1Introduction
Welcome to Indigo Card USA ("we," "us," "our," or "the Company"). We respect your privacy and are committed to protecting your personal information. This Privacy Policy describes our practices for collecting, using, maintaining, protecting, and disclosing information when you use our website at indigocardusa.com or any of our related services (collectively, the "Service").
By accessing or using our Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree with the terms of this Policy, please do not access the Service.
2Information We Collect
We collect several types of information from and about users of our Service, including:
2.1 Personal Information You Provide
- Identification data: Full name, date of birth, Social Security Number (SSN), driver's license number, government-issued ID
- Contact information: Email address, mailing address, phone number
- Financial information: Annual income, employment status, employer details, bank account numbers, routing numbers
- Credit information: Credit score, credit history, existing debts, requested loan amount
- Account credentials: Username and password for your Indigo Card USA account
2.2 Information Collected Automatically
- Device information: IP address, browser type, operating system, device identifiers
- Usage data: Pages visited, time spent, click patterns, referring websites
- Location data: Approximate geographic location based on IP address
- Cookies and similar technologies: See Section 6 for details
2.3 Information from Third Parties
- Credit reporting agencies (Equifax, Experian, TransUnion)
- Identity verification services (Plaid, LexisNexis)
- Fraud prevention databases
- Public records and government databases
Important: We never ask for sensitive information such as medical records, biometric data, or precise GPS location unless required for identity verification. If someone claiming to represent Indigo Card USA requests such information, please contact us immediately at [email protected].
3How We Use Your Information
We use the information we collect for various legitimate business purposes, including:
| Purpose | Legal Basis |
|---|---|
| Process loan applications and evaluate creditworthiness | Contract performance, legitimate interest |
| Verify your identity and prevent fraud | Legal obligation, legitimate interest |
| Communicate about your account, applications, and payments | Contract performance |
| Report payment history to credit bureaus | Contract performance, legal obligation |
| Comply with laws and regulatory requirements | Legal obligation |
| Marketing communications (with your consent) | Consent |
| Improve our Service and develop new products | Legitimate interest |
| Prevent fraud and ensure security | Legitimate interest, legal obligation |
5Credit Reporting (FCRA)
As a lender and loan servicer, we are subject to the Fair Credit Reporting Act (FCRA). This means:
- We may obtain your credit report from one or more credit bureaus when you apply for a loan
- Soft credit inquiries (pre-qualification) do not affect your credit score
- Hard credit inquiries (full application) may temporarily lower your score by 5–10 points
- We report your account status and payment history to all three major credit bureaus monthly
- You have the right to dispute inaccurate information on your credit report directly with the bureau
For a free copy of your credit report, visit AnnualCreditReport.com, the only federally authorized source.
7Your Privacy Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of personal data we hold about you
- Correction: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data (subject to legal retention requirements)
- Portability: Receive your data in a structured, machine-readable format
- Opt-out of marketing: Unsubscribe from promotional emails at any time
- Opt-out of sale/sharing: California residents can opt out of certain data sharing
- Non-discrimination: You will not be discriminated against for exercising your privacy rights
To exercise any of these rights, contact us at [email protected]. We will respond within 30 days.
8California Residents (CCPA)
If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights:
- The right to know what personal information we collect, use, disclose, and sell
- The right to delete personal information collected from you (with certain exceptions)
- The right to opt out of the sale or sharing of personal information
- The right to correct inaccurate personal information
- The right to limit use of sensitive personal information
- The right not to be discriminated against for exercising these rights
Do Not Sell or Share My Personal Information: California residents can submit an opt-out request by emailing [email protected] or calling our toll-free number 1-800-XXX-XXXX.
9Data Security
We implement industry-standard security measures to protect your personal information, including:
- 256-bit SSL/TLS encryption for data in transit
- AES-256 encryption for data at rest
- Multi-factor authentication for account access
- Regular security audits and penetration testing
- SOC 2 Type II compliance
- Employee training on data handling and privacy
- Strict access controls on a need-to-know basis
Despite our safeguards, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.
10Children's Privacy
Our Service is not directed to individuals under the age of 18, and we do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18 without parental consent, we will take steps to delete that information. If you believe we have collected information from a child, please contact us immediately.
11Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, including:
- Active account data: For the duration of your relationship with us
- Loan records: At least 7 years after loan closure (per federal lending law)
- Tax records: At least 7 years (per IRS requirements)
- Credit application data: 25 months minimum (per ECOA requirements)
- Marketing data: Until you opt out or 3 years of inactivity
12Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will:
- Post the updated policy on this page with a new "Last Updated" date
- Notify you via email if the changes materially affect your rights
- Obtain your consent where required by law
We encourage you to review this Policy periodically to stay informed about how we protect your information.
13Contact Us
If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact our Privacy Team:
Indigo Card USA — Privacy Office
📧 Email: [email protected]
📧 Security Issues: [email protected]
📬 Mailing Address: Indigo Card USA, Attn: Privacy Officer, 1234 Finance Blvd, Suite 500, Dover, DE 19901
📞 Toll-Free: 1-800-XXX-XXXX
⏱ Response Time: Within 30 days of receipt