PRIVACY POLICY – Fidfly

Introduction:

Fidfly is the registered tradename of financial aggregation online platform conceptualized, implemented and managed by Indaaz Innovations Pvt. Ltd. (hereinafter referred as ‘Fidfly’ or ‘the Company’ or ‘we’). Fidfly recognizes the importance of privacy of its users and also of maintaining confidentiality of the information provided by its users as a responsible data controller and data processer.

Fidfly is a Financial Service Provider Aggregator Platform, engaged in providing services of disbursement of loans and insurance policies through the partnered banks and Insurance Service Providers in India. The platform aims at providing the loan lending rates, insurance premium rates and other related details of the services, hereinafter termed as “Services”, of partner banks and insurance distributors at the same place to enable Fidfly customers to make informed decisions and choose from the variety of banks, insurance distributors, lending rates, premium rates and other value-added services provided by these partner institutions. Services listed on Fidfly website comply with the RBI (Reserve Bank of India) Regulations for lending institutions, IRDA (Insurance Regulatory and Development Authority of India) for insurance services providers and comply with the requirements, policies and procedures of the lending institutions.

This Privacy Policy provides for the practices for handling and securing user's Personal Information (defined hereunder) by Fidfly and its subsidiaries and affiliates. This Privacy Policy is applicable to any person (‘User’) who purchase, intend to purchase, or inquire about any product(s) or service(s) made available by Fidfly through any of Fidfly’s customer interface channels including its website, mobile site, mobile app & offline channels including, sales agents, call centers and offices (collectively referred herein as "Sales Channels").

For the purpose of this Privacy Policy, wherever the context so requires "you" or "your" shall mean User and the term "we", "us", "our" shall mean Fidfly. For the purpose of this Privacy Policy, Website means the website(s), mobile site(s) and mobile app(s).

By using or accessing the Website or other Sales Channels, the User hereby agrees with the terms of this Privacy Policy and the contents herein. If you disagree with this Privacy Policy, please do not use or access our Website or other Sales Channels.

This Privacy Policy does not apply to any website(s), mobile sites and mobile apps of third parties, even if their websites/products are linked to our Website. User should take note that information and privacy practices of Fidfly’s business partners, advertisers, sponsors or other sites to which Fidfly provides hyperlink(s), may be materially different from this Privacy Policy. Accordingly, it is recommended that you review the privacy statements and policies of any such third parties with whom they interact.

This Privacy Policy is an integral part of your User Agreement with Fidfly and all capitalized terms used, but not otherwise defined herein, shall have the respective meanings as ascribed to them in the User Agreement.

OUR COMPLIANCE PROCESSES FOR FOREIGN CUSTOMERS

Though the services on our website are primarily designed for Indian markets, we recognize that our customers may come from various jurisdictions, each with its own data protection laws. We are committed to complying with applicable laws, including but not limited to General Data Protection Regulation (GDPR) For the customers from the European Union, we ensure that their personal data is processed in accordance with GDPR principles, including obtaining explicit consent and providing rights to access, rectify, and erase their data. For customers who are from California, we’ll be complying with California Privacy Act, and for rest of the jurisdictions, we have a robust mechanism under the appliable DPDP Act, and DPDP Rules 2023, which we adhere to. The data of the customers will be stored and processed as per the applicable Indian Laws.

USERS OUTSIDE THE GEOGRAPHICAL LIMITS OF INDIA

Please note that the data shared with Fidfly shall be primarily processed in India and such other jurisdictions where a third party engaged by Fidfly may process the data on Fidfly’s behalf. By agreeing to this policy, you are providing Fidfly with your explicit consent to process your personal information for the purpose(s) defined in this policy. The data protection regulations in India such As Data Protection and Data Privacy Act 2023 and Data Protection and Data Privacy Rules 2025, called herein as “DPDP Act” or such other jurisdictions mentioned above may differ from those of your country of residence.

