Privacy policy

This Privacy Policy explains how Wesoftek Solutions Private Limited, operating under the brand Paisanow.com, collects, uses, shares, protects, retains and otherwise processes personal data when you use the Platform or request assistance with financial products. We act as a data fiduciary or controller for processing we determine, and may act as a service provider or processor for a Lending Partner in relation to an application.

1. Scope and key terms

This Policy applies to users, applicants, visitors, customers, representatives and persons whose data is lawfully provided through the Platform. “Personal data” means data about an identifiable individual. “Processing” includes collection, storage, use, disclosure, transmission and deletion. Lending Partners and third parties may process data under their own privacy notices.

2. Personal data we may collect

• Identity and contact data — name, date of birth, gender, address, mobile number, email, photograph and signatures.
• KYC and verification data — PAN, officially valid documents, masked or permitted Aadhaar-related information, video-KYC inputs and verification results, where lawfully required.
• Financial and employment data — income, occupation, employer or business details, bank statements, account details, tax information, assets, liabilities and requested loan details.
• Credit and eligibility data — credit bureau information, repayment history, application status, partner decisions and risk or fraud indicators, where processed with required consent or another lawful basis.
• Technical and usage data — IP address, browser, device identifiers, cookies, session logs, referral source, pages viewed and interaction records.
• Communications — calls, emails, chats, forms, complaints and supporting records. Calls may be recorded where notified and permitted.
• Data received from Lending Partners, bureaus, KYC providers, account aggregators, publicly available sources and authorised service providers.

We do not intentionally access phone contacts, call logs, files, media, SMS or telephony functions except where a specific, lawful and necessary feature is clearly disclosed and valid permission is obtained. We do not ask for PINs, passwords or OTPs required to operate your bank account.

3. How we collect data

We collect data directly from you, automatically through the Platform, from a person authorised by you, and from Lending Partners or service providers involved in your request. If you provide another person’s data, you confirm that you are authorised to do so and have provided any required notice.

4. Purposes of processing

• Respond to enquiries, assess preliminary eligibility and match requests with suitable Lending Partners.
• Facilitate applications, KYC, verification, document transfer, status tracking and customer support.
• Enable Lending Partners and authorised providers to conduct underwriting, credit checks, fraud prevention and regulatory compliance.
• Send transactional, service and — with appropriate choice — promotional communications.
• Operate, secure, troubleshoot, personalise and improve the Platform and develop analytics using proportionate safeguards.
• Maintain records, address complaints, enforce agreements, prevent misuse and establish, exercise or defend legal claims.
• Comply with applicable law, regulator directions, court orders and lawful requests.

5. Consent and other lawful grounds

Where consent is the applicable basis, we will seek a clear affirmative indication linked to specified purposes. You may refuse or withdraw consent, but this may prevent us from providing a requested service. We may also process data where permitted for legitimate uses, compliance, prevention of fraud, performance of requested services, emergencies, employment-related purposes or establishment of legal claims, as applicable.

6. Credit information and account aggregation

Credit reports, scores or financial information will be accessed only through authorised channels and on the basis required by law and partner processes. If you use an account aggregator or similar consent-based service, the relevant consent artefact will govern the scope, duration and purpose of data sharing. We do not alter a Lending Partner’s independent credit decision.

7. Sharing and disclosure

We may share only reasonably necessary data with:

• Lending Partners selected or matched for your request;
• credit information companies, KYC registries, account aggregators and verification or fraud-prevention providers;
• hosting, communications, analytics, customer-support, document-management, security, professional and other authorised service providers under appropriate obligations;
• regulators, government bodies, courts, law-enforcement agencies or other persons where required or permitted by law;
• a successor in a merger, restructuring, financing or sale, subject to applicable safeguards.

We do not sell personal data for unrelated consideration. A Lending Partner receiving an application will process it under its own legal and regulatory responsibilities.

8. Cookies and similar technologies

We may use essential cookies for security and operation, and analytics or preference technologies where permitted. Browser controls may block cookies, but some Platform functions may then be unavailable. Any consent-management interface displayed on the Platform should be used to manage non-essential cookies. See our Cookie policy for detail.

9. Data location, transfers and processors

Data may be stored or processed in India and, where legally permitted, in other locations through approved service providers. We apply contractual, technical and organisational safeguards and comply with any government restriction or sector-specific localisation requirement applicable to particular financial data.

10. Retention and deletion

We retain personal data only for as long as needed for the stated purpose, an ongoing application or relationship, legal or regulatory recordkeeping, audit, fraud prevention, dispute resolution or enforcement. Retention periods vary by record and partner requirement. When retention is no longer necessary, data is securely deleted, anonymised or made inaccessible, subject to backups and legal holds. Our Data storage policy sets out the controls in detail.

11. Security

We use reasonable and appropriate safeguards such as access controls, encryption where suitable, logging, vulnerability management, vendor controls, backups, employee confidentiality and incident response. No method is infallible. If a personal data breach requires notification, we will notify affected persons and the competent authority in the manner and timeframe required by applicable law.

12. Your rights

Subject to applicable law and verification, you may request access to a summary of processing and recipients, correction or updating, erasure, withdrawal of consent, grievance redressal and nomination of another person to exercise rights in specified circumstances. You may also opt out of promotional communications. Rights may be limited where retention or processing is required by law, necessary for a transaction or legal claim, or subject to another valid exception.

13. Consent withdrawal and request process

• Email privacy@paisanow.com from your registered email address with the subject “Privacy Request – [Access / Correction / Erasure / Withdraw Consent]”.
• Include your name, registered mobile or email, application or reference number (if any), the specific request and sufficient information to verify identity.
• We will acknowledge and process the request within the period required by applicable law. We may seek clarification or proof of authority.
• Withdrawal operates prospectively. Data already shared with a Lending Partner remains subject to that partner’s independent legal obligations and privacy process.

14. Children

The Platform is intended for adults who are competent to contract and is not directed to children. We do not knowingly facilitate loan applications from persons below 18 years. If we learn that a child’s data was collected without lawful authority, we will take appropriate steps to delete or restrict it.

15. Communications and Do Not Disturb preferences

Service and transactional messages may be necessary for an enquiry or application. You can opt out of marketing using the message instructions or by contacting us. Telecom preference registration may not block communications you specifically requested or transaction-related messages.

16. Third-party platforms

External websites, Lending Partner pages and third-party tools are governed by their own privacy notices. Review those notices before providing data. We are not responsible for independent third-party processing except where law imposes responsibility on us.

17. Grievance and escalation

If you are dissatisfied with our response, you may pursue escalation to the competent data protection, consumer, financial-sector or other authority where the applicable statutory mechanism is available. Complaints concerning a lender’s decision or loan servicing may need to be directed to that Lending Partner under its grievance process. Our Grievance redressal policy sets out the full escalation path.

18. Changes

We may revise this Policy to reflect legal, operational or technological changes. The effective date will be updated, and material changes will be notified where required. Fresh consent will be sought where the law requires it for a new purpose.