Privacy Policy

info 1. Introduction and scope

At SwiftLoan, protecting your privacy is fundamental to the trust you place in us. This Privacy Policy explains how We collect, use, store, share, and protect your personal information when you access or use the SwiftLoan Platform, including our loan-comparison and loan referral / lending facilitation services (“Lending Services”).

By using the SwiftLoan Platform, you acknowledge that you have read and understood this Privacy Policy. Where the law requires, We process your personal information only on the basis of your consent, which you may withdraw at any time as described in Section 11.

This Policy is designed to align with the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Information Technology Act, 2000 and the SPDI Rules, 2011, the RBI Digital Lending Guidelines, 2022, and other applicable Indian law.

apartment 2. Who we are

SwiftLoan is a technology platform and Lending Service Provider (LSP) operating a Digital Lending App (DLA). SwiftLoan helps you discover, compare, and apply for personal loans and other credit facilities offered by third-party lending partners that are banks or Non-Banking Financial Companies (NBFCs) registered with or regulated by the Reserve Bank of India (“Lending Partners”).

For the purposes of the DPDP Act, SwiftLoan generally acts as a Data Fiduciary in respect of the information it collects on the SwiftLoan Platform, and as a Data Processor to a Lending Partner in respect of certain data processed on that Partner’s behalf.

menu_book 3. Definitions

• check_circlePersonal Information / Personal Data — any data about an individual who is identifiable by or in relation to such data.
• check_circleSensitive Personal Data or Information (SPDI) — includes financial information such as PAN, bank account or card details, income details, and other categories defined under the SPDI Rules.
• check_circleData Principal — the individual to whom the personal data relates (you).
• check_circleLending Partner — an RBI-regulated bank or NBFC to whom SwiftLoan refers your loan request.

inventory_2 4. Information we collect

We collect the following categories of information, limited to what is necessary for the purposes described in this Policy (data minimization).

4.1 Information you provide to us

• check_circleIdentity and contact information: mobile number, full name, email address, date of birth, residential PIN code/address.
• check_circleFinancial and employment information (SPDI): monthly income, employer / company name, and loan requirement details (loan amount, tenure, and purpose).
• check_circleIdentity and KYC identifiers: PAN, and only the last four digits of your Aadhaar and, where applicable, the last four digits of a bank account. SwiftLoan does not store your full Aadhaar number, Aadhaar image, or biometric selfie.
• check_circleAccount preferences: language preference, and your notification choices (loan updates, security alerts, promotional offers).

4.2 Verification information

One-time passwords (OTPs) used to verify your mobile number and to authenticate you (stored only in hashed form).

4.3 Voice assistant data (“Ruby”)

If you use SwiftLoan’s optional voice-navigation assistant (“Ruby”), your voice input is processed to interpret and act on your requests. This feature is powered by a third-party voice-AI processor engaged by SwiftLoan under contract. Voice data may be treated as sensitive; use of the voice assistant is optional and consent-based, and you can navigate the app entirely without it.

4.4 Information collected automatically

• check_circleDevice and technical information: device model, operating system, app version, and similar identifiers.
• check_circleUsage and analytics information: in-app activity, screens visited and steps completed (for example, language chosen, OTP verified, PAN verified, offers received or selected), session information, onboarding progress, a push-notification identifier, and app-download/attribution signals, used to operate, secure, and improve the SwiftLoan Platform and to send you messages.

4.5 Credit information

A formal credit-bureau enquiry (e.g., CIBIL) is performed only with your explicit consent and, where applicable, by the selected Lending Partner (see Section 7).

tune 5. How we use your information

1. Provide, operate, and maintain the SwiftLoan Platform and your account.
2. Verify your identity and secure your account (e.g., OTP authentication).
3. Help you calculate EMIs, and discover and compare loan offers for which you may be eligible.
4. With your consent, initiate and facilitate your loan application with the Lending Partner you select.
5. Communicate with you about your applications, service updates, and — only where you have opted in — promotional offers.
6. Detect, prevent, and address fraud, security incidents, and misuse.
7. Comply with legal, regulatory, and audit obligations (including RBI, DPDP, IT Act, and CERT-In requirements).
8. Analyse and improve our products and services.

We process your information only for the purposes for which it was collected (purpose limitation).

how_to_reg 6. Consent and legal basis

We rely primarily on your consent for processing your personal information, obtained through clear, purpose-specific consent prompts in the SwiftLoan Platform. Separate, explicit consent is obtained before any credit-bureau enquiry (as required under the Credit Information Companies (Regulation) Act, 2005). Where processing is necessary to comply with law or to provide a service you have requested, We may also rely on those lawful bases.

You may withdraw your consent at any time (Section 11). Withdrawal will not affect processing carried out before withdrawal, and may mean We can no longer provide certain features or facilitate a loan application.

handshake 7. Lending Services — loan referral and facilitation

This Section describes how We handle your information specifically in connection with the Lending Services.

With your consent, when you choose to proceed with a loan offer, We share the personal information reasonably necessary to initiate and process that application — which may include your identity, contact, income and employment details, PAN, KYC identifiers, and loan-application details — with the specific Lending Partner you select and its authorised service providers, solely to enable them to independently verify your details, assess your eligibility, and determine the sanction, pricing, interest rate, tenure, and disbursement terms.

Once your information is shared with a Lending Partner, that Lending Partner’s own privacy policy governs the collection and further use of any information it holds or obtains directly from you, including the outcome of its credit assessment and any bureau enquiry it performs. We encourage you to review the Lending Partner’s privacy policy before proceeding.

SwiftLoan does not share your information with any Lending Partner or service provider that has not agreed to appropriate confidentiality and data-protection terms with Us.

share 8. How we share your information

We share personal information only as described below, and We do not sell your personal information.

• check_circleLending Partners (RBI-regulated banks/NBFCs) — with your consent, as described in Section 7.
• check_circleCredit information companies / bureaus — SwiftLoan does not share your information directly with any credit bureau. Any credit-bureau check is performed by your selected Lending Partner as part of its own eligibility assessment, with your explicit consent (see Section 7).
• check_circleService providers / sub-processors — such as our cloud-hosting provider, the voice-AI processor that powers “Ruby”, and our engagement and analytics provider, Upshot, engaged under contract to process data on Our behalf, on a purpose-limited and confidential basis. Upshot receives your mobile number, name, email, your SwiftLoan user ID, device details and the in-app activity described in Section 4, so that we can show you in-app and push messages and understand how the SwiftLoan Platform is used; it acts on Our instructions and may not use the data for its own purposes. We do not share your PAN, date of birth, address, Aadhaar details, or credit score/report with Upshot.
• check_circleLegal, regulatory, and safety — where required by applicable law, regulation, legal process, or a governmental/regulatory request (e.g., RBI, courts, law enforcement), or to protect the rights, safety, and security of users, the public, or SwiftLoan.
• check_circleCorporate transactions — in connection with a merger, acquisition, financing, or sale of assets, subject to this Policy and applicable law.

We require our sub-processors and partners to protect your information under written agreements consistent with applicable law.

schedule 9. Data retention and deletion

We retain your personal information only for as long as necessary to fulfil the purposes described in this Policy, to facilitate your loan application(s), and for such further period as required to comply with applicable laws, regulatory record-keeping, dispute resolution, and audit obligations. When information is no longer required, We will delete, anonymise, or securely dispose of it in accordance with our retention schedule.

You may request deletion of your account and associated personal data as described in Section 11.

lock 10. Data security

We implement reasonable security practices and procedures appropriate to the sensitivity of the information, in line with the IT Act and SPDI Rules, including: encryption of data in transit (TLS); hashing of credentials and one-time passwords; role-based, least-privilege access controls; data minimization (for example, storing only the last four digits of Aadhaar/bank identifiers and not storing biometric selfies); logging and monitoring; and secure software-development practices. We continue to strengthen safeguards for sensitive identifiers over time.

No method of transmission or storage is completely secure; while We strive to protect your information, We cannot guarantee absolute security. In the event of a personal-data breach, We will notify the relevant authorities (including CERT-In and, under the DPDP Act, the Data Protection Board of India) and affected users as required by law.

account_circle 11. Your rights

Subject to applicable law, you have the following rights.

• check_circleAccess — obtain a summary of the personal data We process about you and how it is processed.
• check_circleCorrection and updation — correct inaccurate or incomplete data (you can edit much of your profile in-app).
• check_circleErasure — request deletion of your personal data where it is no longer required.
• check_circleWithdraw consent — withdraw any consent you previously provided.
• check_circleGrievance redressal — raise a complaint about the processing of your data (Section 12).
• check_circleNominate — nominate another individual to exercise your rights in the event of death or incapacity, as provided under the DPDP Act.

To exercise these rights, contact our Grievance Officer / DPO (Section 12). We may need to verify your identity before acting on a request and will respond within the timeframes prescribed by applicable law.

support_agent 12. Grievance redressal — Grievance Officer / Data Protection Officer

In accordance with the DPDP Act and the RBI Digital Lending Guidelines, We have appointed a Grievance Officer / Data Protection Officer to address your questions, requests, and complaints regarding your personal data and the Lending Services.

If your grievance relates to a specific loan, your Lending Partner is also required to maintain its own grievance-redressal mechanism, and unresolved matters may be escalated to the RBI Integrated Ombudsman Scheme where applicable.

child_care 13. Children

The SwiftLoan Platform and the Lending Services are intended for individuals 18 years of age or older. We do not knowingly collect personal data from children. If We learn that We have collected data from a child without appropriate consent, We will delete it.

public 14. Data localization and cross-border transfers

Consistent with the RBI Digital Lending Guidelines and applicable Indian law, We store personal data collected on the SwiftLoan Platform on servers located in India. Any transfer of data outside India, if undertaken, will be carried out only as permitted by, and subject to the safeguards required under, applicable law.

link 15. Third-party links and services

The SwiftLoan Platform may contain links to, or interfaces with, third-party websites and services (including Lending Partners). This Policy does not apply to those third parties, and We are not responsible for their privacy practices. Please review their policies before providing them your information.

update 16. Changes to this Policy

We may update this Policy from time to time to reflect changes in our practices or the law. We will post the updated Policy on the SwiftLoan Platform and revise the “Last updated” date. Material changes will be notified to you as required by law. Your continued use of the SwiftLoan Platform after an update constitutes acknowledgement of the revised Policy.

alternate_email 17. Contact us

For any questions about this Policy or your personal data, contact:

gavel 18. Precedence

This Privacy Policy governs the SwiftLoan Platform as a whole. The Lending Services provisions in Section 7 are a specific supplement addressing the collection, use, and sharing of personal information in connection with the Lending Services and are to be read as part and parcel of this Policy. In the event of any conflict or inconsistency between Section 7 and any other provision of this Policy in relation to the Lending Services, the terms of Section 7 shall prevail to the extent of such conflict or inconsistency.