Privacy Policy

1Who we are

Finsa is operated by Finsamudra Private Limited, a company registered in India. Finsa is a credit-information and loan-referral service. Finsa is not a lender and does not approve loans.

2What we collect

We do not store your PAN. Your PAN may appear inside the report the bureau returns; we do not keep it as a separate record and never use it after processing.

3Your credit report

We request your credit information report from Equifax through our technology partner Deepvue, and only after you have given explicit consent inside the app and verified the request yourself with a one-time password sent to your mobile number.

This is a soft enquiry. It does not affect your credit score. Your first report can be fetched on any date. After that you can refresh once per calendar month, from the 10th of the month onward — lenders report to the bureau during the first few days of each month, so an earlier refresh would return the same file.

We keep the full report from the bureau for 90 days, after which it is automatically deleted. The summary we derive from it — your score, balances, EMIs and the analysis we show you — is retained until you delete your account.

4Artificial intelligence

If you use Ask Finsa, we send a de-identified summary of your financial position to Google Gemini to generate a plain-language explanation.

Before anything is sent, we remove: your name (beyond your first name), PAN, mobile number, email address, postal address, date of birth, gender, and all account and card numbers. What is sent is figures — your score, balances, EMIs, interest rates and the analysis we computed.

All financial calculations are performed by Finsa, not by the AI. AI explanations are informational and are not financial advice or a lending decision.

Using Ask Finsa is optional. The rest of the app works without it.

5When we share your data

We share your personal data in exactly three situations:

• With a lending partner, when you have asked us to check an option and agreed to be contacted. We share what a lender needs to assess your enquiry.
• With our service providers — Deepvue (credit data), Google (AI, de-identified), and Supabase (database hosting).
• When the law requires it.

We do not sell your data, and we do not share it for advertising.

6Where your data lives

Your data is stored in India. Our servers run in Mumbai. The AI processing described in section 4 is performed by Google and may occur outside India, which is why we remove your identifying information before sending anything.

7Your rights

• See your data — your report, analysis and consent history are all visible in the app.
• Withdraw consent — from Profile → Privacy, at any time.
• Delete your account — from Profile → Delete account. This is immediate.
• Correct your data — email us. Corrections to the bureau report itself must be raised with Equifax, and we will tell you how.
• Nominate someone — you may nominate another individual to exercise your rights under the Digital Personal Data Protection Act, 2023 on your behalf in the event of your death or incapacity. To make or change a nomination, write to the Grievance Officer named in section 12.

When you delete your account we retain anonymised compliance records showing that consent was obtained before a credit report was requested. These carry no name, contact detail or financial data and cannot be linked back to you. We are required to be able to demonstrate that consent existed.

8Security

All traffic is encrypted in transit. Access to your data is restricted at the database level so that one account cannot read another’s. Credentials for the bureau and the AI are held only on our servers and never in the mobile app. We do not write your report, PAN or contact details into our logs.

9Children

Finsa is not for anyone under 18. We do not knowingly collect data from minors.

10Changes

If we change how we use your data in a way that matters, we will ask for your consent again in the app rather than quietly updating this page.

11Contact

privacy@finsa.app — Finsamudra Private Limited, Bengaluru, Karnataka, India

12Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, the Grievance Officer for Finsamudra Private Limited is:

Supreeth, Founder & Director — grievance@finsamudra.com — Bengaluru, Karnataka, India

If you have a grievance about how your personal data has been handled, or about a request you have made to us, write to the Grievance Officer at the address above. We will acknowledge your grievance and respond within the timelines required under applicable law.