Privacy Policy

This Privacy Policy explains how Har Shreejee Finance & Leasing Company Limited (“we”, “us”, “Regulated Entity”, or “NBFC”), an RBI-registered non-banking financial company, processes personal data when you visit https://myfundss.com, use the My Fundss platform, apply for a loan, or interact with our services.

The My Fundss website and digital application may be operated by Trulend Service Private Limited as an authorised technology and service partner of the Regulated Entity. For loan-related processing, Har Shreejee Finance & Leasing Company Limited acts as the data fiduciary / regulated lender.

We collect only such personal data as is necessary for loan origination, KYC, credit assessment, fraud prevention, regulatory compliance, and service delivery. We do not sell your personal data.

Legal name

Har Shreejee Finance & Leasing Company Limited

Brand

My Fundss

CIN

U65921DL1996PLC082373

RBI registration no.

B-14.01740

Registered office

F-52, Khanpur Extension, Behind DTC Depot, New Delhi – 110062, India

Privacy & grievance contact: grievance@myfundss.com · +91 9311912421

Grievance Redressal Officer: Pooja Rawat. For formal complaints, see our Grievance Redressal page.

This Privacy Policy applies to personal data processed through:

• The My Fundss website (https://myfundss.com)
• Online loan application and customer support journeys
• WhatsApp, SMS, email, and phone communications initiated by you or us (with consent)
• The My Fundss mobile application, where applicable (see Section 11)

This policy does not apply to third-party websites linked from our platform. Please review their privacy policies separately.

Depending on your interaction with us, we may collect the following categories of information:

4.1 Identity & KYC information

• Full name, date of birth, gender, photograph
• PAN, Aadhaar (or other OVD as permitted by RBI KYC norms)
• Permanent and correspondence address, PIN code
• Video KYC recordings and document images, where applicable

4.2 Contact information

• Mobile number, email address
• Work email and employer contact details, where provided

4.3 Financial & employment information

• Salary, employer name, employment type, and service tenure
• Bank account details for disbursal and repayment
• Salary slips, bank statements, and other income/obligation documents
• Loan amount requested, loan purpose, and repayment preferences
• Credit bureau reports and credit scores from authorised Credit Information Companies (CICs)

4.4 Technical & usage information (website)

• IP address, browser type, device type, operating system
• Pages visited, session timestamps, referral/UTM parameters
• Cookies and similar technologies (see Section 10)

4.5 What we do not collect

• On the website, we do not collect SMS logs, call logs, contact lists, or installed-application metadata.
• We do not collect data unrelated to loan processing, KYC, fraud prevention, or regulatory requirements.

We process personal data for the following purposes:

• Processing loan applications, eligibility checks, and credit underwriting
• Completing KYC, AML, and customer due diligence as required by RBI and PMLA norms
• Loan disbursal, repayment tracking, collections (as per loan agreement), and customer support
• Fraud detection, identity verification, and platform security
• Generating and sharing Key Fact Statement (KFS), sanction letter, and loan agreements
• Regulatory reporting, audit, and compliance with law enforcement / court orders
• Service communications about your application or loan (transactional messages)
• Marketing and promotional communications — only where you have given explicit consent

Processing is based on your consent, contractual necessity (to evaluate and provide loan services), and legal obligation under applicable Indian laws and RBI directions.

By submitting a loan application or checking the consent box during onboarding, you provide explicit consent for us to collect and process your personal data for the purposes stated in this policy and in the Key Fact Statement / loan documentation shared before loan acceptance.

Where you opt in, we may contact you via SMS, email, WhatsApp, or phone regarding loan updates, offers, and promotional content. You may withdraw marketing consent at any time by:

• Replying STOP to promotional SMS, where applicable
• Emailing grievance@myfundss.com
• Using opt-out instructions in our messages

Withdrawal of consent for marketing will not affect processing necessary for an active loan, legal compliance, or legitimate service communications relating to your application or account.

We may share personal data with the following categories of recipients, strictly on a need-to-know basis:

• Credit Information Companies (CICs) such as CIBIL, Experian, Equifax, or CRIF for credit checks and reporting (with your consent)
• KYC, verification, and onboarding service providers authorised by us
• Payment, banking, and collection partners for disbursal and repayment
• Technology, cloud hosting, and IT security providers — hosted in India or as permitted under applicable law
• Professional advisers, auditors, and insurers under confidentiality obligations
• Regulators and government authorities (including RBI) when required by law

We require service providers to process data only for specified purposes and maintain appropriate security safeguards. We do not sell or rent your personal data to third parties for their independent marketing.

