Privacy Policy
Last Updated: August 2026 • Compliant with RBI Digital Lending Guidelines & IT Act 2000
Welcome to KisshtPay ("Company", "we", "our", or "us"). We operate as a digital lending platform facilitating credit evaluation and loan eligibility assessments connecting borrowers with registered Non-Banking Financial Companies (NBFCs) and Banking Institutions licensed by the Reserve Bank of India (RBI).
Your privacy and data security are our top priorities. This Privacy Policy details how we collect, store, process, and protect your personal, financial, and KYC data when you use our website and application services.
1Information We Collect
Identity & KYC Information: Full Name (as per PAN Card), Date of Birth, Age, Permanent Account Number (PAN), and Masked Aadhaar details collected with your explicit authorization.
Contact Details: Verified Mobile Number (validated through OTP authentication) and Email Address.
Financial & Employment Details: Employment type (Salaried, Student, Business), Monthly Income, Bank Account statements (PDF/e-statement), and existing loan obligations.
Device & Technical Telemetry: IP Address, browser type, operating system, and session timestamps used solely for fraud prevention and cybersecurity defense.
2Purpose of Data Processing
- Performing automated credit assessment and loan eligibility pre-checks.
- Sharing credit evaluation dossiers with RBI-regulated lending partners for formal sanctioning.
- Preventing identity fraud, unauthorized impersonation, and money laundering (AML standards).
- Communicating application progress, assessment outcomes, and statutory Key Fact Statements (KFS).
3RBI Digital Lending Directives & Zero Permission Policy
🛡️ Zero Mobile Permission Guarantee
In strict adherence to RBI Master Directions on Digital Lending, KisshtPay never accesses or collects your mobile phone contacts, call logs, SMS text messages, media galleries, or device biometric sensors.
4Data Storage and Security Measures
All user data is stored within certified data centers located strictly within the territory of India. We enforce 256-bit TLS/SSL encryption in transit and AES-256 encryption at rest. Regular vulnerability assessments safeguard your records against unauthorized access.
5Your Rights (Right to Forget & Rectify)
You hold the statutory right to withdraw consent, review collected information, and request complete purge/deletion of your personal data from our systems (subject to statutory record retention requirements under RBI/PMLA guidelines). To request data erasure, write to our Grievance Officer.
Grievance Redressal Officer
Name: Rajesh Kumar (Compliance & Data Protection)
Email: support@kisshtpay.online
Address: KisshtPay Technologies Pvt. Ltd., FinTech Hub, BKC, Mumbai - 400051
SLA: Grievances acknowledged within 24 hours and resolved within 7 business days.