This Privacy Policy (“Policy”) explains how Credorbit Technologies Private Limited (“CredOrbit”, “we”, “us”, or “our”) collects, uses, stores, shares, and protects your information when you visit our website [https://www.credorbit.com] (“Website”) or use any of our services, including products, platforms, tools, features, or solutions offered through the Website (collectively referred to as “Services”).

By accessing or using our Services, you acknowledge and accept the practices and policies described in this Policy and agree to our collection, use, and disclosure of your information as described herein.

1. Information We Collect

We collect the following categories of personal information (“Personal Information”) either directly from you, from public sources, or from third-party partners:

A. Information You Provide

• Name
• Mobile number
• Email address
• PAN, Aadhaar, or KYC documents
• Address and contact details
• Employment and income information
• Bank account or payment details
• Loan application or credit request details
• Any other information voluntarily provided during account creation, onboarding, or availing services

B. Information Automatically Collected

• IP address
• Device information (browser, OS, device type)
• Date and time of access
• Location data (subject to permissions)
• Usage behavior on the Website (clicks, pages visited, time spent, etc.)
• Cookies and similar technologies (see Section 6)

2. How We Use Your Information

We use your information for the following purposes:

• To verify your identity and conduct KYC
• To process your loan or credit applications
• To assess eligibility and creditworthiness
• To enable onboarding with our partner institutions
• To communicate with you (e.g., updates, offers, transaction alerts)
• To provide, maintain, and improve our Website and Services
• To personalize your experience on the Website
• To comply with applicable legal obligations
• To prevent fraud, enforce terms, and ensure platform security
• For analytics, research, and product development

3. Disclosure of Your Information

We may share your Personal Information with the following parties:

• Lending Partners, NBFCs, banks or other regulated financial entities for the purpose of processing your credit or service requests
• Third-party service providers, vendors, or contractors for customer support, KYC processing, document verification, payment processing, data analytics, or technology services
• Regulators, law enforcement, or government authorities, where required under law
• Group companies or affiliates, in connection with offering or cross-selling of financial or value-added services
• Prospective buyers or investors in case of business transfer, merger, or acquisition

We ensure that all third parties receiving your data are contractually obligated to protect your information in compliance with applicable law.

4. Your Rights

Subject to applicable law, you have the following rights with respect to your Personal Information:

• Right to Access – Request access to your data we hold
• Right to Correction – Request correction of inaccurate or incomplete data
• Right to Deletion – Request deletion of your data, subject to legal and contractual obligations
• Right to Consent Management – Withdraw previously given consent at any time
• Right to Grievance Redressal – Raise complaints about our handling of your data (see Section 9)

To exercise these rights, you may contact our Grievance Officer (details below).

5. Data Retention

We retain your information for as long as necessary to fulfill the purposes stated in this Policy, or as required by applicable law, regulatory requirements, or contractual obligations.

6. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience, analyze usage, and deliver relevant content. You can control the use of cookies via your browser settings.

7. Data Security

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction, including:

• Secure socket layer (SSL) encryption
• Access controls and audit logs
• Regular vulnerability assessments
• Industry-standard cloud and storage practices

However, no system is 100% secure. While we strive to protect your information, we cannot guarantee its absolute security.

8. Children’s Privacy

Our Website is not intended for individuals under the age of 18. We do not knowingly collect data from children. If we learn that we have collected such data, we will promptly delete it.

9. Grievance Redressal

If you have questions, concerns, or complaints regarding this Policy or the handling of your Personal Information, you may contact:

Grievance Officer

Name: Dhrumit Parikh

Email: dhrumit@msaca.co.in

Phone: +91 95375 45851

Address: A/5, Fifth Floor, Safal Profitaire, Corporate Road, Prahladnagar, Ahmedabad-380015

Working Hours: Monday – Friday (10:00 AM – 6:00 PM)

You can expect a response within 7 working days.

10. Legal Basis and Jurisdiction

This Policy is governed by the laws of India. Any disputes shall be subject to the exclusive jurisdiction of courts in Ahmedabad, Gujarat, unless otherwise agreed.

11. Changes to This Policy

We may update this Policy from time to time to reflect changes in technology, legal requirements, or business operations. You are encouraged to review this page periodically. Continued use of the Website after changes are published constitutes your acceptance of the updated Policy.

12. Consent

By accessing or using the Website, you consent to the collection, use, processing, storage, and disclosure of your information in accordance with this Privacy Policy.