CardWise AI Privacy Policy
EFFECTIVE DATE: OCTOBER 18, 2026 • LAST UPDATED: OCTOBER 18, 2026 • PUBLISHED AT: NIMBLESCALE.AI/CARDWISE/PRIVACY
1. Our Privacy-First Commitment
CardWise AI (“CardWise,” “we,” “us,” or “our”), developed by NimbleScale.ai (nimblescale.ai), is built on a foundational privacy principle: you should be able to maximize your credit card rewards at online checkout without surrendering your financial credentials or personal browsing history.
2. Information Stored Locally on Your Device
By default, CardWise AI operates 100% locally inside your web browser using the browser’s built-in chrome.storage.local storage API. The following information stays strictly on your device and is not transmitted to NimbleScale.ai servers in local mode:
- Wallet Card Templates: The public names of credit card products you select from our 70+ card catalog (e.g., “Chase Freedom Flex,” “Citi Double Cash”), optional nicknames, and custom reward multipliers or point valuations you configure.
- Optimization Preferences: Your chosen decision strategy (Balanced Dollar Value, Cashback First, Travel Points First, or Simplicity Mode), minimum switch threshold, and business-spend toggle.
- Local Rewards History: Optional checkout savings logs that you manually record via the “Log” button to track your estimated rewards earned vs. missed. You can clear this history at any time with one click inside the Options page.
- Anonymous Installation Identifier: A randomly generated anonymous installation UUID (e.g.,
cw_anon_...) stored locally to manage optional trial quota if you choose to enable AI features.
3. How On-Page Checkout Detection Works
To recommend the highest-earning card when you shop online, CardWise AI runs a lightweight script in your active browser tab that checks whether the current page is a checkout or payment page:
- Domain & Category Matching: The extension matches the current website’s hostname (e.g.,
amazon.com,doordash.com) against a bundled local merchant category database inside your browser. - Cart Total Estimation: When a checkout page is detected, the extension scans visible summary labels (such as “Order Total” or “Amount Due”) locally in your browser to calculate estimated dollar rewards across your cards.
- Sensitive Field Exclusion: Our content script explicitly excludes and ignores text or inputs associated with credit card numbers, CVVs, passwords, emails, phone numbers, and street addresses.
4. Optional AI Features & Data Transmission
CardWise AI includes optional cloud AI capabilities (“AI Checkout Enrichment” and “AI Card Source Analyzer”) that are disabled by default. Data is sent to the CardWise AI backend only when you explicitly opt in:
| Feature | When Triggered | What Data Is Sent |
|---|---|---|
| Card Template Catalog Sync | Extension startup / refresh | A read-only GET request for public U.S. credit card reward templates. No user or browsing data is sent. If offline, the bundled local catalog is used. |
| AI Checkout Enrichment (Opt-In) | Only when you enable “Improve recommendations with CardWise AI” in Preferences and visit an ambiguous or marketplace checkout | Merchant domain, page title, URL path, up to 10 short sanitized checkout hints (e.g., “Order Total”), pre-parsed dollar amounts, and—only if you select “Share normalized card summary”—the public names and reward rules of cards in your wallet. |
| AI Card Source Analyzer (Opt-In) | Only when you paste a public issuer URL or benefit guide text and click “Analyze selected source” | The public card benefit text or URL you provided and the existing reward rule structure of that card template so AI can highlight updated multipliers or credits. |
| Subscription Billing (Optional) | Only if you upgrade to a paid Plus/Pro AI plan | Payment processing is handled directly by Stripe. NimbleScale.ai stores only your Stripe Customer ID and subscription status linked to your CardWise user ID. |
When optional AI features are invoked, requests are processed via our sub-processors (TypeSafe AI System One / Jev and OpenAI API) strictly to classify merchant categories, verify reward rules, and return structured recommendations. We do not permit sub-processors to train foundation models on your requests.
5. Browser Permissions Explained
storage: Used to store your selected card templates, point valuations, and preferences locally in your browser.activeTab: Used when you open the CardWise popup to read the current tab’s domain name and show the top card recommendation for that merchant.host_permissions (http://*/*, https://*/*): Required so the floating checkout badge can automatically appear on merchant checkout pages across the web without requiring you to manually click the toolbar icon on every shopping site.
6. Chrome Web Store Limited Use Disclosure
CardWise AI’s use and transfer of information received from Google and browser APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements:
- We do not sell, rent, or trade user data or browsing activity to any third party, data broker, or advertiser.
- We do not use or transfer user data for personalized, re-targeted, or behavioral advertising.
- We do not use or transfer user data to determine creditworthiness or for lending purposes.
- Human interaction with user data is strictly prohibited except where you explicitly submit a support request or where required by law.
7. Data Retention, Deletion & Contact Information
- Deleting Local Data: Because your wallet and history live in
chrome.storage.local, you can delete them immediately at any time by clicking Clear History or Reset Defaults in the CardWise Options page, or by uninstalling the CardWise AI extension from your browser. - Deleting Backend AI / Billing Records: If you opted into CardWise AI trial/subscription features and wish to delete usage logs or billing metadata associated with your installation ID, email us at hello@nimblescale.ai and we will complete your request within 30 days.
Questions or Privacy Requests: Contact NimbleScale.ai at hello@nimblescale.ai or visit nimblescale.ai/CardWise/support.