Back to Home

Privacy Policy

How OpenCredit handles, protects, and respects your data. We are committed to transparency in all aspects of our operations, including data privacy.

Last updated: November 2025Edit on GitHub

1. Introduction

OpenCredit ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our open-source credit assessment platform and related services.

2. Information We Collect

2.1 Information You Provide

  • Account registration information (name, email, organization)
  • UPI transaction data (with explicit consent through Account Aggregator framework)
  • Business information for merchants seeking credit scores
  • Communications with our team

2.2 Automatically Collected Information

  • Usage data and analytics
  • Device and browser information
  • IP addresses and location data

3. How We Use Your Information

We use collected information to:

  • Calculate credit scores using our open-source algorithms
  • Improve and optimize our platform
  • Communicate updates and changes
  • Comply with legal obligations
  • Conduct research to improve financial inclusion (with anonymized data)

4. Data Protection

We implement industry-standard security measures including:

  • AES-256 encryption for data at rest
  • TLS 1.3 for data in transit
  • Regular security audits and penetration testing
  • Access controls and authentication mechanisms

5. DPDP Act Compliance

OpenCredit is fully compliant with the Digital Personal Data Protection Act, 2023 (DPDP Act). We ensure:

  • Data is processed only with explicit consent
  • Purpose limitation for all data processing
  • Data localization within India
  • Right to access, correction, and erasure
  • Grievance redressal mechanisms

6. Data Sharing

We do not sell your personal data. We may share information with:

  • Lenders (only with your explicit consent for loan applications)
  • Regulatory authorities (as required by law)
  • Service providers (under strict data processing agreements)

7. Your Rights

You have the right to:

  • Access your personal data
  • Request correction of inaccurate data
  • Request deletion of your data
  • Withdraw consent at any time
  • File complaints with the Data Protection Board of India

8. Open Source Commitment

As an open-source initiative, our data processing algorithms and logic are publicly available for review. This transparency ensures accountability in how we handle your data.

9. Contact Us

For privacy-related inquiries or to exercise your rights, contact our Data Protection Officer:

  • Email: privacy@opencredit.org.in
  • Address: OpenCredit Initiative, India

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Significant changes will be communicated via email to registered users.

Last updated: November 2025