Legal
Privacy Policy
We collect only the information required to run application, eligibility and partner submission workflows.
This policy describes how UdhaarWala handles information submitted through the platform. In production, this policy should be reviewed by legal counsel and aligned with applicable Indian data protection, IT, outsourcing and financial-services requirements.
Information we collect
We may collect name, date of birth, gender, mobile number, email, PAN, Aadhaar placeholder or masked identity reference, employment details, income details, bank account details, uploaded documents, device/session information and application activity.
How we use information
We use information to create your account, verify contact details, assess basic eligibility, prepare loan applications, coordinate with regulated lending partners, prevent fraud, provide customer support, maintain audit trails and improve platform reliability.
Sharing with partners
Where you submit an application, relevant information may be shared with lending partners, verification providers, KYC providers, bureau providers, payment mandate providers, eSign providers, cloud infrastructure providers and compliance support vendors. Partner lending is subject to the partner’s own policies and regulatory obligations.
Security
Sensitive values should be encrypted or tokenised in production. This MVP demonstrates masking and hashing for bank account information where applicable. Production deployments should include encryption at rest, strict access controls, secret rotation, audit logs and monitoring.
Retention
Application records may be retained where required for regulatory, contractual, fraud-prevention, grievance and audit purposes. Data that is no longer required should be deleted or anonymised according to the retention schedule.
Your choices
You may request correction or deletion where legally permissible by contacting privacy@udhaarwala.com.