Privacy Policy for
Moneyed

This Privacy Policy ("Policy") is published in accordance with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 read with Section 43A of the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). It governs the collection, processing, storage, disclosure, and protection of personal data by Moneyed Advisory Services, a sole proprietorship firm registered and operating from Delhi, India, GSTIN 07AJOPV3057D1ZY, Udyam Registration UDYAM-DL-07-0014863 ("Moneyed," "we," "our," or "us"). Moneyed is the Data Fiduciary in respect of the personal data described in this Policy.

Moneyed provides free financial advisory services to individuals across India — including loan comparison, EMI optimisation, CIBIL score analysis, balance transfer advisory, and credit product guidance — accessible through our platform at moneyed.co.in ("Platform").

By accessing or using the Platform, or by submitting your personal information to us in any form, you acknowledge that you have read and understood this Policy, and you consent to the collection and processing of your data as described herein. If you do not agree with any part of this Policy, you must discontinue use of the Platform immediately.

This Policy is to be read together with the Terms & Conditions of the Platform. In the event of any conflict between this Policy and any other agreement between you and Moneyed, the terms of this Policy shall prevail with respect to data privacy matters.

We may collect the following categories of information when you use our services or request a consultation:

• Personal Information: Full name, date of birth, gender, residential address, email address, and mobile number.
• Financial Information: Monthly income, existing loan details, outstanding EMIs, employment type — for advisory purposes only.
• Identity Documents: PAN card number (used solely for credit assessment and lender referral, with your consent).
• Credit Data: CIBIL or credit bureau report data that you voluntarily upload or share with us for analysis via our CIBIL Analyser tool.
• Device & Usage Data: IP address, browser type, device information, pages visited, and activity logs — collected automatically via cookies and analytics tools.
• Communication Data: Messages, queries, and feedback you send us via the contact form, WhatsApp, or email.
• Third-Party Data: Credit and verification data from partner NBFCs, banks, or credit bureaus — only with your explicit consent.

Your data is used strictly for the following purposes:

• Financial Advisory: To assess your eligibility for loans, balance transfers, and credit products and to provide personalised recommendations.
• CIBIL Analysis: To analyse your credit report and provide actionable insights to improve your credit score.
• Lender Referral: To share your details (with consent) with partner banks and NBFCs for loan processing.
• Identity Verification: To verify your identity and financial eligibility before facilitating introductions to lenders.
• Communication: To respond to your queries, share consultation updates, and send relevant financial tips or offers.
• Legal Compliance: To comply with applicable legal, regulatory, and contractual obligations.
• Product Improvement: To improve our website and tools through anonymised usage analytics.

We do not use your data for automated decision-making that produces legal or similarly significant effects without your knowledge.

We share your personal data only on a need-to-know basis with the following entities:

• Partner Banks & NBFCs: For loan processing, approval, and disbursal — only with your prior consent.
• Credit Bureaus (CIBIL, Experian, etc.): To assess creditworthiness and, where applicable, report loan performance.
• Technology Service Providers: For IT infrastructure, analytics, document verification, and secure data storage — under strict confidentiality agreements.
• Legal or Regulatory Authorities: When required by law, court order, or regulatory directive.

We do not sell, rent, or trade your personal information to any third parties for marketing purposes.

We implement appropriate administrative, physical, and technical safeguards to protect your data:

• HTTPS encryption across all pages and data transmissions.
• Secure, access-controlled data storage via Firebase (Google Cloud infrastructure).
• Restricted internal access — only authorised personnel can access personal data.
• Regular security reviews and data-handling audits.

While we take all reasonable precautions, no internet transmission is 100% secure. Please safeguard your account credentials and report any suspected security issues to us immediately.

Where your data is stored — transfer outside India

We use Google Firebase to store and process data. Our Firebase Realtime Database instance is currently hosted in Google Cloud's us-central1 region, in the United States. This means personal data you submit to us — including the categories listed in Section 1 — is transferred to and stored on servers located outside India.

We rely on Google Cloud's contractual and technical safeguards for this transfer, including encryption in transit and at rest, and Google's own data processing terms. Google Cloud is not a jurisdiction restricted by the Central Government under Section 16 of the DPDP Act, 2023 as at the date of this Policy.

By using the Platform and submitting your information, you consent to this transfer. If you would prefer your data not to be stored outside India, please do not submit personal information through the Platform, and contact our Grievance Officer (Section 9) to discuss alternatives. We keep the choice of hosting region under review.

We retain your personal information only for as long as necessary:

• Consultation records: Retained for up to 3 years from the date of last interaction.
• CIBIL report uploads: Analysed in real-time and deleted within 90 days of upload.
• Contact form submissions: Retained for up to 12 months, then securely deleted.
• Usage analytics data: Retained in anonymised, aggregated form for up to 24 months.

Upon expiry of the retention period, or upon a valid deletion request, your data is securely erased from all active systems.

Under the DPDP Act, 2023, you have the following rights regarding your personal data:

How to exercise these rights

Use the links below. Each opens a pre-filled email to our Grievance Officer — you only need to add your name and send. We acknowledge within 48 hours and resolve within 30 days. There is no charge for any of these requests.

Withdrawing consent is as easy as giving it. To turn off analytics and advertising cookies in your browser right now, without emailing us, use Cookie preferences.

We use cookies and similar technologies to improve your experience on moneyed.co.in:

• Essential Cookies: Required for core site functionality (authentication, security). Cannot be disabled.
• Analytics Cookies: Google Analytics (GA4) — used to understand how visitors use our site. Data is anonymised and aggregated.
• Marketing Pixels: Meta Pixel — used to measure advertisement effectiveness. No personal financial data is shared with Meta.

Analytics and marketing cookies load only after you accept them on the consent banner shown on your first visit. If you decline, Google Analytics and Meta Pixel are never loaded. You can change your mind at any time using Cookie preferences, or by clearing cookies in your browser settings.

The Platform is intended for adults only. Under our Terms & Conditions you must be at least 18 years of age and legally competent to contract under the Indian Contract Act, 1872 in order to use it. Loan products, credit reports and the services we facilitate are not available to minors.

We do not knowingly collect personal data of any person under 18. We do not direct our advertising at children, and we do not carry out tracking, behavioural monitoring or targeted advertising in relation to children, in line with Section 9 of the DPDP Act, 2023.

If we become aware that we have collected personal data of a person under 18 without verifiable consent of a parent or lawful guardian, we will delete that data from our active systems promptly, and in any case within 30 days of becoming aware.

If you are a parent or guardian and believe a child has provided us with personal data, please contact our Grievance Officer (Section 9) and we will act on it as a priority.

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date at the top of this page and, where appropriate, notify you via email or a prominent notice on our website.

Your continued use of moneyed.co.in after any changes constitutes acceptance of the updated policy.

If you have any questions, concerns, or requests regarding your personal data, or wish to exercise your rights under the DPDP Act, please contact our Grievance Officer:

If you are not satisfied with our response, you may escalate your complaint to the Data Protection Board of India once operational under the DPDP Act, 2023.