Privacy Policy

We collect information you provide directly to us, information generated through your use of our platform, and information from third parties.

1.1 Information You Provide

• Registration Information: Full name, mobile number, email address, date of birth, and referral code (if applicable).
• KYC Documents: PAN card, Aadhaar card, passport-size photograph, bank account details (account number, IFSC code, bank name), and any other documents required by regulators.
• Lead Information: Customer name, mobile number, email, city, loan amount, and product preferences submitted when creating leads.
• Payment Information: Details required to process franchise fee payments and payouts, including bank account and UPI information.
• Communication: Messages, support requests, feedback, or queries you send to us.

1.2 Information Collected Automatically

• Device information (type, operating system, browser)
• IP address and location data
• Pages visited, features used, and time spent on the platform
• Login timestamps and activity logs
• Cookies and similar tracking technologies

1.3 Information from Third Parties

• Payment gateway data (Razorpay) for transaction verification
• Government databases for KYC verification (Aadhaar, PAN)
• Credit bureau data (where applicable)

We use the information we collect to:

• Create and manage your DSA partner account
• Process KYC verification and onboarding
• Facilitate lead creation, tracking, and management
• Calculate and process commission earnings and payouts
• Process franchise fee payments via Razorpay
• Send important notifications (OTPs, lead updates, payout confirmations)
• Provide training content and track learning progress
• Detect, prevent, and investigate fraud, security breaches, and other potentially prohibited activities
• Comply with legal obligations, including those under the Prevention of Money Laundering Act (PMLA) and RBI guidelines
• Improve our platform, develop new features, and analyse usage patterns
• Respond to your queries and provide customer support

We do not sell your personal data. We may share your information in the following circumstances:

• Lending Partners & Lenders: We share customer lead information (with your consent) with banks and NBFCs to process loan applications.
• Payment Processors: Razorpay receives information necessary to process payments and payouts.
• KYC Verification Services: Aadhaar and PAN details are shared with government-authorised verification agencies.
• SMS / Communication Providers: Your phone number is shared with our SMS provider (MSG91) solely to send OTPs and transactional messages.
• Cloud & Hosting Providers: AWS (Mumbai region) hosts our infrastructure; data is stored within India.
• Legal & Regulatory Authorities: We may disclose information when required by law, court order, or regulatory authority.
• Business Transfers: If DhanHub is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

We implement industry-standard security measures to protect your information:

• AES-256 encryption for sensitive data (Aadhaar numbers, bank account details) at rest
• TLS 1.3 encryption for all data in transit
• JWT-based authentication with short-lived access tokens and secure refresh token rotation
• Role-based access control — staff can only access data relevant to their function
• Regular security audits and penetration testing
• AWS WAF and firewall protection for all API endpoints

Despite these measures, no method of transmission over the internet is 100% secure. If you suspect unauthorised access to your account, contact us immediately at support@dhanhub.in.

We retain your personal data for as long as:

• Your account is active on our platform
• Required by law (e.g., KYC records must be retained for 5 years under PMLA)
• Necessary to resolve disputes or enforce agreements

Upon account closure, we will delete or anonymise your data within 90 days, except where legal retention requirements apply.

As a data subject, you have the following rights:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request correction of inaccurate or incomplete data.
• Deletion: Request deletion of your data (subject to legal retention requirements).
• Portability: Request your data in a machine-readable format.
• Withdraw Consent: Withdraw consent for non-essential data processing at any time.

To exercise any of these rights, contact us at privacy@dhanhub.in. We will respond within 30 days.

We use cookies and similar technologies to:

• Maintain your login session
• Remember your preferences (e.g., language, theme)
• Analyse platform usage and improve performance

You can control cookies through your browser settings. Disabling cookies may affect the functionality of the platform.

Our platform is intended for adults aged 18 and above. We do not knowingly collect personal data from anyone under 18. If we become aware that a minor has registered, we will promptly delete their account and data.

We may update this Privacy Policy from time to time. We will notify you of material changes via email or an in-app notification at least 7 days before the changes take effect. Continued use of the platform after that date constitutes your acceptance of the updated policy.

For questions, concerns, or requests related to this Privacy Policy, contact our Data Protection Officer: