This Privacy Policy explains how Payandserve Digital Lending Platform collects, uses, shares and protects your personal information. It is aligned with the Digital Personal Data Protection Act, 2023, the IT Act 2000 (and Reasonable Security Practices Rules, 2011) and the RBI Digital Lending Guidelines.
1. Information We Collect
- Identity: Name, date of birth, Aadhaar (masked), PAN, photograph.
- Contact: Mobile, email, residential and business address.
- Financial: Bank statements, income proof, GST returns, credit bureau report.
- Device & usage: IP address, device identifiers, browser, referral pages.
2. How We Use It
To verify your identity, assess your creditworthiness, process your loan application, service the loan, comply with KYC/AML obligations, prevent fraud, and improve our products.
3. Data Sharing
We share information only with: (a) our RBI-regulated Lender partners; (b) credit information companies (CIBIL, CRIF, Equifax, Experian); (c) regulators & statutory authorities where required by law; (d) authorised service providers acting on our behalf under contractual confidentiality.
4. Data Retention
We retain personal data for the duration of your loan relationship and for the period mandated by applicable law (typically 8 years after closure for KYC records).
5. Your Rights
You have the right to access, correct or withdraw consent for your data, subject to legal obligations. Write to our Grievance Officer (see below).
6. Security
We use industry-standard encryption (TLS 1.2+, AES-256 at rest), role-based access control, and regular security audits.
7. Cookies
We use cookies to maintain session state, remember preferences and analyse traffic. You can disable cookies in your browser; some features may not work.
8. Grievance Officer
For privacy-related queries, write to our Grievance Officer at the email and address listed on the Grievance Redressal page.
This is a starter template — please have it reviewed by your compliance/legal counsel before going live.