Privacy Policy
How FINEXA collects, uses, protects and shares your personal data. Effective 17 October 2026.
1. Who we are
FINEXA (finexaemi.online) is owned and operated by FINAEXA FINANCE PRIVATE LIMITED, a private limited company incorporated in India (CIN U64990AS2025PTC028047), registered office in Assam, India (“FINEXA”, “we”, “us”). We are the data fiduciary for the personal data described in this policy. This policy is published in line with the Information Technology Act, 2000 and its rules, and the Digital Personal Data Protection Act, 2023.
2. What we collect
| Category | Examples | When |
|---|---|---|
| Account details | Name, email, mobile number, password (stored only as a secure hash) | When you create an account |
| KYC information | PAN number and PAN card image, date of birth, address and address-proof document, live selfie, short verification video and voice, electronic signature | When you apply for a credit line |
| Financial information | Employment, employer, declared income, credit report from credit information companies (with your consent) | When you apply and when we assess your credit line |
| Transaction information | Purchases, merchant, order amount, EMI plans, repayments, UTR references, refunds | When you use FINEXA |
| FINEXA Card | Card number and security code (encrypted), PIN (stored only as a secure hash), card controls | When your card is issued and used |
| Device & security data | IP address, browser type, timestamps of sign-in, consent and signature events | When you use the website |
| Support records | Tickets, complaints and our replies | When you contact us |
We do not access your phone contacts, photo gallery, call logs, files or location. The camera and microphone are used only while you take your selfie and verification video, and only after you allow them in your browser. Aadhaar: if you use Aadhaar as address proof, upload a masked copy; we do not collect or store your full Aadhaar number.
3. How we use your data
- To create and secure your account and verify your email and mobile.
- To verify your identity (KYC) and check that the person in the selfie, video and documents is you.
- To assess your application under our credit policy, set your credit limit and show you a Key Fact Statement.
- To process purchases with partner merchants, run EMI schedules, collect repayments and handle refunds.
- To send service messages: verification links, checkout codes, EMI reminders, receipts and important notices.
- To detect and prevent fraud, keep audit records and meet legal and regulatory obligations.
- To send product updates only if you opted in; you can opt out at any time in your account.
We ask for your explicit consent for each purpose that needs it (for example identity verification and credit-report checks), record when and from where you gave it, and you can see your consents in your account.
4. Who we share it with
We never sell your personal data. We share only what is needed with:
- Credit information companies, to obtain your credit report (with your consent) and to report repayment history as required.
- Our funding partner, Capital Small Finance Bank Limited, only portfolio-level or loan-level information required under our funding arrangement.
- Partner merchants: only whether a purchase was approved, its status and amount. Merchants never see your credit limit, KYC documents or repayment history.
- Service providers who host our website, send email and SMS, or provide KYC and security services, under contracts that require confidentiality and security.
- Authorities, when required by law, court order or a regulator.
5. Storage & security
Your data is stored on servers located in India. PAN, card details, bank details and all KYC documents, selfies and videos are encrypted at rest; KYC files are kept in a private store that cannot be opened from the web. Access is role-based: only authorised verification and credit staff can view KYC documents, and every view is recorded in a tamper-evident audit log. Passwords and card PINs are stored only as one-way hashes. Data in transit is protected with HTTPS.
6. How long we keep it
We keep KYC records and loan records for as long as your account or any loan is active and for the period required by applicable law after that (for KYC records, generally at least five years after the business relationship ends). Marketing preferences are kept until you change them. When data is no longer required, it is deleted or anonymised.
7. Your rights
- Access a summary of your personal data and how it is used.
- Correct or update inaccurate or incomplete data.
- Withdraw consent for future processing (this may stop us from providing credit; it does not affect amounts you already owe or records we must keep by law).
- Ask us to erase data that is no longer needed for the purpose it was collected or for legal requirements.
- Nominate another person to exercise your rights in case of death or incapacity.
- Raise a grievance with us and, if unresolved, with the Data Protection Board of India.
To use these rights, email care@finexaemi.online with the subject “Privacy request” from your registered email. We reply within 30 days.
8. Cookies
We use only essential cookies to keep you signed in and secure your session. We do not use advertising cookies.
9. Children
FINEXA is only for adults aged 18 and above. We do not knowingly collect data from children.
10. Changes
If we make material changes, we will update the effective date above and notify you by email or in your account before they apply.
11. Contact & grievances
Grievance Redressal Officer, FINAEXA FINANCE PRIVATE LIMITED, Assam, India · care@finexaemi.online · Grievance Redressal