INDcredit Privacy Policy

Last Updated : 26-Mar-2026

1. GENERAL

1.1. INDcredit Fincap Private Limited (formerly INDmoney Fincap Private Limited), a private limited company incorporated under the Companies Act, 2013, having Corporate Identification Number U64920HR2024PTC120801 and its registered office at 617, Suncity Success Tower, 6th Floor, Sector 65, Golf Course Extension Road, Gurugram, Haryana – 122005, along with its affiliates and group entities (collectively referred to as "INDcredit", "we", "our", or "us") acting in its capacity as a non-banking financial company registered with the Reserve Bank of India), is committed to respecting and protecting the privacy of individuals who place their trust in us.

This Privacy Policy governs the manner in which INDcredit collects, receives, uses, stores, processes, discloses and safeguards the personal information of users ("you" or "your") who are availing or intending to avail lending, credit-related and any other service offered by us (collectively, the "Services") through the INDcredit mobile application, website (www.indcredit.com) and allied digital interfaces together referred to as ("Platform or Application").

1.2. This Privacy Policy constitutes an electronic record within the meaning of applicable law and is generated by a computer system; it does not require any physical or digital signature.

1.3. The Platform is not intended for use by individuals under the age of 18. By using the Application, you represent that you are legally competent to contract under Indian law. Parents and legal guardians are requested to ensure that personal information is not provided by minors. In case you are a minor, then please do not share any personal information with us without having your parent or legal guardian to accept this Privacy Policy.

1.4. We may collect and process personal information only with your explicit consent, except where such collection or processing is otherwise permitted or required under applicable laws, and solely for the purposes described in this Privacy Policy and in accordance with the applicable terms governing the Services. The collection, use, storage and disclosure of such information are carried out in compliance with the Information Technology Act, 2000 and the rules framed thereunder, the Digital Personal Data Protection Act, 2023, and its corresponding rules (as amended from time to time) and the regulations, directions, circulars and guidelines issued by the Reserve Bank of India and other competent authorities, as applicable to the Services (collectively, "Applicable Laws").

1.5. By accessing the Application and availing the Services, you consent to the collection and use of your information in the manner described under this Privacy Policy. This Privacy Policy shall be read in conjunction with the terms and conditions applicable to Platform, the finance documents executed / accepted by you, and any partner or service-provider specific notices expressly disclosed to you at the time of data collection.

1.6. You acknowledge that the information provided by you to INDcredit has been collected or received through lawful means and with your valid, informed and explicit consent. INDcredit urges you to read this Privacy Policy carefully before you avail the Services on INDcredit App or decide to part with any information to INDcredit.

2. INFORMATION WE COLLECT

2.1. We collect or receive information that is voluntarily provided by you, generated through your use of the INDcredit App, or lawfully obtained from third-party sources, in each case with your consent and in accordance with Applicable Laws.

2.2. We collect and store personal information such as your full name, family information, residential and correspondence address, email address, mobile number, date of birth, marital status, employment and occupation details, income details, source of funds, bank account details, government IDs, call recordings (customer support), video recordings and facial images captured during Video-based Customer Identification Process (V-CIP), device type, device ID and IP address (to capture your precise and/or coarse location), device unique identifier educational details, and such other financial, identification and KYC-related information as may be required for various purpose in relation to onboarding on Platform, KYC verification, offering our Services, fraud prevention, security and compliance requirement(s).

2.3. This information is collected to enable (a) you to apply for and avail the Services, (b) to undertake necessary customer due diligence, including Know Your Customer (KYC), credit appraisal, underwriting and anti-money laundering checks, and (c) the provision, servicing and monitoring of the Services in compliance with Applicable Laws. As part of the application and onboarding process, you may also be required to provide additional information such as PAN, Aadhaar details accessed through DigiLocker or CKYC (where permitted by Applicable Law), photograph or live selfie, specimen signature, bank statements, credit bureau information ( your credit score, credit report, enquiry records etc.), and details of investments or securities offered as collateral, if applicable. Your credit related information available with credit information companies may be collected by us, in accordance with the Credit Information Companies (Regulation) Act, 2005 (CICRA).

2.4. We may collect, access or store data and device resources available on your mobile device through the Platform, including but not limited to camera, microphone, telephony functions, call logs, location data or similar facilities, only to the extent permitted under Applicable Laws and applicable regulatory directions and with your explicit consent. Any such access is sought on a one-time access for purposes such as onboarding, Know Your Customer (KYC) requirements (including video based customer identification process (‘V-CIP’)), identity verification, credit evaluation, fraud prevention or other regulatory compliance in connection with the Services. As part of the VCIP process mandated under RBI guidelines, we may capture and record a short audio-video of you during the onboarding process. The session is recorded, encrypted, and retained as required under RBI KYC Master Directions, 2016. You may withdraw such consent at any time through your device or application settings, subject to the impact such withdrawal may have on our ability to provide or continue the Services.

