Privacy Policy
Last updated: 29 July, 2026
TrustFin Capital ("we," "our," or "us") operates as a loan facilitation platform that connects borrowers with banks, Non-Banking Financial Companies (NBFCs), and other regulated lending institutions. We are committed to protecting your privacy and handling your personal data transparently in compliance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
This Privacy Policy explains how we collect, use, share, and safeguard your information when you use our website, mobile applications, and services (collectively, the "Platform"). By using our Platform, you consent to the practices described in this Privacy Policy.
1. Information We Collect
a) Personal Information You Provide
When you use our Platform, apply for loan facilitation, or contact us, we may collect the following information:
- Full name, date of birth, gender, and marital status
- Contact details — email address, phone number, and residential address
- Identity proof — PAN card, Aadhaar number (as permitted under law), Voter ID, Passport, or Driving Licence
- Financial information — income details, bank statements, salary slips, ITR filings, existing loan obligations, and credit score
- Employment details — employer name, designation, work address, and years of experience
- Business information (for business loan applicants) — GST registration, business vintage, turnover, and business address
- Property details (for home loan or loan against property applicants)
b) Information Collected Automatically
When you access our Platform, we automatically collect certain technical information, including:
- Device information — device type, operating system, browser type and version
- Log data — IP address, access times, pages viewed, and referring URL
- Location information — approximate geographic location based on IP address
- Usage patterns — features used, time spent on pages, and interaction data
c) Information from Third Parties
With your explicit consent, we may obtain information from third-party sources such as:
- Credit information companies (e.g., CIBIL, Experian, Equifax, CRIF High Mark) for credit score and credit report data
- Account Aggregator frameworks (as permitted under RBI guidelines)
- Banking and financial partners for verification purposes
- Government databases for KYC verification (e.g., DigiLocker, UIDAI)
2. How We Use Your Information
We use the information we collect for the following purposes:
- Loan Facilitation: To assess your loan eligibility, match you with suitable lending partners, and process your loan application
- Identity Verification: To perform KYC checks and authenticate your identity as required under applicable laws
- Communication: To contact you regarding your application status, send important service-related updates, and respond to your inquiries
- Improving Our Services: To analyze usage patterns, enhance user experience, optimize our Platform, and develop new features
- Compliance & Legal Obligations: To comply with applicable laws, regulations, legal proceedings, and government requests
- Fraud Prevention: To detect, investigate, and prevent fraudulent transactions and other illegal activities
- Marketing (with consent): To send you promotional offers, newsletters, and information about our services that may be of interest to you — only with your prior opt-in consent
3. Information Sharing
As a loan facilitation platform, sharing your information with our lending partners is essential to providing our services. We may share your information with the following categories of recipients:
a) Banking & Lending Partners
We share your application data — including personal, financial, and credit information — with our network of partner banks and NBFCs for the purpose of evaluating your loan application, generating loan offers, and processing disbursals. The specific lending partners with whom your data is shared will depend on the loan product you apply for and your eligibility profile.
b) Service Providers
We engage trusted third-party service providers to assist us in operating our Platform, including cloud hosting, data analytics, KYC verification, payment processing, communication services, and customer support. These providers are contractually obligated to maintain the confidentiality and security of your data.
c) Credit Information Companies
With your consent, we share limited personal information with credit bureaus (CIBIL, Experian, Equifax, CRIF High Mark) to obtain your credit report and score for eligibility assessment.
d) Legal & Regulatory Authorities
We may disclose your information if required to do so by law, regulation, court order, or governmental request, or where we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
e) Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets, your personal data may be transferred to the acquiring entity, subject to this Privacy Policy remaining in effect.
We do not sell your personal information to any third party for their independent marketing purposes.
4. Data Security
We implement robust security measures to protect your personal information from unauthorized access, alteration, disclosure, or destruction. These measures include:
- Encryption: All data transmitted between your device and our servers is encrypted using industry-standard TLS/SSL protocols (256-bit encryption)
- Access Controls: Access to personal data is restricted to authorized personnel on a strict need-to-know basis, with multi-factor authentication enforced
- Infrastructure Security: Our servers are hosted in ISO 27001 certified data centres within India, with regular security audits and penetration testing
- Data Minimisation: We collect only the information necessary for the specific purpose and limit data retention to what is required
- Incident Response: We maintain a comprehensive incident response plan and will notify you and relevant authorities in the event of a data breach as required by law
While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We cannot guarantee the absolute security of your information.
6. Third-Party Links
Our Platform may contain links to third-party websites, applications, or services, including those of our banking and lending partners. These third-party sites have their own privacy policies and data collection practices, which are independent of ours.
We encourage you to read the privacy policies of every website you visit. TrustFin Capital is not responsible for the privacy practices or the content of any third-party websites, and the inclusion of any link does not imply endorsement of the linked site by us.
7. Your Rights
Under applicable Indian laws, you have the following rights regarding your personal information:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Correction: You can request that we correct any inaccurate or incomplete personal data.
- Right to Withdrawal of Consent: You may withdraw your consent for the collection and processing of your data at any time. However, please note that withdrawing consent may affect our ability to provide services to you, and any ongoing loan applications may be impacted.
- Right to Grievance Redressal: You have the right to file a complaint with our Grievance Officer if you believe your data has been handled improperly.
To exercise any of these rights, please contact us using the details provided in the Contact Information section below. We will respond to your request within a reasonable timeframe, and no later than 30 days from receipt of your request.
8. Data Retention
We retain your personal information only for as long as is necessary to fulfil the purposes for which it was collected, including:
- Active Applications: Data related to loan applications in progress is retained until the application is completed, withdrawn, or declined.
- Completed Transactions: Data related to facilitated loans is retained for a minimum of 8 years from the date of completion of the transaction, as required under applicable financial regulations and the Prevention of Money Laundering Act, 2002.
- Inactive Accounts: If you have not interacted with our Platform for a period of 5 years and have no active loan obligations, your data will be anonymised or securely deleted, subject to legal and regulatory requirements.
- Legal Requirements: Certain data may be retained beyond these periods to comply with legal obligations, resolve disputes, or enforce our agreements.
When personal data is no longer required, we will securely delete or anonymise it using industry-standard methods.
9. Children's Privacy
Our Platform and services are not intended for individuals under the age of 18 years. We do not knowingly collect personal data from children or minors. Loan facilitation services are available only to individuals who have attained the age of majority (18 years) under Indian law.
If we become aware that we have inadvertently collected personal information from a minor, we will take immediate steps to delete such information from our records. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at hello@trustfincapital.in, and we will promptly address the matter.
10. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will:
- Update the "Last updated" date at the top of this page
- Notify you via email (if you have an account with us) or through a prominent notice on our Platform
- Where required by law, seek your renewed consent
We encourage you to review this Privacy Policy periodically. Your continued use of the Platform after any changes indicates your acceptance of the updated Privacy Policy.
11. Contact Information
If you have any questions, concerns, or requests regarding this Privacy Policy or the handling of your personal data, please contact us:
TrustFin Capital
New Delhi, India
Email: hello@trustfincapital.in
Grievance Officer
In accordance with the Information Technology Act, 2000 and the rules made thereunder, the name and contact details of the Grievance Officer are as follows:
Name: Grievance Officer, TrustFin Capital
Email: hello@trustfincapital.in
Address: New Delhi, India
The Grievance Officer shall address your concerns and grievances within 30 days from the date of receipt.