Privacy Policy

1. Information We Collect

In delivering enterprise financial verification and credit reporting API services, we may collect and process information through two primary channels:

• Direct Corporate & Developer Data: Information provided when creating an account, requesting an API key, or scheduling a consultation, including authorized representative names, official email addresses, contact telephone numbers, company designations, and billing addresses.
• Inquiry Verification Coordinates: Parameters submitted via our API gateway to query bureau records (such as applicant Full Name, Date of Birth, PAN number, and mobile number) strictly submitted under verifiable borrower consent.
• Technical Metadata & Log Records: Internet Protocol (IP) addresses, API endpoint invocation timestamps, latency metrics, user-agent details, and cryptographic token authentications logged for audit trails, security monitoring, and fraud detection.

2. How Information is Utilized

Information collected by RISIDDHA FINSERVE PRIVATE LIMITED is deployed solely for legitimate business, technical, and regulatory compliance objectives, including:

• Routing verified inquiry parameters to licensed credit bureaus (CIBIL, Experian, CRIF High Mark, Equifax) to retrieve credit reports on behalf of compliant lending institutions.
• Provisioning, maintaining, and enhancing API infrastructure, sandbox environments, and developer documentation.
• Validating consumer consent records in compliance with Indian regulatory directives and reserve bank guidelines.
• Intercepting suspicious inquiry velocity, synthetic identity fabrication, and unauthorized API exploitation.
• Transmitting transactional notifications, developer onboarding tokens, billing invoices, and service updates.

3. Borrower Consent & Data Ethics

Our partners and API consumers warrant that any personal data submitted for credit score or bureau pull requests is accompanied by explicit, unambiguous consent obtained from the subject individual in accordance with applicable laws. We do not sell, barter, or distribute consumer credit records to third-party advertising or commercial marketing firms.

4. Robust SSL Security Measures

We enforce multi-tiered cryptographic and operational safeguards to defend against unauthorized data exposure, alteration, or interception. All API payload transmissions are secured using 256-bit SSL encryption. Sensitive identifiers within our logging layers are tokenized and stored in isolated, access-controlled virtual private clouds.

5. Data Retention Standards

We retain developer account credentials and billing records for as long as an active service agreement exists or as required by applicable tax and commercial reporting statutes. Verification inquiry records and bureau payloads are held only for the duration required to complete the API transaction and fulfill regulatory audit trail obligations, after which they are securely purged.

6. Cookies & Tracking Technologies

Our public portal may utilize functional cookies and session identifiers to enhance user navigation, authenticate developer portal sessions, and track aggregate website performance. Users may configure their browser preferences to reject non-essential cookies.

7. Data Privacy Contacts & Grievance Redressal

If you have questions, concerns, or requests regarding this Privacy Policy or your data handling rights, please direct your communication to our dedicated compliance officer: