Privacy Policy

EazyMoney is a loan lead generation and customer referral platform. We operate connecting prospective borrowers with suitable local loan agents and lender-associated representatives of regulated Banks and Non-Banking Financial Companies (NBFCs). EazyMoney is NOT a Bank, NBFC, or direct lender. We do not provide credit facilities, sanction loans, disburse funds, or hold public deposits. This Privacy Policy outlines our transparent data practices, delineating how your data is handled during loan enquiries, credit score assessments, and digital loan referrals.

To provide loan referral, comparison, and financial wellness assistance, we collect and process the following categories of personal data with your explicit consent: 1. Contact & Demographic Information: Full name, verified email address, mobile phone number, current residential address, city, state, and postal PIN code. 2. Financial & Loan Preference Details: Requested loan amount, preferred repayment tenure, employment type, monthly net income range, and stated purpose of borrowing. 3. KYC & Identification Tokens: • Permanent Account Number (PAN): Used solely for identity verification and performing consented credit eligibility assessments through authorized credit information bureaus or licensed evaluation partners. PAN values are stored in restricted server-side encrypted vaults. • Aadhaar Information: While an Aadhaar number may be entered for initial identity validation, EazyMoney strictly adheres to UIDAI regulations. We DO NOT store full 12-digit Aadhaar numbers or any biometric data. Only the last four digits are retained as a masked reference token for transaction auditing. 4. Technical & Telemetry Data: IP address, browser type, device identifiers, session timestamps, operating system, and consent audit logs recorded during your digital journey.

Your information is collected and processed exclusively for lawful, specified purposes directly related to our lead generation and customer referral services: • Authenticating your identity and securing enquiry access via one-time verification tokens (OTP). • Analyzing your self-reported financial profile to present verified loan products matching your criteria. • Conducting pre-qualification credit assessments and generating personalized debt management and credit assistance plans (upon affirmative user request and payment). • Facilitating referrals by directing you to consented, RBI-registered Banks and NBFCs for formal loan application and underwriting. • Responding to your customer service enquiries, feedback, or grievance escalation requests. • Complying with applicable legal, regulatory, tax, and anti-money laundering (AML) reporting obligations under Indian law.

We maintain a strict policy against selling, renting, or trading your personal data to unsolicited third parties or commercial telemarketers. Disclosures are strictly limited to the following: 1. RBI-Regulated Lending Partners: When you select a specific lending product and confirm continuation, your enquiry details are routed to the designated Bank or NBFC. Such lenders process your formal loan application under their independent privacy policies, regulatory mandates, and credit assessment frameworks. 2. Technology & Infrastructure Providers: We partner with SOC-2 and ISO-27001 compliant cloud infrastructure providers (e.g., Supabase for encrypted database storage) and transactional communication providers for OTP delivery. 3. Payment Aggregators: Financial transactions for optional credit assistance reports are securely handled through PCI-DSS Level 1 compliant payment gateways (e.g., Razorpay). EazyMoney does not store credit card numbers, debit card PINs, or net banking passwords. 4. Credit Information Bureaus: Licensed credit bureaus or authorized technology partners process PAN and basic identification details solely to deliver consented credit score checks. 5. Legal & Regulatory Authorities: Data may be disclosed when required by a valid judicial summons, statutory directive, or lawful investigation by law enforcement agencies.

We implement robust technical and organizational security controls designed to safeguard your sensitive information against unauthorized access, loss, or disclosure: • Encryption: All data in transit is protected using modern Transport Layer Security (TLS 1.3). Sensitive tokens stored at rest, including PAN and masked Aadhaar references, are secured using AES-256 encryption. • Access Control: Strict Role-Based Access Controls (RBAC) and multi-factor authentication are enforced across our operational systems. Only authorized compliance personnel can access restricted records. • Data Localization: In accordance with RBI directives and the DPDP Act, all primary user databases and processing environments are hosted on secure servers located within the territory of India.

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, or to comply with statutory audit, tax, and regulatory retention requirements under Indian financial law (typically up to 5 to 7 years for financial records). Upon expiration of the necessary retention period, or upon receiving a verified erasure request from you (where retention is no longer legally mandated), your records are permanently purged or irreversibly anonymized.

As a data principal under the Digital Personal Data Protection Act, 2023, you enjoy comprehensive rights regarding your personal information: • Right to Access: You may request a summary of the personal data we hold about you and the processing activities undertaken. • Right to Correction & Updating: You have the right to request correction or updating of inaccurate, incomplete, or out-of-date personal data. • Right to Erasure: You may request the deletion of your personal data where its retention is no longer required by law. • Right to Withdraw Consent: You may withdraw your consent at any time. Withdrawal does not affect the legality of processing conducted prior to revocation. • Right of Grievance Redressal: You have the right to prompt redressal of any grievance through our designated Grievance Officer. To exercise any of these rights, email our compliance desk at contact@eazymoney.shop with your enquiry reference number.

In compliance with the DPDP Act 2023 and the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, the details of our Grievance Officer are as follows: Entity: EazyMoney Designation: Nodal Grievance & Compliance Officer Address: Gujarat, India Email: contact@eazymoney.shop Working Hours: Monday to Friday, 10:00 AM to 6:00 PM IST (Excluding Public Holidays) We commit to acknowledging your grievance within 48 hours and resolving your concern within 30 days of receipt.