Privacy Policy

1. Information we collect

Identity and contact data: your name, mobile number, email address, PAN, date of birth, gender and residential address, collected when you register or request a credit report.

Financial and credit data: your credit score, credit report and related history fetched from credit bureaus on your instruction.

Usage and device data: IP address, browser/device type, operating system, pages visited and approximate location, collected automatically to keep the platform secure and to improve it.

Communication data: the content of messages you send us via the contact form, email, phone, SMS or WhatsApp, and records of our replies.

2. How we use your information

To verify your identity and fetch your credit score and report from RBI-authorised credit bureaus on your instruction.

To operate your account, show your dashboard, and provide personalised credit-health insights and recommendations.

To send transactional communications such as OTPs, login alerts, report-ready notifications and service updates over SMS, WhatsApp, email and push notification.

With your separate consent, to send promotional offers and product updates over SMS, WhatsApp or email. You can opt out of promotional messages at any time (see 'Your rights' below) without affecting transactional messages needed to run your account.

To detect, investigate and prevent fraud, abuse and security incidents, and to comply with applicable law.

3. Consent and credit bureaus

We fetch your credit information from credit bureaus (such as CIBIL, Experian, Equifax and CRIF) only after you provide explicit, informed consent through an OTP-verified request. You can view and withdraw this consent at any time from your profile.

Checking your own score through CreditSphere is a self-initiated 'soft' enquiry and does not affect your credit score.

4. SMS, WhatsApp and call communications

By providing your mobile number and creating an account, you consent to receive OTPs, alerts and service messages from us over SMS, WhatsApp and voice/IVR calls, sent directly or through our licensed telecom and messaging partners (SMS aggregators and the WhatsApp Business Platform).

These messages are limited to what is needed to deliver the service you requested (verification, security alerts, report status, support responses) and any promotional messages you have separately opted into. We follow TRAI's regulatory framework for commercial communications, including honouring DND/NCPR preferences for promotional messages.

You can stop promotional SMS/WhatsApp messages at any time by replying STOP, using the unsubscribe option in the message, or writing to us at the contact details below.

5. Cookies and similar technologies

We use essential cookies to keep you signed in and to remember your preferences (such as light/dark theme), and analytics cookies to understand how the platform is used so we can improve it. You can control cookies through your browser settings; disabling essential cookies may affect how the site works.

6. Data sharing

We do not sell your personal data. We share your data only: with the credit bureaus you have authorised; with service providers who process data on our behalf under confidentiality obligations, such as SMS/WhatsApp messaging providers, cloud hosting and payment processors; and where required by law, regulation or a valid order from a competent authority.

7. Data retention and security

We retain your personal data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and dispute-resolution requirements, after which it is deleted or anonymised.

We use encryption in transit and at rest, access controls and regular security reviews to protect your data. No method of transmission or storage is completely secure, and we encourage you to use a strong, unique password and keep your login details confidential.

8. Your rights

Under the DPDP Act, you have the right to access, correct and update your personal data, request its deletion, withdraw consent you previously gave, opt out of promotional communications, and lodge a grievance with our Grievance Officer or the Data Protection Board of India.

To exercise any of these rights, write to us at hello@creditsphere.in or call 1800-123-4567. We will respond within the timelines required by applicable law.

9. Children's privacy

Our services are intended for individuals who are at least 18 years old. We do not knowingly collect personal data from minors. If you believe a minor has provided us data, contact us and we will delete it.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, the Grievance Officer for CreditSphere can be reached at:

Grievance Officer, Servshield Technology Private Limited Email: hello@creditsphere.in Phone: 1800-123-4567 Address: G-12/180, 2nd Floor, Sangam Vihar, Street Number 12, New Delhi, South East Delhi, Delhi - 110080, India

11. Changes to this policy

We may update this policy from time to time to reflect changes in our practices or the law. We will notify you of material changes and always display the latest revision date at the top of this page.