Please read the below policy before using the Credfin App

Credfin Services Private Limited, whose registered office is at 2nd Floor, Room No 204, H-4866/1, 24, Ansari Road, Daryaganj, New Delhi, Central Delhi, Delhi – 110002 (hereinafter referred to as “Credfin” or “Company” or “we” or “us”), is the owner of the mobile application named Credfin (“App”) and the website www.credfin.money (“Website”). The App and Website are collectively referred to as the “Platform”.

In order to process your loan requests and to ultimately provide a loan to you, we need to collect various data and information from you.

By visiting our website www.credfin.in or using the Platform, you agree to be bound by the terms and conditions of this Privacy Policy. By mere access to the Platform or any part thereof, you expressly consent to Credfin Services Private Limited’s use and disclosure of your personal information in accordance with this Privacy Policy.

This Privacy Policy is incorporated into and subject to the Terms of Use of the Platform. If you do not agree to this Policy or any part thereof, please do not use or access our Platform.

Grievance Officer Contact Information

In accordance with the Information Technology Act, 2000 and the rules made thereunder, the details of the Grievance Officer are provided below:

Address: 2nd Floor, Room No 204, H-4866/1, 24, Ansari Road, Daryaganj, New Delhi, Central Delhi, Delhi – 110002

Email: support@credfin.money

Collection of Personally Identifiable Information

When you use our Platform, we collect and store information provided by you from time to time. Our primary goal is to provide you with a safe, efficient, smooth, and customized experience.

You may browse the Website or App without revealing any personal information. However, to create an account or avail services, you must provide certain basic details.

The information collected includes, but is not limited to:

  • Full Name
  • Email Address
  • Residential Address
  • Postal Code
  • Organisation Name
  • Salary Details
  • Phone Number
  • Permanent Account Number (PAN)
  • Bank Account Details

We only collect and store your profile picture and username when you log in using Gmail.

We may also collect identifiable information such as your last three months’ bank statements, salary details, and transaction history when you create an account or apply for loans. Failure to provide mandatory information may limit services available on the Platform.

Collection of Other Non-Personal Information

We automatically track certain information based on your usage behavior on the Platform. This information is used for internal research, analytics, and service improvement.

This information may include:

  • IP Address
  • Browser Information
  • URLs visited before and after accessing our Platform

We use cookies to enhance user experience. You may choose to decline cookies through your browser settings; however, this may affect certain services.

We retain information as required to resolve disputes, provide customer support, and comply with legal obligations.

Collection of Personal & Sensitive Data

The information collected by the App depends on the permissions you grant on your device. When you install the App, information is associated with unique device identifiers.

The data collected from your device may include:

  • IMEI Number
  • Operating System Information
  • SDK Version
  • Mobile Network Information (Carrier Name, SIM Serial, SIM Slot)
  • Wi-Fi Information
  • List of Installed Apps
  • Device Profile Information

This information is used to enhance security, prevent unauthorized access, provide automatic updates, and improve user experience.

S. NO.Permission NameWhat data is collectedHow the data is used
1.Camera related permissionsPermission to access the camera is required so that requisite KYC documents can be easily scanned or captured and thus saving time by allowing us to auto-fill relevant data. This will ensure that you are provided with a seamless experience while using our application.We use the data provided by using camera to analyze your creditworthiness, loan eligibility, check KYC documents, and the terms of your loans..
2.Storage related PermissionsStorage permission is required so that your KYC and other relevant documents can be securely downloaded and saved to your phone. These KYC documents can then be easily uploaded for faster completion of your loan application and disbursal. This will help us to ensure that you undergo a seamless experience on our application.
You will not be able to use the App if you disable this access.
We use this permission to securely download and save documents to your mobile device so that they can then be easily uploaded for faster completion of your loan application
3.Location related permissionLocation-related permissions is collected when it is enabled from your mobile device and this permission is required to assess the serviceability of your loan application.
We collect this data when our App is running in the background of your mobile device. You will not be able to use the App if you disable the location services.
We use this data taken by granting this permission for verifying the address and undertaking a continuous credit risk assessment. It will expedite the completion of your ICC process along with facilitating better credit access to the customers. It will also help in strengthening security against any unauthorized access to your account. This permission will also be used for providing better customer service and providing Customized offers.
4.Phone related permissionsWe collect and store your hardware model, build model, RAM Storage, Unique device identifiers like IMEI, serial number, SSAIO, SIM information that includes network operators/rooming state, MNC and MCC Codes WIFI information that includes MAC Address and mobile network information.
You will not be able to use the App if you disable this access.
The data collected here is used for Research and Development, for enabling Marketing and Outreach, to uniquely identify the devices and to ensure that no unauthorized device acts on your behalf which will help us in preventing frauds. This also helps in enriching your credit profile and assessing your creditworthiness.
5.SMS related permissionsWhen you grant us access to SMS, we collect all the SMS data present on your mobile device. All the data collected with SMS access are stored to Credfin servers and we do not share this data with any third-party. This data is used as a part of internal assessment only.
This data may be collected even when the app is not in use. You will not be able to use the App if you disable this access.
The data collected here is used for loan processing and it enables our team to assess credit worthiness, credit risk and detect any fraud in a better manner resulting in speedy disbursal.
6.Installed Application related permissionsWe collect and store each installed applications' metadata information which includes the application name, package name, installed time, updated time, version name, and version code of each installed application on your device.
You will not be able to use the App if you disable this access.
We use the data colleced here to assess your creditworthiness and provide you with pre-approved customized loan offers.
7.User Personal Information related permissionsWe collect and store user account data which includes email address and user public profile information like name or photo depending on the platform (Google) used by you to login to the app.This information is required as a part of the registration process and to access our service and is also used to auto-populate relevant fields in the course of our opp interface. Our app also collects your mobile number for verification to check the active SIM status of the device, uniquely identify you, and prevent fraud and unauthorized access.
8.Contact PermissionWhen you enable us access to your mobile device's address book, we can use the names and contact information to send invitations and assess your phone usage and habits. As part of the App journey, we access your phonebook contacts, including their contact names, phone numbers, account kinds, favourites (starred), and contact labels, to enrich your profile. We utilise this information to determine your social network based on your phonebook contacts, identify fraudulent contacts in your network, and conduct promotional and marketing activities. This helps us detect fraud and reduce risk.Enabling the App and its Services; Marketing and Outreach; Automated Decisions; and Legal Compliance and Requirements.

