This Privacy Policy explains how we handle the personal information you share when you visit this website or enquire about a home or property loan through FinFlot. We keep it plain, and we keep it honest.
FinFlot is not a bank or NBFC and does not lend. We help you find a suitable lender, prepare a complete application and coordinate your case. Because of that, some of your information is shared with the regulated bank or NBFC you choose, so they can consider your application.
01 Who we are
FinFlot is a loan-facilitation brand operated by Ayantra Technologies Private Limited ("FinFlot", "we", "us" or "our"). We act as a facilitator that helps you connect with regulated banks and Non-Banking Financial Companies (NBFCs) and coordinates your loan application with them. We are the entity responsible for the personal information handled through this website.
02 Scope of this policy
This policy covers personal information we collect through this website and when you contact us about a loan — by the enquiry form, email, WhatsApp or phone. It does not cover the websites, apps or practices of the banks, NBFCs or other third parties we may connect you with; their own privacy policies apply to information they hold.
It also covers the two FinFlot mobile apps — FinFlot and FinFlot Legal — which Sections 8 to 11 describe in full.
03 Information we collect
Information you give us
- Enquiry details — your name, phone number, city, the loan you're interested in, anything you write in the message field, and your email address if you give one. Where the form sends your enquiry to our desk, we also record the kind of partner you told us you are, the page you enquired from, and the exact consent wording you agreed to, with the time you agreed to it.
- Communications — the content of messages you send us by email, WhatsApp or phone, and our correspondence with you.
- Application information — if you choose to proceed with a loan application, the additional details and documents a lender needs to assess it (for example identity and address proof, income and employment details, and property or co-applicant information). We ask only for what your specific case requires.
Information we collect automatically
- Technical and usage data — basic information such as your device and browser type, approximate location inferred from your IP address, and how you use the site, collected through standard web technologies and cookies.
When you submit the enquiry form, it either sends your details to FinFlot's desk and stores them there so we can respond, or prepares a message in your own device's email application for you to send. The note beneath the form says which of the two applies. Once we have your details that way, or you contact us by WhatsApp or phone, we process what you have shared in order to respond.
04 How we use your information
We use your information to:
- respond to your enquiry and understand what you need;
- help you identify a suitable lender and prepare a complete loan application;
- coordinate your application with the bank or NBFC you choose, and follow it through to a decision and disbursal;
- keep you informed about the progress of your case and any queries raised by the lender;
- operate, maintain and improve this website and our service;
- meet legal, regulatory and record-keeping obligations, and prevent fraud or misuse.
We do not sell your personal information.
05 Consent and your choices
Sharing your information with us is voluntary. When you submit an enquiry or ask us to help with an application, you consent to us using and sharing your information as described in this policy — including contacting you about your enquiry by phone, SMS, WhatsApp or email, and sharing what is necessary with a lender you choose.
You can withdraw your consent or ask us to stop contacting you at any time by writing to connect@finflot.com. Withdrawing consent may mean we can no longer help progress your enquiry or application. Withdrawal does not affect anything already done, or information a lender already holds.
07 Information shared with lenders
Once your information is shared with a bank or NBFC for your application, that lender processes it as an independent organisation under its own privacy policy and the applicable regulations. Decisions on approval, interest rates, sanction and disbursal rest solely with the lender. We encourage you to read the privacy policy of any lender you choose to proceed with.
08 The FinFlot mobile apps
FinFlot publishes two mobile apps:
- FinFlot (
com.finflot.crm) — used by staff and partners of a loan distribution firm to work their leads, log visits, mark attendance and collect documents. - FinFlot Legal (
io.finflot.legal) — used by staff of a legal or valuation firm to carry out property title and technical diligence.
Both are business tools used by the staff of a subscribing firm. They are not consumer apps. You cannot create an account inside either app — accounts are issued to you by the firm you work for, or by FinFlot on that firm's instruction.
This matters for who is responsible for what:
- Your employer or the firm that issued your login is the data controller for the customer, borrower and property information handled in the app. They decide what is collected and why.
- Ayantra Technologies Private Limited operates the FinFlot platform as a processor on that firm's behalf, and is the controller only of your own account and device information.
If you are a borrower, a property owner, or another person whose information appears in FinFlot, your relationship is with the firm that entered it. Contact them first; Section 18 explains how to reach us if you cannot.
