Finsa Privacy Policy

Last updated: 17 September 2026

This policy covers the Finsa app on iOS and Android. Finsa is operated by Finsamudra Private Limited. In short: we fetch your credit report with your permission, analyse it to show you where you may be losing money, and pass your details to a lending partner only when you ask us to. If you save in digital gold, we share what SafeGold and Razorpay need to run your gold account and payments. We do not sell your data, we do not send your identity to the AI, and you can delete your account from inside the app.

1. Who we are

Finsa is operated by Finsamudra Private Limited, a company registered in India, with its registered office at Simha Arcade, 3013, Mahakavi Kuvempu Road, Gayatrinagar, Rajajinagar, Bengaluru, Karnataka 560021, India. Finsa is a credit-information and loan-referral service with a digital gold savings feature. Finsa is not a lender and does not approve loans.

This policy is about the Finsa app. Our separate website privacy policy covers finsamudra.com itself.

2. What we collect

  • Email address, to create and sign you into your account.
  • Name and mobile number. The credit bureau needs them to find your report, and we use them to contact you about anything you ask us to do.
  • Your credit report from Equifax, to analyse your credit profile and find opportunities.
  • Your PAN, date of birth and address, as they appear in your credit report, to identify you and complete your profile.
  • Your monthly income, as you state it, to estimate how much of your income goes to EMIs. We never verify it.
  • What you enter when you enquire about a loan: the amount, tenure and purpose, your income and your employer, so that we and our lending partner can respond to that enquiry.
  • For digital gold: your PIN code, your purchase and savings history, and the bank account or UPI ID you add to receive the money when you sell.
  • App usage events, to understand which parts of the app work. No financial values are included.

Payments are made through Razorpay's own checkout. We never see or store your card number, CVV or UPI PIN.

3. Your credit report

We request your credit information report from Equifax through our technology partner Deepvue, and only after you have given explicit consent inside the app and verified the request yourself with a one-time password sent to your mobile number.

This is a soft enquiry. It does not affect your credit score. Your first report can be fetched on any date. After that you can refresh once per calendar month, from the 10th of the month onward. Lenders report to the bureau during the first few days of each month, so an earlier refresh would return the same file.

We keep your credit report, and the analysis we derive from it, for as long as you have a Finsa account. When you delete your account, your credit reports are deleted.

4. Artificial intelligence

If you use Ask Finsa, we send a de-identified summary of your financial position to Google Gemini to generate a plain-language explanation.

Before anything is sent, we remove your name (beyond your first name), PAN, mobile number, email address, postal address, date of birth, gender, and all account and card numbers. What is sent is figures: your score, balances, EMIs, interest rates and the analysis we computed.

All financial calculations are performed by Finsa, not by the AI. AI explanations are informational and are not financial advice or a lending decision. Using Ask Finsa is optional. The rest of the app works without it.

5. When we share your data

We share your personal data only in these situations:

  • With a lending partner, when you have asked us to check a loan option and agreed to be contacted. We share what a lender needs to assess your enquiry, including your name, contact details, PAN, income and credit information.
  • With the service providers that run Finsa:
    • Deepvue, our technology partner for fetching your Equifax report.
    • Google, for Ask Finsa, de-identified as described in section 4.
    • Supabase, which hosts our database.
    • Vercel, which hosts our application servers.
    • Fly.io, which hosts the service behind Ask Finsa and the relay our servers use to reach SafeGold and Razorpay.
    • SafeGold, which provides and holds your digital gold. It receives your name, mobile number, email address and PIN code to open and run your gold account. SafeGold may require identity details, such as your PAN, under its own KYC rules.
    • Razorpay, which processes your gold purchases and UPI Autopay savings, and pays you when you sell. It receives your name, email address and mobile number, and the bank account or UPI ID you add to receive the money.
  • When the law requires it.

We do not sell your data, and we do not share it for advertising.

6. Where your data lives

We want to be precise about this rather than overstate it.

  • Your account, your credit reports and the analysis we derive from them are stored in a database hosted by Supabase, on Amazon Web Services servers in Tokyo, Japan.
  • The application servers that handle your requests are hosted by Vercel and currently run in the United States.
  • If you ask us to check a loan option, your enquiry is also recorded in our internal loan-desk system, which runs on servers in Mumbai, India.
  • Ask Finsa runs on servers hosted by Fly.io in Singapore. The summary it sends to Google, described in section 4, may be processed outside India, which is why we remove your identifying information first.

7. Your rights

  • See your data. Your credit report and our analysis of it are visible in the app. For a copy of anything else we hold about you, email the Grievance Officer.
  • Withdraw consent at any time by emailing the Grievance Officer named in section 12, or by deleting your account.
  • Delete your account from Profile, then Delete account. This takes effect immediately. If you hold digital gold, you will be asked to sell it first so that it is not left without an owner. You can also ask us to delete it without the app installed.
  • Correct your data by emailing us. Corrections to the bureau report itself must be raised with Equifax, and we will tell you how.
  • Nominate someone to exercise your rights under the Digital Personal Data Protection Act, 2023 on your behalf in the event of your death or incapacity. To make or change a nomination, write to the Grievance Officer named in section 12.

When you delete your account, some records are kept because Indian financial record-keeping rules require it. Records of your gold transactions are kept, detached from your identity. Records showing that consent was obtained before a credit report was requested are kept in anonymised form. If you asked us to check a loan option, the enquiry you submitted is kept by our loan desk so it can be closed properly with the lending partner. You can ask the Grievance Officer to erase it.

8. Security

All traffic is encrypted in transit. Access to your data is restricted at the database level so that one account cannot read another's. Credentials for the bureau, the AI and our payment partners are held only on our servers and never in the mobile app. We do not write your report, PAN or contact details into our logs.

9. Children

Finsa is not for anyone under 18. We do not knowingly collect data from minors.

10. Changes

If we change how we use your data in a way that matters, we will ask for your consent again in the app rather than quietly updating this page.

11. Contact

support@finsamudra.com. Finsamudra Private Limited, Simha Arcade, 3013, Mahakavi Kuvempu Road, Gayatrinagar, Rajajinagar, Bengaluru, Karnataka 560021, India.

12. Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023, the Grievance Officer for Finsamudra Private Limited is Supreeth, Founder & Director, grievance@finsamudra.com.

If you have a grievance about how your personal data has been handled, or about a request you have made to us, write to the Grievance Officer at that address. We will acknowledge your grievance and respond within the timelines required under applicable law. More detail is on our Grievance Redressal page.