Privacy Policy

This Policy applies to all individuals who visit or use our Platform, and to personal data we collect through the Platform, through email, SMS, WhatsApp, telephone and other electronic communications received through or in connection with the Platform. It is issued in accordance with the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the Information Technology Act, 2000, and the rules and regulations made thereunder, as amended from time to time.

• Personal Data means any data about an individual who is identifiable by or in relation to such data.
• Data Principal means the individual to whom the Personal Data relates — that is, you.
• Data Fiduciary means the person who determines the purpose and means of processing Personal Data. For this Policy, Biocipher Technologies Private Limited is the Data Fiduciary.
• Processing means any operation performed on Personal Data.

We may collect and process the following categories of Personal Data:

• Identity and contact data — first and last name, email address, mobile number, postal code, country and social media profile.
• Profile and preference data — job title, financial preferences and interests, product enquiries and the eligibility inputs you provide.
• Transaction and programme data — records of your enquiries, applications, referrals and Street Coins activity.
• Technical and usage data — cookies, IP address, device and software identifiers, MAC address, mobile device ID, referring and exit URLs, on-site behaviour, feature-use metrics and usage history.

Some data is collected directly from you (for example, through our web forms and web-log servers), and some may be collected indirectly from third parties such as our analytics and advertising partners.

Cookies are small alphanumeric identifiers that a website transfers to your browser and stores on your device. A cookie does not give us access to your device. We use cookies to collect information, to operate and improve our services, and to remember your preferences. You can accept cookies by clicking “Allow Cookies” or “I Agree”, and change or control them any time through your browser settings. Disabling certain cookies may affect the functionality of the Platform.

• Communicate with you — provide the services you request, respond to enquiries, provide customer support, process applications and transactions, and send service updates, newsletters and (where consented) promotional materials.
• Facilitate the marketplace — share your details with our partner bank so your eligibility and applications can be assessed and decided (see Section 7).
• Advertising and research — carry out advertising and market research and, with permitted partners, tailor advertising to you.
• Personalise and improve — track activity, personalise your experience, and operate, maintain and secure the Platform.
• Prevent fraud and abuse, and comply with law — meet our legal, regulatory and compliance obligations.

We process your Personal Data on the following bases recognised under the DPDP Act:

• Consent — where you have given free, specific, informed, unconditional and unambiguous consent through a clear affirmative action (for example, ticking a consent box or submitting an enquiry).
• Legitimate uses — where processing is necessary for certain legitimate uses permitted under the DPDP Act.

You may withdraw your consent at any time as described in Section 10. Withdrawal will not affect the lawfulness of processing carried out before the withdrawal.

We do not sell your personal data. We share it only as set out below.

• Our partner bank — HDFC Bank Limited. When you check eligibility for, or apply for, a credit card or loan, we share the data you provide with HDFC Bank Limited so it can assess your eligibility, process your application and make all approval, credit-limit, pricing and rate decisions. HDFC Bank processes your data as an independent data fiduciary under its own privacy policy.
• Service providers and processors. Trusted third parties that process data on our behalf — cloud hosting, communications and messaging providers (including Meta Platforms, Inc., for WhatsApp), analytics and advertising partners, and customer-support tools — contractually required to protect your data and use it only for the purposes we specify.
• Group companies, and legal and regulatory disclosures where required to comply with applicable law or to protect our rights, users or Platform.

We communicate with you through multiple channels, including WhatsApp, SMS, email, telephone and on-site notifications. Where you have provided your mobile number and opted in, we may contact you on WhatsApp using the WhatsApp Business Platform provided by Meta Platforms, Inc. (“Meta”) to send eligibility results and application-status updates, offers and promotional messages, customer support, and Street Coins updates.

How you opt in. You consent to WhatsApp communications by ticking the consent checkbox on our forms, submitting an eligibility or contact request, or initiating a WhatsApp conversation with us. How you opt out. You may withdraw consent at any time by replying “STOP” to any WhatsApp message, or by writing to our Grievance Officer (Section 15). When you use WhatsApp, Meta processes message data as our sub-processor to deliver the service; your use of WhatsApp is also governed by WhatsApp's and Meta's own policies.

We retain your Personal Data only for as long as necessary to fulfil the purposes for which it was collected, to provide the services you have requested, and to comply with our legal, regulatory, tax and accounting obligations. As a general guide, we retain enquiry and account-related data for 3 years after your last interaction with us, unless a longer period is required by law or the data is required for the establishment, exercise or defence of legal claims. When Personal Data is no longer required, we erase it.

Under the DPDP Act, you have the right to:

• Access — obtain a summary of the Personal Data we process about you and our processing activities.
• Correction and erasure — correct inaccurate or misleading data, complete incomplete data, and erase data no longer necessary for its purpose.
• Withdraw consent — as easily as you gave it.
• Grievance redressal — a readily available means of registering a grievance (Section 15).
• Nominate — nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any right, contact our Grievance Officer (Section 15). We may need to verify your identity before actioning your request.

Our services are intended for individuals aged 18 or older. We do not knowingly collect or process the personal data of children without the verifiable consent of a parent or lawful guardian, and we do not undertake tracking, behavioural monitoring or targeted advertising directed at children. If you believe we have inadvertently collected a child's data, contact our Grievance Officer and we will take appropriate steps to delete it.

We have implemented appropriate physical, electronic, procedural and managerial safeguards designed to protect your Personal Data against loss, unauthorised access, misuse, alteration or disclosure. We require third parties that process your data to implement comparable protection. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We may transfer or disclose your Personal Data to members of our group of companies and to our service providers, only insofar as reasonably necessary for the purposes and legal bases set out in this Policy. Where Personal Data is transferred outside India, we do so only in accordance with the DPDP Act and any restrictions notified by the Central Government.

Our Platform may contain links to third-party sites we do not operate; this Policy does not apply to them. We may update this Policy from time to time; where changes are material we will notify you by email or a prominent notice on the Platform. The “Last updated” date above indicates when it was last revised.

In accordance with the DPDP Act and the Information Technology Act, 2000 and the rules thereunder, the contact details of our Grievance Officer are:

Grievance Officer: Pawan Kumar Kaushal
Biocipher Technologies Private Limited
Email: grievance@paisastreet.in
Phone: +91 98701 93025
Address: SF-762, 7th Floor, JMD Megapolis, Sector-48, Sohna Road, Gurugram, Haryana 122018

We aim to acknowledge grievances within 7 business days and to resolve them within the timelines prescribed under applicable law.