Mandatory Data Collection

Please note that a few data points collected are mandatory for building a comprehensive credit risk assessment and credit profile. Such data shall be securely shared with our registered service providers, affiliates, and partners. All data collected through the permissions mentioned above are stored on Credfin servers and are used as part of the assessment process.

Use and Disclosure of Your Personal and Other Information

We use personal information to provide the services you request, customize your user experience, and improve our services. Where we intend to use your personal information for marketing purposes, you will be provided with an option to opt-out.

Your personal information may be used to:

  • Troubleshoot problems;
  • Help promote a safe service;
  • Conduct analytical analysis;
  • Measure consumer interest and satisfaction;
  • Inform you about offers, products, services, and updates;
  • Customize your experience;
  • Detect and prevent fraud, suspicious, or illegal activity;
  • Enforce our terms and conditions;
  • Improve our services or as otherwise described at the time of collection.

USE OF YOUR DEVICE INFORMATION

We use the information provided by you in the following ways:

  • To establish identity and verify the same;
  • To monitor, improve and administer our Application/Platform;
  • To provide our services, including performing credit profiling for the purpose of facilitating loans to you;
  • To design and offer customized products and services;
  • To analyze how the Application is used, diagnose service or technical problems and maintain security;
  • To send communications, notifications, and information regarding products or services;
  • To manage our relationship with you and inform you about other services we believe may be useful to you;
  • To conduct data analysis in order to improve the services/products provided;
  • To comply with applicable laws and regulations;
  • To conduct KYC based on the information shared by the user;
  • To use user information in other ways permitted by law to enable access to financial services.

We will use and retain your information for such periods as necessary to provide services on our Application, to comply with legal obligations, resolve disputes, and enforce agreements.

DISCLOSURE TO THIRD PARTIES

We may share your information with third parties, including regulated financial partners, for providing services and facilitating loans. Disclosure may occur in the following circumstances:

  • To comply with legal obligations, government orders, or statutory authorities;
  • To enforce our terms of use or during corporate restructuring, mergers, or divestitures;
  • For fraud prevention and credit risk reduction;
  • With technology partners to track user interaction with the Website;
  • With affiliates or business entities in case of merger or acquisition, subject to this Policy;
  • With third-party technology and credit partners such as Credit Bureaus for credit checks and analysis;
  • Under confidentiality agreements restricting use only to specified purposes.

If we use or disclose your information for purposes not specified above, we will obtain your explicit consent.

YOUR PRIVACY CONTROLS

  • Device-level settings: You can modify permissions (e.g., camera access) through your device settings.
  • You may request removal of content from our servers by contacting our Grievance Officer, subject to applicable law.

SECURITY PRECAUTIONS

Our Website/Application is built with strict security measures to protect your information from loss, misuse, or unauthorized access. We use SSL-based encryption for data transmission as required under Indian law.

The Website and Application have been audited by a CERT-In auditor, XIARCH SOLUTIONS PVT LTD, and certified for:

  • Encrypted and secured communication
  • Information Security Policy aligned with ISO 27001 standards
  • Compliance review of security controls
  • Compliance with IT Act, 2000
  • Protection against malware and virus attacks

Additional safeguards include:

  • Encryption of data during transit;
  • OTP-based verification;
  • Regular review of data storage and processing practices;
  • Restricted access to personal data on a need-to-know basis under confidentiality obligations.

DATA TRANSFERS

Your information is stored on servers located in India. We comply with applicable data protection laws, including the Information Technology Act, 2000.

We address formal written complaints promptly and cooperate with regulatory authorities where required.

BUREAU ENQUIRY

We may enquire with one or more Credit Bureaus on behalf of an NBFC to determine loan eligibility and amount.

CHOICE / OPT-OUT

Users may opt out of receiving non-essential promotional communications after account setup.

To remove your data, follow the steps below:

  • Email your request to finance@credfin.in
  • Use the subject line: DELETE PROFILE INFORMATION
  • Our team will contact you to confirm your request
  • The request will be processed within 3–5 working days
  • A confirmation email will be sent once completed

LINKS TO OTHER SITES

Our Website may contain links to external sites. We are not responsible for the privacy practices or content of such websites. Please review their privacy policies separately.

ADVERTISEMENTS ON THE WEBSITE / APPLICATION

We do not advertise on our Website or Application.

YOUR CONSENT

By using the Website/Application or providing your information, you consent to the collection, use, sharing, and disclosure of your information as described in this Privacy Policy.

Any changes to this Privacy Policy will be posted on this page to keep you informed.