Last Updated: 7 June 2025
This Privacy Policy explains how KreditScore ("KreditScore", "we", "us") collects, uses, stores, and shares your information when you use www.kreditscore.in, our mobile application, or our WhatsApp inquiry channel (together, the "Platform"). By using the Platform and voluntarily providing us with information, you consent to the practices described in this Policy.
If you do not agree with this Policy, please do not use the Platform.
1. Information We Collect
With your explicit consent, we may collect:
- Identity information: name, date of birth, gender, address, PAN, Aadhaar (or masked Aadhaar where applicable)
- Contact information: mobile number, email address
- Financial information: income details, employment information, bank statements, existing loan or EMI obligations
- KYC information: photograph/selfie, government-issued ID documents. We may request one-time access to your camera or location strictly for KYC/onboarding purposes, in line with RBI's Digital Lending Guidelines.
- Device and usage information: IP address, browser type, app usage data, collected for analytics
- Customer support records: call recordings or chat history with our support team, where applicable
We do not collect biometric data, and we do not access your contact list, call logs, SMS, or media files on your device.
2. Why We Collect Your Information
We use your information to:
- Assess your eligibility for loan products
- Share your application with the specific Lending Partner(s) you choose
- Verify your identity for KYC purposes
- Communicate with you about your application and our services
- Improve our Platform and services
- Comply with applicable legal and regulatory requirements
3. How We Share Your Information
This is the most important section of this Policy, and we want to be specific rather than vague:
- With your chosen Lending Partner(s): We share your information with the specific bank and/or NBFC partner(s) you apply through — currently authorised bank and NBFC Lending Partner(s) you choose when applying and authorised bank and NBFC Lending Partner(s) you choose when applying — solely for the purpose of processing your loan application.
- With Direct Selling Agents (DSAs): Where a Lending Partner engages DSAs as part of their own sales/collection network, we may pass your information to those DSAs strictly under the Lending Partner's authorization and for the purpose of following up on or processing your application — not as an independent transfer to an unrelated buyer.
- With credit bureaus: Only after taking a separate, specific consent from you (see our Credit Report Consent Terms).
- With technology/infrastructure service providers (such as cloud hosting or SMS/WhatsApp gateway providers) who are bound by confidentiality obligations and process data only on our instructions.
- With law enforcement or regulators, where legally required.
We do not sell your personal information as a standalone commodity to any third party. Every instance of sharing above is tied to a specific, disclosed purpose connected to facilitating your loan application — it is not a general license to trade your data.
4. Cookies
We use cookies to recognize you, remember your preferences, and understand how you use the Platform. You can disable cookies through your browser settings, though some features of the Platform may not work properly if you do.
5. Data Storage and Security
Your information is stored only on servers located within India, in line with RBI's data localization requirements for digital lending. Where any data must be processed outside India for a limited technical purpose, it is anonymized and deleted from the foreign system within 24 hours. We use reasonable security safeguards — including encryption, access controls, and restricted internal access on a need-to-know basis — to protect your data from unauthorized access, loss, or misuse.
Our role versus our Lending Partner's role: KreditScore acts as a Lending Service Provider (LSP) — a technology and facilitation layer. Your Lending Partner (the bank/NBFC you apply through) is the Regulated Entity ("RE") and the principal party legally responsible for your loan and for the security of your data once it is with them. We act as a processor on their behalf, and our systems are designed to pass information to the Lending Partner rather than hold it indefinitely.
How we handle specific categories of sensitive information:
- PAN: Collected and verified as required for your loan application, and shared with the Lending Partner promptly. We do not retain your PAN beyond the active-application window except where required by law or by the Lending Partner.
- Aadhaar: Where Aadhaar-based KYC is required, this is carried out through your Lending Partner's authorised e-KYC/Video-KYC process. We avoid storing your full Aadhaar number or a copy of your Aadhaar card on our own systems beyond what is strictly needed to complete that one-time verification step; wherever possible, we display and store only a masked Aadhaar (last 4 digits).
- Bank statements / financial documents: Where possible, we fetch your financial data through the RBI-licensed Account Aggregator (AA) framework, with your specific consent, rather than asking you to upload bank statement files. Information you provide in your loan application is stored securely and shared with your chosen Lending Partner for assessment.
- KYC photographs and ID documents: Used only for one-time identity verification during onboarding and not retained in raw form beyond what is necessary to complete that verification.
- Biometric data: We do not collect or store biometric data.
6. Data Retention
- PAN and profile information: If you create a profile/account on the Platform, we retain your PAN and the other profile details you provide for as long as your account remains active — this means you do not need to resubmit your documents each time you apply for a loan through us. You may request deletion of your PAN and profile data at any time by writing to support@kreditscore.in. On receiving such a request, we will delete this information within 30 days, except where we are required to retain it for longer — for example, if you have an active or recently closed loan obligation with a Lending Partner, or where retention is required by law.
- Documents tied to a specific application: Information collected solely to process a particular loan application — such as uploaded bank statements or KYC photographs — is deleted once that application is closed, unless you have chosen to retain it as part of your profile under the point above.
- Aadhaar is handled differently: Regardless of how long your profile remains active, we do not retain your full Aadhaar number or a copy of your Aadhaar card. Aadhaar-based verification is carried out through your Lending Partner's authorised e-KYC/Video-KYC process, and at most a masked Aadhaar (last 4 digits) is retained by us for record purposes.
- Legally mandated retention: Notwithstanding the above, we may retain information for longer where required by law, by a Lending Partner's regulatory requirements, or in connection with an ongoing legal or regulatory matter.
You can request access to, correction of, or deletion of your retained information at any time — see Section 7 — and we will act on such requests except where retention is legally required.
7. Your Rights
You have the right to:
- Access the information we hold about you
- Correct inaccurate or outdated information
- Withdraw your consent at any time (note: this may mean we can no longer process or continue your loan application)
- Request deletion of your information, subject to legal retention requirements
- Raise a grievance with our Grievance Officer (see Section 9)
To exercise any of these rights, write to support@kreditscore.in.
8. Children's Privacy
The Platform is intended only for individuals aged 18 and above. We do not knowingly collect information from anyone below this age.
9. Grievance Officer
For any privacy-related concerns, contact:
Name: Grievance Officer Email: support@kreditscore.in Phone: +91 98111 95111 Address: New Delhi, India
10. Changes to This Policy
We may update this Policy from time to time. The "Last Updated" date at the top will reflect the most recent revision. Continued use of the Platform after an update constitutes acceptance of the revised Policy.