LAST UPDATED ON [5th June 2026]
1. Objective
The privacy and security of personal information about you is our priority. We receive and store both personal and non-personal information about you when you visit and/or use our platform, including our mobile application ‘CASH by CRED’ (“Platform”). We protect this information by maintaining physical, electronic, and procedural safeguards that meet applicable laws. We train our employees in the proper handling of personal information.
This Privacy Policy describes our policies and procedures for collection, use, storage, processing, disclosure and protection of any information, including, but not limited to, personal information (“Personal Data”) provided by you as a user while using the platform and your privacy rights.
User shall mean any person/ persons, who visits, uses, deals with and/or transacts through the Platform.
2. Collection of Information
We collect the following Personal and Non-Personal Information when you use the Platform.
a. Personal Information for the purpose of this privacy policy includes
i. Your name, contact number and e-mail that is collected for signing up on Platform.
ii. Information provided by you, for using the services provided by us, such as your mobile number, e-mail, password, date of birth, residential address, gender, marital status, Permanent Account Number (PAN) and your bank account details.
iii. You may be required to provide certain additional information depending on the services that you wish to use, at your discretion, including but not limited to your credit report(s).
iv. We may also use your retrieve information from Know Your Customer (KYC) databases such as DigiLocker and collect variables as your KYC status and, father's name, occupation, identity and address proof documents from lending partners for verification purposes.
v. During the use of our services, we will collect information about your transaction history, transaction status and other transaction details.
vi. When you interact with our customer support systems including through chat bots, email, live interaction with an agent either over chat or on call, we record these interactions.
To offer features like spend analyser, We may process limited transactional information from Your SMS. This is done to identify relevant transactions and categorize spending. We do not read or store personal messages, bank OTPs, or sensitive account information. We do not access mobile phone resources like file and media, contact list, call logs, telephony functions and others or collect any biometric data without explicit consent. However, we may take a one-time access of Your camera for uploading a selfie image, microphone, for the purpose of KYC and loan onboarding journey with our lending partner.
b. Non-Personal Information
i. When you visit our Platform, we collect and store information to enable us to provide an online experience that matches your device. The information collected includes the type and address of the device you use, the browser and its version, the operating system and its version you are using and the website from which you came to the Platform.
ii. When you install and access our mobile application or access our website through a mobile device, we collect information including your location, IP address, the make, model and the unique identifier of the device in use, the browser and its version, the operating system installed on the device and its version.
iii. When you browse our site or receive an e-mail from us, we and the companies we work with, use cookies and/or pixel tags to collect information and store your online preferences. Cookies are widely used and most browsers are set up to accept them automatically. If you would prefer, you can choose to not accept cookies by disabling the same through browser settings.
iv. Cookies and pixel tags help us improve your online experience. This comprises, inter alia, your response to any of our e-mails, the time and duration of your visit to our site and pages you viewed while on our site.
v. We may also supplement the information we collect with information we receive from other companies. For example, we may use marketing segments developed by us or other companies to customize certain services to your local area and provide relevant Platform offers tailored to you.
Any information provided to us by you or collected by us about you shall be deemed to have been disclosed willingly by you, without any coercion by our officers, agents or affiliates. While we make efforts to validate the information provided by you, we do not/shall not undertake any liability and do not/shall not make no representations as to the genuineness, validity, completeness or correctness of the information provided by you.
3. Storage of your information
In compliance with applicable Indian data protection laws, all collected information is stored securely on servers or storage systems located within the territorial jurisdiction of India. To safeguard against unauthorized access or breaches, all data is encrypted at rest, whether stored on our proprietary infrastructure or with authorized third-party vendors.
4. Utilization of information
We use the personal information provided by you for;
a. Facilitating various services provided by us, the availing of each of which are at your discretion, including;
i. Setting up your account and facilitating the provision of loans through our financial partners.
ii. To enable us to complete your registration with us and/or with them and to process any transactions that you authorise, maintain a record of your transactions, generate and send reminders, alerts, notifications to you for transactions, etc.
b. Resolving your queries, concerns and to provide you with support in the case of any issues during the use of our services and of those provided by our partners.
c. Informing you about any offers relating to products and services including sharing of marketing material with you.
d. Streamlining and customizing your experience while using our mobile application or while accessing our services through the Platform.
e. Informing you over email or on call about the progress of and issues with, if any, pertaining to the transactions initiated by you and the resolution thereof or relating to the services availed by you.
f. To communicate with our partners with respect to their products and services that you may have availed through us.
g. To enable our partners to communicate with you with respect to their products and services that you may have availed through us.
We use the non-personal information provided by you and aggregated information for:
a. To improve your experience while using our Platform.
b. For troubleshooting and identifying any bugs, operational issues, process bottlenecks, errors in the application and for analysing usage and activity trends.
c. To prepare analyses, reports and tools for your use such as insights.
d. To monitor, identify, resolve and prevent any security incidents, frauds, prohibited activities.
e. We may use aggregated information that does not identify you individually for better product design, research and for developing customized marketing offers either by us or any affiliated or unaffiliated third-party consultants or service providers.
As we add more services or wish to inform you of some additional benefits that we offer either directly or in partnership with any third party, we may use the information we have collected to offer you customized recommendations as well as marketing communications through any medium including e-mail, SMS etc. You will have the option to opt out of such communications at any time.
5. Sharing of your information
a. When we use third parties to provide services, we require them to protect the confidentiality of personal information about you that they receive from us. The information is disclosed on a need-to-know basis.
b. We may use third party service providers to enable us in providing some services to you such as sending e-mail messages to you and tracking them on our behalf, and providing technical support that can contact you regarding an issue with any feature or functionality on our website.
c. Information will be shared with the selected third parties such as our group companies, partners through whom we provide some of our services such as banks, financial institutions, credit information companies, entities registered under applicable laws with the Reserve Bank of India, Central Registry of Securitisation Asset Reconstruction and Security Interest of India (CERSAI), KYC registration agencies (KRA), payment gateway providers, banks providing collection services in order to provide various products and services to you.
d. We also use third-party services such as Sentry, Mixpanel, Google tag manager, Google analytics etc that may collect information used to identify you.
e. We will not share with, or make available, your personal information to any third party without your authorisation, except if we are specifically directed or mandated to do so under any Applicable Law, legal proceeding or directive by any administrative, judicial, quasi-judicial, statutory or regulatory body or any authority or agency of the Government.
6. Security of your information
a. Registering for a service on our website requires the creation of a Login ID and Password by you to ensure the privacy and security of the information you provide. Your Login ID and Password are the primary means to access our services and website, and hence as a security feature, our website requires creation of a password that meets certain complex requirements. We recommend and require that you keep your Login ID and Password confidential. Further, we recommend that you change your password periodically. We shall not be responsible for any unauthorized access to your account if you share your Login ID and Password with anyone or as a consequence of a violation of this Privacy Policy or the Website’s Terms of Use.
b. Every time you login to our website or mobile application, we use, inter alia, the latest authentication and encryption protocols (TLS 1.2) along with session time outs, firewalls to protect your account from unauthorised access. Your password information is not accessible to anyone including us and can only be changed/updated by you using a two-factor authentication process.
c. We may offer the use of social logins or identity providers such as Google, Facebook etc. to enable you to conveniently create an account and register yourselves on our website. By enabling the use of these credentials, we offer you the convenience of not having to create and remember a fresh user ID and password. Such service, its availability and the privacy of your login information are governed by the terms and conditions of the respective service providers. Whilst we do take adequate measures to safeguard your information, we do not take responsibility of your information in case of a security breach at these service providers or in case you share your login information with anyone or in case your social media account was to get hacked. We require you to maintain adequate confidentiality of your social login information and use this facility after due consideration and with appropriate caution.
d. When you provide us with your personal information either while setting up an account with us or later, it is kept maintained by the division that is responsible for your account management. You can view and/or update/edit this information by logging on to your account through our website, e-mailing us or calling customer service.
More details on how We store and protect Your information can be found here. If you identify a potential security vulnerability in our Platform, please report it to us responsibly. Kindly submit a detailed bug report, including steps required to reproduce the vulnerability, to us at security@cred.club. We pledge our best efforts to investigate and rectify legitimate issues within a reasonable timeframe while requesting you not to disclose it publicly.
7. Your rights
When you create a login ID and password or sign-in to the Platform, you are providing your consent to this Privacy Policy.
With respect to the information collected by Us to provide Services, You have the following rights available to You:
Right to deletion: You may request for deletion of Your data by visiting the Contact Us page or by writing to Us at cashbycredsupport@cred.club
8. Data retention
Your Personal Data will be retained only for the duration necessary to fulfill the purposes elucidated in this Privacy Policy, unless a longer retention period is necessitated by law or for directly related legitimate business purposes. Once the Personal Data is no longer required, it will be disposed of securely.
9. Changes to privacy policy
We reserve the right to modify, change or update this Privacy Policy in part or its entirety at any point at our discretion without assigning any reason whatsoever. Update of this Privacy Policy shall be adequate notification of these changes, if any. We will mention the date of the update of this Privacy Policy right at the beginning of this document/web page.
10. Grievance redressal
You may reach out to us for any queries with respect to this Privacy Policy through our Help section or by writing to cashbycredsupport@cred.club
We comply with the requirements of the Information Technology (Reasonable Security Practices And Procedures And Sensitive Personal Data Or Information) Rules, 2011. And for the purposes of this act, we have designated Mr. Atul Kumar Patro as the Grievance Officer.
The Grievance Officer may be reached by writing to grievanceofficer@cred.club or by contacting via: Grievance Redressal Form
11. Governing law and dispute resolution
This Policy shall be governed by and construed in accordance with the laws of the Republic of India. The courts at Bengaluru, India shall have exclusive jurisdiction in relation to any disputes arising out of or in connection with this Policy.