Privacy Policy

creditcase.in and the mobile application ‘creditcase’ is used by Essential Investment Managers Private Limited (hereinafter referred to as “the Company”, “EIMPL”, “us”, “we”, “our”, as the context so requires). The Company is committed to safeguarding any information submitted to us on the website/app and/or during the credit facilitation services made available through the Site or the mobile application ‘creditcase’ (collectively referred to as the “Platform”) of the Company (“Services”). The privacy notice provides you with a summary of the type of information collected by us, policy regarding use of that information and measures taken to safeguard that information (“Privacy Policy”).

User Consent and Agreement

By submitting Personal Information through our Platform or Services, you agree to the terms of this Privacy Policy and you expressly give your voluntary consent to the collection, use and disclosure of the Personal Information in accordance with this Privacy Policy.

Information you may provide to us

If you provide us feedback or contact us via e-mail, we will collect your name and e-mail address, as well as any other content included in the e-mail, in order to send you a reply.
When you participate in one of our surveys, we may collect additional information.
We may collect Personal Information and financial information provided by you, such as your first and last name, phone, e-mail address, age, investments, PAN etc. while you access the Services on the Platform.
We may also collect Personal Information on the Platform or through the Services when we make clear that we are collecting it and you voluntarily provide the same, for example when you submit an application for employment.
We may collect necessary documents, to provide Services including credit facilitation, when you voluntarily provide the same through one-time access to files or images on your device.
You must ensure to recheck the information or data being provided to us. In case any of the information or data is found to be inaccurate or incorrect, the same shall be informed to us by you for immediate amendment. We shall not be responsible for the authenticity of any information including Personal Information submitted to us.

Information collected via technology

To make our Platform and Services more useful to you, our servers (which may be hosted by a third-party service provider) collect information from you, including your browser type, operating system, Internet Protocol (IP) address (a number that is automatically assigned to your computer when you use the Internet, which may vary from session to session), and domain name.

Use of personal information

In general, Personal Information you submit to us regarding you is used either to respond to requests that you make, or to aid us in serving you better. We use such Personal Information in the following ways:

To identify you as a user in our system;
To provide improved administration of our Platform and Services;
To provide the Services you request;
To improve the quality of experience when you interact with our Platform and Services;
To send you e-mails and other notifications;
To send newsletters, surveys, offers, and other promotional materials related to our Services and for other marketing purposes.
To protect our Services and our users.
To conduct market and user analysis, market research and for statistics.
To prevent and detect fraud or abuse of our Services as well as to prevent, detect and investigate any potential unlawful or prohibited activities.

Disclosure to third parties

We may be required from time to time to disclose any personal information collected by us to governmental or judicial bodies or agencies or our regulators based on their requirement to comply with the applicable laws including cyber laws.

For credit facilitation services being provided to you, the following data is being shared with authorised third parties:

PAN, Mobile number & Email ID for investment holdings verification are shared with SEBI-registered RTAs and Depositories
KYC Documents for OCR & masking and Bank details for mandate setup with Digio (Digio is a RBI-regulated entity)
Email ID for communication with Amazon Web Services
Phone No. for SMS/WhatsApp communication with our service providers Kaleyra/Gupshup
PAN, Mobile number, Email ID, KYC details, Bank account and mandate details & Securties pledged with lending partners (Bajaj Finance Ltd)

Creation of anonymous information

We may create Anonymous Information records from Personal Information by excluding information (such as the name and email). We use this Anonymous Information to analyze request and usage patterns so that we may enhance the content of our Services and improve Platform navigation. We reserve the right to use Anonymous Information for any purpose and disclose Anonymous Information to third parties at our sole discretion.

Third party websites/applications

When you click on a link to any other website/applications/locations, you will leave our Platform and go to another website/application/location and another entity may collect Personal Information or Anonymous Information from you. We have no control over, do not review, and cannot be held responsible for these outside websites/applications/locations or their content. Please be aware that the terms of this Privacy Policy do not apply to these outside websites/applications/locations or content, or to any collection of information after you click on links to such outside websites/applications/locations.

