1. Information We Collect

To provide verified administrative identity handling and application processing services, we collect:

• Full Legal Name: To cross-verify application records.
• Mobile Number: For transactional SMS updates and application reference notifications.
• Permanent Account Number (PAN): For legitimate tax/identity deduplication where required.
• Aadhaar-Related Reference: Collected exclusively when legitimately required for electronic verification.
• Technical Diagnostics: IP address and user agent recorded strictly for anti-fraud rate limiting.

2. Privacy by Design & Security Safeguards

We enforce strict organizational and technological security safeguards:

• Data Separation: Sensitive identity values (PAN and Aadhaar) are stored in an isolated database entity away from normal application metadata.
• AES-256-GCM Encryption: Sensitive numbers are encrypted at rest with hardware-grade cryptographic algorithms and isolated keys.
• Universal Masking: Aadhaar and PAN numbers are masked everywhere in transit, user interfaces, logs, error responses, and Telegram notifications.
• No URL Leakage: Identity values are never transmitted in URL query parameters, page titles, or browser local storage.
• Immutable Audit Logging: Every administrative request to inspect sensitive records is logged with administrator ID, IP, and timestamp.

3. Purpose of Processing

Your personal data is used solely to facilitate the specific application review initiated by you. We do not sell, rent, monetize, or utilize personal information for marketing purposes or unrelated third-party services.

4. Retention & Deletion

Applicant records are retained only for the duration required by applicable financial regulatory guidelines. Applicants may request deletion or rectification of their records by contacting our Data Protection Officer.

5. Grievance Redressal Officer

For privacy queries, compliance inspections, or data deletion requests, contact: