Legal

Privacy Policy

Last updated: April 2026 · FLOCRED Private Limited · CIN: U67100DL2022PTC400764

Short version: We collect your information to match you with the right loan. We don't sell your data. We share it only with the specific banks you choose, with your consent. You can request deletion at any time.

1. Who We Are

FLOCRED Private Limited ("FLOCRED") operates flocred.com, a loan aggregation and eligibility platform. We comply with the Digital Personal Data Protection Act (DPDPA) 2023 and RBI digital lending guidelines. CIN: U67100DL2022PTC400764.

2. What Data We Collect

Identity data (name, PAN — masked, Aadhaar where applicable), contact data (mobile, email, city), financial data (income, existing EMIs, loan amounts, employment type), credit data (CIBIL score via authorised bureau partners), usage data (pages visited, device info), and communication data.

3. How We Use Your Data

To calculate loan eligibility, match you with partner banks and NBFCs, verify identity via authorised KYC partners (Surepass), process subscription payments (ICICI Eazypay — we do not store card details), communicate about your applications, and improve our platform through anonymised analytics.

4. Data Sharing

We share your data only with: (a) the specific bank/NBFC you choose to apply with — only with your explicit consent, (b) credit bureaus (TransUnion CIBIL, Experian) for score retrieval, (c) KYC partners (Surepass) under strict data processing agreements, (d) ICICI Eazypay for payment processing, and (e) legal authorities when required by law. We do not sell your data to third parties or advertisers.

5. Data Security

We protect your data with 256-bit SSL/TLS encryption in transit, PAN masking (first 5 characters only stored), Supabase RLS-enforced database, regular security audits, and role-based access controls. In the event of a data breach, we will notify affected users as required by DPDPA 2023.

6. Your Rights Under DPDPA 2023

You have the right to access, correct, delete your data, withdraw consent, and lodge grievances. Email support@flocred.com with subject "Data Rights Request". We respond within 30 days.

7. Data Retention

Active account data: duration of account + 2 years. Lead and application data: 3 years for audit purposes. Financial transaction records: 7 years as required by law.

8. Contact

Data Protection / Grievance Officer — FLOCRED Private Limited. Email: support@flocred.com. Phone: +91-9319369315.