This Privacy Policy is issued by Udhaarwala Finance Services Private Limited (“UdhaarWala”, “we”, “us” or “our”), which operates the UdhaarWala platform. It applies to information collected through udhaarwala.com and the connected applicant experience. It should be read with our Terms & Conditions and Digital Lending Disclosures.
1. Our platform role
UdhaarWala is a digital loan facilitation platform. It is not a bank, RBI-registered NBFC or direct lender. Where a formal lending-partner arrangement is active, the relevant regulated bank or NBFC will be separately identified to the applicant and will have its own privacy notice, product disclosures and loan documentation. That lender’s terms govern its independent processing of data for lending, KYC, underwriting, disbursal, servicing and collections.
2. Information we may collect
We collect information that is reasonably needed to provide the platform, respond to a request and prepare an application. Depending on how you use the platform, this may include:
- Account and contact information, such as name, email address, mobile number, Google sign-in identifier and login/session information.
- Application information, such as loan amount, purpose, preferred tenure and application status.
- Identity and employment information, such as PAN, masked Aadhaar reference, employer, job title, employment type, salary and work experience.
- Bank-related application information, such as account-holder name, IFSC and a protected account reference. We display only a masked account reference in the applicant experience.
- Documents you choose to upload, including identity documents, salary slips and bank statements.
- Technical and security information, such as IP-derived logs, browser/device information, session events, audit records and information needed to prevent misuse or investigate a security incident.
- Communications you send to us through support or grievance channels.
The profile flow is designed not to retain a full Aadhaar number as a normal profile field. However, an identity document that you voluntarily upload may contain personal information and should only be uploaded when requested through the official application flow.
3. Why we use information
We use personal information for the specific purpose explained when it is collected, including to create and secure an account; save application progress; check application completeness; receive and organise documents; provide support; maintain audit trails; detect fraud, abuse or unauthorised access; comply with legal or contractual requirements; and improve the reliability and security of the platform.
Where a partner-lender integration is active and you submit an application for that lender’s consideration, we may share the relevant application information with that identified lender and its authorised providers for the stated lending journey. We do not treat an indicative calculation or a general enquiry as authority to send your application to an unnamed lender.
4. Consent and choices
Where consent is the appropriate basis for processing, we will seek it in a clear, purpose-specific manner. You may choose not to provide optional information, but some details and documents are necessary for an application or for an identified lender to evaluate it. Withdrawing a consent may mean we cannot continue the relevant service, subject to data that must be retained or processed under applicable law, contract, fraud-prevention needs or an ongoing lending relationship.
UdhaarWala does not ask for access to your phone contacts, call logs, SMS messages, photo gallery or social-media accounts in the web application. You choose individual files only when you use the document-upload function. Never share an OTP, password, card PIN or full account credentials through an unsolicited call, message or email.
5. Who we may share information with
We may disclose information only where necessary for the purposes above, to categories of recipients such as an identified regulated lending partner; KYC, identity, bureau, eSign, account-aggregator, payment-mandate or verification providers selected for a live product; cloud and security service providers; professional advisers; regulators, courts or law-enforcement agencies where required; and entities involved in a corporate restructuring. We expect service providers to use information only for authorised services and with appropriate safeguards.
We will not sell personal information as a commodity. We will not list an organisation as a lender partner or share an application with it merely because it has made an informal enquiry or discussed a potential relationship.
6. Security and access
We use measures appropriate to the nature of the information and the service, including authenticated access, restricted role-based access, masking of selected sensitive references in the interface, logging of administrative workflow actions and controls intended to limit unauthorised access. No electronic system is completely risk-free. If we become aware of a material security incident, we will investigate, take reasonable containment measures and provide notices where required by applicable law.
Before a live lender integration, security controls, data flows, retention periods, vendor arrangements and incident-handling responsibilities should be reviewed with the lender and documented in the relevant agreement. This is important because the lender remains responsible for its regulated lending activity.
7. Retention and deletion
We retain information only for as long as reasonably necessary for the purpose for which it was collected, to maintain an application record, manage complaints, prevent fraud, meet contractual obligations, establish or defend legal claims, or comply with applicable law. Retention may be longer where an application results in a lender relationship or where a lender, regulator or law requires records to be retained. When data is no longer required, we will delete, anonymise or securely isolate it in accordance with our retention process.
8. Your information rights
Subject to applicable law and identity verification, you may ask us to correct inaccurate information, complete or update information, obtain a summary of information we process, understand relevant categories of recipients, withdraw consent where consent is used, or request erasure where retention is no longer required. Certain rights may be subject to legal exceptions, lender obligations or the need to maintain an audit trail.
The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 provide a framework for processing digital personal data in India, with provisions taking effect according to the notified implementation timeline. We intend to operate this policy consistently with applicable law as it comes into force and as our role requires.
9. Children and eligibility
The platform is intended for adults seeking personal credit. Do not create an account or submit an application if you are under the age required by applicable law or the relevant lender’s product criteria. We do not knowingly seek to provide loan facilitation to children.
10. Third-party services and links
Our website may link to third-party sites, such as an identified lender’s website or a public company-information page. Their privacy practices are governed by their own notices. Please review them before providing personal information outside the UdhaarWala platform.
11. Policy changes and contact
We may update this policy when the platform, a lender integration, law or our data practices change. The latest version will be published on this page with the updated date. For a privacy request or question, email info@udhaarwala.com with the subject “Privacy request”. We may ask for information needed to verify your identity before responding.