Privacy Policy
What we collect
Only what is necessary to underwrite your loan: identity (PAN, Aadhaar via DigiLocker), contact (phone, email), and income (Account Aggregator data or manually entered). We never collect biometrics outside RBI-mandated liveness checks.
How we use it
To match you to the right lenders, prefill applications, run RBI-mandated KYC, and disburse your loan. We share data only with the specific lender you choose — not with all of them.
How long we keep it
For the life of your loan + 8 years (RBI retention requirement). After that, anonymized aggregate metrics only. You may request earlier deletion subject to compliance requirements.
Your rights (DPDP Act 2023)
Right to access, correct, erase, and port your data. Reach our Data Protection Officer at dpo@karzero.in — we respond within 30 days as required by law.
Security
AES-256 encryption at rest. TLS 1.3 in transit. SOC 2 Type II audit in progress. Quarterly penetration tests by an external firm.
Cookies & analytics
We use PostHog for product analytics (privacy-friendly, EU-hosted). Cookies require explicit consent — decline by default. No third-party ad tracking ever.