As long as it is not tied to any identifying information, using it to merely check the validity of a number entered in a credit card application (when the person already OKed it) would be fine.