Privacy Policy

We collect the following categories of personal data: • Identity Information: Full name, date of birth, gender, PAN card number (partially masked after collection), Aadhaar number • Contact Information: Mobile number, email address, residential address • Financial Information: Monthly income, employment details, existing loan obligations, bank statements • Credit Information: CIBIL score, credit history • Technical Information: IP address, device type, browser, cookies, usage data • Documents: Uploaded KYC documents, salary slips, bank statements

Your data is used for: • Processing loan applications and matching with partner lenders • Identity verification and KYC compliance • Credit assessment by partner banks/NBFCs • Sending application status updates and communications • Customer support and query resolution • Analytics to improve our services • Compliance with RBI and legal requirements

We share your data with: • Partner Banks/NBFCs: For loan processing and credit assessment. You will be informed which lender receives your data before application submission. • Credit Bureaus: CIBIL, Experian, CRIF for credit checks • Technology Service Providers: Supabase (database), Vercel (hosting), Resend (email) — all under data processing agreements • Regulatory Authorities: RBI, Income Tax Department when required by law We do NOT sell your personal data to any third party for marketing purposes.

We implement industry-standard security measures: • 256-bit SSL/TLS encryption for all data transmission • Data encrypted at rest in our database • PAN numbers are partially masked after initial verification • Access controls — only authorized team members can access sensitive data • Regular security audits and vulnerability assessments

We retain your data for: • Active loan applications: Until loan is fully disbursed and closed • KYC documents: 5 years post loan closure (RBI requirement) • Lead/inquiry data: 12 months • Account data: Until account deletion request + 30 days for backup You may request data deletion by emailing privacy@opencredit.money, subject to regulatory retention requirements.

Under the Digital Personal Data Protection Act 2023, you have the right to: • Access: Request a copy of your personal data we hold • Correction: Request correction of inaccurate data • Erasure: Request deletion of your data (subject to legal obligations) • Grievance Redressal: Contact our Data Protection Officer • Nomination: Nominate a person to exercise your data rights To exercise your rights, email: privacy@opencredit.money

We use cookies for: • Essential operation of the website • Analytics (Google Analytics) — only with your consent • Remarketing (Google Ads) — only with your consent You can manage cookie preferences through the cookie banner on our website.

For privacy-related queries or grievances: Data Protection Officer OpenCredit.Money Email: privacy@opencredit.money Phone: +91 98765 43210 Address: 123, MG Road, Bangalore, Karnataka — 560001 We will respond to all requests within 30 days.