Privacy Policy
Last updated: 1 January 2025 · DPDPA 2023 Compliant
1. Information We Collect
Identity: name, DOB, PAN, Aadhaar (masked after verification). Contact: mobile, email, address. Financial: income, employment details. Documents: Aadhaar photos (deleted within 48 hours of verification). Transactions: all card activity. Device: IP address, browser type, app usage.
2. How We Use Your Data
Processing your application and KYC verification (RBI mandated). Credit scoring using proprietary and third-party models. Fraud detection and prevention. Transactional communications and statements. Product improvement. We never sell your personal data to third parties for marketing.
3. Data Sharing
Credit bureaus: CIBIL, Experian, Equifax, CRIF (RBI mandated). Regulatory bodies: RBI, UIDAI, IT authorities when legally required. Vetted vendors: cloud hosting (AWS), KYC verification, payment processing. All partners are contractually bound to data protection standards.
4. Data Security
AES-256 encryption at rest. TLS 1.3 in transit. PCI-DSS Level 1 compliant. CVV never stored. Aadhaar numbers masked after verification. Regular penetration testing by independent security firms.
5. Your Rights (DPDPA 2023)
Right to access, correct, and erase your personal data (subject to regulatory retention). Right to withdraw consent for non-mandatory processing. Right to nominate a representative. Contact dpo@navicard.in — response within 30 days.
6. Cookies
Essential cookies (required for site functionality). Analytics cookies (privacy-preserving, no cross-site tracking). Preference cookies (remember your settings). Control non-essential cookies via our consent banner.
7. Contact DPO
Data Protection Officer, Navi Technologies Pvt. Ltd., Unit 4B, BKC, Mumbai 400051. Email: dpo@navicard.in. Grievance Officer: grievance@navicard.in