Privacy Policy

1. Information We Collect

When you use CrediDravya or submit an enquiry via our eligibility or application forms, we collect information necessary to assess your loan enquiry:

• Identity & Contact Information: Full Name, Mobile Number, Email Address, City, Pin Code.
• Financial & Profile Data: Employment status, net monthly income, existing loan EMIs, business vintage, turnover.
• Requirement Context: Requested loan product, loan amount, purpose, property or vehicle details.
• Technical & Attribution Data: IP address, device type, referrer URL, landing page, UTM campaign parameters.

2. How We Use Your Information

We use the collected information for the following specific purposes:

• To evaluate your profile eligibility against lender criteria.
• To contact you via phone or email regarding your specific loan enquiry.
• To connect you with authorized lending institutions where requested.
• To process operational lead enquiries and service requests.

3. Data Sharing & Security Principles

CrediDravya does not sell your personal information to third-party telemarketers. Information is shared strictly with authorized partner lending institutions or service facilitators evaluating your loan request. We implement reasonable technical and organizational safeguards designed to protect personal information against unauthorized access, loss, or misuse.

4. Data Retention & Consent

We retain personal information for the period necessary to fulfill loan facilitation purposes and meet regulatory or audit obligations. You may withdraw consent or submit privacy inquiries by contacting us at contact@credidravya.com.

5. WhatsApp and ConvoBoard Communications

When you communicate with CrediDravya through WhatsApp, we process personal information voluntarily shared or generated during our communication:

• Contact & Profile Identifiers: Your WhatsApp phone number, profile or display name, and WhatsApp-provided user identifiers.
• Message Content & Media Attachments: Inbound and outbound message text, conversation threads, as well as images, documents, audio recordings, video files, voice notes, and any other file attachments you voluntarily transmit to us.
• Transmission & Status Details: Message timestamps, delivery notifications, read receipts, and related transmission status information.
• Support & Interaction Metadata: Conversation state, routing tags, agent notes, and customer support records.

Legitimate Purposes of Processing

We use this communication information solely for legitimate business and loan facilitation purposes, including:

• Responding to your enquiries and assisting with customer support requests.
• Providing loan information, assessing eligibility, and facilitating loan application workflows.
• Managing and routing customer dialogues in ConvoBoard, our internal customer conversation management system.
• Maintaining an accurate operational conversation history and customer relationship records.
• Conducting service follow-ups requested or explicitly consented to by you.
• Maintaining platform security, troubleshooting, audit trail compliance, and abuse prevention.
• Complying with applicable legal, statutory, or regulatory obligations.

Processing Ecosystem & Service Providers

To deliver reliable and secure communication services, CrediDravya operates within the following processing ecosystem:

• WhatsApp & Meta: The WhatsApp Business Platform (provided by Meta Platforms, Inc.) transmits messages, media, and related platform delivery data.
• ConvoBoard: CrediDravya's internal customer-conversation management system used by authorized team members to view, organize, and reply to customer inquiries.
• Supabase: Provides managed database and storage services for applicable application data, authentication, and media storage.
• Cloud Hosting Infrastructure: Cloud hosting providers operate our application and webhook infrastructure.

These service providers process communication data solely to provide their respective infrastructure or services under strict confidentiality and security commitments. CrediDravya does not sell WhatsApp conversation data, mobile numbers, or attachments to third-party telemarketers or advertisers.

Attachment Storage & Retention

Media and document attachments you voluntarily send via WhatsApp may be copied to CrediDravya-controlled application storage so that authorized team members can continue to access and review them during your loan assessment after Meta's standard media retention period expires.

We retain WhatsApp communication data and attachments only for as long as reasonably necessary to fulfill the disclosed business purposes, provide ongoing customer service, and satisfy applicable legal, regulatory, audit, taxation, fraud-prevention, or dispute-resolution requirements.

6. WhatsApp and Application Data Deletion Requests

You have the right to request access to, correction of, withdrawal of consent for, or deletion of your personal data and WhatsApp communication records stored in CrediDravya systems.

How to Request Deletion

To request data deletion, email our privacy team at contact@credidravya.com. To help us process your request securely and efficiently, please include:

• Your full name.
• The specific WhatsApp / mobile phone number associated with the records.
• Sufficient information describing your interaction to enable us to locate your data and verify ownership.

To protect applicant privacy and prevent unauthorized access or deletion, CrediDravya may request reasonable identity verification before fulfilling your request.

Scope & Regulatory Exceptions

Upon receiving a verified request, CrediDravya will delete or anonymize applicable conversation records, attachments, and personal information from our active ConvoBoard and application database within legally applicable timeframes, subject to the following exceptions:

• Mandatory Legal & Regulatory Retention: Information that must be retained to comply with statutory financial regulations, anti-fraud controls, security audit requirements, or ongoing dispute resolution will be restricted and retained strictly for the duration required by law.
• Independent Meta / WhatsApp Storage: Deletion from CrediDravya systems applies strictly to data within CrediDravya's custody and control. It does not govern or delete communications, metadata, or telemetry independently retained by Meta Platforms, Inc. or WhatsApp LLC under their own independent terms of service and privacy policies.