Privacy Policy
Institutional Mandate Framework
1. Purpose of this policy
This Privacy Policy explains how Debtsify Capital Private Limited ("Debtsify", "we", "us", "our") collects, uses, shares, stores, and protects personal data when you visit debtsify.com, submit an inquiry, or engage with us.
It is issued in accordance with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, and with the Information Technology Act, 2000 and rules made under it.
Under the DPDP Act, Debtsify acts as a Data Fiduciary in respect of personal data you provide, and you are a Data Principal.
Please read this alongside our Terms of Service and Cookie Policy.
2. Who we are
| Category | Examples | Where it comes from |
|---|---|---|
| Identity data | Name, designation, role in the company | Inquiry forms, correspondence, meetings |
| Contact data | Business email, telephone number, business address | Inquiry forms, correspondence |
| Corporate documents containing personal data | Director details, KYC identifiers, signatory information, personal details appearing in bank statements or corporate records | Documents you submit |
| Engagement data | Notes of calls and meetings, capital requirement, timeline | Our records of interactions with you |
| Correspondence | Emails, messages, and other communications with us | Direct communication |
Data collected automatically
| Category | Examples |
|---|---|
| Technical data | IP address, browser type and version, device type, operating system |
| Usage data | Pages viewed, time on page, referring source, links clicked |
| Cookie data | See our Cookie Policy |
Data from third parties
Where you are introduced to us by a referral partner, we may receive your name, company, and contact details from that partner. We may also verify information against publicly available registries such as the Ministry of Corporate Affairs database.
5. Why we use your personal data
We use personal data only for specified purposes. We do not use it for any purpose incompatible with those set out below.
| Purpose | What this involves |
|---|---|
| Responding to your inquiry | Assessing whether your requirement fits our mandate and contacting you |
| Arranging capital | Preparing, structuring, and presenting your requirement to prospective capital providers |
| Diligence and verification | Verifying identity, authority, and the accuracy of information submitted |
| Fraud prevention and security | Detecting and preventing fraud, misuse, and unauthorised access |
| Legal and regulatory compliance | Meeting obligations under applicable law, and responding to lawful requests from authorities |
| Service communications | Updates about your active engagement |
| Marketing communications | Sending insights, market commentary, and updates, where you have consented |
| Website improvement | Understanding how the website is used and improving it |
We do not use personal data for automated decision-making that produces legal effects for you without human involvement.
6. Consent
We process personal data on the basis of your consent, given when you submit information to us, or on another lawful basis available under the DPDP Act, including for certain legitimate uses recognised under that Act.
Consent is sought through a clear notice at the point of collection. That notice describes the personal data collected, the purposes, how you may withdraw consent, and how you may complain to the Data Protection Board of India.
You may withdraw consent at any time by writing to hello@debtsify.com. Withdrawal is as easy as giving consent. Withdrawal does not affect the lawfulness of processing carried out before withdrawal, and we may continue to retain data where required by law. Withdrawing consent will ordinarily mean we cannot continue to progress your inquiry.
7. Who we share your personal data with
Prospective capital providers. To arrange capital, we share your information with one or more prospective capital providers. These may include RBI-registered Non-Banking Financial Companies, Alternative Investment Funds, family offices, and other private capital providers. Each provider is an independent controller of the data it receives and handles it under its own privacy policy.
Service providers and processors. Cloud hosting, email, document storage, CRM, and analytics providers acting on our instructions under contract.
Professional advisers. Lawyers, auditors, accountants, and consultants, bound by professional confidentiality.
Regulators and authorities. Where required by law, court order, or a lawful request from a government or regulatory body.
Corporate transactions. In connection with a merger, acquisition, or reorganisation of our business, subject to appropriate safeguards.
We do not sell personal data. We do not share personal data with third-party marketers or advertisers.
We primarily store and process personal data on servers located in India.
Where a service provider processes data outside India, we transfer it only to countries not restricted by the Central Government under the DPDP Act, and under contractual safeguards.
9. How long we keep personal data
We retain personal data only for as long as necessary for the purposes described in this policy, or for as long as required under applicable law.
Where personal data is retained on the basis of your consent and that consent is withdrawn, or the purpose is no longer being served, we will erase it in accordance with the DPDP Rules, 2025.
Where erasure applies, we will give you notice at least 48 hours before the end of the applicable retention period, so that you have an opportunity to ask us to retain the data.
10. How we protect personal data
We maintain reasonable security safeguards appropriate to the sensitivity of the data we handle, including:
- Encryption of data in transit and at rest.
- Access controls limiting access to personnel who need it for a defined purpose.
- Logging and monitoring of access to systems holding personal data.
- Contractual security obligations on service providers.
- Periodic review of our security measures.
- Backups and measures to enable restoration in the event of a data breach.
No system is completely secure. We cannot guarantee absolute security, but we take our obligations seriously and act promptly if something goes wrong.
11. Personal data breaches
If a personal data breach occurs, we will notify the Data Protection Board of India without delay on becoming aware of it, and will notify each affected Data Principal within the timeframe required under the DPDP Rules, 2025, describing the nature and extent of the breach, its likely consequences, the measures taken, and how you can protect your interests.
12. Your rights as a Data Principal
Under the DPDP Act, 2023 you have the following rights:
| Right | What it means |
|---|---|
| Right to access information | Obtain a summary of the personal data we process about you, the processing activities, and the identities of other Data Fiduciaries with whom it has been shared |
| Right to correction and erasure | Have inaccurate or misleading data corrected, incomplete data completed, data updated, and data erased where it is no longer required |
| Right to grievance redressal | Have your complaint addressed by us through the mechanism in Section 13 |
| Right to nominate | Nominate another individual to exercise your rights in the event of your death or incapacity |
| Right to withdraw consent | Withdraw consent at any time, as described in Section 6 |
How to exercise your rights. Write to hello@debtsify.com with your name, the company you are associated with, and a description of your request. We may ask you to verify your identity before acting. We will respond within 14 days.
There is no fee for exercising your rights.
Escalation. If you are not satisfied with our response, you may complain to the Data Protection Board of India in accordance with the DPDP Act, 2023 and the rules made under it.
14. Children's data
Our services are directed at companies and the individuals who represent them. They are not intended for children.
We do not knowingly collect personal data of any individual below the age of 18. If we become aware that we hold such data, we will erase it. We do not undertake tracking, behavioural monitoring, or targeted advertising directed at children.
15. Cookies and similar technologies
We use cookies and similar technologies on this website. Full detail, including categories, purposes, and how to manage your preferences, is set out in our Cookie Policy.
16. Third-party websites
This website may link to third-party sites. We are not responsible for their privacy practices. Please read their policies before providing personal data to them.
17. Changes to this policy
We may update this policy from time to time. The current version is always published on this page with the "Last updated" date at the top.
Where changes are material, we will take reasonable steps to notify you, and where required will seek fresh consent.
18. Contact
Debtsify Capital Private Limited
+91 88600 00026
Official Legal Document | Debtsify Capital Private Limited | IC-2024-MND