Privacy Policy

CapitalXB Finance Private Limited

1. Background

This Data Privacy Policy ("Privacy Policy") describes the practices and policies of CapitalXB Finance Private Limited ("CapitalXB" or Company or "we" or "our" or "us", as the context may require) in relation to collection, use, processing, storage, retrieving, disclosure and/or transfer of your information, including personal information and sensitive personal data or information that CapitalXB may receive through your access, interaction with us or use of our website, using our interface, mobile application or any other medium through which we offer our Services (collectively, the "Platform"). The term "Customer" or "user/s" or "you" shall mean any individual who used the Company's Platform or any other company's site or platform, giving access to the Platform or is a registered user on the Company's website or App or a borrower of the Company.

The Company is a Non-Banking Financial Company ("NBFC") registered with RBI and having registered office at: A/801, 81 Crest FP NOS 81 B and 81 C Linking Road, Santacruz(w.), Near HDFC Bank, Mumbai 400054.

This Privacy Policy sets forth reasonable security practices and procedures adopted by the Company and shall apply to use and disclosure and sharing of the Customer Data by the Company. This Privacy Policy shall be read in conjunction with the agreed terms of use agreed by the Customer while registering with the Company or sharing information with the Company in any manner for use of the Services of the Company.

Our Privacy Policy is subject to change from time to time and we will make all reasonable efforts to intimate and update our Customers of any changes. We strongly recommend that you review our Privacy Policy as available on the Platform. In case you need any clarifications regarding this Privacy Policy, please do not hesitate to contact us at grievances@capitalxb.com.

By using the Platform and/or by providing your information, you consent to the collection, use, storage and/or transfer of the information disclosed by you in accordance with this Privacy Policy.

2. Information Collected and Used by the Company

The information collected by the Company would fall under either of the two categories (a) Data provided by you and (b) Information we may collect with your explicit consent in order to render our services including but not limited to the following:

A. Data Provided by You

• Data provided by you on the Platform.
• Data provided while corresponding with us over a meeting, e-mail, chat or call.
• Data and information, you provide when you register to use the Platform to any of our Services, search for a Service, or when you report a problem with our Application or our Services.
• Your name, address, gender, date of birth, e-mail address, phone number, username, password and other registration information.
• Identity Proof and address Proof such as PAN Card, proof of possession of Aadhaar Card, financial information such as employer name, monthly salary, bank account number, bank statements, credit information, copies of identification documents etc.
• Data generated by your usage of our website and associated internet applications.
• The data provided by you inter alia enables us to create your profile, complete your KYC requirements, offer you the Services and provide you with customised support, if applicable.

B. Information We May Collect About You

Consent shall be obtained from the customer/user in writing or electronically accessed by the Company or any third party, as per the consent provided by the customer/user. The personal data collected by the Company shall be used solely for the purposes for which it is collected in accordance with this Privacy Policy and on the consent granted by the customer/user. The access, storage, use of the data by the Company shall be as permitted/allowed under extant statutory and regulatory guidelines.

• Credit Information: With your consent, we collect information from credit information companies, which would help the Company in customer verification and due diligence.
• Device Information: We may collect Information related to the electronic device you use to access the Portal, such as your devices' internet protocol (IP) address, browser type, operating system, software, device type, device ID, device international mobile equipment identity (IMEI) and date and time at which you visit the Portal or avail the Services.
• Data related to Performance of the Application: In addition to the above, we also track and collect the data related to the performance of the Application and other diagnostic data for identifying and resolving any technical glitches.
• SMS: We may need access to the SMS functionality in your device for the purposes of activation of certain Services on your device. We may periodically collect transactional SMSs.
• Location: We may receive, collect and analyse your location information, which may be accessed through a variety of methods including, inter alia, GPS, IP address, and cell tower location.
• Cookies and Similar Technologies: Cookies are small data files that a website uses to recognize repeat users, facilitate user's ongoing access and use of the site. Cookies themselves do not identify individuals, but they identify individual's computers or devices. The Company cannot control the use of cookies of the resulting information by advertisers or third parties hosting data on the Company's website. If a user does not want information collected through use of cookies, we permit you to decline cookies but if you choose to do this it might affect service on some parts of our website.
• Third Party Information: We may also work closely with third party business partners, technical sub-contractors, analytics providers, search information providers, account aggregators, payment aggregators, Lending Service Providers (LSPs), other platform owners etc. and may lawfully receive Information about you from such sources.
• Other Information: We may also collect your Information via other sources, such as delivery address or contact Information from our partners, Information from our payment service providers, public records, publicly available sources or internet sites, vendors, data suppliers and service providers, commercially available marketing lists or registries, telephone directories, social network, news outlets and other related media.

C. Use of Customer Data

We may use your data for various things including specific business purposes ("Services"), which will include the following:

• To provide services that might be required by the Customer, including for availing any lending related services.
• To process the Customer's financial and non-financial transaction requests.
• To undertake research and analytics for offering or improving the Company's services.
• To check and process the user's application for availing any financial services.
• To share any updates/changes to the Services and the terms and conditions with the user/customer.
• To take up and investigate any complaints/claims/disputes.
• To respond to queries and feedback submitted by you.
• For verification of your identity as per the internal policies including KYC.
• To fulfil the requirements of applicable laws/regulations and/or court orders/regulatory directives received by the Company.

D. Retention of Information Collected

• The Company would retain the data submitted/collected by you for such reasonable period as would be necessary for it to deliver its Services, also taking into account the Company's requirement to comply with legal requirements under applicable laws.
• We shall not retain any personal data and information longer than permissible under Applicable Laws. The User's Personal Data and Information may however be retained for a longer period where we need such information for legal, regulatory, accounting, processing or other legitimate purposes.

E. Sharing of Information

Where possible, you shall have the option to restrict disclosure to third parties. However, where sharing of information to a particular third party is necessary for providing the products and/or services, you shall not be able to avail such products and/or services in case you decide to restrict such disclosure. Following are the third parties to whom your information may be shared:

F. Storage of Data

We will retain any data or information provided by you till the time we render our services towards you. Our data retention policy is restricted to the provision of our services towards you. You can request for the deletion of your information from us at any stage. Our data retention, storage and deletion policy is in consonance with the applicable laws and guidelines of the RBI.

G. Procedure for Correcting Inaccuracies

In the event that any information provided by you is inaccurate, incomplete or outdated, you shall have the right to provide us with the accurate, complete and up to date data and have us rectify such data at our end immediately. We urge you to ensure that you always provide us with accurate and correct information/data. In case of modification of personal information, users will be required to furnish supporting documents relating to change in personal information for the purpose of verification by the Company.

H. Right to Withdraw/Deny Consent

You have the option, to deny/withdraw your consent at any time for the collection/continued collection, use or disclosure of your information or request for deletion of your information by mailing us at grievances@capitalxb.com. In case of withdrawal of your consent, we reserve the option not to provide the Services for which such information was sought. We shall have the right to continue processing your information till such credit facility/Service has been repaid in full, along with any interest and dues payable and/or for such period as may be allowed under applicable law.

I. User Acknowledgement

• The Company and/or its employees/assigns will not contact the user directly for disclosure of any sensitive and personal information unless required for providing the Services. User is requested to exercise proper due diligence to verify the identity of the individual(s) contacting before disclosing any personal and sensitive personal data/information.
• User is aware of the potential risk of data/privacy breach and user shall be solely liable for any unauthorized disclosure/breach personal/sensitive personal information etc. and any direct/indirect loss suffered by user due to user's conduct.

J. Intimation of Products and Services

We want our customers and user to be the first to know about our new products and services, and any offers from our partners. We may share these offers with our customers and users only with their prior consent. User can unsubscribe from receiving these offers by emailing us.

K. Changes to This Policy

The Company shall post updated versions of its policy from time to time on our website and mobile application. The updated version of our terms will be effective as soon as they are accessible and the user is deemed to have accepted the terms of the updated Privacy Policy.

L. Prohibitions

While visiting or using our application or digital platform, the User shall use the same only for legal purposes and not for any illegal purposes like hacking. User shall not remove any copyright, trademark or other proprietary rights notices contained in the application or digital platform.

M. Communication with Company

If the User has any questions about this Privacy Policy or if the user has any concerns or questions on the manner in which their personal data or information is handled then they may contact the nodal officer so appointed.