Account & Data Deletion Policy

At Kredtap, we respect your privacy rights and are committed to processing and protecting your personal data in accordance with the provisions of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), applicable Reserve Bank of India ("RBI") regulations, and other applicable laws.

This Policy explains how you may request deletion of your personal data, the process followed by Kredtap, and circumstances under which certain information may be retained pursuant to legal obligations.

1 Your Right to Request Deletion

You may request deletion, erasure, or closure of your account and associated personal data at any time, including where:

• you created a loan account with Kredtap;
• you submitted information for credit assessment or eligibility checks;
• you interacted with our website, mobile application, customer support channels, or onboarding systems.

Such requests shall be processed in accordance with the DPDP Act and other applicable legal and regulatory requirements.

2 How to Submit a Deletion Request

To request deletion of your account and/or personal data, please send an email from your registered email address to:

Please provide the following information for identity verification purposes:

• 1 Full Name
• 2 Registered Mobile Number
• 3 Registered Email Address
• 4 Last four (4) digits of Loan ID / Customer ID (if applicable)
• 5 Last four (4) digits of the Government-issued identification document submitted during KYC verification

3 Verification and Processing Timeline

Upon receipt of your request:

4 Personal Data That Will Be Deleted

Subject to applicable legal retention requirements, Kredtap shall delete or anonymize the following categories of personal data:

• Profile and account information;
• Contact details and login credentials;
• Device identifiers and technical usage data collected through our mobile applications or platforms;
• Financial, transactional, and credit-related data not required to be retained under applicable law;
• Marketing preferences and communication records not required for compliance purposes.

5 Data Retention Required by Law

Notwithstanding a deletion request, Kredtap may retain certain categories of personal data where retention is necessary for compliance with applicable laws, regulatory obligations, or lawful purposes, including but not limited to:

• KYC records and identity verification documents;
• Loan agreements, repayment history, and financial transaction records;
• Credit bureau reporting and related records;
• Taxation, accounting, and audit documentation;
• Fraud prevention, cyber-security monitoring, dispute resolution, legal claims, or regulatory investigations.

Such data may be retained for periods prescribed under applicable laws, including guidelines issued by the Reserve Bank of India, the Prevention of Money Laundering Act, Income Tax laws, and the Digital Personal Data Protection Act, 2023. Retained data shall be securely stored and processed solely for lawful and regulatory purposes and shall be deleted or anonymized upon expiry of the applicable retention period.

6 Pending Loans or Outstanding Obligations

Where you maintain an active loan, unpaid dues, unresolved disputes, ongoing investigations, or pending contractual obligations, Kredtap may defer deletion of certain personal data until such obligations are fully resolved or discharged.

You may nevertheless submit a deletion request during such period, and Kredtap shall notify you regarding the categories of data that cannot presently be deleted and the reasons for such retention.

7 Withdrawal of Consent

In accordance with the DPDP Act, you may withdraw consent previously provided for processing your personal data by submitting a written request to the contact details provided below.

8 Confirmation of Deletion

Upon completion of the deletion process, Kredtap shall issue a confirmation communication to your registered email address confirming:

• deletion or anonymization of eligible personal data; and
• categories of data retained pursuant to legal or regulatory obligations, if any.

9 Data Security

Kredtap implements reasonable technical, organizational, and security safeguards to protect personal data against unauthorized access, disclosure, alteration, misuse, or destruction, consistent with applicable data protection and information security requirements.

10 Grievance Redressal & Contact Information

For deletion requests, privacy concerns, withdrawal of consent, or grievance redressal, you may contact:

Registered Office: 138 Village Dariya, Opp. Railway Good Shed, Kishangarh, Chandigarh – 160101

11 Policy Updates

Kredtap reserves the right to amend or update this Policy from time to time to reflect changes in applicable law, regulatory requirements, operational practices, or technology standards.