"Cookies" are pieces of information that a browser can record after visiting a website. We may use cookies for technical purposes such as to enable better navigation through our site, or to store user preferences for interacting with the site. If you turn off the option to have cookies stored on your browser, it will affect your experience on the Platform.

Security of your information

We are committed to protecting the security and privacy of your Personal Information. We endeavour to have suitable technical, operational and physical security controls and measures to protect information collected by us that are commensurate with the nature of our business at all times. We use a variety of industry-standard security technologies and procedures to help protect your Personal Information from unauthorized access, use, or disclosure, and periodically review the same. In the event of any breach of our security control measures resulting in unauthorised access to your information, we will endeavour to inform you of the extent of such breach, subject to applicable laws and cooperation with the relevant authorities. Further, despite our efforts to protect your information, if unauthorized persons breach security control measures and illegally use such sensitive/personal data or information, the Company, its affiliates and directors shall not be held responsible/liable for the same.

Retention and destruction of information/data

Personal Information provided by you shall be retained for a duration of 8 years from the completion/termination of Services, unless a longer period is necessitated under legal or regulatory requirements from time to time.

For any data as well as consent that you may have provided and want to be deleted or revoked (fully or partially), please send an email to help@creditcase.in stating the details of the data and/or consent provided and the scope/nature of the deletion/revocation desired. However, in the event of you withdrawing such consent or making a request to delete the data, you would not be able to use the Services.

Upon the receipt of a valid data deletion request, it is assessed for authenticity and the legitimacy of the request is evaluated. Anonymization is considered prior to deletion, provided it does not conflict with the applicable laws and/or legal obligations. We endeavor to delete the relevant Personal Information based on a valid request received from you within a reasonable period not exceeding 30 days of receiving a valid and legitimate data deletion request, unless retention is required for compliance with the applicable laws and/or legal obligations.

All information (including Personal Information) is stored on Amazon Web Services (AWS) cloud infrastructure hosted in India. We rely upon their protocols to ensure secure disposal of such data. Data destruction shall be performed according to AWS Media Destruction Protocols hosted at: https://aws.amazon.com/trust-center/data-center/our-controls/#topic-4. AWS decommissions media using techniques detailed in NIST 800-88.

Notwithstanding the above, certain data may be retained beyond the specified timelines where there is an unresolved issue, dispute, or claim relating to your account; where retention is required under applicable law or regulatory mandate; where the data is retained in aggregated and/or anonymised form such that it is not attributable to you; or where retention is necessary for legitimate business interests such as fraud prevention or ensuring platform security.

Amendments/Modifications

This Privacy Policy available on our Platform is current and valid. However, we reserve the right to amend/modify any of the sections of this policy at any time and the general public are requested to keep themselves updated for changes by reading the same from time to time.

Contact Information

We welcome your grievances, comments or questions regarding any of the terms of this Privacy Policy, the Platform, or the Services. Please e-mail us at help@creditcase.in or contact our grievance officer at the following address: #51, 3rd Floor, Le Parc Richmonde, Richmond Road, Shanthala Nagar, Richmond Town, Bangalore - 560025.

Definitions

“Anonymous Information” - Anonymous information means information that does not directly or indirectly identify, and cannot reasonably be used to identify, an individual guest/user.
“Internet Protocol (IP)” - Internet Protocol (IP) is the principal set (or communications protocol) of digital message formats and rules for exchanging messages between computers across a single network or a series of interconnected networks, using the Internet Protocol Suite (often referred to as TCP/IP). Messages are exchanged as datagrams, also known as data packets or just packets.
“Personal Information” - Personal Information means any information that relates to a natural person, which, either directly or indirectly, in combination with any other information available, is capable of identifying such a person.

Last updated on 29 September 2025.

Report abuse