Privacy Policy

Rakshitha Finserve Pvt. Ltd. ("Infinz", "we", "us" or "our") respects your privacy and is committed to protecting the privacy and security of your personal data. This Privacy Policy ("Policy") applies to all products and/or services offered by us to all individuals ("you", "your", "user").

This Privacy Policy is compliant with Indian laws, including the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 under the IT Act 2000, RBI Master Directions on Digital Lending Guidelines, 2025, Data Protection Bill, 2023, and other relevant regulations.

This Privacy Policy explains how we collect, receive, store, disclose, share, and use your personal data for the purpose of your participation and consumption of our products and/or services offered by us through our website 'www.1infinz.com' and our mobile application (collectively, "Platform") or during any interaction with us, and how you can exercise your privacy rights.

Nature of Business

Infinz functions as a digital loan aggregator and registered Digital Service Associate (DSA). It facilitates connections between loan seekers and various RBI-registered Non-Banking Financial Companies (NBFCs) or banks. Infinz does not itself provide loans or make lending decisions but acts as an intermediary to streamline and simplify the customer's access to credit products from verified financial institutions.

The policy constitutes a legal agreement between you, as the User of the platform, and Rakshitha Finserve Pvt. Ltd., as the owner of the platform. For clarity, 'User' shall mean any person who visits, uses, and/or transacts through the platform.

You are permitted to use the services available on the platform only if you are a natural person, a citizen of India, and at least eighteen (18) years of age. By using Infinz's platform and providing your data, you consent to the collection and use of information as described in this policy.

Scope & Applicability

This Policy applies to all usage of Infinz services via mobile app, website, SMS, calls, or offline channels.

Collection & Storage of Personal Information

Infinz collects personal information directly from users through forms, applications, and documents submitted via the app or website. This may include:

• Full name, contact details, address, date of birth, gender
• Income details and employment data
• Bank account numbers and IFSC codes
• Aadhaar numbers (masked or tokenized in compliance with UIDAI norms)
• PAN numbers and other KYC documentation
• Credit reports from credit bureaus (with explicit consent)

In addition to this, the platform gathers behavioral and technical data, such as device identifiers, IP addresses, browser type, location (if permitted), and app usage patterns.

Purpose and Use of Data

The data collected is used strictly for lawful purposes, including:

• Identity verification and KYC processing
• Determining creditworthiness and fetching credit scores
• Matching users with appropriate loan products
• Fulfilling the digital lending journey
• User communication and customer support services
• Risk assessments and backend audits
• Regulatory compliance and fraud detection

Infinz may further use anonymized data for internal analytics and product improvements, provided no personal identity is compromised.

Consent and Legal Basis

Infinz ensures that all data processing is carried out with the explicit and informed consent of the user. Users grant permission either through digital affirmation, OTP-based authentication, or e-signature mechanisms. Consent is also secured before sharing data with any third-party lending institutions or credit bureaus.

Users reserve the right to withdraw consent at any time by contacting us, though withdrawal may affect the availability or continuity of our services.

Sharing and Disclosure of Data

Infinz shares users' personal information only with lending partners and trusted third-party entities for legitimate purposes. These include:

• NBFCs and banks for processing loan applications
• Credit bureaus for retrieving credit scores
• Technology partners offering cloud storage, KYC, fraud checks, or other operational support

Any such disclosures are executed under legally binding data processing agreements and confidentiality clauses. Infinz may also share data with regulatory or law enforcement bodies when required by law, or in cases involving legal claims or fraud investigations.

Third-Party Tools and SDKs

The application may include third-party software development kits (SDKs), APIs, or plugins that assist with user verification, document scanning, analytics, notifications, or payment processing. These third parties operate under strict compliance requirements and do not access user data beyond what is necessary for their specific functions.

All SDKs used are reviewed for adherence to RBI and privacy standards, especially regarding consent-based access to sensitive permissions like camera, storage, or location.

Data Retention Policy

Infinz retains user data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with statutory obligations. In general, data is retained for a minimum of eight years, in accordance with RBI's record-keeping requirements for digital lending intermediaries. Once the retention period ends, data is securely deleted or anonymized unless required for dispute resolution, legal compliance, or audit trails.

Data Security

Infinz understands the importance of one's personal information and thereby uses the highest application standard to protect the information collected from you. We employ industry-standard security measures to safeguard user data from unauthorized access, loss, or misuse. This includes:

• End-to-end encryption during data transmission
• Encryption-at-rest and secure socket layer (SSL) technology
• Robust access controls for data storage systems
• Hosting on certified cloud platforms
• Periodic vulnerability scans, third-party audits, and penetration testing

Only authorized personnel with a strict need-to-know basis are granted access to user data.

Cookies and Tracking Technologies

Infinz uses cookies and similar tracking technologies to enhance user experience, analyze usage patterns, and deliver personalized content. These cookies do not collect personal information unless explicitly provided by the user. Users can modify browser settings to reject or delete cookies, though doing so may impair certain platform functionalities.

User Rights and Redressal

Users have the right to:

• Access their personal information
• Request corrections to any inaccurate data
• Revoke previously given consent
• Object to certain data uses
• Request data deletion (subject to regulatory constraints)

Requests can be sent via email to our Data Protection/Grievance Officer, and we aim to process these within the legally stipulated timelines.

Grievance Redressal Mechanism

Infinz is committed to resolving any data-related concerns in a transparent and timely manner. We have appointed a dedicated Grievance Officer in accordance with the IT Act. Users may reach out for assistance, complaint submission, or dispute resolution.

Complaints are acknowledged within 48 hours and typically resolved within 30 working days.

Policy Amendment & Changes

This policy is subject to modification and/or change at the sole discretion of Infinz. All such modifications shall be strictly in line with the RBI requirements and guidelines issued from time to time, or for internal company policies. Any significant modifications will be communicated via email, website banners, or in-app notifications. Continued usage of the services post-notification constitutes user acknowledgment and acceptance of the revised policy.

Contact Us

If you have any questions about this Privacy Policy, you can contact us: