Login
Sign Up

Privacy Policy

  • Effective Date: 21 July 2026 | Last Updated: 21 July 2026
DPDP Act 2023 Compliant

Plain-language summary: KredScore.in collects your name, mobile number, email and PAN to help you check your CIBIL score and compare credit cards. We share your data with our bank partners only when you expressly consent. We do not sell your data. You can withdraw consent or request deletion at any time by writing to privacy@kredscore.in.

Privacy Policy Contents

Who We Are

KredScore Technologies Private Limited (hereinafter referred to as “KredScore“, “we“, “us“, or “our“) operates the website kredscore.in (the “Platform“). We are an independent financial comparison platform registered in India.

KredScore provides:
  • Free CIBIL credit score check services (facilitated through authorised credit bureau partners)
  • Credit card comparison tools across categories including cashback, travel, fuel, lifetime free, and premium cards
  • Financial education content via our blog
This Privacy Policy explains how we collect, use, store, share, and protect your personal data when you use our Platform. By accessing or using kredscore.in, you acknowledge that you have read, understood, and agree to this Policy.

Important: KredScore.in is NOT affiliated with or endorsed by TransUnion CIBIL Limited, any bank, or any financial institution. We are an independent comparison and information platform.

What Data We Collect

A. Personal Data You Provide Directly

When you use our CIBIL score check service, we collect:
  • Full name
  • Date of birth
  • Mobile number
  • Email address
  • PAN (Permanent Account Number)
  • Gender
  • Residential city / state / PIN code
When you use our credit card comparison service or submit an interest/inquiry form, we collect:
  • Name and contact details (mobile, email)
  • Employment type (salaried / self-employed)
  • Monthly / annual income range
  • Credit card preferences (category, bank, features)

B. Sensitive Personal Data (as per DPDP Act 2023)

PAN number and credit/financial information are considered sensitive personal data under applicable Indian law. We handle this data with additional safeguards and process it only with your explicit consent.

C. Automatically Collected Data

When you visit our Platform, we automatically collect:
  • IP address and approximate geolocation
  • Browser type, version, and language
  • Operating system and device type
  • Pages visited, time spent, and referring URLs
  • Clickstream data and session recordings (anonymised)
  • Cookie identifiers (see Section 10)

D. Data from Third Parties

We may receive supplementary data from:
  • Credit Information Companies (CICs) such as TransUnion CIBIL, Experian, or Equifax India — only with your explicit authorisation
  • Bank or NBFC partners — when you are redirected to or from their systems via our Platform

How We Collect Data

  • CIBIL Score Form: A 3-step form on our homepage where you submit personal details to initiate a credit score check
  • Credit Card Interest Form: Lead capture forms on our credit card comparison pages
  • Blog Newsletter / Email Sign-Up: If you subscribe for credit tips updates
  • Lead Pop-Up: Our website may present a consent-gated pop-up for data collection
  • Cookies and Analytics Tools: Google Analytics 4, Facebook Pixel, and similar tools (see Section 10)
  • Contact / Grievance Forms: When you write to us directly

How We Use Your Data

We use your personal data for the following purposes:

Service Delivery

  • To initiate and complete your CIBIL score check request via authorised CIC partners
  • To display personalised credit card recommendations based on your profile and score
  • To connect you with bank or NBFC DSA partners when you express interest in a credit card or financial product

Communication

  • To send you your credit score results and related information via email or SMS
  • To notify you of changes to our services, policies, or platform
  • To send marketing communications about credit cards, financial products, and credit improvement tips (with your consent)

Platform Improvement

  • To analyse usage patterns and improve our website, content, and tools
  • To conduct A/B testing, user research, and feature development
  • To detect and prevent fraud, abuse, and security incidents

Legal & Regulatory

  • To comply with applicable laws, court orders, and regulatory requirements
  • To establish, exercise, or defend legal claims
We will not use your data for any purpose other than those stated above without obtaining fresh consent from you.

CIBIL Score Authorisation

KredScore facilitates credit score checks by acting as your authorised representative with Credit Information Companies (CICs) such as TransUnion CIBIL. By submitting the CIBIL Score Check form and checking the relevant consent box, you:
  • Appoint KredScore as your lawfully authorised agent to request your credit information from CICs on your behalf
  • Acknowledge that this is a “soft enquiry” and does not affect your CIBIL score
  • Agree that the credit information displayed is sourced from the CIC and KredScore has no control over its accuracy or completeness
  • Understand that KredScore may analyse your credit profile to suggest suitable financial products

Disclaimer: KredScore is not TransUnion CIBIL Limited. Your official credit score can be accessed at www.cibil.com. The score displayed on our platform is for informational purposes and may differ from scores used by lenders.

Data Sharing & Disclosure

We do not sell your personal data to any third party. We share your data only in the following circumstances:

A. With Your Consent — Bank & NBFC DSA Partners

When you express interest in a specific credit card or financial product on our Platform, and you provide explicit consent, we share your name, mobile number, email, income range, and employment type with our registered DSA (Direct Selling Agent) bank and NBFC partners to process your application or provide you with relevant offers.

B. Credit Information Companies (CICs)

We share your identifying information (name, DOB, PAN, mobile) with authorised CICs solely to fetch your credit score on your behalf, with your consent.

C. Technology & Service Providers

We engage trusted third-party vendors for hosting (cloud services), analytics (Google Analytics), email delivery, and customer support. These parties access your data only to perform functions on our behalf and are contractually bound not to use it for any other purpose.

D. Legal Requirements

We may disclose your data without prior notice if required by law, court order, government authority, or to protect the rights, safety, or property of KredScore, our users, or the public.

E. Business Transfers

In the event of a merger, acquisition, or sale of all or part of our business assets, your data may be transferred to the acquiring entity. We will notify you via email or a prominent notice on our Platform before your data becomes subject to a different privacy policy.
We do not share your data with third parties for their own marketing purposes without your explicit consent.

Data Retention

We retain your personal data for as long as necessary to fulfil the purposes described in this Policy, or as required by law:
  • CIBIL Score Check Data: Retained for 3 years from the date of check, or until you request deletion, whichever is earlier
  • Lead & Contact Data: Retained for 2 years from the date of submission or last interaction
  • Account / Registration Data: Retained for the duration of your account, plus 2 years after deletion
  • Log Files & Analytics Data: Retained for 12 months in identifiable form; thereafter anonymised
  • Consent Records: Retained for 7 years as required for regulatory compliance
After the applicable retention period, your data will be securely deleted or anonymised so it can no longer identify you.

Your Rights Under DPDP Act 2023

As a Data Principal under the Digital Personal Data Protection Act, 2023, you have the following rights:

Right to Access

You may request a summary of the personal data we hold about you and how it is being processed.

Right to Correction & Completeness

You may request correction of inaccurate or incomplete personal data.

Right to Erasure

You may request deletion of your personal data when it is no longer necessary for the purpose for which it was collected, or when you withdraw consent.

Right to Grievance Redressal

You may raise a grievance with our Grievance Officer (Section 15) and receive a response within 30 days.

Right to Nominate

You may nominate another individual to exercise your data rights on your behalf in the event of your death or incapacity.

Right to Withdraw Consent

You may withdraw any consent given to us at any time. Withdrawal does not affect processing done prior to withdrawal.

To exercise any of these rights, write to privacy@kredscore.in with your name, registered mobile/email, and the specific request. We will respond within 30 days.

Cookies & Tracking Technologies

We use cookies and similar tracking technologies to operate and improve our Platform. Types of cookies we use:
  • Essential Cookies: Required for the website to function (e.g., form session data, security tokens). These cannot be disabled.
  • Analytics Cookies: Google Analytics 4 — tracks page views, session data, and user flow (anonymised). You may opt out via Google Analytics Opt-Out.
  • Marketing Cookies: Facebook Pixel and similar tools to show relevant ads on third-party platforms. Requires your consent.
  • Preference Cookies: Remember your settings and preferences on the Platform.
You can manage cookie preferences through your browser settings or our cookie consent banner. Disabling non-essential cookies will not prevent you from using core Platform features.

Data Security

We implement industry-standard technical and organisational measures to protect your personal data, including:
  • SSL/TLS encryption for all data transmitted between your device and our servers
  • Encrypted storage of sensitive fields (PAN, financial data)
  • Access controls ensuring only authorised personnel can access personal data
  • Regular security audits and vulnerability assessments
  • Incident response procedures for security breaches
In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify you and the Data Protection Board of India in accordance with the DPDP Act 2023 within the prescribed timelines.
No method of transmission over the internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your data, we cannot guarantee absolute security.

Children's Privacy

Our services are intended for individuals who are 18 years of age or older. We do not knowingly collect personal data from children under 18. If we become aware that we have collected data from a minor without verifiable parental consent, we will delete such data promptly. If you believe we have inadvertently collected data from a minor, please contact us at privacy@kredscore.in.

Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices, services, or applicable law. When we make material changes, we will:
  • Post the updated Policy on this page with a revised “Last Updated” date
  • Send you a notification via email or SMS if the change materially affects how we process your data
  • Obtain fresh consent where required by law
We encourage you to review this Policy periodically. Your continued use of the Platform after changes are posted constitutes acceptance of the updated Policy.

Grievance Officer & Contact

Grievance Officer

In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023, the name and contact details of our Grievance Officer are:

Name: [Grievance Officer Name]

Designation: Data Protection Officer / Grievance Officer

Company: KredScore Technologies Private Limited

Email: privacy@kredscore.in

Address: [Registered Office Address, City, State, PIN Code, India]

Response Time: Within 30 days of receiving a valid grievance

General Contact

For general queries about this Privacy Policy or your data, contact us at:

Data Protection Board of India

If you are not satisfied with our response to your grievance, you have the right to approach the Data Protection Board of India as established under the DPDP Act, 2023, once the Board is constituted and operational as per applicable notification.