Privacy Policy
ScoreLoan ("Platform") is owned and operated by Capora Fintech Private Limited.
Capora Fintech Private Limited acts as the legal entity responsible for platform operations, user onboarding, consent management, data handling, and financial product distribution partnerships.
Capora Fintech Private Limited acts as the legal entity responsible for platform operations, user onboarding, consent management, data handling, and financial product distribution partnerships.
Contents
- 1Identity of Data Fiduciary
- 2Information We Collect
- 3Legal Basis & Purpose
- 4How We Use Your Information
- 5Lead Sharing & Referrals
- 6Credit Bureau Access
- 7Data Sharing & Disclosure
- 8Data Retention
- 9Your Rights (DPDP Act)
- 10Data Security
- 11Cookies & Tracking
- 12Children's Privacy
- 13Policy Changes
- 14Contact Us
Sections
1
Identity of the Data Fiduciary & Platform Owner
Capora Fintech Private Limited is the Data Fiduciary responsible for processing your personal data. We are incorporated under the Companies Act, 2013 and our registered office is in India.
For all data-related matters, contact: privacy@capora.in
2
Information We Collect
Identity Data
Full name, date of birth, PAN, Aadhaar (as permitted), government-issued photo ID
Contact Data
Mobile number, email address, residential and correspondence address
Credit & Financial Data
Credit bureau reports (CIBIL, Experian, Equifax, CRIF Highmark), score history, repayment behaviour, loan details, income, bank statements
Subscription & Payment Data
Plan details, payment history, billing cycle, UPI/card/net banking transaction references
KYC Data
Photograph, signature, video KYC recordings where applicable
Device & Technical Data
IP address, device identifiers, OS, browser type, cookies, approximate location (with consent)
Usage Data
Features accessed, credit score reports viewed, recommendations read, session duration
Communication Data
Support emails, in-app messages, feedback forms
Referral Data
Information shared regarding loan or insurance products and your responses
3
Legal Basis & Purpose of Processing
ConsentFor fetching credit bureau reports, sending product recommendations, lead sharing with lending/insurance partners, and marketing communications
ContractualTo activate and manage subscriptions, process payments, and deliver credit improvement insights
Legal ObligationKYC/AML compliance where applicable under PMLA 2002 and RBI guidelines for LSPs
Legitimate InterestsFraud prevention, platform security, improving credit improvement algorithms and recommendations
4
How We Use Your Information
- Pull and display your credit bureau report and credit score with your explicit consent
- Analyse your credit profile to provide personalised credit improvement recommendations and action plans
- Track your credit score progress over your subscription period
- Process monthly subscription payments and send billing notifications
- Share your information as a lead with RBI-registered lending partners (NBFCs/Banks) or insurance companies, only with your prior explicit consent
- Verify identity and conduct KYC where required under applicable law
- Send transactional notifications, subscription renewal reminders, and service updates
- Detect and prevent fraud, unauthorised access, and abuse of platform
- Respond to customer queries and resolve grievances
- Send marketing communications about new features (only with explicit opt-in consent; you may opt out at any time)
5
Lead Sharing & Third-Party Referrals
- Share your contact details and basic financial profile with lending partners only after obtaining your explicit, informed consent at the time of referral
- Disclose the name of the partner(s) with whom your data is being shared before you consent
- Not share your credit bureau report or detailed financial data without a separate, specific consent
- Maintain a record of all consents given for lead sharing
Once your data is shared with a partner, that partner becomes a separate Data Fiduciary and their own privacy policy governs further processing. Capora is not responsible for partner data handling post-referral.
You can withdraw consent for lead sharing at any time by emailing privacy@capora.in. Withdrawal will not affect referrals already completed.
6
Credit Bureau Access
Capora fetches your credit report from licensed credit information companies (CICs) — CIBIL, Experian, Equifax, or CRIF Highmark — under your explicit consent as required by the Credit Information Companies (Regulation) Act, 2005.
Each credit pull is a "soft inquiry" for personal monitoring purposes and does not affect your credit score.
7
Data Sharing & Disclosure
We do not sell your personal data. We may share your information with:
- Credit Information Companies (CICs): To fetch and update your credit report
- Lending & Insurance Partners: Only with your consent, for lead referral purposes
- Payment Processors: Razorpay, Cashfree, or similar gateways for subscription billing
- KYC Agencies: For identity verification where required
- Regulatory Authorities: RBI, FIU-IND, Income Tax Department, and other authorities as required by law
- Technology Service Providers: Cloud, analytics, and security vendors — under strict confidentiality agreements
- Legal & Professional Advisors: Auditors, lawyers, as necessary
8
Data Retention
| Data Type | Retention Period |
|---|---|
| Subscription & Account Data | Duration of subscription plus 3 years after account closure |
| Credit Reports & Score History | Duration of subscription plus 2 years, or as required by law |
| KYC Records | Minimum 5 years after end of the relationship (PMLA requirement) |
| Payment Transaction Records | As required under IT Act and applicable tax law |
| Marketing Consent Data | Until consent is withdrawn or 3 years of inactivity |
Upon expiry of the retention period, data is securely deleted or anonymised.
9
Your Rights Under DPDP Act, 2023
Right to Access
Obtain a summary of personal data being processed and the processing activities
Right to Correction
Correct inaccurate or incomplete personal data held by us
Right to Erasure
Request deletion of data where it is no longer necessary, subject to legal obligations
Right to Withdraw Consent
Withdraw any previously given consent, including for lead sharing or credit bureau access
Right to Grievance Redressal
Lodge complaints with our Grievance Officer and, if unresolved, with the Data Protection Board of India
Right to Nominate
Nominate an individual to exercise your rights in the event of death or incapacity
To exercise your rights, email privacy@capora.in. We will respond within 30 days.
10
Data Security
AES-256 Encryption
Data encrypted at rest; TLS 1.2+ for all data in transit
Access Controls
Role-based access and multi-factor authentication for internal systems
Penetration Testing
Regular penetration testing and vulnerability assessments
RBI Compliance
Security incident response per RBI's IT Security Framework
In the event of a data breach likely to cause harm, we will notify you and relevant authorities as required by applicable law.
11
Cookies & Tracking
Our platform uses cookies for authentication, security, analytics, and personalisation. You may manage cookie preferences through your browser settings.
Disabling essential cookies may affect service functionality.
12
Children's Privacy
Our services are not directed to individuals below 18 years of age. We do not knowingly collect personal data from minors. If we become aware that a minor has provided personal data, we will delete it promptly.
13
Changes to This Policy
We may update this Privacy Policy periodically. Material changes will be communicated via email or prominent notice on our platform at least 30 days before taking effect.
14
Contact Us
Data Protection & Privacy — Capora Fintech Private Limited
Privacy Enquiries
General
Phone
Response Time
Within 30 days of receipt