Privacy Policy

This privacy policy has been prepared by Codebrew Innovations Private Limited (“Kredtap” “We”, “Our”, “Us”), a private limited company incorporated in India (CIN U72200CH2017PTC041572), having its registered office at House No. 2014, Sector 44C, Chandigarh, Chandigarh, India - 160047. Kredtap provides you loans through websites, digital lending applications (“DLAs”) and platforms which are either owned and operated by itself or belong to its Lending Service Providers (“LSPs”).

The purpose of this Privacy Policy is to give you, the user, (“You”, “Your” or “User”) information on how Kredtap collects, stores, uses, discloses, transfers and processes your personal information (defined below) when: (a) You use our websites https://Kredtap.in (“Websites”), (b) “Kredtap” android and iOS application (“Mobile Application”).

This Privacy Policy has been prepared in compliance with:

• Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011;
• Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021;
• RBI (Digital Lending) Directions, 2025;
• Other applicable acts, regulations and rules which require the publishing of a privacy policy for handling of or dealing in personal information including sensitive personal data or information and all applicable laws, regulations, guidelines provided by applicable regulatory authorities including but not limited to the RBI.

1. USE OF OUR WEBSITE OR SERVICES

This Privacy Policy is incorporated into and at all times is subject to and is to be read in conjunction with the Terms of Use of the Website/Mobile Application.

2. CONSENT

You hereby expressly consent to provide below mentioned information to us for the purpose of providing the Services to you. If you disagree with any of the terms mentioned herein, please do not proceed with the usage of the Services.

For the users consenting to continue accessing the Website /Mobile Application and avail the Services, this Privacy Policy explains our policies and practices regarding the collection, use, and disclosure of your information.

3. COLLECTION OF INFORMATION

3.1. Information we collect from you:

• User Personal Information: The data points we collect from you for providing the Services include, inter alia, Your full name, DOB, email id, PAN, Aadhar Number, address, mobile number, postal code.
  How we use this information: We use this data for identifying you, preventing unauthorized access and providing the Services to uniquely identify, register and enable you to use the Website/Mobile Application.
• Economic Profile Information: To provide the Services, we may require certain economic profile information such as age/DOB, occupation details, income details, bank details, salary statements, income tax returns.
  How we use this information: We shall use this information to assess your creditworthiness and eligibility for the products offered to You.
• SMS Information: Kredtap collects, transmits, syncs and stores transactional SMS Data to enable us to provide you OTP auto-read feature and identify the various bank accounts that you may be holding, cash flow patterns, and description and amount of the transactions for the purpose of performing a credit risk assessment. This credit risk assessment enables us to perform a quicker loan disbursal. This data may be collected even when the app is closed or not in use.
  Note: We do not collect or store the personal SMS from your inbox.
  How we use this information: We use this data to provide credit risk assessments which enable us to perform a quicker loan disbursal.
• Device Information: We additionally collect certain device information provided herein for our Services. Information the Website/Mobile Application collects, and its usage, depends on how you manage your privacy controls on your device. When You access or install the Website/Mobile Application, we store the information we collect with unique identifiers tied to the device you are using. We also collect your Log information/Meta Data (via the domain server through which the User accesses the App Search queries, IP addresses, crashes, date etc) for the purpose of improvising the Website/Mobile Application functionality.
  How we use the information: We collect information about your device to provide automatic updates and additional security so that your account is not used in other people’s devices. In addition, the information provides us valuable feedback on your identity as a device holder as well as your device behavior.
• Location, Camera Access: We will collect your device location and request camera access for providing the Services in accordance with applicable laws.
  How we use this information: We shall collect your device location information for verifying your address, for the know your customer (KYC) and onboarding process for the Services. We may request camera access to scan and capture the required KYC documents in accordance with applicable laws.

3.2. Information we collect about you from third parties:

For making the Services available to you, we may collect credit information in accordance with applicable laws, from certain third parties such as credit bureaus or credit rating companies. In order to provide Loan products to you, we may receive certain information pertaining to document verification, repayment status etc from certain third parties including NSDL, payment gateway providers. We may further collect your bank account numbers or UPI payment information for collection and repayment of loans.

How we use this information: We shall collect and use this information on a need basis for the provision of Services and for performing due diligence and verification of your application.

3.3. Information you give us about you

In due course of using our Services, you are required to submit data to enable our Services. We use this data to create your profile and provide you with the best available services. We shall collect the following information from you:

• Data provided by you by filling in forms on the Website/Mobile Application.
• Data provided by corresponding with us (for example, by e-mail or chat).
• Data and information you provide when you register to use the Website, download or register on our mobile application, subscribe to any of our Services (such as applying for a loan), search for a Service, and when you report a problem with our Website, our Services, or any of our Sites.
• Data including Your name, address, gender, date of birth, e-mail address, phone number, username, password and other registration information.
• PAN Card, Aadhaar Card, financial information such as employer name, monthly salary, bank account no., bank statements, credit information, copies of identification documents for the onboarding of your application to avail the services.
• Data generated by your usage of our Website/Mobile Application.

