Privacy Policy

1. Introduction

Credtake Technologies ("Credtake", "we", "our", or "us") respects your privacy and is firmly committed to protecting your Personal Data and Credit Information. This Privacy Policy describes the types of personal data we collect, how we use and protect it, your statutory rights under the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.

2. Information We Collect

In order to provide credit analytics, verification, and credit report delivery, we collect the following categories of information:

• Personal Identification Details: Full Name, Date of Birth, Gender, Permanent Account Number (PAN), Mobile Number, and Email Address.
• Credit Information & Bureau Data: Credit scores, loan accounts, credit cards, repayment records, and inquiry logs retrieved from licensed bureaus (TransUnion CIBIL, Experian, CRIF High Mark, Equifax) pursuant to your explicit consent.
• Transaction & Payment Information: Payment order identifiers, transaction amount, payment timestamp, and transaction status returned by our authorized payment gateway. Note: Credtake does not store full credit/debit card numbers, CVVs, or Net Banking credentials.
• Technical Data: IP address, device type, browser specifications, and usage telemetry collected to ensure platform security and prevent unauthorized access.

3. How We Use Your Information

We process your personal information strictly for lawful business purposes:

• Authenticating your identity and fulfilling your request for a CIBIL or other bureau credit report.
• Processing service charges securely through authorized, RBI-approved payment gateways.
• Generating credit risk analytics and portfolio dashboards for rural cooperatives, PACS, and institutional lenders.
• Preventing financial fraud, unauthorized bureau inquiries, and cyber incidents.
• Complying with regulatory obligations mandated by the Reserve Bank of India (RBI) and Indian statutory authorities.

4. Payment Gateway & Transaction Security

Payment processing for credit report downloads on Credtake is facilitated through certified, RBI-authorized Payment Aggregators & Gateways:

• Our payment gateway partners are certified under PCI-DSS (Payment Card Industry Data Security Standard) Level 1, ensuring the highest echelon of payment data security.
• All transactional communications between your browser, Credtake, and the payment gateway are encrypted over 256-bit TLS/SSL connections.
• Credtake receives only masked tokens and confirmation status codes to verify that the fee was successfully paid.

5. Data Sharing & Disclosures

Credtake does not sell, rent, or trade your personal data to third-party marketers. We only share data with:

• Credit Information Companies (CIBIL, Experian, CRIF, Equifax): Strictly to fetch your authorized credit report in real time.
• Payment Service Providers & Gateways: Solely to process payment transactions and issue reversals/refunds.
• Regulatory & Legal Authorities: Only where compelled by applicable law, court orders, or law enforcement agencies.

6. Data Security & Storage

We deploy robust physical, technical, and administrative safeguards to prevent unauthorized access, loss, or disclosure. All sensitive data is stored on secure servers located within India in compliance with data localization directives. Access is strictly role-based and monitored via audit logs.

7. Your Data Rights

Under the DPDP Act 2023, you have the right to access a summary of your personal data processed by us, seek correction of inaccurate data, withdraw your consent, or request data deletion subject to statutory retention requirements.

8. Grievance Officer & Contact Details

In accordance with the Information Technology Act, 2000 and DPDP Act, 2023, the details of our designated Grievance Officer are as follows: