Privacy Policy

1. About CredWise Finserv

CredWise Finserv is a Direct Sales Agent (DSA) and home loan advisory firm operating in India. We facilitate home loan applications on behalf of customers with partner banks, Housing Finance Companies (HFCs), and Non-Banking Financial Companies (NBFCs). We are not a bank or a lender — we are an advisory intermediary.

• Registered Address: [Insert Registered Address]
• Contact Email: help@credwisefinserv.com
• Grievance Officer: [Insert Name], reachable at help@credwisefinserv.com

2. Information We Collect

We collect the following categories of information when you use our services:

2.1 Personal Identification Information

• Full name, date of birth, gender
• PAN card number, Aadhaar number (last 4 digits only where applicable)
• Mobile number and email address
• Residential address and proof of address

2.2 Financial & Employment Information

• Monthly/annual income, salary slips, ITR documents
• Bank statements (typically 6–12 months)
• Employment type (salaried, self-employed, HUF, proprietorship, etc.)
• Existing loan obligations and EMI commitments
• CIBIL score and credit report (accessed with your consent)

2.3 Property Information

• Property details including location, type, and valuation
• Title documents, sale agreements, and builder/authority approvals

2.4 Technical & Usage Information

• IP address, browser type, and device information
• Pages visited on our website and time spent
• Cookies and similar tracking technologies (see Section 9)

3. How We Use Your Information

We use the information collected for the following purposes:

• To assess home loan eligibility and match you with suitable lender products
• To prepare and submit loan applications to partner banks, HFCs, and NBFCs on your behalf
• To analyse sanction letters and advise you on the best available offers
• To contact you via phone calls, SMS, WhatsApp, or email regarding your loan application
• To comply with Know Your Customer (KYC) norms and regulatory requirements
• To improve our services, website, and customer experience
• To send you informational content about home loan products (with your consent)

We do NOT use your information for automated decision-making that produces legal or similarly significant effects without human review.

4. Sharing of Information with Third Parties

We may share your information with the following categories of third parties strictly for the purpose of loan facilitation:

4.1 Partner Lending Institutions

Your data will be shared with banks, HFCs, and NBFCs as required to process your home loan application. These may include but are not limited to SBI, ICICI Bank, HDFC Ltd, Axis Bank, Kotak Mahindra Bank, Bajaj Housing Finance, LIC Housing Finance, and Tata Capital.

4.2 Credit Bureaus

With your explicit consent, we may access your credit information from bureaus such as CIBIL, Experian, CRIF, or Equifax for eligibility assessment.

4.3 Legal & Regulatory Authorities

We may disclose your information to regulatory or law enforcement authorities if required by law, court order, or to protect our legal rights.

4.4 Service Providers

We may engage trusted third-party vendors for IT support, document management, or communication services. These vendors are contractually bound to maintain confidentiality and data security.

We do NOT sell, rent, or trade your personal or financial information to any third party for commercial purposes.

5. Communication Consent

By submitting your information through our website, app, WhatsApp, or any other channel, you expressly consent to being contacted by CredWise Finserv and/or our partner lenders through:

• Phone calls (including from registered and unregistered numbers)
• SMS and WhatsApp messages
• Email communications
• In-app notifications

This consent is valid even if your number is registered on the National Do Not Call (DNC / NDNC) Registry under TRAI regulations, as permitted under applicable law for financial service communications.

You may withdraw your communication consent at any time by writing to help@credwisefinserv.com. Note that withdrawal may affect our ability to process your loan application.

6. Data Retention Policy

We retain your personal and financial data for the following periods:

• Active loan application data: For the duration of the application process and up to 7 years thereafter, as required by RBI and financial record-keeping regulations
• Prospective customer data (enquiries not converted): Up to 2 years from date of collection
• Technical/usage data: Up to 1 year

After the applicable retention period, your data will be securely deleted or anonymised. You may request early deletion subject to legal and regulatory obligations (see Section 7).

7. Your Rights Under the DPDP Act 2023

Under India's Digital Personal Data Protection Act, 2023 (DPDP Act), you have the following rights as a Data Principal:

• Right to Access: Request a summary of personal data we hold about you
• Right to Correction: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data, subject to legal retention obligations
• Right to Grievance Redressal: Lodge a complaint with our Grievance Officer
• Right to Withdraw Consent: Withdraw consent for data processing at any time (subject to consequences stated herein)
• Right to Nominate: Nominate a person to exercise your rights in the event of your death or incapacity

To exercise any of these rights, please contact our Grievance Officer at help@credwisefinserv.com. We will respond within 30 days of receiving your request.

8. Data Security

We implement robust technical and organisational measures to protect your data, including:

• SSL/TLS encryption for data transmitted through our website and app
• Encrypted storage of sensitive financial documents
• Role-based access controls limiting data access to authorised personnel only
• Regular security audits and vulnerability assessments
• Non-disclosure agreements with all employees and third-party vendors handling your data

While we take every reasonable precaution, no method of data transmission or storage is 100% secure. In the event of a data breach affecting your rights or interests, we will notify you and the relevant authority as required under applicable law.

9. Cookies & Tracking Technologies

Our website uses cookies and similar technologies to enhance user experience and analyse traffic. Types of cookies we use:

• Essential Cookies: Required for the website to function (cannot be disabled)
• Analytics Cookies: Help us understand how visitors use our website (e.g., Google Analytics)
• Marketing Cookies: Used to display relevant content or advertisements (only with your consent)

You can manage or disable cookies through your browser settings. Disabling essential cookies may affect website functionality.

10. Children's Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data from a minor, please contact us immediately at help@credwisefinserv.com and we will delete such data promptly.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or regulatory guidelines. The updated policy will be posted on our website with a revised 'Last Updated' date. We encourage you to review this policy periodically.

For significant changes, we will notify registered users via email or SMS prior to the changes taking effect.

12. Grievance Redressal

If you have any concerns, complaints, or queries about this Privacy Policy or how your data is handled, please contact our Grievance Officer:

• Grievance Officer: [Insert Name]
• Email: help@credwisefinserv.com
• Response Time: Within 30 days of receipt of complaint

If you are not satisfied with our response, you may approach the Data Protection Board of India as established under the DPDP Act, 2023.