PRIVACY POLICY & DATA TERMS

We collect only the information necessary to provide you with our credit repair services. By using our platform, you acknowledge and agree that we may collect the following categories of data:

By providing your information, you authorize us to use it for the following purposes:

• Providing credit repair, dispute resolution, and financial advisory services tailored to your specific situation.
• Verifying your identity and conducting background checks required for regulatory compliance.
• Processing payments, service fees, and refunds as per our published Refund Policy.
• Sending marketing and promotional communications — you may opt out of these at any time.
• Sharing with affiliated companies, partners, and service providers strictly for service delivery.
• Transferring data in the event of a business sale, merger, or acquisition (you will be notified).
• Legal compliance, fraud detection, and enforcement of our contractual rights.
• Creating anonymized, aggregated data for internal business analytics and service improvement.

We process your personal data on the following legal grounds as defined under Indian law:

• Your Express Consent — By using our services, you provide consent which remains valid until withdrawn in writing.
• Contractual Necessity — To fulfill our service obligations as agreed with you.
• Legitimate Business Interests — Including fraud prevention, service improvement, and business optimization.
• Legal Obligations — Compliance with RBI, SEBI, Income Tax Act, and Consumer Protection Act requirements.

We share your personal information only as necessary to deliver our services. You authorize us to share with the following parties:

• Credit Bureaus — CIBIL, Experian, Equifax, and CRIF High Mark, to file disputes and obtain your credit reports.
• Financial Institutions — Banks, NBFCs, lenders, and collection agencies as needed for dispute resolution and settlement.
• Service Providers — Payment gateways, cloud storage providers, CRM systems, legal consultants, and technology partners under strict confidentiality agreements.
• Government & Regulatory Authorities — When required by law, court order, or legal process.
• Business Successors — In the event of a business transfer, merger, or acquisition.

We deploy industry-leading security measures to protect your information at every step:

• 256-bit SSL/TLS encryption for all data in transit and at rest.
• Role-based access controls — only authorized personnel access your data.
• Regular security audits and vulnerability assessments.
• Intrusion detection systems and real-time monitoring.
• Secure, compliant data centers with physical security protocols.

We retain your personal information as follows:

• For the full duration of our active relationship with you.
• Up to 10 years after service completion — as required for legal and business record-keeping under Indian law.
• Longer periods where required by specific legislation, regulation, or legitimate legal proceedings.
• Indefinitely in anonymized, aggregated form for analytical and statistical purposes.

You may request deletion of your data by contacting our Grievance Officer. Requests will be reviewed and fulfilled where no legal or legitimate business interest overrides the request.

As a data principal under the Digital Personal Data Protection Act 2023, you have the following rights:

• Right to Access — Request a summary of personal data we hold about you.
• Right to Correction — Request correction of inaccurate or incomplete personal data.
• Right to Erasure — Request deletion of your data where no legal obligation to retain exists.
• Right to Grievance Redressal — File complaints with our Grievance Officer within the prescribed timelines.
• Right to Nominate — Nominate another individual to exercise your rights in the event of death or incapacity.

By using our website, you consent to our use of cookies, tracking pixels, and similar technologies. We use these to:

• Maintain your session and preferences across visits.
• Analyze traffic patterns and improve our website experience.
• Serve retargeted advertisements on third-party platforms (Google, Facebook, etc.).
• Measure campaign effectiveness and conversion rates.

You may receive marketing communications via email, SMS, and WhatsApp. You can opt out of marketing at any time by replying "STOP" to SMS, clicking "Unsubscribe" in emails, or contacting us directly. Note that service-critical communications cannot be opted out of.

Our website may contain links to third-party websites, including credit bureau portals and financial institution sites. We are not responsible for the privacy practices, content, or security of any external website. We strongly recommend reviewing the privacy policy of any third-party site you visit. You access external links entirely at your own risk.

Your data may be transferred to and processed in countries outside India — including the USA, EU member states, and Singapore — where our cloud service providers and technology partners operate. By using our services, you consent to such transfers. You acknowledge that data protection standards may vary from those in India, though we require all processors to maintain adequate safeguards.

Our services are strictly intended for individuals aged 18 years and above. We do not knowingly collect personal data from minors. If we discover that data from an individual under 18 has been collected, we will delete it immediately. By using our services, you confirm that you are at least 18 years of age.

We may update this Privacy Policy periodically to reflect changes in our practices, technology, or legal requirements. The "Last Updated" date at the top of this page indicates when changes were last made. We will make reasonable efforts to notify registered users of material changes via email.

This Privacy Policy is governed by the laws of India, including but not limited to the Information Technology Act 2000, the DPDP Act 2023, and applicable RBI regulations. Any disputes arising from or relating to this policy shall be subject to the exclusive jurisdiction of the courts in Delhi NCR, India. You irrevocably waive any objection to this venue on grounds of inconvenience or otherwise.

To the maximum extent permitted by applicable law:

• Our total aggregate liability shall not exceed the total fees paid by you to us in the 3 months preceding any claim.
• We shall not be liable for any indirect, incidental, special, or consequential damages arising from use of our services.
• You agree to indemnify, defend, and hold harmless CIBIL Repair and its officers, employees, and agents from any claims, losses, or expenses (including legal fees) arising from your violation of this policy.

The remaining provisions of this Privacy Policy shall continue in full force if any single provision is found invalid or unenforceable by a competent court.

In compliance with the Information Technology Act 2000 and the DPDP Act 2023, we have designated a Grievance Officer to address your data-related concerns: