Privacy Policy

CREDIZEN Financial Services ("CREDIZEN", "we", "our", or "us") is committed to protecting the privacy of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you use our website credizen.in and related services (collectively, "Services"). Please read this policy carefully.

---

1. Information We Collect

We collect the following categories of information:

• Identity Information: Full name, date of birth, gender.
• Contact Information: Mobile number, email address, residential address, PIN code.
• Financial & Credit Information: PAN number, credit reports, bank statements, loan account details, repayment history shared voluntarily.
• Usage Data: IP address, browser type, pages visited, session duration collected automatically via server logs.
• Device Data: Operating system, device identifier, and browser type.
• Communication Records: Emails, WhatsApp messages, and support ticket content when you contact us.

2. How We Use Your Information

We use the information we collect to:

• Deliver credit repair, settlement, and advisory services you have purchased.
• Verify your identity and prevent fraud in accordance with KYC norms.
• File correction requests with credit bureaus (CIBIL, Experian, CRIF Highmark, Equifax) on your behalf.
• Process payments and issue GST invoices.
• Send service updates, appointment reminders, and case progress notifications via WhatsApp, SMS, and email.
• Respond to enquiries and support requests.
• Improve our platform and services through aggregated analytics.
• Comply with applicable laws and regulatory obligations.

3. Disclosure of Your Information

We do not sell your personal information. We may share it with:

• Credit Bureaus: CIBIL, Experian, CRIF Highmark, and Equifax — solely for the purpose of filing corrections on your behalf.
• Lenders & Banks: To negotiate settlement terms where you have authorized us to do so.
• Payment Processors: Paytm, Razorpay, or similar gateways, for secure payment processing.
• Legal & Regulatory Authorities: As required by Indian law, court orders, or government directives.
• Service Providers: Cloud hosting, SMS, and email vendors who process data strictly under confidentiality agreements.

We never share your financial data with marketing companies, insurance providers, or unrelated third parties without your explicit written consent.

4. Legal Basis for Processing

We process your personal data under the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and where applicable, the Digital Personal Data Protection Act, 2023. Our lawful bases include: (a) your consent; (b) performance of the service contract; and (c) compliance with legal obligations.

5. Data Retention

We retain your personal data for as long as your account is active, or as needed to deliver contracted services, and for a minimum of 5 years thereafter to comply with Indian regulatory and audit requirements. Credit reports and supporting documents are retained for 3 years from the date of case closure. After the retention period, data is securely deleted or anonymized.

6. Data Security

We implement industry-standard security measures including 256-bit SSL/TLS encryption for data in transit, AES-256 encryption for sensitive data at rest, role-based access controls, two-factor authentication for staff accounts, and regular security audits. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

You have the right to:

• Access your personal data held by us.
• Correct inaccurate or incomplete data.
• Delete your data, subject to legal retention requirements.
• Withdraw consent at any time (which may affect service delivery).
• Data portability — receive your data in a machine-readable format.
• Grievance redressal — raise concerns with our Grievance Officer.

To exercise any of these rights, email us at privacy@credizen.in with subject "Privacy Request – [Your Mobile Number]".

8. Cookies

We use session cookies necessary for authentication and service delivery. We do not use third-party advertising cookies. You may disable cookies in your browser settings, but this may affect website functionality.

9. Children's Privacy

Our Services are intended for individuals 18 years of age or older. We do not knowingly collect data from minors. If you believe a minor has provided us with personal information, contact us immediately.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify registered users of material changes via email or WhatsApp at least 7 days before the changes take effect. Continued use of our Services after changes constitutes acceptance of the revised policy.

11. Grievance Officer

In accordance with the IT Act, 2000 and related rules, we have appointed a Grievance Officer:

Grievances will be acknowledged within 24 hours and resolved within 30 days of receipt.

12. Governing Law

This Privacy Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of courts in Mumbai, Maharashtra.