B Credit B Credit close
Home Intelligence Plans Credit Cards Check Status
Login Sign Up Free

Privacy Policy

Your privacy is critically important to us.

1. Introduction & Statutory Framework

Welcome to B Credit ("BCredit", "we", "our", or "us"). We operate as an institutional Credit Health & Bureau Dispute Advisory firm in the Republic of India. We are committed to protecting the privacy, confidentiality, and data sovereignty of our clients in strict compliance with the Digital Personal Data Protection Act, 2023 (DPDP Act), the Credit Information Companies (Regulation) Act, 2005 (CICRA), and the Reserve Bank of India (RBI) directives on customer data security.

This Privacy Policy explains how we collect, verify, utilize, store, and safeguard your personal and financial information when you access our portal (bcredit.in), utilize our mobile applications, or engage our advisory services.

2. Information We Collect

To deliver accurate credit health analysis, statutory dispute petition drafting, and bureau reconciliation, we collect the following categories of data with your explicit, informed consent:

  • Identity & KYC Credentials: Full legal name, date of birth, gender, Permanent Account Number (PAN), father's/spouse's name, and government-issued identity documents (Aadhaar, Voter ID, Passport, or Driving License where legally permissible).
  • Contact Particulars: Verified mobile telephone number, email address, residential address, and permanent address.
  • Credit Information Reports (CIR): Credit history summaries, Days Past Due (DPD) metrics, account statuses, write-off notations, settlement records, inquiry trails, and credit bureau scores furnished by TransUnion CIBIL, Experian, Equifax, or CRIF High Mark.
  • Banking & Financial Records: Loan account numbers, bank statement excerpts, sanction letters, repayment receipts, No Objection Certificates (NOC), No Dues Certificates (NDC), and bank foreclosure letters submitted to substantiate dispute filings.
  • Digital & System Telemetry: IP addresses, browser types, device identifiers, session cookies, and activity logs captured solely for cybersecurity auditing, fraud prevention, and session integrity.

3. Purpose & Legal Basis for Data Processing

We process your data strictly under documented consumer mandates for the following legitimate business purposes:

  1. Performing comprehensive multi-bureau credit audits to detect reporting errors, clerical discrepancies, DPD mismatch, and unauthorized inquiries.
  2. Drafting formal dispute memorandums, escalation petitions, and representation briefs addressed to credit institutions (banks, NBFCs) and credit information companies under Section 21 of CICRA, 2005.
  3. Facilitating debt settlement negotiations, dispute mediation, and closing certificate procurement.
  4. Communicating case milestones, SLA tracking notifications, token updates, and invoice receipts via WhatsApp, SMS, and email.
  5. Fulfilling statutory recordkeeping, taxation mandates, and regulatory auditing obligations under Indian law.

4. Consent Architecture & Explicit Authorization

By submitting your information, uploading documents, or authorizing an OTP-verified application, you expressly appoint BCredit as your authorized representative to review your credit files and communicate with credit institutions solely for dispute resolution and advisory purposes. You retain the right to withdraw your consent at any time by issuing formal written notice to our Grievance Desk, subject to ongoing statutory retention requirements.

5. Information Sharing & Third-Party Disclosure Policy

BCredit maintains a strict zero-tolerance policy against selling, renting, or trading customer personal data to third-party telemarketers or commercial advertisers.

Data disclosure occurs strictly within these lawful operational boundaries:

  • Credit Institutions & Bureaus: Relevant financial and KYC documents are shared exclusively with the respective banks, NBFCs, and credit bureaus (TransUnion CIBIL, Experian, Equifax, CRIF High Mark) involved in your specific dispute resolution proceedings.
  • Statutory Authorities: Disclosures mandated by competent judicial courts, law enforcement agencies, or regulatory authorities under applicable Indian statutes.
  • Certified Technology Infrastructure: Regulated payment gateway partners (for processing service fees) and secure SMS/WhatsApp gateway providers (for transactional updates), bound by strict non-disclosure contracts.

6. Data Security & Storage Architecture

We implement institutional-grade physical, administrative, and technological defenses to ensure your data remains inviolable:

  • Cryptographic Standards: 256-bit AES encryption for all data at rest, and TLS 1.3 cryptographic transport tunnels for all data in transit.
  • Access Governance: Role-based access control (RBAC), multi-factor authentication, and segregated database access granted solely to assigned case analysts.
  • Storage Jurisdiction: All digital databases, audit logs, and document repositories are strictly hosted within sovereign Indian cloud data centers complying with RBI data localization norms.

7. Data Retention & Erasure

We retain case records and dispute documentation for the duration of your active advisory mandate plus an additional period mandated by financial recordkeeping laws (typically up to 5 years following case closure). Upon expiration of the statutory period or upon receiving an approved data erasure petition, your documents are purged via cryptographic deletion.

8. Your Consumer Data Rights

Under the DPDP Act 2023, you enjoy full sovereignty over your information, including:

  • Right of Access & Summary: Request an itemized summary of personal data held by us.
  • Right to Rectification: Request immediate correction of inaccurate or incomplete personal particulars.
  • Right of Erasure: Request deletion of uploaded records once dispute filings and statutory audits are completed.
  • Right of Grievance Redressal: Direct access to our designated Grievance Officer for rapid resolution of privacy concerns.

9. Grievance Officer & Contact Information

In compliance with the Information Technology Act, 2000 and the DPDP Act, 2023, our designated Grievance Redressal Officer is:

Grievance Redressal Desk — B Credit
Email: grievance@bcredit.in / support@bcredit.in
Escalation SLA: Initial response within 48 business hours; final resolution within 15 working days.
Corporate Office: B Credit Advisory Services, India.