements.

API usage logs and request data are retained for a limited period to support billing, abuse prevention, and service improvement, after which they are deleted or anonymized.

We implement appropriate technical and organizational security measures designed to protect your personal data from unauthorized access, loss, misuse, alteration, or destruction. These include encryption, access controls, and regular security reviews.

7. Children

Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, please contact us at privacy@cookiejar.tech and we will investigate and delete the data as appropriate.

8. Cookies and Tracking Technologies

We use cookies and similar technologies for the following purposes:

Essential Cookies: Required for basic functionality such as authentication and session management.
Analytics Cookies: Help us understand how users interact with our website and Services so we can improve the experience.

You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of our Services.

9. Third-Party Links

Our Services may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal data.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the Effective Date above. Your continued use of our Services after any changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us at:

Email: privacy@cookiejar.tech