Privacy policy

Personal Data: data relating to an identifiable individual; may include sensitive data such as KYC/financial information.

Roles: We act as Data Fiduciary for our own purposes and as a Processor for our RE partners, as applicable. For loan accounts, the RE is typically the primary controller.

Identity & KYC: Name, DOB, gender, addresses, email, mobile, PAN, CKYC details/identifier, Aadhaar (offline XML/e-KYC where permitted), photos/doc scans, video (for V-CIP where applicable).

Financial & Employment: bank details/statements, employment, income docs, GST/ITD info, liabilities, bureau scores/tradelines.

Loan & Repayment: applications, offers, KFS acknowledgement, loan agreements, disbursals, repayments, charges/fees/penal charges.

Payments & Mandates: UPI VPA, card tokens, mandate IDs (e-NACH/UPI Autopay), pre-debit logs, chargeback/failure metadata.

Usage & Device: device IDs, OS, app version, IP, time zone, language, referral, cookies/SDK events, crash logs.

Communications: emails/SMS/WhatsApp, call recordings for quality/legal compliance.

Data is collected from you, our RE partners, Account Aggregators (with consent), CKYC, credit bureaus, PAN/ITD, bank verifiers, payment providers/UPI PSPs, e-sign/e-mandate providers, analytics and anti-fraud vendors, and lawful government databases.

Onboarding/KYC/AML, eligibility & underwriting, fraud prevention, risk scoring.

KFS presentation, documentation (e-sign), disbursal, repayment/collections, support.

Regulatory compliance, audits, and statutory reporting.

Analytics, product improvement, security/incident response.

We record verifiable consent for optional processing and for specific pulls (AA, bureau, e-KYC/e-Sign). You may withdraw consent for optional processing (e.g., marketing). Core processing required for KYC/AML/loan servicing may continue as required by law/contract.

Models/rules may be used for eligibility, pricing, and fraud. You may request a meaningful explanation of factors for adverse decisions and ask for manual review.

We do not store raw card data; we rely on network/issuer tokenisation.

UPI Autopay/e-NACH mandates are created only with your confirmation; pre-debit notices are sent where required.

Payment data is stored/processed per applicable localisation requirements.

Disclosures occur on a need-to-know basis with RE partners, KYC/e-KYC/e-Sign/e-Mandate providers, AA, bureaus, payment aggregators/UPI PSPs, banks, verification vendors, anti-fraud/analytics, communications, cloud hosting, and regulators/courts when required.

We strive to keep Indian payment data in India. Other data may be transferred subject to lawful safeguards, contracts, and technical controls.

Encryption in transit/at rest (where applicable), tokenisation, MFA/least-privilege.

Logging/monitoring, secure SDLC, vulnerability scans, incident/breach response.

We will notify affected users and competent authorities as required by law in case of a qualifying breach.

Data is retained only as necessary for the above purposes or as required by law/contract. Typical baselines: KYC/transaction records at least 5 years after loan/account closure; mandate/accounting records as per tax/regulatory limits; consent logs retained for compliance defence. Thereafter, we delete or irreversibly anonymise.

The Platform is not intended for minors under 18. We do not knowingly onboard minors.

Access a copy of your personal data (subject to law).

Request correction/erasure of inaccurate or unnecessary data.

Lodge a grievance with our Grievance Officer; if unresolved within 30 days, escalate to the Data Protection Board of India and/or RBI Ombudsman (as applicable).

Nomination right (where available) to appoint a nominee for rights exercise.

We use essential, analytics, and marketing cookies/SDKs. You can manage preferences in the app or via your browser/OS; disabling may impact functionality.

Refunds are processed in accordance with the timelines defined in the Terms & Conditions. Typically, refunds are credited within 7–10 working days from initiation.

We will post updates here with a new “Last updated” date. Material changes may be notified in-app or via email/SMS.