2.5. We may access metadata of applications installed on your device (such as package names) solely to identify UPI-enabled payment applications available on your device. This access is limited to payment applications only and does not extend to the content or activity of any application. No such information is retained beyond the duration necessary to complete the relevant transaction or mandate registration.

2.6. Any information provided for the purpose of accessing the Services or generated in the course of availing the Services is retained only to the extent required under Applicable Laws, AML / KYC requirements and as stipulated under contractual arrangements, notwithstanding withdrawal of consent.

3. USE OF YOUR INFORMATION

3.1. We use the personal information collected from you in accordance with this Privacy Policy for the purpose of offering and providing the Services. Your information is also used to respond to queries, provide customer support, resolve complaints and disputes, and communicate important service-related updates, service related announcements, alerts, notices and disclosures.

3.2. Further, subject to your consent and Applicable Laws, we may use your contact details to provide you with information relating to marketing communications, promotional offers, and advertising content that we believe may be of interest to you or that you have expressly opted to receive, in relation to our Services or allied products. We may contact you through calls, SMS, emails, WhatsApp or other digital or electronic means for such promotional and advertising communications, even if your mobile number is registered under the Do Not Disturb (DND) or National Customer Preference Register (NCPR) in accordance with the Telecom Commercial Communications Customer Preference Regulations, 2018. You may opt out of receiving such promotional or advertising communications at any time by following the unsubscribe instructions provided in such communications or by contacting our grievance officer, without affecting the receipt of mandatory service-related communications.

3.3. If you contact our customer support channels, we may record calls or collect information shared by you for the purposes of service delivery, quality assurance, training, dispute resolution, audit, and internal analysis. We may also collect feedback, survey responses, or other communications provided by you through the Platform or offline channels. Your information may further be used for internal analysis, risk management, fraud detection, audit, research and improvement of products and services, including enhancement of user experience and system performance.

3.4. We may collect transaction-related information associated with your use of the Services, including the type of service requested, date and time of the transaction, payment method used, and transaction amounts, for processing, record-keeping, reconciliation, and compliance purposes.

3.5. We also process personal information as required to comply with Applicable Laws, regulatory requirements, court orders, or directions issued by governmental or statutory authorities.

3.6. Information pertaining to payment applications on your device is used to present eligible UPI payment options, facilitate registration and execution of UPI AutoPay or NACH mandates for loan repayments, and support fraud detection and payment anomaly identification as part of our risk management framework.

3.7. Third parties such as credit bureaus, KYC agencies, banks, and regulated service providers may independently process your information, including KYC verification, creditworthiness assessment, bank account verification, anti-money laundering checks and regulatory reporting, in accordance with their respective legal obligations.

4. SHARING AND STORAGE OF DATA

4.1. We are committed to maintaining security and transparency in relation to the information collected from you while availing the Services. In order to provide you with the Services, we may share your personal information for purposes disclosed under this Privacy Policy and in accordance with Applicable Laws, and with your consent where such consent is required, with credit bureaus service providers or third parties (including vendors, agents, sub-contractors, suppliers, consultants, advisers) on a need-to-know basis. All personal data collected in connection with the Services is stored on servers located within India, unless otherwise permitted under Applicable Laws.

4.2. Subject to restrictions notified under DPDP Act, where your personal data is transferred in a jurisdiction outside India for purposes such as cloud storage, analytics, or IT support, we ensure appropriate contractual and technical safeguards in accordance with Applicable Law and obtain consent where required. We follow strict internal access controls and share information with designated personnel, partners, service providers or third parties who require such information to perform services on our behalf or where disclosure is mandated by law or regulatory authorities.

4.3. Details of such service providers and third parties with whom information may be shared on a limited basis are provided in Annexure - 1 to this Privacy Policy. Your information is retained for the period during which you remain a customer and thereafter for such duration as may be required to comply with obligations under Applicable Laws.

5. THIRD-PARTY POLICIES

5.1. We may engage third-party service providers, vendors and partners in connection with the Services made available through the Platform. Such third parties collect, use and disclose your information only to the extent necessary to perform the services provided to us.

5.2. We take commercially reasonable steps to ensure that all third-party recipients adhere to confidentiality, data protection and security obligations consistent with this Privacy Policy and Applicable Laws. Once you interact directly with a third party, their privacy practices will be governed by their respective privacy policies, and we shall not be responsible for the privacy practices or acts or omissions of such third parties. We recommend reviewing their privacy policies to understand how they handle your information.

5.3. It's important to be aware that certain third-party service providers, including banks, financial institutions, payment aggregators and credit information companies, may have independent privacy policies governing the information shared with them. Some of these entities may be located in or operate from jurisdictions outside India.

