PRIVACY POLICY

1. Nature of Our Services

PaisaOne operates as a Direct Selling Agent (“DSA”) and financial-product facilitation and referral platform through contractual arrangements with banks, non-banking financial companies (“NBFCs”), insurance providers and other financial institutions or regulated entities (“Partners”).

PaisaOne does not itself provide or sanction loans, insurance policies or other financial products unless expressly stated otherwise for a particular service. Where you express interest in a financial product, PaisaOne may facilitate your access to or referral to the relevant Partner. The relevant Partner independently determines your eligibility, approval, pricing, interest rate, fees, tenure, terms and conditions and is responsible for providing the relevant financial product in accordance with Applicable Law.

Where you are redirected to or access a Partner’s website, application or other platform, the Partner may separately collect and process your Personal Data in accordance with its own privacy policy and applicable laws.

2. Personal Data We Collect

Depending upon the Services you use and the purpose for which the information is required, we may collect Personal Data including your name, date of birth, mobile number, email address, PAN or other identification details, information relating to your financial requirements, information provided through forms or enquiries, and other information reasonably necessary to provide or facilitate the Services.

We may also automatically collect limited technical and usage information, such as IP address, device type, operating system, browser or application information, unique device identifiers, access times, pages or features accessed and other diagnostic information.

We collect Personal Data only to the extent reasonably necessary for the relevant and disclosed purpose and shall not seek unnecessary access to information or device resources.

3. Purposes for Which We Use Personal Data

We may collect and process Personal Data for purposes including facilitating enquiries and registrations, identifying and presenting relevant financial products, referring or connecting you with our Partners, communicating with you regarding products or services in which you have expressed interest, providing customer support, maintaining records of enquiries and consents, improving and securing the Platform, preventing fraud, misuse or unauthorised access, conducting internal analytics and operational activities, complying with legal and regulatory requirements, responding to lawful requests from competent authorities, and establishing, exercising or defending legal rights.

Where you have provided the required consent, we may also use your Personal Data to communicate information regarding relevant financial products, services, offers or promotions. You may withdraw such consent in accordance with the mechanism made available by us and Applicable Law.

4. Sharing and Disclosure of Personal Data

We may share Personal Data, to the extent reasonably necessary for the relevant purpose and permitted under Applicable Law, with our Partner banks, NBFCs, insurance providers and other financial institutions for facilitating the products or services requested by you; authorised service providers assisting us with technology, hosting, communication, customer support, analytics, security and other operational functions; professional advisers, auditors and consultants; and governmental, regulatory, judicial or law-enforcement authorities where disclosure is required or permitted by law.

We may also disclose Personal Data in connection with a merger, acquisition, restructuring, financing, sale of assets or similar corporate transaction, subject to Applicable Law and appropriate safeguards.

We do not sell your Personal Data for unauthorised commercial purposes. Personal Data shall be shared only for lawful and disclosed purposes and, where required, on the basis of your consent or other lawful basis available under Applicable Law.

5. Consent and Withdrawal

Where consent is required for processing your Personal Data, we will seek such consent through an appropriate and informed mechanism and maintain appropriate records of such consent. You may withdraw consent for processing based on consent, subject to Applicable Law.

Withdrawal of consent may affect our ability to provide or facilitate certain Services or products for which such Personal Data is necessary. Withdrawal of consent will not affect the lawfulness of processing carried out before such withdrawal.

6. Data Retention and Account Deletion

We retain Personal Data only for as long as reasonably necessary for the purpose for which it was collected, to provide and administer our Services, maintain appropriate records, prevent fraud or misuse, resolve complaints or disputes, establish or defend legal rights, and comply with applicable legal, regulatory, tax, accounting, audit and record-keeping requirements.

Different categories of Personal Data may be retained for different periods depending on the nature and purpose of the information. This may include identification and KYC information, information and documents submitted by you, application and referral information, communications, consent records, device and usage information, analytics and diagnostic information, attribution information and push notification or device tokens.

You may request deletion of your PaisaOne account and associated Personal Data through the account deletion option available within the Platform. You may submit a deletion request even if you no longer have the App installed.

Upon receiving and verifying a valid account deletion request, we will delete or anonymise Personal Data associated with your account, subject to any Personal Data that we are required or permitted to retain under Applicable Law or that is reasonably necessary for regulatory compliance, fraud prevention, information security, dispute resolution, establishment, exercise or defence of legal claims, or other lawful purposes. Where retention is required, the relevant information will be securely retained, access will be restricted to the permitted purpose and the information will be deleted or anonymised when the applicable retention period expires.

Deletion of an account does not automatically require deletion of information that is independently held by a bank, NBFC, insurance provider or other Partner with whom you have separately interacted. Such information will be subject to the applicable Partner’s privacy policy and retention requirements.

Where information is held in backups or archival systems and cannot reasonably be deleted immediately, it will be isolated from further active processing, where technically and legally appropriate, and deleted in accordance with our applicable backup and retention procedures.

Withdrawal of consent, where applicable, is distinct from account deletion. You may withdraw consent for processing based on consent through the mechanisms made available by us; however, withdrawal of consent may affect our ability to provide or facilitate certain Services, and does not require deletion of information that we are legally required or otherwise permitted to retain.

7. Data Security

We maintain reasonable technical and organisational safeguards designed to protect Personal Data against unauthorised access, alteration, disclosure, loss, misuse or destruction. These measures may include access controls, authentication mechanisms, encryption or other appropriate security measures, monitoring, logging, backup and recovery controls and security practices appropriate to the nature of the information processed.

While we take reasonable measures to protect Personal Data, no electronic transmission or storage system can be guaranteed to be completely secure.

8. Third-Party Platforms and Links

The Platform may contain links, redirects or integrations to websites, applications or platforms operated by our Partners or other third parties. Once you access a third-party platform, the collection and processing of Personal Data by that third party will be governed by its own privacy policy and terms.

PaisaOne does not control the privacy practices of independent third-party platforms and recommends that you review the applicable privacy policy before submitting Personal Data to such third parties.

9. Your Rights

Subject to Applicable Law, you may have rights in relation to your Personal Data, including the right to request access to information about processing, correction or updating of inaccurate or incomplete Personal Data, erasure where applicable, withdrawal of consent where processing is based on consent, and the right to raise a grievance regarding the processing of your Personal Data.

Requests may be made using the contact details provided below. We may undertake reasonable verification before acting on a request in order to protect your Personal Data and prevent unauthorised access.

10. Grievance Redressal and Privacy Contact

For any questions, requests or grievances relating to the collection or processing of your Personal Data, you may contact us at:

We will endeavour to address privacy-related requests and grievances within the period prescribed under Applicable Law.

11. Children's Privacy

The Platform is not intended to knowingly collect Personal Data from children except where such collection and processing is permitted under Applicable Law and the required consent or authorisation has been obtained. Where we become aware that Personal Data has been collected in violation of Applicable Law, we will take appropriate steps to address such information in accordance with Applicable Law.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, business practices or Applicable Law. Any updated version will be made available through the Platform and will specify the revised “Last Updated” date. Where required under Applicable Law, we will provide appropriate notice of material changes.

13. Applicable Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India. The processing of Personal Data shall be carried out in accordance with Applicable Law, including the Digital Personal Data Protection Act, 2023, the rules made thereunder as applicable from time to time, and other applicable privacy, information technology, financial-sector and regulatory requirements applicable to the Services.

Last Updated on 11th August, 2026