This data helps us create your profiles, complete mandatory KYC to offer you the Services, unlock and approve loans and provide you with customized support in case of issues. Wherever possible, we indicate the mandatory and the optional fields. You always have the option to not provide any information by choosing not to use a particular service or feature on the Website.

4. STORAGE OF INFORMATION

We shall store your information at servers located within India. We do not collect any biometric data belonging to you. In case, if any of our representatives ask for the same from you, we request you to kindly refrain from doing the same and address this concern to our Grievance Officer.

We will retain any data or information provided by you till the time we render our services to you. Our data retention policy is restricted to the provision of our services towards you. You can request the deletion of your information from us at any stage. Our data retention and deletion policy is in consonance with the applicable laws and guidelines of the RBI.

5. USE OF INFORMATION COLLECTED BY Kredtap

The information collected from you will be used by Kredtap for the following:

• To provide Services you have requested;
• To establish identity, conduct KYC and verify the same in compliance with the applicable laws;
• To resolve disputes and help investigate violations of our terms of use or to defend against legal claims;
• To disclose the information under special circumstances such as compliance with the applicable local law, court summons, court orders, requests/order from legal authorities or law enforcement agencies requiring such disclosure;
• To assess your creditworthiness for providing the Services;
• To get in touch with you when necessary and contact You by email, SMS, letter, telephone or in any other way about our products and Services;
• To identify, prevent, detect or tackle fraud, money laundering, terrorism and other crimes;
• To identify, develop or improve products, that may be of interest to you;
• To perform other administrative and operational purposes including the testing of systems;
• To recover any payments you owe to us or our partners;
• To undertake filing of records with the relevant governmental authorities in compliance with the applicable laws;
• Comply with our regulatory obligations;
• To maintain records under applicable law or a may apply to pursuant to agreements executed by Kredtap;
• To carry out, monitor and analyse our business, carry out audits, market research, business, and statistical analysis and also direct our efforts for product improvement; and
• To design and offer customized products and services.

We collect all data and other necessary information under this Privacy Policy or otherwise on a need basis required for the above intended purposes in compliance with applicable laws.

6. DISCLOSURE OF INFORMATION

We will share the information only in such manner as described below:

• We disclose and share your information with our LSPs, partner banks or NBFCs and other third-party partners for facilitation of a loan or facility or line of credit or purchase of a product.
• To enable our third-party partners to contact you or to respond to your queries / comments, for promotional offers or to resolve service issues to serve you better.
• We will disclose the data or information provided by a user with other technology partners to track how you interact with the Website/Mobile Application on our behalf.
• We and our affiliates may share your information with other business entity should We (or Our assets) merge with, or be acquired by that business entity, or re-organization, amalgamation, restriction of business for continuity of business.
• We may share your personal information upon request, order or under any duty or as a part of Our legal obligations and as per applicable laws with the governmental authorities, quasi-governmental authorities, judicial authorities and quasi-judicial authorities.

Any disclosure to third parties is subject to the following:

• If we are under a duty to disclose or share your personal data to comply with any legal or regulatory obligation or request, we shall not seek your explicit consent however we shall reasonably endeavor to notify the same to you accordingly.
• We shall take your express consent in the event we share your personal data with third parties.
• We shall share your information with third-party only on a need basis and only for the purpose stated hereunder, as per the applicable laws.
• We shall additionally seek express consent through a separate consent for at appropriate stages of data collection, if so, required under applicable laws.
• Usage of your information by such third parties is subject to their privacy policies. We share limited information with them, strictly to the extent required.

7. SECURITY

7.1. The Website/Mobile Application intends to protect your information and to maintain its accuracy as confirmed by you. We implement reasonable physical, administrative and technical safeguards to help us protect your information from unauthorized access, use and disclosure. For example, we encrypt all information when we transmit over the internet/Mobile Application.

7.2. Our Website/Mobile Application has stringent security measures in place to protect the loss, misuse and alteration of information under control. We use Secure Sockets Layers (SSL) based encryption, for the transmission of the information, which is currently the required level of encryption in India as per applicable law.

7.3. We blend security at multiple steps within our products with state-of-the-art technology to ensure our systems maintain strong security measures.