09 What the apps collect
Both apps
| What | Why | Leaves the device? |
|---|---|---|
| Your name, email address, role and firm code | To sign you in and decide what you are allowed to see | Yes — to the FinFlot server |
| A device identifier the app generates on first launch | Sent with each request so a session can be tied to a device and a lost or stolen device can be cut off | Yes |
| App version and platform (Android or iOS) | Support and compatibility | Yes |
| Fingerprint or face unlock | To lock the app after you have signed in | No. The check is performed by your phone's own operating system, which tells the app only whether it succeeded. The app never sees, receives or stores biometric data. |
FinFlot (the loan distribution app) only
| What | Why | Leaves the device? |
|---|---|---|
| Precise location | Recorded only when you tap check-in or check-out on the attendance screen, so your employer has a record of where the working day started and ended. The app does not track you in the background and does not record your position at any other moment. | Yes — stored with the attendance record |
| Camera and photographs | Pages you photograph are combined into a single PDF on the phone and attached to the loan file | Yes — the finished PDF is uploaded |
| Notification token | To deliver alerts about your leads and leave requests | Yes |
| Customer information you enter | Names, mobile numbers, email addresses, city and state, loan product, amount and your notes — the substance of the work | Yes |
FinFlot Legal only
| What | Why | Leaves the device? |
|---|---|---|
| Camera and photographs | Scanning title deeds and property documents. Scanning uses Google Play Services on your own device to detect page edges. | Yes — the finished PDF is uploaded |
| Precise location | Captured when you scan and printed onto each page of the PDF, so a site visit carries a record of where it happened. If you decline the permission, scanning still works and the pages simply carry no position. | Yes — as part of the uploaded document |
| Case information you enter | Client, buyer and seller names, property address, ownership and transaction details | Yes |
What the apps do not collect
Neither app contains any analytics, advertising or tracking software. Neither reads your contacts, your calendar, your messages, your call history or your photo library. Neither collects an advertising identifier. Neither profiles you or makes automated decisions about you.
10 App permissions, and what happens if you refuse
Every permission is asked for at the moment it is first needed, and you can refuse any of them.
| Permission | Used for | If you refuse |
|---|---|---|
| Camera | Photographing documents | You cannot capture documents in the app; everything else works |
| Location | Attendance check-in (FinFlot) / stamping a scan (FinFlot Legal) | FinFlot: you cannot mark attendance from the app. FinFlot Legal: scanning works, pages carry no position |
| Notifications | Alerts about your work | You get no alerts; nothing else changes |
| Biometrics | Locking the app | The app is not locked behind a fingerprint; your password still protects it |
You can withdraw any of these at any time in your phone's settings.
12 How we protect information
We maintain reasonable security practices designed to protect your information, including access controls that limit who can see your file, workspaces kept separate from other customers' data, and traceability of actions taken on your case. No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately if an issue arises.
For the mobile apps: data is held on the platform's servers and, for a firm on the standard arrangement, in a database dedicated to that firm. Every connection between the apps and the servers uses HTTPS. Your sign-in session is stored on your phone in the app's own private storage, which other apps cannot read. If you sign out, it is removed. We tell affected firms promptly if we become aware of a breach that affects them.
13 How long we keep it
We keep your information for as long as needed to respond to your enquiry, progress your application, and meet our legal, regulatory and record-keeping obligations. When it is no longer required, we take steps to delete it or keep it in a form that no longer identifies you.
For the mobile apps: account and device records are kept while your login is active and for 8 years after that, to meet the record-keeping obligations that apply to books of account under the Companies Act, 2013. Loan, disbursement and commission records are financial records and may be audited long after an account is closed. Business records — leads, loan files, documents, legal cases — belong to the firm and are kept for as long as that firm requires, including any period their own regulator obliges them to keep them for. When a firm leaves the platform, its data is dealt with as set out in its contract.
14 Your rights
Subject to applicable law, including India's Digital Personal Data Protection Act, 2023, you may ask us to:
- access a summary of the personal information we hold about you and how it is used;
- correct or update information that is inaccurate or incomplete;
- erase information that is no longer required, where the law permits;
- withdraw consent you have given, as described above; and
- nominate another person to exercise your rights in the event of death or incapacity.
To exercise any of these, contact us using the details in Section 14. We may need to verify your identity before acting on a request.
For the mobile apps, you may ask us to show you the personal information we hold about your account, correct it, or delete it. The data deletion page at finflot.com/data-deletion explains how, or you can write to connect@finflot.com. We answer within 30 days.
For customer, borrower and property information in the app, the firm that entered it decides — send that request to them, and they can act on it inside FinFlot or ask us to.
Because accounts are issued by firms rather than created by individuals, there is no delete-my-account button inside the apps. To have your account and its associated personal data deleted, email connect@finflot.com from the address on the account, or ask your firm's administrator. We action verified requests within 30 days and confirm in writing when it is done.
16 Children
Our service is intended for adults who can enter into a loan. We do not knowingly collect personal information from children. If you believe a child has shared information with us, please contact us and we will take appropriate steps.
17 Changes to this policy
We may update this policy from time to time to reflect changes in our service or the law. When we do, we will revise the "Last updated" date at the top of this page. Significant changes will be highlighted where appropriate.
18 Contact and grievances
If you have a question about this policy, want to exercise your rights, or wish to raise a concern about how your information has been handled, please contact our Grievance Officer:
We aim to acknowledge grievances promptly and to resolve them within the timelines required under applicable law. If you are not satisfied with our response, you may escalate to the Data Protection Board of India once it is operational under the Digital Personal Data Protection Act, 2023.
If your concern relates to a specific loan, or to a lender's handling of your information, it may also need to be raised with the concerned bank or NBFC under its own grievance-redressal process. This policy should be read together with our Terms & Conditions.