8.1 Storage location

In compliance with RBI digital lending directions, borrower personal data and records are stored on servers located in India, or with service providers that maintain India-based storage and access controls as required under applicable regulations.

8.2 Retention

We retain personal data only for as long as necessary to fulfil the purposes described in this policy, including:

• Active loan lifecycle and post-closure periods required under RBI/NBFC record-keeping norms
• Legal, tax, audit, and dispute-resolution requirements
• Application records where no loan is disbursed — typically up to a limited period unless law requires longer retention

Thereafter, data is securely deleted or anonymised, except where retention is required by law.

8.3 Security measures

• Encryption in transit (TLS/SSL) and encryption at rest, where applicable
• Role-based access controls and authentication for internal systems
• Monitoring for unauthorised access, fraud, and security incidents
• Employee and partner confidentiality obligations

While we implement reasonable safeguards, no method of transmission or storage is completely secure. Please protect your login credentials and notify us promptly of any suspected unauthorised use.

Subject to the DPDP Act, 2023 and applicable RBI guidelines, you may have the following rights in relation to your personal data:

• Right to access information about personal data we hold about you
• Right to correction / updating of inaccurate or incomplete data
• Right to withdraw consent for processing that is consent-based (subject to legal and contractual limits)
• Right to grievance redressal through our Grievance Redressal Officer
• Right to nominate another individual to exercise your rights in the event of death or incapacity, as permitted under the DPDP Act

To exercise these rights, email grievance@myfundss.com with your registered mobile number and loan/application reference (if any). We may verify your identity before responding. We aim to address requests within within 5 business days (RBI grievance redressal timelines apply).

Our website uses cookies and similar technologies to enable core functionality, remember preferences, measure traffic, and improve user experience. You can control cookies through your browser settings. Disabling certain cookies may limit website functionality.

Where analytics tools are used, data is aggregated where possible and used to understand website performance — not for unrelated profiling without consent.

If you use the My Fundss mobile application, additional device permissions may be requested only with your explicit consent and only where necessary:

• Camera & storage: for KYC document capture and video KYC
• Microphone: for video KYC sessions with authorised personnel
• Location / device information: for fraud prevention and risk assessment, where permitted

You may deny or revoke permissions through device settings; however, certain features (such as completing video KYC) may not be available without the relevant permission. We do not access SMS, call logs, or contact lists unless explicitly disclosed in the app at the time of consent and permitted by applicable law and RBI guidelines.

In line with RBI guidelines on digital lending and fair practices for NBFCs:

• Loan terms, interest rate, APR, fees, and repayment schedule are disclosed in the Key Fact Statement (KFS) and sanction letter before you accept a loan offer
• There is no automatic increase in credit limit without your explicit consent
• A cooling-off / look-up period is provided as stated in your KFS / loan agreement, during which you may exit the loan in accordance with disclosed terms
• We do not engage in undue harassment, intimidation, or unauthorised disclosure of your personal data to third parties for recovery
• Recovery agents, where used, act under our authorisation and applicable RBI conduct norms
• Borrower data is not stored on foreign servers except as permitted under applicable RBI directions

For loan pricing disclosures, see our website loan terms section or Terms & Conditions.

Our services are intended for individuals aged 21 years and above who meet loan eligibility criteria. We do not knowingly collect personal data from persons under 18 years of age. If you believe we have inadvertently collected such data, please contact us for deletion.

Our website may contain links to third-party websites (e.g. payment gateways, credit bureaus, partner services). We are not responsible for their privacy practices. Please review their policies before providing personal data.

We may update this Privacy Policy from time to time to reflect changes in law, RBI directions, or our practices. The “Last updated” date at the top will be revised accordingly. Material changes will be communicated through the website or other appropriate channels. Continued use of our services after updates constitutes acceptance of the revised policy, to the extent permitted by law.

This Privacy Policy is governed by the laws of India. Courts at New Delhi shall have exclusive jurisdiction, subject to applicable consumer protection and regulatory remedies.

Related documents:

• Terms & Conditions
• Disclaimer
• Grievance Redressal