Legal
Privacy Policy
Selling a card means handing over sensitive details. This page explains exactly what we take, what we do with it, how long we keep it and how to make us delete it.
Scope and who we are
This Privacy Policy applies to the SellMyCard website and the gift card selling form. "We", "us" and "our" refer to SellMyCard, operated from Bangalore, India.
We process your personal data in line with the Digital Personal Data Protection Act, 2023 (India) and other applicable law. This policy covers data you give us and data the browser sends automatically. It does not cover third-party websites we link to.
What we collect
Information you enter on the selling page:
- Gift card number and PIN — needed to verify the remaining balance.
- Phone number — used to contact you about that submission and to flag duplicates.
- UPI ID — used solely as the payout destination.
Information collected automatically when you load a page:
- IP address, browser type, device and operating system.
- Pages visited, referrer and time of visit, kept as standard server logs.
Information you send us by email to help@sellmycard.in, including anything you volunteer in a support conversation.
How we use it
- To verify the balance of a card and produce your 80% quote.
- To send the payout to the UPI ID you gave us.
- To contact you if a submission fails, needs review, or looks like a duplicate.
- To detect fraud, stolen cards and repeat abuse of the service.
- To maintain transaction records for accounting, tax and dispute handling.
- To comply with a legal obligation or a lawful request from an authority.
We do not sell your personal data, and we do not use it for advertising.
How we handle your PIN
The card PIN exists to prove the card is in your hands. It is transmitted to us over an encrypted connection, used for that one verification, and is not written to application logs, analytics or backups.
How long we keep it
- Card number and PIN — only for the verification session. Afterwards, only the last four digits remain.
- Verification artefacts (balance checks, quotes) — up to 90 days, so we can re-check a disputed payout.
- Transaction records (amount, brand, phone number, UPI ID, payout reference) — up to 8 years, as required for financial and tax records.
- Phone number and UPI ID — while your submission history exists, then deleted.
When a retention period ends, the data is deleted or irreversibly anonymised.
Security
Pages are served over HTTPS, access to submission data is restricted to the staff and systems that need it for a transaction, and payouts require the UPI ID captured at submission. Credentials are never sent to analytics.
No system is perfectly secure. If we become aware of a breach affecting your data, we will contact you on the phone number you provided and report it to the authorities where the law requires.
Your rights
Under Indian data protection law you may ask us to:
- Confirm whether we process your personal data, and give you a copy.
- Correct data that is inaccurate or incomplete.
- Delete data we no longer need to keep, subject to statutory retention.
- Withdraw any consent you gave, for future processing.
- Nominate someone to exercise these rights on your behalf, if you cannot.
Write to help@sellmycard.in with the phone number or UPI ID you used. We acknowledge a request within 7 days and aim to resolve it within 30 days. If you are unhappy with our response, you may complain to the Data Protection Board of India.
Age limit
SellMyCard is for people aged 18 and over. We do not knowingly collect data from minors; if we learn that we have, we delete it promptly.
Updates and contact
We may revise this policy as the service changes. The date at the top of the page tells you when it last changed; significant changes will also be posted on the site.
Privacy questions, data requests and grievances go to our Grievance Officer at help@sellmycard.in. See how the service itself works in our Terms of Service.