Privacy Policy

1. Introduction

This Privacy Policy applies to all End-Users, Financial Information Users (FIUs), Financial Information Providers (FIPs), and visitors ("You", "Your") who access or use the Saafe Tech website, APIs, dashboards, or related Services (the "Platform"). By using the Platform, You consent to the collection and use of information as described in this Policy. This Policy should be read together with our Terms and Conditions.

2. The Data We Collect

Depending on the Service You use, we may collect the following categories of information:

• Account and Contact Information: name, email address, phone number, organisation details, and login credentials.
• Financial Information: as defined under the Master Direction - Non-Banking Financial Company - Account Aggregator (Reserve Bank) Directions, 2016 ("Master Directions"), including bank account, deposit, and investment data shared with Your explicit consent.
• KYC and Verification Data: identity documents and details submitted for verification and Alternate Data API flows.
• Technical Data: IP address, device and browser type, and usage data collected automatically through cookies and similar technologies.
• Consent Artefact Data: the identity of the data principal, purpose, nature of Financial Information requested, identity of recipients, and consent creation/expiry timestamps.

3. How We Collect Data

We collect information (a) directly from You when You register, submit a form, or interact with our Platform; (b) from Financial Information Providers, once You grant consent through the Account Aggregator framework; (c) automatically, through cookies and analytics tools; and (d) from FIUs and partners with whom We have a contractual relationship to deliver the Services.

4. How We Use and Disclose Data

We will not retrieve, store, share, or transfer Your Financial Information without Your explicit, purpose-specific consent. We use the information We collect to:

• Provide, operate, and maintain the Services in accordance with the consent artefact and the purpose You have authorised;
• Verify identity and prevent fraud, in line with customer identification requirements;
• Ensure the provision of Services is backed by appropriate agreements between Us, You, and the Financial Information Providers;
• Comply with applicable law, regulatory directions, and lawful requests from the Reserve Bank of India ("RBI") or other authorities; and
• Improve, secure, and support the Platform.

We do not part with any information acquired from or on behalf of You without Your explicit consent, except where required by law.

5. Transfer of Personal Data

Where necessary to deliver the Services, Your information may be processed by our cloud infrastructure and sub-processors located within India. We do not transfer Financial Information outside India except where legally permitted and with appropriate safeguards in place.

6. Third Party Services

Our Platform may link to or integrate with third-party services, including Financial Information Providers and payment or identity verification partners. Their use of Your information is governed by their own privacy policies, and We encourage You to review them independently.

7. Cookies

We use cookies and similar tracking technologies to remember Your preferences, keep You signed in, and understand how the Platform is used so We can improve it. You can control or disable cookies through Your browser settings; some features of the Platform may not function correctly if cookies are disabled.

8. Data Security

We are an ISO 9001:27001 certified organisation. All data in transit is encrypted using bank-grade security protocols, and our cloud-native, multi-tenant architecture enforces strict data isolation. Access to Financial Information is restricted on a need-to-know basis and logged for audit purposes.

9. Data Retention

We retain personal and Financial Information only for as long as necessary to fulfil the purpose for which it was collected, honour the consent artefact's validity period, or comply with applicable legal and regulatory retention requirements, after which it is securely deleted or anonymised.

10. Business Transitions

If Saafe Tech is involved in a merger, acquisition, or sale of assets, Your information may be transferred as part of that transaction. We will notify You before Your information becomes subject to a different privacy policy.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The updated version will be posted on this page with a revised "Last updated" date, and material changes will be communicated to You through the Platform where required.

12. Communication and Grievance Redressal

For any privacy-related queries, requests, or concerns, please contact us at general@saafe.tech. For unresolved grievances, please refer to our Grievance Redressal process.

Saafe Technology Solutions Private Limited
Suite 422, Workafella, 431, Anna Salai, Teynampet, Chennai, Tamil Nadu 600018
Phone: +91 78451 48999