Privacy Policy

Welcome to ChitfundsERP (the "Platform", "we", "our", or "us"). We are committed to protecting your privacy and ensuring that your personal data is handled in a safe and responsible manner. This Privacy Policy outlines how we collect, use, process, and disclose your information when you use our Chit Fund, Daily Finance, and Vehicle Finance ERP software and services.

This policy complies with the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDPA") of India.

1. Information We Collect

To provide you with our comprehensive financial management services, we collect various types of information, including but not limited to:

• Personal Identifiable Information (PII): Name, email address, phone number, physical address, Date of Birth.
• Financial & KYC Information (Sensitive Personal Data): PAN card number, Aadhar number, bank account details, credit/debit card information, UPI IDs, loan application details, and transactional history.
• Business Information: Company name, registration details, employee/agent data, and business financial records.
• Technical & Device Data: IP addresses, browser types, operating systems, and platform usage metrics collected via cookies and similar tracking technologies.

2. How We Use Your Information

We use the collected information for the following legitimate business purposes:

• To provide, operate, and maintain the ChitfundsERP SaaS platform.
• To process transactions, manage chit fund groups, disburse loans, and track EMI collections.
• To comply with legal obligations, regulatory requirements, and KYC norms as mandated by the Government of India and the Reserve Bank of India (RBI).
• To verify identities, prevent fraud, and maintain robust platform security.
• To communicate with you regarding updates, system alerts, account notifications, and customer support.

3. Data Sharing and Disclosure

We do not sell, rent, or trade your personal data. We may share your information only under the following circumstances:

• With Service Providers: Third-party payment gateways (e.g., Razorpay), SMS/Email gateway providers, and cloud hosting partners who assist us in operating our platform. These entities are contractually bound to maintain data confidentiality.
• Legal & Regulatory Authorities: We may disclose information if required to do so by law, court order, or governmental request to comply with Indian laws and regulations.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, user data may be transferred to the acquiring entity.

4. Data Security & Storage

We employ industry-standard security measures to safeguard your data against unauthorized access, alteration, disclosure, or destruction. This includes:

• Data encryption in transit (HTTPS/SSL) and at rest.
• Role-based access controls (RBAC) ensuring data isolation across multi-tenant environments.
• Regular security audits and vulnerability assessments.

Your data is stored securely on cloud servers located within the jurisdiction of India, in compliance with data localization directives where applicable.

5. Data Retention

We retain your personal and financial information only for as long as necessary to fulfill the purposes outlined in this policy, or as mandated by applicable laws (such as the Companies Act, 2013 and PMLA, 2002), which typically require retention of financial records for up to 8 years.

6. Your Rights (Under DPDPA 2023)

As a Data Principal, you have the right to:

• Access & Obtain: Request a summary of the personal data being processed by us.
• Correction & Erasure: Request the correction of inaccurate data or the deletion of data when it is no longer required for the purpose it was collected (subject to legal retention requirements).
• Grievance Redressal: Register a grievance regarding your personal data processing.
• Nomination: Nominate an individual to exercise your rights in the event of death or incapacity.

7. Use of Cookies

We use cookies to enhance your browsing experience, analyze site traffic, and personalize content. You can choose to accept or decline cookies through your browser settings, though declining may limit your use of certain platform features.

8. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on this page with a revised "Last Updated" date.

9. Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the name and contact details of the Grievance Officer are provided below: