Privacy & your data
Updated September 24, 2026.
Shuttle Labs operates the Shuttle early-access waitlist at shuttlecard.xyz. Joining the waitlist does not apply for a credit card or connect a financial account.
What we collect and why
We store your email address, signup time, email-update and advertising preferences, campaign tags from the page URL, and the referring website’s hostname. We use these details to keep your place, send an early-access invitation, and understand which campaigns bring signups. If you opt into product updates, we may also send you those updates. We do not collect card numbers, bank credentials, or financial account information through this form.
Optional card-analysis pilot
The pilot currently has restricted test access.
If you choose to use our analysis app, we send single-use sign-in links to your waitlist email. We store hashed login tokens and session identifiers. Cloudflare hosts the app and database. Cloudflare handles sign-in and report-ready emails for enabled pilot accounts.
With your separate consent, Plaid connects the credit-card accounts you select and supplies account names, masked identifiers, up to 12 months of transactions, and available credit-card balances, APRs, statement and payment details. Shuttle does not receive or store your bank username or password. Read Plaid’s privacy policy for how Plaid handles the connection.
We use transaction dates, amounts, currencies, merchant names and categories to estimate rewards opportunities on card types you confirm. We encrypt Plaid access tokens, imported account information, transaction details, liability snapshots and report contents before storing them in D1. Some operational identifiers and status fields are stored separately. For public card-benefit research, an AI research service uses card product names and public issuer information through OpenRouter and its model providers. We do not send your transaction history, account identifiers, balances, or email address to that research service. Calculations use your imported data within Shuttle. No financial data is sent to Meta, and the signed-in app does not load advertising tracking.
This is a one-time analysis: we request disconnection from Plaid after the historical import is complete. Our pilot policy schedules imported financial data for deletion 30 days after connection and reports 30 days after creation. Cleanup and provider revocation procedures must be verified before launch; temporary failures may require follow-up. Backup copies are subject to separate provider retention. You can request earlier deletion and disconnection using “Disconnect and delete my financial data” in your account. If a provider is temporarily unavailable, disconnection will be retried. Your waitlist signup remains unless you separately request removal.
Authorized Shuttle staff may review your report, including the card names you confirm and the transactions it cites, to check its accuracy and fix errors. We do not sell this data or use it for advertising. Results use published rewards rules and estimates, not a complete list of personalized issuer offers. Shuttle does not activate offers, move money, apply for credit, or change your cards through this pilot.
Hosting and advertising
Cloudflare hosts this website and stores the waitlist database. It processes connection information to serve and protect the site. The signup service uses your IP address for rate limiting; we do not store it in the waitlist database.
If Meta advertising tracking is configured and you allow it, Meta’s Pixel receives page-view and successful new-signup events, along with browser and connection information, and may use cookies to associate those events with ads. We do not pass the email field to the Pixel. Meta processes information under its privacy policy. Declining advertising cookies does not prevent signup.
Your choices
You can change advertising preferences using the link at the bottom of the landing page. Your choice is stored in this browser. The site honors Global Privacy Control by disabling optional Meta tracking. Product updates are optional and separate from your requested early-access invitation.
Retention and requests
Waitlist information is retained while we operate the early-access waitlist, unless you request removal. For access, correction, removal, or withdrawal of email-update consent, contact Shuttle Labs at hello@shuttlecard.xyz.