If you have any concerns in the processing of your data and wish to withdraw your consent, you may do so by writing to the following email id: [email protected]. However, if such processing of data is essential for us to be able to provide service to you, then we may not be able to serve or confirm your service transactions using the apps or websites of Fidfly.com after your withdrawal of consent. Such sharing and processing of information may extend to our channel partners, who could be involved in providing a set of services to Fidfly and our end customers.

A withdrawal of consent by you for us to process your information may:

  • severely inhibit our ability to serve you properly and in such case, we may have to refuse the services altogether, or
  • unreasonably restrict us to service your requests for financial transactions and / or may compel us to restrict our services to you through our app.

TYPE OF INFORMATION WE COLLECT AND ITS LEGAL BASIS

The information as detailed below is collected for us to be able to provide the services chosen by you and also to fulfil our legal obligations as well as our obligations towards third parties as per our User Agreement.

"Personal Information" of User shall include the information shared by the User and collected by us for the following purposes:

Registration on the Website and the Mobile App:

Information which you provide while subscribing to or registering on the Website or on the mobile app, including but not limited to information about your personal identity such as name, gender, marital status, religion, age, profile picture etc., your contact details such as your email address, postal addresses, identification number, telephone (mobile or otherwise) and/or fax numbers. The information may also include information such as your banking details (including credit/debit card) and any other information relating to your income and/or lifestyle; billing information payment history etc. (as shared by you).

Other information:

We many also collect some other information and documents including but not limited to:

  • Transactional history (other than banking details) about your e-commerce activities, buying behaviour
  • Your usernames, passwords, email addresses and other security-related information used by you in relation to our Services, which shall at all times be stored securely in encrypted form and will always be transferred on a secured channel.
  • Data either created by you or by a third party and which you wish to store on our servers such as image files, documents, order history, etc.
  • Data available in public domain or received from any third party including social media channels, including but not limited to personal or non-personal information from your linked social media channels (like name, email address, profile pictures or any other information that is permitted to be received as per your account settings) as a part of your account information.
  • Information pertaining any other customers(s) for who you make a service request through your registered Fidfly account. In such case, you must confirm and represent that each of the other customers(s) for whom a service request has been made, has agreed to have the information shared by you disclosed to us and further be shared by us with the concerned service provider(s).
  • For online services, the copies of your government identification like Passport, Aadhar, driving license, election card etc., Self-declaration and any other information like date of birth, place of residence that may be required by the concerned service provider, who may be an authorized agent on Fidfly portal or an external third party vendor providing services to Fidfly and our customers, to enable your faceless processing of information and disbursement of services that you request through our website.
  • As per the requirements of the government or the law enforcement agencies, your Covid-19 Vaccination status and certificate in case you wish to avail any service for provision of which such Covid-19 vaccination related information is required or want to access your vaccination certificate at a later stage for travel related or any other purpose. Fidfly will never process the beneficiary id and other id details contained in the vaccination certificate.

Such information shall be strictly used for the aforesaid specified & lawful purpose only. User further understands that Fidfly may share this information with the end service provider or any other third party for provision and facilitation of the desired services. Fidfly will always redact all/any sensitive & confidential information contained in the vaccination certificate, passport, bank statement or any other identity card submitted for the purpose of availing a service, promotional offer or ordering a product/service on the Website. In case a User does not wish to provide this information or opts for deletion of the information already provided, Fidfly may not be able to process the desired service request. Fidfly will never share any of the above information collected including PAN card details, Vaccination status & certificate, Passport details, Aadhar Card details (masked) without their prior consent unless otherwise such action is required by any law enforcement authority for investigation, by court order or in reference to any legal process.

HOW PERSONAL INFORMATION IS USED:

The Personal Information collected maybe used in the following manner:

WHILE ORDERING SERVICES

While availing financial services and making payments through our website, we may use Personal Information including, payment details which include cardholder name, credit/debit card number (in encrypted form) with expiration date, banking details, wallet details etc. as shared and allowed to be stored by you. We may also use the information of beneficiary’s list as available in or linked with your account. This information is presented to the User at the time of buying an online product our website and ensuring the delivery of service expeditiously.

We may also use your Personal Information for several reasons including but not limited to:

  • confirm the processing of your availed service;
  • keep you informed of the transaction status;
  • send service processing confirmations either via sms or Whatsapp or any other messaging service;
  • send any updates or changes to your orders;
  • allow our customer service or our agent’s customer services teams to contact you, if necessary;
  • customize the content of our website, mobile site and mobile app as per the user preferences gathered by us;
  • request for reviews of products or services or any other improvements;
  • send verification message(s) or email(s);
  • validate/authenticate your account and to prevent any misuse or abuse.
  • contact you on your birthday/anniversary to offer a special gift or offer.

Surveys:

We value opinions and comments from our Users and frequently conduct surveys, both online and offline. Participation in these surveys is entirely optional. Typically, the information received is aggregated, and used to make improvements to Website, other Sales Channels, services and to develop appealing content, features and promotions for members based on the results of the surveys. Identity of the survey participants is anonymous unless otherwise stated in the survey.

Marketing Promotions, Research and Programs:

Marketing promotions, research and programs help us to identify your preferences, develop programs and improve user experience. Fidfly frequently sponsors promotions to give its Users the opportunity to participate in our promotional activities and avail gifts and discounts from time to time. Personal Information collected by us for such activities may include contact information and survey questions. We use such Personal Information to notify contest winners and survey information to develop promotions and product improvements. As a registered User, you will also occasionally receive updates from us about fare sales in your area, special offers, new Fidfly services marketing programs.

In addition, you may look forward to receiving periodic marketing emails, newsletters and exclusive promotions offering special deals.

From time to time we may add or enhance services available on the Website. To the extent these services are provided, and used by you, we will use the Personal Information you provide to facilitate the service(s) requested. For example, if you email us with a question, we will use your email address, name, nature of the question, etc. to respond to your question. We may also store such Personal Information to assist us in making the Website the better and easier to use for our Users.

HOW LONG DO WE KEEP YOUR PERSONAL INFORMATION?

Fidfly will retain your Personal Information on its servers for as long as is reasonably necessary for the purposes listed in this policy and in accordance with the applicable local laws. In some circumstances we may retain your Personal Information for longer periods of time, for instance where we are required to do so in accordance with any legal, regulatory, tax or accounting requirements and upon directions from the government authorities.

Where your personal data is no longer required, we will ensure it is either securely deleted or stored in a way which means it will no longer be used by the business.

WITH WHOM YOUR PERSONAL INFORMATION IS SHARED

Service Providers and suppliers:

Your information shall be shared with the end service providers, primarily, to our agents and third party authorized service providers, but in case you avail value added services, the information can be shared with bus service providers, cab rental, airlines, railways or any other suppliers who are responsible for fulfilling the value added services that we might offer you.

You may note that while making availing services of Fidfly you authorize us to share your information with the said service providers and suppliers. It is pertinent to note that Fidfly does not authorize the end service provider to use your information for any other purpose(s) except as may be for fulfilling their part of service. However, how the said service providers/suppliers use the information shared with them is beyond the purview and control of Fidfly as they process Personal Information as independent data controllers, and hence we cannot be made accountable for the same. You are therefore advised to review the privacy policies of the respective service provider or supplier whose services you choose to avail.

Fidfly does not sell or rent individual customer names or other Personal Information of Users to third parties except sharing of such information with our business / alliance partners or vendors who are engaged by us for providing various referral services and for sharing promotional and other benefits to our customers from time-to-time basis their transaction history with us.

BUSINESS PARTNERS and THIRD-PARTY VENDORS:

We may also share certain filtered Personal Information to our corporate affiliates or business partners who may contact the customers to offer certain products or services, which may include free or paid products / services, which will enable the customer to have better service experience or to avail certain benefits specially made for Fidfly customers.

Fidfly may share your Personal Information to third party that Fidfly may engage to perform certain tasks on its behalf, including but not limited to payment processing, data hosting, and data processing platforms.

