Privacy policy

1. Who we are (the Data Fiduciary)

SettleKaro Private Limited (CIN: U70200UP2026PTC247774) is the Data Fiduciary for any personal data you share with us. Our registered office is at H. No. 1/22, Ekta Nagar, Kalli Paschim, near SGPGI, Bijnaur, Lucknow, Uttar Pradesh — 226002.

2. What personal data we collect

We collect the following categories of personal data, only as necessary to deliver our services:

Identification data: name, date of birth, gender, PAN, Aadhaar (where required), and other KYC details.
Contact data: phone number, email, residential and mailing address.
Financial data: details of your loans, outstanding amounts, lender communications, bank statements, income proofs, and CIBIL/CRIF reports (when you authorize us to pull them).
Case data: communications between you and your lenders, our case notes, settlement proposals, and outcomes.
Technical data: IP address, browser type, device identifiers, and similar information when you use our website or apps.

3. How we use your data

We process your personal data for the following specific purposes:

To assess your eligibility for our services.
To provide the debt resolution services you've engaged us for, including communicating with your lender on your behalf where you've consented.
To send you updates about your case via phone, email, SMS, or WhatsApp.
To comply with applicable laws, regulatory directions, and lawful court or government orders.
To improve our services, train our team, and protect against fraud (using anonymized or aggregated data where possible).

4. Lawful basis (under DPDP, 2023)

We process your personal data based on:

Your consent — collected at the point of registration or engagement, and recorded.
Performance of contract — where processing is necessary to deliver the services you've engaged us for.
Legal obligation — where we are required to retain or disclose data by law (e.g. tax, audit, or regulatory inquiry).

5. Who we share your data with

We share your personal data only with parties strictly necessary to deliver your services:

Your lender(s) — only after you give explicit, written consent and only the data necessary for your settlement negotiation.
Empanelled advocates — where your case requires legal representation and you have engaged the advocate.
Service providers — encrypted hosting, communication, and accounting service providers under strict data-protection contracts.
Regulators and authorities — when compelled by law, court order, or regulatory direction.

We do not sell your personal data. We do not share it with marketing partners or data brokers, ever.

6. How long we keep your data

We retain your personal data only for as long as needed to deliver your services and to meet legal retention obligations:

Active case data: retained for the duration of your engagement and 1 year after case closure.
Financial records: retained for 7 years from your case closure, as required under the Income Tax Act and other applicable laws.
Marketing and consent records: retained until you withdraw consent.

At the end of the applicable retention period, data is securely deleted or anonymized.

7. Your rights as a Data Principal (DPDP)

Under the Digital Personal Data Protection Act, 2023, you have the right to:

Access your personal data and a summary of how it's being processed.
Correct inaccurate or outdated information.
Erase your personal data (subject to legal retention requirements).
Nominate another person to exercise your rights in case of your death or incapacity.
Withdraw consent for any processing based on consent — and have us stop processing on that basis going forward.
Grievance redressal — escalate any complaint to our Grievance Officer.

To exercise any of these rights, write to our Data Protection Officer at dpo@settlekaro.in. We respond within 30 days.

8. Security

We protect your personal data using industry-standard technical and organizational safeguards: encryption in transit (TLS) and at rest, access controls, role-based authorisation, audit logging, secure backups, and regular security review. No security system is impenetrable, but we take care of your data as if it were our own.

9. Cookies & tracking

Our website uses essential cookies for session management and security, and analytics cookies (anonymized) to understand how visitors use our site. You can disable non-essential cookies via your browser settings. We don't run cross-site advertising trackers.

10. Children

Our services are intended for adults (18+). We do not knowingly collect personal data from children. If you believe a child has provided us data, please contact our DPO so we can delete it.

11. Grievance Officer

For any concern about your personal data, please reach out to:

Grievance Officer: [Name to be added]
Email: grievance@settlekaro.in
Address: H. No. 1/22, Ekta Nagar, Kalli Paschim, near SGPGI, Bijnaur, Lucknow, UP — 226002

If unresolved, you may escalate to the Data Protection Board of India under the DPDP Act, 2023.

12. Updates to this policy

We may revise this policy from time to time. Material changes will be communicated via your registered email and reflected on this page with a new "Last updated" date.