DIGISTP PRIVACY POLICY

1. Introduction
   The Platform “Pin2Point” is designed and owned by DIGISTP Solutions and Services Private Limited (“we,” “our,” or “us”), a fintech company offering automated, AI-powered digital loan processing services. This Privacy Policy outlines how we collect, use, share, and safeguard your information in compliance with applicable Indian laws, including the Digital Personal Data Protection Act, 2023 (“DPDP Act”).

By accessing our platform or using our services, you acknowledge that you have read, understood, and agree to the terms of this Privacy Policy.

2. Information We Collect
   We may collect the following types of personal data:

• Personally Identifiable Information (PII): Name, email address, phone number, government-issued identification, address (including DIGIPIN).
• Financial Information: Bank account details, income information, credit scores.
• Technical Data: IP address, browser type, device ID, geolocation data.
• Usage Data: Interactions with our platform, logs, cookies.

3. Legal Basis for Processing
   We process your personal data under the following legal bases:

• Performance of a contract.
• Compliance with legal obligations.
• Consent (where required).
• Legitimate interests in enhancing our platform and services.

4. Use of Information
   We use your data for the following purposes:

• To verify identity and assess creditworthiness.
• To enable loan processing, underwriting, and disbursement.
• To communicate with you regarding services and support.
• To improve platform performance and conduct analytics.
• To comply with legal and regulatory requirements.

5. Data Sharing and Disclosure
   We may disclose personal data to:

• Financial institutions and lending partners for processing.
• Governmental or regulatory authorities when required by law.
• Technology service providers under strict data protection obligations.
• Third-party vendors and partners only for specified purposes.

• We do not sell personal data to third parties.

    6. DIGIPIN and Address Information
DigiSTP may use DIGIPIN, a government-developed digital address grid, to enhance address verification and geolocation accuracy. While DIGIPIN is open-source and publicly available, we treat DIGIPIN-linked data as sensitive personal information under applicable law.

    7. Data Retention
We retain your personal data for as long as necessary to:

• Fulfill the purpose for which it was collected.
• Comply with legal and regulatory obligations.
• Enforce our legal rights.

• Data may be anonymized and retained for analytical or archival purposes.

8. Data Security
   We implement appropriate technical and organizational safeguards to protect your data against unauthorized access, disclosure, or loss, including:

• Encryption and access controls.
• Secure cloud storage.
• Regular audits and vulnerability assessments.

9. Your Rights
   Under the DPDP Act, you have the right to:

• Access your personal data.
• Correct inaccuracies.
• Withdraw previously granted consent, where applicable.
• Request erasure of personal data under specific conditions.
• Lodge complaints with the Data Protection Board of India.

10. Cross-Border Data Transfers
    Where data is transferred outside India, we ensure adequate safeguards are in place as per applicable data protection laws.

   11. Children’s Privacy
Our services are not intended for individuals under the age of 18. We do not knowingly collect data from children.

  12. Updates to This Policy
We reserve the right to update this Privacy Policy at any time. Changes will be notified on our platform with the date of revision.

  13. Contact Us
For questions or concerns about this policy, please click here:

Pin2Point – Where you lend matters.