We may use non-identifiable Personal Information of Users in aggregate or anonymized form to build higher quality, more useful online services by performing statistical analysis of the collective characteristics and behaviour of our customers and visitors, and by measuring demographics and interests regarding specific areas of the Website. We may provide anonymous statistical information based on this data to suppliers, advertisers, affiliates and other current and potential business partners. Fidfly may hire a third party for market research, surveys etc. and will provide information to these third parties specifically for use in connection with these projects. The information (including aggregate cookie and tracking information) we provide to such third parties, alliance partners, or vendors are protected by confidentiality agreements and such information is to be used solely for completing the specific project, and in compliance with the applicable regulations.

DISCLOSURE OF INFORMATION

In addition to the circumstances described above, Fidfly may disclose User's Personal Information if required to do so:

  • by law, required by any enforcement authority for investigation, by court order or in reference to any legal process
  • to conduct our business
  • for regulatory, internal compliance and audit exercise(s)
  • to secure our systems; or
  • to enforce or protect our rights or properties of Fidfly or any or all of its affiliates, associates, employees, directors or officers or when we have reason to believe that disclosing Personal Information of User(s) is necessary to identify, contact or bring legal action against someone who may be causing interference with our rights or properties, whether intentionally or otherwise, or when anyone else could be harmed by such activities.

Such disclosure and storage may take place without your knowledge. In that case, we shall not be liable to you or any third party for any damages howsoever arising from such disclosure and storage.

USER GENERATED CONTENT

As of now, Fidfly will not share the user generated content with other Users of the application except for the reviews and ratings given on our website.

HOW CAN YOU OPT-OUT OF RECEIVING OUR PROMOTIONAL E-MAILS?

You will occasionally receive e-mail updates from us about promotions, new Fidfly services, and other noteworthy items. If you wish not to receive them, please click on the "unsubscribe" link or follow the instructions in each e-mail message.

PERMISSIONS REQUIRED FOR USING OUR MOBILE APPLICATIONS

When the Fidfly app is installed on your phone or tablet, a list of permissions appears and are needed for the app to function effectively. There is no option to customize the list. The permissions that Fidfly requires and the data that shall be accessed and its use is as below:

ANDROID AND IOS PERMISSIONS

Device & App history: We need your device permission to get information about your device, like OS (operating system) name, OS version, mobile network, hardware model, unique device identifier, preferred language, etc. Basis these inputs, we intend to optimize your experience, use OS specific capabilities to drive great in-funnel experiences using components of device’s OS, etc.

Camera: This permission enables you to use your camera from within the application to upload a new profile picture, upload an image for identity verification along with the location verification for service availability facilities. This permission will also enable you to scan QR codes for easy UPI payments.

Identity: This permission enables us to know about details of your account(s) on your mobile device along with the location information, photograph and other mandatory information that is required for authorization and processing of your availed service.

Location: This permission enables us to mandatorily track your location and preventing misuse of this Fidfly applications by someone other than the credible user of the account through which this information is accessed or provided at the location from where the services of Fidfly are availed.

SMS: If you allow us to access your SMS, we read your SMS to autofill or prepopulate ‘OTP’ while making a transaction and to validate your mobile number. This provides you a seamless purchase experience while doing transactions and you don’t need to move out of the app to read the SMS and then enter it in the app.

Phone: The app requires access to make phone calls so that you can make phone calls to our customer service providers, agents, and our request trackers directly through the app.

Contacts: If you allow us to access your contacts, it enables us to provide a lot of social features to you such as sharing your experiences with your friends, inviting your contacts to try our app, send across referral links to your friends, etc. This information will be stored on our servers and synced from your phone.

Photo/ Media/ Files: The libraries in the app use these permissions to allow map data to be saved to your phone's external storage, like SD cards. By saving map data locally, your phone doesn't need to re-download the same map data every time you use the app.

Wi-Fi connection information: When you allow us the permission to detect your Wi-Fi connection, it would enable us to provide you more seamless experience.

Device ID & Call information: This permission is used to detect your device ID through which we can uniquely identify users. It also lets us know your contact details using which we pre-populate specific fields to ensure a seamless service experience.

Video/Audio: This permission enables you to upload videos on our application or to submit video reviews of your service experiences and thereby providing you with new ways of providing reviews of your experience on our application. The audio permission enables us to ensure that the video content that you upload has a clear audio in its background.

Phone Number: We need the permission of access to phone number to provide a seamless login experience, to optimise your service experience and to enable you to obtain UPI services and to prevent fraud in some cases on our application

Subscription Information: Your subscription information enables to provide you a seamless experience depending upon your network and to optimise the application’s performance.

HOW WE PROTECT YOUR PERSONAL INFORMATION?

All payments on the Website are secured. Our website/app works with the partners to collect your payments. We ensure that the partner sites that we work with are PCI-DSS Enabled. This means all Personal Information you provide is transmitted using TLS (Transport Layer Security) encryption. TSL is a proven coding system that lets your browser automatically encrypt, or scramble, data before you send it to us. Website has stringent security measures in place to protect the loss, misuse, and alteration of the information under our control. Whenever you change or access your account information, we offer the use of a secure server. Once your information is in our possession we adhere to strict security guidelines, protecting it against unauthorized access. We also adhere to the local Data Privacy Laws Information Technology laws of India, enabling the information to be securely transmitted between your devices and secured cloud servers where this information stored and processed.

WITHDRAWAL OF CONSENT AND PERMISSION

You may withdraw your consent to submit any or all Personal Information or decline to provide any permissions on its Website as covered above at any time. In case, you choose to do so then your access to the Website may be limited, or we might not be able to provide the services to you. You may withdraw your consent by sending an email to [email protected]. Our consent policy is based on the applicable laws of the jurisdictions you normally reside as well as of the jurisdictions where the data is collected and processed.

YOUR RIGHTS QUA PERSONAL INFORMATION

You may access your Personal Information from your user account with Fidfly. You may also correct your personal information or delete such information (except some mandatory fields) from your user account directly. If you don’t have such a user account, then you write to [email protected].

ELIGIBILITY TO TRANSACT WITH Fidfly

You must at least 18 years of age to transact directly with Fidfly and also to consent to the processing of your personal data.

Our services aren’t intended for children under 12 years old, and we’ll never collect their data unless it’s provided by (and with the consent of) a parent or guardian. The limited circumstances we might need to collect the personal data of children under 12 years old include: as part of a service disbursement, the purchase of other related services, or in other exceptional circumstances (such as features addressed to families). Again, this will only be used and collected as provided by a parent or guardian and with their consent.

CHANGES TO THE PRIVACY POLICY

We reserve the rights to revise the Privacy Policy from time to time to suit various legal, business and customer requirement. We will duly notify the users as may be necessary. You may always submit concerns regarding this Privacy Policy via email to us at [email protected]. Fidfly shall endeavour to respond to all reasonable concerns and inquires.

PRIVACY POLICY (EU, UK AND US)

In addition to what we collect from the Indian Customers, we will collect the Passport, Nationality, and Visa details from all the foreign customers. Foreign customers means custmers of all the nationalities other than India.

Personal data we collect automatically. Whether or not you end up making a reservation, when you visit our websites or apps, we automatically collect certain information. This includes your IP address, the date and time you accessed our services, and information about your computer’s hardware and software (such as the operating system, the internet browser used, software/application version data and your language settings). We also collect information about clicks and which pages have been shown to you.

If you’re using a mobile device, we collect data that identifies the device, as well as data about your device-specific settings and characteristics, app crashes and other system activity.

We integrate with third party service providers to facilitate payments, provide identification services and location services to ensure service availability to the right place by the right person. Additionally, we collect information in the regrettable case that we receive a complaint about you from a law enforcement agency, for example in the case of misconduct.