5.4. We shall not be responsible for any unauthorised acts, omissions, or data breaches attributable to third parties acting outside the scope of their contractual obligations.

6. DISCLOSURE OF INFORMATION

We may disclose your personal information where such disclosure is required under Applicable Laws, pursuant to a legal process, regulatory request or court order, or where necessary to protect our legal rights, safety and property, or to enforce contractual arrangements, including the terms governing the Services. Disclosure may also occur in connection with assignment, securitisation, or transfer of loan receivables, subject to Applicable Laws.

7. DATA SECURITY AND RETENTION

7.1. We implement reasonable and appropriate technical and organisational security measures to protect your information against unauthorised access, alteration, disclosure or destruction. Our security practices are aligned with industry standards and are periodically reviewed to ensure continued protection of personal data. Subject to there being no active loan or Service availed by you, and unless retention is required under Applicable Laws, regulatory audits, regulatory directions, dispute resolutions, enforcement of legal rights, or prevention of fraud, we will delete your personal information upon receipt of a valid request.

7.2. User information is retained for such periods as may be required to comply with Applicable Laws. We do not retain personal data longer than necessary for the purposes for which it is processed, except where required for legitimate business purposes, including but not limited to responding to customer complaints, legal, regulatory, accounting, audit or dispute resolution purposes. We may anonymise and aggregate personal information for research, analytics or statistical purposes, in which case such data may be retained and used without limitation.

7.3. You are responsible for ensuring that the personal data provided to INDcredit is accurate, complete, and up to date. You shall promptly notify us of any changes or updates to your personal data. INDcredit shall take reasonable steps to ensure that the personal data processed by it remains accurate, complete, and current, based on the information provided by you. Personal data shall be retained only for as long as is necessary to fulfil the purposes for which it was collected or as otherwise required under Applicable Laws.

7.4. In determining the appropriate retention period, INDcredit considers the nature, scope, sensitivity, and volume of the personal data, the potential risk of harm from unauthorized access, use or disclosure, the purposes for which such data is processed and whether such purposes can be achieved through alternative means, and applicable legal and regulatory requirements. In certain circumstances, INDcredit may anonymize personal data so that it can no longer be associated with an individual, and such anonymized data may be retained and used for lawful business purposes.

7.5. You shall, at all times, have the option to grant or withhold consent for the collection and use of specific categories of your personal data, restrict disclosure of such data to third parties, specify or limit data retention by us/ third parties, request revocation of any consent previously granted by you, and request deletion or erasure of such personal data, subject to Applicable Laws and regulatory requirements. Such withholding of consent may restrict you from availing the Services.

8. WITHDRAWAL OF CONSENT AND RECTIFICATION

8.1. After completion of contractual obligations, you may access and review the information shared by you with us. You may withdraw or revoke your consent for processing of your information by writing to the grievance officer (refer details below). Upon receipt of your withdrawal request, we shall cease processing your personal information within a reasonable period, unless such processing is required as per Applicable Laws. However, if you withdraw your consent, we may no longer be able to provide you with the corresponding products or services for which the said personal information was sought.

8.2. You may also request deletion of your Application account through the in-app "Delete Account" option available in profile settings. You may unsubscribe from receiving Service-related offers at any time by emailing us with your registered mobile number, and data deletion requests will be processed within a reasonable period, subject to legal and regulatory retention requirements.

8.3. Where any information provided by you is inaccurate, deficient, incomplete or outdated, you are requested to promptly update the same to enable us to rectify our records and ensure uninterrupted provision of Services.

9. INFORMATION COLLECTED THROUGH COOKIES AND SIMILAR TECHNOLOGIES

9.1. When you access, browse, or use the Platform, certain information may be automatically collected due to standard internet communication protocols, such as the website or page you visited before or after using the Platform, your device's IP address, browser type, operating system, and internet service provider.

9.2. We use this information only to understand how users interact with our Platform, analyse usage trends, and improve our Services and user experience. This information is not used to directly identify you and is not shared with third parties in a personally identifiable manner, except where required by law or to enable the functioning of the Platform. We may, however, share aggregated and anonymised insights derived from such data with partners or service providers for analytics, research, and Platform improvement purposes.

9.3. We may automatically collect certain technical and diagnostic information when you access or use the Platform, including crash logs, app performance data, and diagnostic reports. This data is collected to monitor, maintain, and improve the functionality, security, and performance of the Platform. App performance data may be shared with our technology service providers and analytics partners solely for app maintenance and analysis. This data does not directly identify you as an individual.

10. UPDATES TO THE PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices, Services or legal requirements. We encourage you to review this Privacy Policy periodically to stay informed of any updates.

11. GRIEVANCE REDRESSAL

In accordance with the Digital lending guidelines and Information Technology Act 2000 and rules made there under, the name and contact details of the Grievance Officer are provided below for your reference:

Annexure 1: List of Third Parties