Privacy Policy

1. Introduction

Card Butler ("we," "our," or "us") provides a virtual card issuance platform that enables AI agents to make purchases with human approval. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service.

By using Card Butler, you agree to the collection and use of information in accordance with this policy.

2. Information We Collect

Account Information

• Email address and name
• Billing address (required for card issuance)
• Phone number (for SMS notifications, if enabled)
• Authentication credentials

Cardholder Information

To issue virtual cards through our banking partner (Celtic Bank via Stripe), we collect:

• Legal name
• Billing address
• Identity verification information as required by our banking partners and applicable law

Transaction Data

• Card request details (merchant, amount, description)
• Approval/denial decisions and timestamps
• Transaction amounts and merchant information
• Card issuance and cancellation records

Technical Data

• IP address and device information
• Browser type and version
• API usage logs
• Error logs and performance data

3. How We Use Your Information

• Provide and maintain the Card Butler service
• Issue virtual cards through our banking partners
• Send approval notifications via your chosen channels
• Process transactions and maintain records
• Detect and prevent fraud
• Comply with legal obligations
• Improve our services
• Communicate with you about your account

4. Information Sharing and Disclosure

We share your information with:

Service Providers

• Stripe: Our payment and card issuance partner. Stripe processes cardholder data subject to their Privacy Policy.
• Celtic Bank: The issuing bank for virtual cards. Celtic Bank is a Member FDIC.
• Notification providers: Services that deliver approval notifications (Discord, Telegram, SMS providers).

Legal Requirements

We may disclose information when required by law or to:

• Comply with legal process
• Respond to lawful requests from public authorities
• Protect our rights and property
• Prevent fraud or illegal activity

5. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption in transit (TLS) and at rest
• Secure authentication mechanisms
• Access controls and audit logging
• Regular security assessments

Card numbers and sensitive payment data are handled by Stripe and are never stored on Card Butler servers.

6. Data Retention

We retain your information for as long as your account is active or as needed to provide services. We also retain information as necessary to:

• Comply with legal obligations
• Resolve disputes
• Enforce agreements
• Maintain financial records as required by law

7. Your Rights

Depending on your location, you may have rights to:

• Access your personal information
• Correct inaccurate information
• Delete your information (subject to legal retention requirements)
• Export your data
• Opt out of certain data uses

To exercise these rights, contact us at privacy@cardbutler.dev.

8. California Privacy Rights

California residents have additional rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect and how it's used, and the right to request deletion.

We do not sell personal information. To make a CCPA request, contact privacy@cardbutler.dev.

9. Children's Privacy

Card Butler is not intended for users under 18 years of age. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, please contact us:

• Email: privacy@cardbutler.dev
• Complaints: File a complaint