WHY DO WE COLLECT AND USE YOUR PERSONAL DATA

Your personal data may be collected and used in the following ways:

  • Service Request facilitation: First and foremost, we use your personal data to complete and administer your services that you are availing through Fidfly website. This includes sending or receiving communications that relate to your service details, payment plans, validity of service and other value-added information, such as confirmations, modifications, and reminders.
  • Customer service: We provide customer service to all our local as well as international customers through our local office and through our email ids. Sharing relevant details, such as reservation information or information about your user account with our customer service staff allows us to respond when you need us. This includes helping you to contact the right teams and responding to any questions you might have about our services and detailed processes.
  • Account facilities: Fidfly users can create an account on our website or apps. We use the information you give us to administer this account, allowing you manage your account settings.
d. Marketing Activities
  • Send regular updates about products and services (with easy unsubscribe options).
  • Provide individualized offers on Fidfly website or apps.
  • Use relevant information for other promotional activities.
e. Communication

We may contact you via email, chatbot, post, phone, or text for:

  • Handling and responding to your requests.
  • Confirming service availability based on IP location.
  • Collecting customer reviews and feedback.
  • Legal or regulatory purposes, including disputes and enforcement.

2. Data Sharing with Third Parties

We may share personal data with third parties, including:

  • Payment processors and financial institutions for handling payments or chargebacks.
  • Partners for marketing services.
  • Competent authorities for legal compliance or fraud prevention.
  • Business partners to provide efficient customer service or for fraud detection.

All collected data is primarily stored in India. Requests from EEA law enforcement are routed through proper legal channels.

3. Internal Data Sharing within Fidfly

  • To provide, administer, and manage reservations and payments.
  • For customer service purposes.
  • To detect, prevent, and investigate fraud or illegal activities.
  • For analytical and product improvement purposes.
  • To send personalized offers or marketing with consent.
  • For hosting, technical support, and security maintenance.
  • To ensure legal compliance.

4. Security and Data Retention

We use multiple levels of encryption, access controls, and security procedures to safeguard your personal data. Only authorized personnel can access data.

We retain your personal data as long as necessary for service provision, legal compliance, dispute resolution, or fraud prevention.

5. Personal Data of Children

Our services are not intended for children under 12. Data may be collected only with parental consent in limited cases. Unauthorized collection will be deleted immediately.

6. Your Rights

  • Access, correction, deletion, restriction of processing, objection, and data portability.
  • Withdraw consent at any time.
  • Object to processing based on legitimate interests (EU GDPR Article 21(1)) or direct marketing (Article 21(2)).
  • California residents have additional rights under the CCPA, including no sale of personal data and control over sensitive personal information.

7. Exercising Your Rights

  • Request a copy of your personal data.
  • Update or correct your personal data.
  • Request deletion, blocking, or restriction of data processing.
  • Request transfer of data to a third party.
  • Withdraw consent where applicable.

If you have a Fidfly account, you can manage much of your personal data directly via the website or app.

8. Contact via Email

When contacting us by email, your provided data (name, email, phone) will be stored for response purposes. Optional information submitted will be used only with consent. Data will be deleted or restricted once no longer required.

9. Cookies

We use cookies to enhance user experience and recognize returning users. Types include:

  • Persistent/Permanent cookies: Recognize returning users without signing in again. Remain for a predefined period.
  • Session cookies: Exist only during your browser session and are erased upon closing the browser.

10. Data Transmission

Transfers outside the EU/EEA are protected via EU-approved safeguards like standard contractual clauses or adequacy decisions.

11. Data Security & Storage

We maintain extensive technical and operational security precautions to prevent unauthorized access, loss, or destruction. Data may be anonymized or aggregated for analytics purposes.

12. Data Retention

Personal information is retained as long as needed to fulfill the purposes of this Privacy Policy, or longer if required by law (e.g., tax, legal, accounting purposes).

13. How to Contact Us

Fidfly’s Data Protection Officer is responsible for monitoring compliance with relevant legislation in relation to the protection of personal data. Please contact us at [email protected] You can contact us for any concerns or questions about your personal information, those we process or store.

Our cookie statement may also be updated from time to time. If these updates are substantial, particularly relevant to you or impact your data protection rights, we’ll contact you about them. However, we recommend that you visit this page regularly to stay up to date with any other (less substantial or relevant) updates.