Privacy Policy

2. Information We Collect

When you interact with catfin.in or engage our services, we may collect the following categories of information:

3. Personal Identification Information

• Full name, date of birth, gender
• PAN card number, Aadhaar number (for KYC/eKYC purposes)
• Residential and correspondence address
• Email address and mobile number
• Photographs as required for KYC

4. Financial Information

• Employment details, nature of business, and income information
• Bank account details and statements
• Credit score and credit bureau reports (sourced with your explicit consent)
• Existing loan details and repayment track record
• Financial documents such as ITR, GST returns, balance sheets, and P&L statements

5. Business Information (for Commercial Loan Applications)

• Business registration details, GSTIN, UDYAM/MSME registration number
• Business vintage, annual turnover, and financial projections
• Details of directors, partners, or proprietors

6. Technical Information

• IP address, browser type and version, device type and operating system
• Referring and exit pages, date/time stamps, and clickstream data
• Cookies and session data for improving your browsing experience on catfin.in

7. Communication Records

• Records of your interactions with our team via phone, email, or WhatsApp
• Queries, feedback, or complaints submitted through catfin.in or our contact channels

8. How We Collect Your Information

• Directly from you when you fill out inquiry forms, loan application forms, or contact us through catfin.in, email, WhatsApp, or phone.
• From third-party sources such as registered Credit Information Companies (CICs) — CIBIL, Experian, Equifax, and CRIF High Mark — with your prior explicit consent.
• From our lending partners (banks and NBFCs) in the course of processing your application.
• Automatically through cookies and web analytics tools when you browse catfin.in.
• From documents uploaded or submitted to us for loan processing purposes.

9. Purpose of Collection and Use of Information

Catfin collects and uses your information solely for the following legitimate business purposes:

• Evaluating your loan eligibility and recommending suitable financial products from our network of lending partners.
• Processing and submitting your loan application to banks/NBFCs on your behalf.
• Conducting identity verification and KYC in accordance with regulatory requirements.
• Communicating with you regarding your application status, document requirements, lender decisions, and disbursement updates.
• Sending you information about new loan products, offers, or services — with your consent and subject to your opt-out rights.
• Fulfilling our contractual and regulatory obligations as a DSA/LSP registered with our lending partners.
• Improving our services, website functionality, and customer experience through analytics.
• Addressing your grievances, queries, and complaints in a timely and effective manner.
• Maintaining internal records as required under applicable laws and our agreements with lending partners.
• Detecting and preventing fraud, unauthorised access, and misuse of our services.

10. Disclosure to Third Parties

Catfin does not sell, rent, or trade your personal information for any commercial purpose. We may share your information only in the following limited circumstances:

11. Lending Partners

Your personal, financial, and business information will be shared with our partner banks and NBFCs for the purpose of evaluating and processing your loan application. Such lending partners are bound by their own privacy policies and applicable regulatory frameworks.

12. Credit Information Companies (CICs)

We may access your credit report from registered credit bureaus with your explicit consent, as required for loan assessment and eligibility determination.

13. Service Providers

We may engage third-party service providers for technology, analytics, communication, and customer support. These parties process your data strictly on our instructions and under contractual confidentiality obligations.

14. Regulatory and Legal Authorities

We may disclose your information to government authorities, law enforcement agencies, courts, or the RBI without prior notice if required by law, court order, or applicable regulation.

15. Business Transitions

In the event of a merger, acquisition, restructuring, or transfer of our business or assets, your data may be transferred to the successor entity, subject to the same level of privacy protection.

16. Data Storage and Retention

All personal data collected by Catfin is stored on servers located within India. We retain your information for as long as:

• Your loan application is active or under process with any of our lending partners;
• Required under our contractual obligations with lending partners;
• Mandated by applicable laws, including the RBI's record-keeping guidelines;
• Necessary to resolve disputes, address complaints, or defend legal claims.

Upon expiry of the applicable retention period, your data will be securely deleted or anonymised, unless retention is required by a court, tribunal, or regulatory authority.

17. Cookies and Web Analytics

catfin.in uses cookies to maintain session continuity, personalise your browsing experience, and analyse website traffic. Cookies are small text files stored on your device. You can disable cookies through your browser settings; however, this may affect certain features of catfin.in. We may also use third-party analytics tools such as Google Analytics, which collect anonymised usage data. No personally identifiable information is shared with analytics providers.

18. Your Rights

As a data principal under applicable Indian law, you have the following rights with respect to your personal information:

• Right to Access: You may request details of the personal information we hold about you.
• Right to Correction: You may request correction or update of inaccurate or incomplete personal data.
• Right to Withdrawal of Consent: You may withdraw your consent to the processing of your data at any time by writing to us. Please note that withdrawal of consent may result in our inability to continue providing services to you.
• Right to Erasure: You may request deletion of your personal data where we no longer have a legitimate basis to retain it, subject to applicable legal and regulatory requirements.
• Opt-Out from Marketing: You may opt out of receiving promotional communications by writing to us or using the unsubscribe mechanism in our communications. Please allow up to 10 working days for processing.

To exercise any of the above rights, please write to our Grievance Officer at the contact details provided in Section 11.

19. Data Security

Catfin implements appropriate technical and organisational security measures to protect your personal data from unauthorised access, disclosure, alteration, or destruction. Our security practices include:

• Secure data transmission using SSL/TLS encryption
• Role-based access controls and permissions for internal systems
• Regular security reviews and vulnerability assessments
• Confidentiality obligations on all employees and service providers

No method of transmission over the internet is completely secure. While we take commercially reasonable steps to protect your information, we cannot guarantee absolute security.

20. Links to Third-Party Websites

catfin.in may contain links to the websites of our lending partners or other third parties. These websites are governed by their own privacy policies, and Catfin bears no responsibility for their content or data practices.

21. Grievance Redressal

If you have any concerns, complaints, or grievances regarding our services, website, or these Terms, please contact our Grievance Officer. All grievances will be acknowledged within 48 hours and resolved within 30 days. For complaints not resolved to your satisfaction, you may approach the RBI Complaint Management System (CMS) at cms.rbi.org.in.

22. Changes to This Privacy Policy

Catfin reserves the right to update or amend this Privacy Policy at any time. Any material changes will be communicated through catfin.in. Continued use of our services after changes constitutes your acceptance of the revised policy.

23. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India. Any disputes arising in connection with this policy shall be subject to the exclusive jurisdiction of the courts located in New Delhi.