Your information.
Handled with care.

This Privacy Policy governs the collection, processing, storage, and protection of personal and financial information on CheckCIBILScore.in, operated by CheckCIBILScore Technologies Private Limited ("we", "us", or "our").

Our operations strictly comply with the Credit Information Companies (Regulation) Act, 2005 (CICRA 2005), the Credit Information Companies Rules & Regulations, 2006, the Information Technology Act, 2000, and the Digital Personal Data Protection Act, 2023 (DPDPA 2023).

In adherence to the principle of data minimization, we collect only the information strictly required to authenticate your identity with official credit repositories and generate your report:

• Identity Verification Credentials: Full legal name, Permanent Account Number (PAN), date of birth, mobile number, and email address for generating one-time authorization tokens.
• Credit Information Records: Account trade lines, payment strings (Days Past Due), credit limits, outstanding balances, and enquiry trails retrieved from TransUnion CIBIL, CRIF High Mark, Experian, and Equifax upon your explicit consent.
• Technical & Security Metadata: IP address, browser user-agent string, and cryptographic audit hashes to prevent unauthorized identity theft and fraudulent pulls.

Every report generation initiated through CheckCIBILScore.in is classified as a Self-Initiated Consumer Soft Enquiry (Soft Pull) under Reserve Bank of India guidelines.

Unlike hard enquiries triggered by commercial banks when you apply for credit cards or loans, soft pulls:

• Have zero negative impact on your CIBIL, CRIF, Experian, or Equifax scores.
• Are never visible to lenders who evaluate your profile for loan approvals.
• Can be conducted as frequently as needed to safeguard your financial health.

We employ military-grade security safeguards to protect sensitive financial records:

• 256-Bit AES Encryption at Rest: All stored database records and KYC documents are encrypted using AES-256 with key management isolated from application servers.
• TLS 1.3 in Transit: All data transmissions between your browser, our API gateway, and credit bureau servers are protected via modern TLS 1.3 cryptography.
• Tenant Isolation: Individual and organization accounts are partitioned through cryptographic tenant barriers, preventing cross-workspace data access.

Uploaded identification documents (such as PAN cards or utility bills used during account verification) are stored in volatile encrypted vaults.

You retain the statutory right to request immediate provider-side withdrawal and operational data cleanup at any time via /dashboard/reports/provider. Completed report caches are systematically pruned based on configured retention policies.

Under the Digital Personal Data Protection Act, 2023, you enjoy full sovereignty over your data:

• Right to Access: Inspect all active credit reports and authorization history stored within your workspace.
• Right to Correction: Identify and prepare structured dispute packages for reporting banks and CICs.
• Right to Erasure: Close your account and request permanent cryptographic deletion of personal identifiers.
• Right to Withdraw Consent: Revoke ongoing report refresh authorizations at any time.

We do not disclose your data to third parties, except strictly necessary infrastructure providers:

• Credit Information Companies: TransUnion CIBIL, CRIF High Mark, Experian India, and Equifax India (to retrieve authorized reports).
• Licensed Payment Aggregators: Razorpay (PCI-DSS Level 1 certified gateway for processing fee transactions).
• Statutory Law Enforcement: Strictly when compelled by an official court order or statutory Indian regulatory mandate.

If you have questions, concerns, or requests regarding the processing of your personal data, you may reach our designated Data Protection Officer: