How we use your data
A plain-language summary. The Privacy Policy and each consent you give are the binding documents.
What we collect
Your mobile number, the details you enter in the eligibility form (identity, address, employment, income, existing loans), any KYC documents you upload, and records of your consents and payments.
Why
To run your eligibility check, to match you with lenders whose products fit, and to keep the evidence the law requires (consents, payments, audit records).
Who sees it
Only the lender you choose, only after you tick the consent that lists exactly what will be shared, and only those listed fields. Other lenders never see your details. We do not sell your data.
Your choices
You can withdraw a sharing consent from your dashboard at any time, turn off promotional messages in notification settings, correct your profile, and raise a grievance with our Grievance Officer.
How long we keep it
Only as long as the retention periods below, unless the law requires longer (for example, a legal hold).
| Otp verifications | 30 days | Operational security logs |
| Payment webhook events | 90 days | Payment dispute window |
| Auth sessions | 180 days | Security investigation window |
| Notifications | 180 days | In-app notification history |
| Customer activity events | 400 days | Product analytics |
| Customer profiles | 1,825 days | KYC retention under PMLA/RBI KYC directions - confirm with counsel |
| Consents | 3,650 days | Evidential record; statutory retention applies |
| Lender share consents | 3,650 days | Evidential record; DPDP |
| Audit logs | 3,650 days | Regulatory audit trail |