1. INTERPRETATION AND DEFINITIONS

Definitions

• Personal Data: Any information that relates to an identifiable individual, such as name, contact details, financial data, and usage information.
• Processing: Any action performed on Personal Data, including collection, storage, sharing, or deletion.
• Cookies: Small data files stored on your Device to track usage and preferences.
• Service: Refers to the website and other platforms operated by Us, the Company.
• You: The individual using or accessing our Service.

2. TYPES OF DATA COLLECTED

A. Personal Data

We may collect data such as full name, email address, phone number, address, financial data including bank details and UPI IDs, but we do not store or collect biometric data.

B. Usage Data

We collect IP address, browser details, pages visited, and device details, but no access is requested to phone resources like files, media, contacts, or telephony functions.

C. Cookies and Tracking Data

We use session cookies for secure operation and persistent cookies for remembering preferences. You may refuse cookies, but certain parts of our service may not work properly.

3. PURPOSE OF DATA COLLECTION

We process data to provide and maintain the Service, manage accounts, process payments, send notifications, improve services, comply with legal obligations, and offer marketing promotions with opt-out options.

4. LEGAL BASIS FOR PROCESSING DATA

Data is processed based on consent, contractual obligations, legal compliance, and legitimate interests.

5. DATA RETENTION

We retain personal data only as long as necessary or required by law. Minimal borrower data is kept for operations; usage data is kept short-term unless needed for security or compliance.

6. DATA DISCLOSURE

Data may be disclosed to trusted third-party vendors, during business transactions, to comply with laws, or to prevent fraud. Explicit prior consent is always obtained.

Third parties include Signzy Technologies, Digitap.ai, Decentro Tech, and Walkover Web Solutions (MSG 91).

7. CROSS-BORDER DATA TRANSFERS

We may transfer data within India, ensuring compliance with RBI and DPDP Act, and maintaining data security via legal contracts.

8. DATA SECURITY

We employ encryption, access controls, and regular audits. While we strive for security, no system is completely secure.

9. DATA BREACH NOTIFICATION

We will mitigate breaches, notify affected users promptly, and report to authorities as required.

10. USER RIGHTS UNDER THE DPDP ACT, 2023

You have the right to access, correct, delete, withdraw consent, and file grievances regarding your data.

11. CHILDREN’S PRIVACY

We do not knowingly collect data from individuals under 18. Contact us if you believe a minor’s data was collected.

12. CHANGES TO THIS PRIVACY POLICY

Updates will be posted on this page. Please review periodically for changes.

13. CONTACT US

Email: all@hyperfin.tech

Address: 1st Floor, Fly Realty, Urban Vault, 18th Cross Road, HSR Layout, Bangalore – 560102