Privacy Policy

Last Updated: 16th June 2025

1. Information We Collect

1.1 Personal Information

• Contact Information: Phone number, name, email address, and other contact details you provide during registration and service usage.
• Identity Information: Government-issued ID numbers, date of birth, and other identification details required for financial services.
• Financial Information: Bank account details, transaction history, and credit information necessary for loan processing.
• Employment Information: Employment status, income details, and employer information for loan eligibility assessment.

1.2 Technical Information

• Authentication Data: Login credentials, session tokens, and authentication history.
• Device Information: IP address, browser type, operating system, device identifiers, and mobile network information.
• Usage Data: Pages visited, features used, time spent on pages, and interaction patterns.
• Location Data: Approximate location based on IP address or device settings.

2. How We Use Your Information

2.1 Primary Purposes

• Process and manage your loan applications
• Verify your identity and prevent fraud
• Provide customer support and respond to inquiries
• Send important notifications about your account and services
• Process payments and manage transactions

2.2 Secondary Purposes

• Improve our website and services based on usage patterns
• Develop new features and functionality
• Conduct research and analysis
• Send marketing communications (with your consent)
• Comply with legal and regulatory requirements

3. Technologies We Use

3.1 Authentication and Security

• NextAuth.js: For secure user authentication and session management
• JWT (JSON Web Tokens): For secure data transmission and session handling
• SSL/TLS Encryption: For secure data transmission
• Two-Factor Authentication: For enhanced account security

3.2 Data Storage and Processing

• Database Systems: For storing and managing user data
• Cloud Storage: For secure data backup and retrieval
• CDN Services: For content delivery and performance optimization

3.3 Analytics and Monitoring

• Usage Analytics: To understand user behavior and improve services
• Error Tracking: To identify and fix technical issues
• Performance Monitoring: To ensure optimal service delivery

4. Data Storage and Security

4.1 Security Measures

• End-to-end encryption for sensitive data
• Regular security audits and vulnerability assessments
• Access controls and authentication mechanisms
• Secure data centers with physical security measures
• Regular backup and disaster recovery procedures

4.2 Data Retention

5. Lender Information and Partnership

5.1 Our Lending Partner

Thoshika Financial Services Private Limited is an authorized Direct Selling Associate (DSA) of IDFC FIRST Bank Limited. This partnership allows us to facilitate loan applications and provide financial services on behalf of IDFC FIRST Bank.

5.2 Lender Details

• Lender Name: IDFC FIRST Bank Limited
• Official Website: www.idfcfirstbank.com
• Partnership Status: Authorized Direct Selling Associate (DSA)
• Verification: Our partnership is officially listed in IDFC FIRST Bank's active vendor list, which can be verified at: Official Partner List (PDF)

5.3 Data Sharing with Lender

When you apply for a loan through our services, we may share your information with IDFC FIRST Bank Limited for:

• Loan application processing and evaluation
• Identity verification and KYC procedures
• Credit assessment and risk evaluation
• Loan disbursement and account management
• Regulatory compliance and reporting

6. Third-Party Services

6.1 Service Providers

• Payment Processors: For secure payment processing
• Cloud Services: For hosting and data storage
• Communication Services: For sending notifications and updates
• Analytics Providers: For website usage analysis

6.2 Data Sharing

We may share your information with:

• Financial institutions for loan processing
• Credit bureaus for credit checks
• Legal authorities when required by law
• Service providers who assist in our operations

7. Your Rights and Choices

7.1 Access and Control

• Access your personal information
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to data processing
• Withdraw consent

7.2 Communication Preferences

• Opt-out of marketing communications
• Choose notification preferences
• Set cookie preferences
• Manage account settings

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. We ensure appropriate safeguards are in place for such transfers in compliance with applicable data protection laws.

9. Children's Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child without parental consent, we will take steps to delete such information.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the new Privacy Policy on this page
• Updating the "Last Updated" date
• Displaying a notice on our website