This policy explains what personal data CredNest Advisory (“CredNest”, “we”, “us”) collects when you contact us about a loan, why we collect it, who receives it, and what you can ask us to do with it. By messaging us and tapping Yes, let’s start on WhatsApp, you consent to the use described here.
01Who we are
CredNest Advisory helps individuals and businesses understand their borrowing options and, where you ask us to, introduces your enquiry to banks and non-banking financial companies (“lenders”). We do not lend money ourselves. There are no advance charges for discussing your requirement with us.
| Field | Detail |
|---|---|
| Data Fiduciary | CredNest Advisory |
| Registered address | 711/E, Crystal Plaza, Opposite Infinity Mall, Andheri West, Mumbai 400053 |
| contact@crednest.io |
02What we collect
| Category | Examples | Where it comes from |
|---|---|---|
| Contact data | WhatsApp phone number, WhatsApp profile name | WhatsApp, when you message us |
| Conversation content | The messages you send us and our replies | You |
| Loan requirement | Loan type and approximate amount, city, employment type, salary or turnover band, years in business or job, whether tax returns are filed, existing repayments, property type, location and approximate value | You, in answer to our questions |
| Call records | When our consultant called you, the outcome and their notes | Our consultant |
| Advertising attribution | Which advertisement you clicked before messaging, if any | Meta, attached to your first message |
| Consent records | What you agreed to, when, and the version of this policy in force at the time | Recorded by us |
| Technical records | Message identifiers, timestamps, delivery status |
Our WhatsApp assistant never asks for identity documents or credentials — PAN, Aadhaar, bank account or card numbers, passwords or one-time passcodes. Please do not send them in chat. Documents needed for a loan application are collected by a person through a proper channel. If you send one in chat anyway, we will delete it and tell you.
03Why we use it
We use your data on the basis of the consent you give, and we ask separately where the law requires it.
| Purpose | Consent |
|---|---|
| Understanding your loan requirement and answering your questions | Asked at the start |
| A consultant calling or messaging you about your requirement | Asked at the start |
| Sharing your details with a named lender so they can consider your enquiry | Asked separately, each time, before anything is sent |
| Meeting legal and record-keeping obligations | Required by law |
Agreeing to talk to us is not agreeing to be introduced to a lender. Those are two separate decisions and we ask you for each. We do not sell your data, and we do not pass it to any lender you have not agreed to.
04Who receives it
Lenders, only with your permission. Where you agree, we share your details with the specific lender we name to you at that time. That lender then handles your data under its own privacy policy and its own arrangement with you; we do not control what it does with your data.
Our service providers. These process data only on our instructions. Some are outside India, so your data may be transferred outside India.
| Provider | Role | Location |
|---|---|---|
| Meta Platforms (WhatsApp Business Platform) | Carries messages between you and us | Outside India |
| Google (Gemini API) | Generates some of the assistant's replies | Outside India |
| Supabase | Stores conversation and enquiry records | Mumbai, India |
| Hostinger | Hosts the servers that run our assistant and internal CRM | Mumbai, India |
| Upstash | Short-lived message queue | Outside India |
Your use of WhatsApp is also governed by Meta's own privacy terms, which we do not control.
05How we contact you
When you message us and give consent, you agree that we may reply on WhatsApp and that our consultant may call you on the number you messaged from, about the requirement you shared. This applies even if your number is registered on the National Do Not Call (DND) registry, because you asked us to help you.
We contact you between 8:00 and 19:00 in your local time. We do not send unrelated promotional messages. If you no longer want to hear from us, see how to opt out.
06Cookies and logs
Our WhatsApp assistant and this page do not use advertising or tracking cookies. Like most websites, our servers keep short technical logs of requests (IP address, browser type, time and page requested) to keep the service secure and working. We do not use these logs to build profiles of you.
Our main website, www.crednest.io, and our advertisements on Meta platforms may use cookies or similar technologies set by those platforms, under their own policies.
07How long we keep it
| Data | Retention |
|---|---|
| Enquiries that did not proceed | 24 months from the last message, then erased |
| Enquiries introduced to a lender | As long as required by applicable law, then erased |
| Consent records | As long as needed to show that consent was given |
When a retention period ends we erase the data and require our service providers to do the same. Data already with a lender is subject to that lender's retention rules, not ours.
08Your rights and how to opt out
Under the DPDP Act, 2023 you may:
- Opt out and withdraw consent at any time, as easily as you gave it: reply
STOPon WhatsApp, or email contact@crednest.io. We will stop using your messages and stop contacting you. Withdrawal does not undo what was already done, and does not by itself withdraw data already shared with a lender; tell us and we will pass your request on. - Access a summary of the personal data we hold about you and who we shared it with.
- Correct, complete, update or erase your personal data.
- Nominate another person to exercise your rights if you die or become incapacitated.
- Complain to our Grievance Officer first, and then to the Data Protection Board of India if we do not resolve it.
We respond to requests within 30 days.
09Grievance Officer
| Field | Detail |
|---|---|
| Name | Prasanna Rajendran |
| contact@crednest.io | |
| Postal address | 711/E, Crystal Plaza, Opposite Infinity Mall, Andheri West, Mumbai 400053 |
10Children
This service is for adults. We do not knowingly process the personal data of anyone under 18 without verifiable consent from a parent or lawful guardian, and we do not track children or direct advertising at them. If we learn we hold a child's data without that consent, we erase it.
11Security
Your data is stored in a managed database in Mumbai with row-level security enforced on every table that holds personal data, so a consultant can only see the enquiries assigned to them. Our internal CRM requires a signed-in account, access is checked again inside the database, and data is encrypted in transit. Opening a person's conversation in the CRM is recorded in an audit log. No safeguard is perfect, and we will tell you and the Data Protection Board if a breach affects your data, as the law requires.
12Automated replies
Replies on WhatsApp come from an automated assistant. It asks about your requirement and gives general information. It does not decide anything about you: it does not assess your eligibility, approve or decline anything, or name or recommend lenders. Every introduction to a lender is made by a person.
13Legal disclosures and business transfers
We may disclose personal data where the law requires it, for example to a court, regulator or government authority acting under a valid legal order. If CredNest's business is transferred, merged or sold, your data may move to the new owner, who must continue to protect it under this policy.
14Changes to this policy
Each version carries the version identifier shown at the top, and we record which version was in force when you consented. If we change this policy materially we will tell you and, where the law requires, ask for your consent again.
Effective 11 October 2026Back to top