7.4. We aim to protect from unauthorized access, alteration, disclosure or destruction of information we hold, including:

• We use encryption to keep your data private while in transit;
• We offer security features like an OTP verification to help you protect your account;
• We review our information collection, storage, and processing practices, including physical security measures;
• We restrict access to personal information to our employees, contractors, and agents who need that information to process it;
• Compliance & Cooperation with Regulations and applicable laws;
• We regularly review this Privacy Policy and make sure that we process your information in ways that comply with it;
• Data transfers;
• We ensure that Aadhaar number is not disclosed in any manner.

7.5. Data protection laws vary among countries. We comply with certain legal frameworks relating to the transfer of data as mentioned and required under the Information Technology Act, 2000, rules and the amendments made thereunder.

7.6. When we receive formal written complaints, we respond by contacting the person who made the complaint. We work with the appropriate regulatory authorities to resolve any complaints regarding the transfer of your data that we cannot resolve with you directly.

8. CHANGES IN PRIVACY POLICY

Our Privacy Policy might change from time to time, and Kredtap will provide notice of it on your email address linked to your Account or can be seen by you in our Website/Mobile Application. We encourage you to periodically review the Website/Mobile Application for the latest information on our privacy practices. Users are bound by any changes to the Privacy Policy when they access, visit, or use the Website after such changes have been first posted.

9. COOKIES

The Website/Mobile Application uses temporary cookies to store certain data that is used by us for maintenance of the Website/Mobile Application and its features as well as research and development. We do not store personally identifiable information in the cookies.

10. THIRD PARTY SDKS AND OTHER SITES

10.1. The Website/Mobile Application has a link to registered third party SDKs, Application Programming Interface (API) integrations, redirections which collect data on our behalf and data is stored to a secure server.

10.2. Our third-party service provider employs separation of environments and segregation of duties and have strict role-based access control on a documented, authorized, need-to-use basis. The stored data is protected and stored by application-level encryption.

10.3. Furthermore, our registered third-party service provider provides hosting security – they use industry leading anti-virus, anti-malware, intrusion prevention systems, intrusion detection systems, file integrity monitoring, and application control solutions.

10.4. We don’t allow unauthorized access to your non-public personal contacts or financial transaction SMS data with any third party in relation to Lending Services other than our Lending Partners. However, for Non-Lending Services (Value Added Services), we may allow third parties to access your non-public personal contacts or financial transaction SMS subject to your explicit consent.

10.5. Our Website/Mobile Application links to other websites that may collect information about you. We are not responsible for the privacy practices or the content of those linked websites. With this Policy we’re only addressing the disclosure and use of data collected by us.

11. YOUR RIGHTS

Modifying or rectifying your information: If any personal information provided by you is inaccurate, incomplete or outdated then you shall have the right to provide us with accurate, complete and up to date data and have us rectify such data at our end immediately. In case of modification of personal information, you will be required to furnish supporting documents relating to change in personal information for the purpose of verification by Kredtap.

11.1. Your Privacy Controls: You have certain choices regarding the information we collect and how it is used:

• Your device may have controls that determine what information we collect. You can modify permissions on your Android/iOS device or Browser.
• Delete the App from your device.
• You can also request to remove content from our servers in accordance with Clause C.

11.2. Withdrawal/Denial of consent: You acknowledge that the Website/Mobile Application has duly collected the information with your consent and you have the option to not provide such information or deny consent for use of specific information or revoke the consent already given. However, any withdrawal of such personal information will not be permitted in case any Service availed by you is active. You shall have the following rights:

• Deny Consent: You shall have the right to deny consent for use of specific data, restrict disclosure to third parties, data retention, revoke consent already granted to collect personal data and if required, make the App delete/ forget the data.
• Withdraw Consent: You may withdraw your consent to contact you, for the continued collection, use or disclosure of your information, at any time, or request for deletion of Your Login account by raising a request on the Website or by mailing Us at help@Kredtap.in.

11.3. Report an issue: You have a right to report a security incident to the grievance redressal officer (details mentioned herein below). You are entitled to prevent unauthorized such usage of your information by our personnel/agents by informing us, within 10 days of being informed of the proposed use. You can also exercise the right at any time by contacting us at help@Kredtap.in.

11.4. Notwithstanding anything to the contrary stated above, the following are specific scenarios listed below which may have consequences for your withdrawal of consent:

• Marketing and Communication: The consent for this information be withdrawn if you write an email to the email address provided under clause 12.
• Information/data deletion may not be implemented for ongoing Services including loan and insurance policy.

12. CONTACT

12.1. For any information regarding the Privacy Policy, please contact help@Kredtap.in. In case you have grievance relating to collecting receiving, possessing, storing, dealing or handling of Personal Information provided by You may contact our Grievance Officer on the following address or write an email: