Privacy Policy

Last updated: April 1, 2025 · Effective: April 1, 2025

The short version: We collect only what we need. We protect everything with bank-grade encryption. We never sell your data — ever. We share with partners only as needed to provide you financial services, and only with your consent.

1. Who We Are

Nishwik Global Fintech Private Limited ("Nishwik", "we", "our", "us") is a technology company registered in India. We operate the Nishwik app, web platform, and partner dashboards ("Platform"). We are not an NBFC or bank — we partner with RBI-registered NBFCs and scheduled commercial banks to provide financial products.

2. Data We Collect

2.1 Information You Provide

Identity information: Name, date of birth, PAN, Aadhaar (via CKYC only)
Contact information: Email address, phone number
Financial information: Income, employment, bank account details (for disbursement/repayment only)
KYC documents: As required by RBI-registered lending partners
Application data: Loan amounts, purposes, partner selections

2.2 Information Automatically Collected

Device data: Device type, OS version, app version
Usage data: Features used, pages visited (anonymised)
Technical data: IP address, crash reports

3. How We Use Your Data

To process and facilitate loan applications and EMI products
To verify your identity via CKYC-compliant processes
To disburse and collect payments via BBPS-registered channels
To communicate with you about your applications and account
To send product and feature updates (with your opt-in consent)
To improve our Platform (using anonymised, aggregated data only)
To comply with legal and regulatory obligations

4. Data Sharing

We share your data with:

RBI-registered NBFC and banking partners — strictly for loan underwriting and disbursement, under contractual data protection obligations
CKYC Registry — for identity verification as required by RBI regulations
BBPS — for payment processing
Regulatory authorities — when legally required by RBI, SEBI, or other regulators

We never sell your personal data. We do not share your data with advertisers, data brokers, or third-party marketing platforms. Period.

5. Data Security

All data is encrypted using AES-256 encryption at rest and TLS 1.3 in transit. We maintain strict access controls, conduct regular security audits. Our security team reviews access logs continuously.

6. Your Rights

Right to access your data
Right to correct inaccurate data
Right to request deletion (subject to regulatory retention requirements)
Right to withdraw consent for marketing communications
Right to data portability

To exercise any of these rights, contact us at privacy@nishwik.com. We respond within 30 days.

7. Data Retention

We retain your data for as long as your account is active and for up to 8 years after account closure, as required by applicable Indian financial regulations. Anonymised, aggregated data may be retained indefinitely for analytics purposes.

8. Cookies and Tracking

Our web platform uses strictly necessary cookies for functionality and optional analytics cookies (with your consent). We do not use advertising or tracking cookies. You can manage cookie preferences in your browser settings.

9. Children's Privacy

Our Platform is not intended for individuals under 8. We do not knowingly collect data from minors. If you believe a minor has created an account, contact us immediately at privacy@nishwik.com.

10. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or in-app notification at least 14 days before they take effect. Continued use of the Platform after that date constitutes acceptance of the updated policy.

11. Contact & Grievance Officer

For privacy-related queries or complaints:

Email: privacy@nishwik.com
Grievance Officer: [Name] · grievance@nishwik.com
Response time: Within 30 days as required by IT Act, 2000