AarneX FinServ ("we," "us," or "our") is operated as a sole proprietorship under Indian law by its Proprietor, Mr. Rahul Tripathi. For the purposes of applicable data protection law, AarneX FinServ acts as a Data Fiduciary. We serve strictly as an independent, non-lender, Digital Lending Facilitator and Direct Sales Associate (DSA). We do not provide loans, extend credit, or make underwriting decisions—all of which remain the exclusive responsibility of our partner regulated lending institutions.
We are committed to protecting the privacy, security, and integrity of the data shared with us by our users, business partners, and applicants (collectively referred to as "Data Principals" or "you") in strict accordance with the Digital Personal Data Protection Act (DPDP Act), 2023, the Information Technology Act, 2000, and applicable Reserve Bank of India (RBI) guidelines. While AarneX FinServ implements reasonable measures to protect the integrity of data shared with us, please note that no method of electronic transmission or storage is entirely secure. By using our services, you acknowledge that you understand these inherent risks.
We collect and process personal data solely for the purposes described in this policy, ensuring that we only access the minimum information necessary to facilitate your requested financial services.
In compliance with the DPDP Act, 2023, we process personal data only under valid legal grounds:
To evaluate partnership inquiries, facilitate customer referrals, and provide financial distribution services, we limit collection to the following specific fields:
We process your personal and professional information for the following specific mandates:
We do not sell, rent, or trade your personal data to third parties for marketing purposes. We do not authorize third parties receiving personal data from us to use such information for their own independent marketing purposes unless you have separately consented to such use or such use is otherwise permitted by applicable law.
Data is shared strictly on a need-to-know basis according to recipient types:
As stated in our Introduction, we do not engage in automated credit profiling or algorithmic decision-making. All credit assessments, approvals, pricing, and disbursements remain solely at the discretion of the respective lending institution in accordance with its internal policies and applicable laws.
Where applicable, AarneX FinServ facilitates customer referrals in accordance with applicable RBI Digital Lending regulations, directions, and guidelines. Customer data is shared with partner Regulated Entities (REs), including Banks and NBFCs, only with explicit borrower consent and solely for credit evaluation purposes. AarneX FinServ does not store or access device-level data (such as contacts, media, or call logs) beyond what is strictly required for application service delivery.
Where required by the Prevention of Money Laundering Act (PMLA), 2002, RBI KYC Master Directions, or other applicable laws, we retain and share customer identification and verification records with authorized regulatory or government bodies for the mandated retention periods.
In accordance with applicable data protection laws, data is retained strictly according to the following purpose-linked schedule:
| Data Category | Specific Purpose | Retention Period |
|---|---|---|
| Loan Facilitation & Enquiry Data | Tracking credit applications and partner pipelines | 36 months from the last recorded interaction with the user or earlier where deletion is requested and permitted under applicable law. |
| KYC & Partner Registration Documents | Onboarding verification and identity checks | 5 years from account closure (Statutory PMLA mandate). |
| Customer Complaints & Disputes | Operational grievance and resolution tracking | Up to 7 years from the date of absolute closure. |
| Resume & Career Applications | Evaluating candidates for internal positions | 12 months from submission date. |
Note: Where required by law, regulatory directives, or ongoing legal proceedings, data may be retained for longer than the above stated periods. Upon expiry of the applicable retention period, personal data will be securely deleted, anonymized, or archived where required by law.
We utilize enterprise cloud service providers and supporting technical infrastructure located within India and/or in jurisdictions permitted under applicable Indian data protection laws and government notifications. We implement appropriate contractual, technical, and organizational safeguards to protect personal data during its processing, storage, and transfer.
Under the DPDP Act, 2023, you hold specific statutory rights regarding your personal data. To protect your privacy, we may request reasonable identity verification before processing any privacy request relating to your personal data.
All privacy requests regarding your rights or nominations should be formally directed to privacy@aarnexfinserv.com.
Our loan facilitation and financial distribution services are strictly intended only for individuals aged 18 years or above. In accordance with applicable laws, we do not knowingly collect personal data from minors, nor do we engage in behavioral monitoring or targeted advertising directed at children. If we become aware that personal data has been inadvertently submitted by a minor under 18 years of age without verifiable parental consent, we will promptly and securely delete such information from our business records. Parents or guardians may contact us directly at privacy@aarnexfinserv.com to request the immediate deletion of a child's data.
Our website utilizes tracking cookies divided into specific operational categories:
Performance, functional, marketing, and analytics cookies are disabled by default and are only deployed once you actively click "Accept" on our Consent Banner. You can modify or revoke your cookie choices at any time through your browser settings or by utilizing the preference controls provided directly within our interface.
We reserve the right to update or modify this Privacy Policy at any time to reflect changing operational, legal, or regulatory requirements. Material changes will be clearly indicated by updating the "Effective Date" at the top of this page. Where required by applicable law, we will obtain fresh consent before changes affecting the processing of your personal data become effective. Continued use of our website after any updates constitutes acceptance of the revised Privacy Policy, where permitted by applicable law and where additional consent is not otherwise required.
In compliance with the DPDP Act, 2023, and information technology rules, any privacy questions, data updates, or unresolved data handling grievances must be directed to our designated Grievance Officer: