This privacy policy has been prepared by Summup Fintech Private Limited (“Suprb” “We”, “Our”, “Us”), a private limited company incorporated in India (CIN
U66190HR2023PTC113304), having its registered office at C3-124, Sobha City, Sector- 108,Gurgaon-122017. Suprb provides you loans through websites, mobile applications, digital lending applications (“DLAs”) and platforms which are either owned and operated by itself or belong to its Lending Service Providers (“LSPs”) or.
The purpose of this Privacy Policy is to give you, the user, (“You”, “Your” or “User”)
information on how Suprb collects, stores, uses, discloses, transfers and processes
your personal information (defined below) when: (a) You use our websites
https://suprb.in(“Websites”), (b) “Suprb” android and iOS application (“Mobile
Application”) and You are advised to read this Privacy Policy along with the terms of use and other information on the website/ Mobile applications. Users, please take note that any statements made on Suprb website/ Mobile applications shall not be construed as an offer or promises for grant of any financial services.
This Privacy Policy has been prepared in compliance with:
(i) Information Technology (Reasonable Security Practices and Procedures and
Sensitive Personal Data or Information) Rules, 2011;
(ii) Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
(iii) RBI (Digital Lending) Directions, 2025;
(iv) other applicable acts, regulations and rules which require the publishing of a privacy policy for handling of or dealing in personal information including sensitive personal data or information and all applicable laws, regulations, guidelines provided by applicable regulatory authorities including but not limited to the RBI.
This Privacy Policy is incorporated into and at all times is subject to and is to be read in conjunction with the Terms of Use of the Website/Mobile Application.
You hereby expressly consent to provide below mentioned information to us for the purpose of providing the Services to you. If you disagree with any of the terms
mentioned herein, please do not proceed with the usage of the Services.
For the users consenting to continue accessing the Website /Mobile Application and avail the Services, this Privacy Policy explains our policies and practices regarding the collection, use, and disclosure of your information.
3.1. Information we collect from you:
i. User Personal Information: The data points we collect from you for providing the
Services include, inter alia, Your full name, DOB, email id, PAN, Aadhar Number,
address, mobile number, postal code.
How we use this information: We use this data for identifying you, preventing
unauthorized access and providing the Services to uniquely identify, register and enable you to use the Website/Mobile Application/Platform.
ii. Economic Profile Information: To provide the Services, we may require certain
economic profile information such as age/DOB, occupation details, income details, bank details, salary statements, income tax returns.
How we use this information: We shall use this information to assess your
creditworthiness and eligibility for the products offered to You.
iii. SMS Information: Suprb collects, transmits, syncs and stores transactional SMS Data to enable us to provide you OTP auto-read feature and identify the various bank accounts that you may be holding, cash flow patterns, and description and amount of the transactions for the purpose of performing a credit risk assessment. This credit risk assessment enables us to perform a quicker loan disbursal. This data may be collected even when the app is closed or not in use.
The credit risk assessment enables us to perform a quicker loan disbursal. The data may be collected even when the app is closed or not in use.
Note: – We do not collect or store the personal SMS from your inbox.
How we use this information: We use this data to provide credit risk assessments which enable us to perform a quicker loan disbursal. The data may be collected even when the app is closed or not in use.
iv. Device Information: We additionally collect certain device information provided herein for our Services. Information the Website/Mobile Application collects, and its usage, depends on how you manage your privacy controls on your device.
• Device Information: When You access or install the Website/Mobile Application, we store the information we collect with unique identifiers tied to the device you are using. We collect information from the device when you download and install the application and explicitly seek permissions from you to get the required information from the device.
Additionally, we also collect your Log information/Meta Data (via the domain server through which the User accesses the App Search queries, IP addresses, crashes, date etc) for the purpose of improvising the Website/Mobile Application functionality. In addition to the above, we also track and collect the data related to the performance of the Website/Mobile Application and other diagnostic data for identifying and resolving any technical glitches that may be identified from such data and for improving the overall functionality of the Website/Mobile Application. How we use the information: We collect information about your device to provide
automatic updates and additional security so that your account is not used in other people’s devices. In addition, the information provides us valuable feedback on your identity as a device holder as well as your device behavior, thereby allowing us to improve our products interaction, quality of services and provide enhanced customized user experience to you. We further collect other identifiable information such as your transaction’s history on the Website/Mobile Application when you set up an account with us.
v. Location, Camera Access: We will collect your device location and request camera access for providing the Services in accordance with applicable laws.
How we use this information: We shall collect your device location information for
verifying your address, for the know your customer (KYC) and onboarding process for the Services.
We may request camera access to scan and capture the required KYC documents in accordance with applicable laws.
3.2. Information we collect about you from third parties:
For making the Services available to you, we may collect credit information in
accordance with applicable laws, from certain third parties such as credit bureaus or credit rating companies. In order to provide Loan products to you, we may receive certain information pertaining to document verification, repayment status etc from certain third parties including NSDL, payment gateway providers. We may further collect your bank account numbers or UPI payment information for collection and repayment of loans. How we use this information: We shall collect and use this information on a need basis for the provision of Services and for performing due diligence and verification of your application.
3.3. Information you give us about you
In due course of using our Services, you are required to submit data to enable our
Services. We use this data to create your profile and provide you with the best available
services. We shall collect the following information from you:
i. Data provided by you by filling in forms on the Website/Mobile Application.
ii. Data provided by corresponding with us (for example, by e-mail or chat).
iii. Data and information you provide when you register to use the Website, download or register on our mobile application, subscribe to any of our Services (such as applying for a loan), search for a Service, and when you report a problem with our Website, our Services, or any of our Sites.
iv. Data including Your name, address, gender, date of birth, e-mail address, phone number, username, password and other registration information,
v. PAN Card, Aadhaar Card, financial information such as employer name, monthly salary, bank account no., bank statements, credit information, copies of identification documents for the onboarding of your application to avail the services.
vi. Data generated by your usage of our Website/Mobile Application.
This data helps us create your profiles, complete mandatory KYC to offer you the
Services, unlock and approve loans and provide you with customized support in case of issues. Wherever possible, we indicate the mandatory and the optional fields. You always have the option to not provide any information by choosing not to use a particular service or feature on the Website.
We shall store your information at servers located within India.
We do not collect any biometric data belonging to you. In case, if any of our
representatives ask for the same from you, we request you to kindly refrain from doing the same and address this concern to our Grievance Officer (the details of the same have been provided below).
We will retain any data or information provided by you till the time we render our
services to you. Our data retention policy is restricted to the provision of our services towards you. You can request the deletion of your information from us at any stage. Our data retention and deletion policy is in consonance with the applicable laws and guidelines of the RBI.
The information collected from you will be used by Suprb for the following:
i. To provide Services you have requested;
ii. To establish identity, conduct KYC and verify the same in compliance with the
applicable laws;
iii. To resolve disputes and help investigate violations of our terms of use or to defend against legal claims;
iv. To disclose the information under special circumstances such as compliance with the applicable local law, court summons, court orders, requests/order from legal authorities or law enforcement agencies requiring such disclosure;
v. To assess your creditworthiness for providing the Services;
vi. To get in touch with you when necessary and contact You by email, SMS, letter,
telephone or in any other way about our products and Services;
vii. To identify, prevent, detect or tackle fraud, money laundering, terrorism and other crimes;
viii. To identify, develop or improve products, that may be of interest to you;
ix. To perform other administrative and operational purposes including the testing of systems;
x. To recover any payments you owe to us or our partners;
xi. To undertake filing of records with the relevant governmental authorities in
compliance with the applicable laws;
xii. Comply with our regulatory obligations;
xiii. To maintain records under applicable law or a may apply to pursuant to agreements executed by Suprb;
xiv. To carry out, monitor and analyse our business, carry out audits, market research, business, and statistical analysis and also direct our efforts for product improvement
xv. To design and offer customized products and services. We collect all data and other necessary information under this Privacy Policy or otherwise on a need basis required for the above intended purposes in compliance with applicable laws.
We will share the information only in such manner as described below:
i. We disclose and share your information with our partner banks or NBFCs and other third-party partners for facilitation of a loan or facility or line of credit or purchase of a product.
ii. To enable our third-party partners to contact you or to respond to your queries/
comments, for promotional offers or to resolve service issues to serve you better.
iii. We will disclose the data or information provided by a user with other technology partners to track how you interact with the Website/Mobile Application on our behalf.
iv. We and our affiliates may share your information with other business entity should.
We (or Our assets) merge with, or be acquired by that business entity, or re-
organization, amalgamation, restriction of business for continuity of business. Should such transaction occur than any business entity receiving any such information from us shall be bound by this Privacy Policy with respect to your information.
v. We may share your personal information upon request, order or under any duty or as a part of Our legal obligations and as per applicable laws with the governmental authorities, quasi-governmental authorities, judicial authorities and quasi-judicial authorities. By accepting this Privacy Policy, you hereby provide your consent to disclose your personal information for the above-mentioned purposes.
vi. Any disclosure to third parties is subject to the following:
(i) If we are under a duty to disclose or share your personal data to comply with any legal or regulatory obligation or request, we shall not seek your explicit consent however we shall reasonably endeavor to notify the same to you accordingly as the case may be;
(ii) We shall take your express consent in the event we share your personal data with third parties;
(iii) We shall share your information with third-party only on a need basis and only for the purpose stated hereunder, as per the applicable laws.
(iv) We shall additionally seek express consent through a separate consent for at
appropriate stages of data collection, if so, required under applicable laws.
(v) Usage of your information by such third parties is subject to their privacy policies.We share limited information with them, strictly to the extent required. We recommend you have a look at the privacy policies of such third parties.
7.1. The Website/Mobile Application intends to protect your information and to maintain its accuracy as confirmed by you. We implement reasonable physical, administrative and technical safeguards to help us protect your information from unauthorized access, use and disclosure. For example, we encrypt all information when we transmit over the internet/Mobile Application. We also require that our registered third-party service providers protect such information from unauthorized access, use and disclosure.
7.2. Our Website/Mobile Application has stringent security measures in place to protect the loss, misuse and alteration of information under control. We endeavor to safeguard and ensure the security of the information provided by you. We use Secure Socket Layers (SSL) based encryption, for the transmission of the information, which is currently the required level of encryption in India as per applicable law.
7.3. We blend security at multiple steps within our products with state-of-the-art
technology to ensure our systems maintain strong security measures and the overall data and privacy security design allow us to defend our systems ranging from low hanging issue up to sophisticated attacks.
7.4. We aim to protect from unauthorized access, alteration, disclosure or destruction of information we hold, including:
(i) We use encryption to keep your data private while in transit;
(ii) We offer security features like an OTP verification to help you protect your account;
(iii) We review our information collection, storage, and processing practices, including
physical security measures, to prevent unauthorized access to our systems;
(iv) We restrict access to personal information to our employees, contractors, and
agents who need that information to process it. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations;
(v) Compliance & Cooperation with Regulations and applicable laws;
(vi) We regularly review this Privacy Policy and make sure that we process your
information in ways that comply with it.
(vii) Data transfers;
(viii) We ensure that the Aadhaar number is not disclosed in any manner.
7.5. Data protection laws vary among countries, with some providing more protection than others. We also comply with certain legal frameworks relating to the transfer of data as mentioned and required under the Information Technology Act, 2000, rules and the amendments made thereunder.
7.6. When we receive formal written complaints, we respond by contacting the person who made the complaint. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of your data that we cannot resolve with you directly.
Our Privacy Policy might change from time to time, and Suprb will provide notice of it on your email address linked to your Account or can be seen by you in our Website/Mobile Application. We encourage you to periodically review the Website/Mobile Application for the latest information on our privacy practices. Users are bound by any changes to the Privacy Policy when they access, visit, or use the Website after such changes have been first posted.
The Website/Mobile Application uses temporary cookies to store certain data that is used by us for maintenance of the Website/Mobile Application and its features as well as research and development. We do not store personally identifiable information in the cookies.
10.1. The Website/Mobile Application has a link to registered third party SDKs,
Application Programming Interface (API) integrations, redirections which collect data on our behalf and data is stored to a secure server. We ensure that our third-party service provider takes extensive security measures to protect your personal information against loss, misuse or alteration of the data as required under the applicable laws.
10.2. Our third-party service provider employs separation of environments and
segregation of duties and have strict role-based access control on a documented, authorized, need-to-use basis. The stored data is protected and stored by application-level encryption. They enforce key management services to limit access to data.
10.3. Furthermore, our registered third-party service provider provides hosting security – they use industry leading anti-virus, anti-malware, intrusion prevention systems, intrusion detection systems, file integrity monitoring, and application control solutions.
10.4. We don’t allow unauthorized access to your non-public personal contacts or
financial transaction SMS data with any third party in relation to Lending Services other than our Lending Partners. However, for Non-Lending Services (Value Added Services),we may allow third parties to access your non-public personal contacts or financial transaction SMS subject to your explicit consent.
10.5. Our Website/Mobile Application links to other websites that may collect
information about you. We are not responsible for the privacy practices or the content of those linked websites. With this Policy we’re only addressing the disclosure and use of data collected by us. Their data collection practices, and their policies might be different from this Policy and We do not have control over any of their policies neither do we have any liability in this regard.
Modifying or rectifying your information: If any personal information provided by you is inaccurate, incomplete or outdated then you shall have the right to provide us with accurate, complete and up to date data and have us rectify such data at our endimmediately. We urge you to ensure that you always provide us with accurate and correct information/data to ensure your use of Our Services is uninterrupted. In case of modification of personal information, you will be required to furnish supporting documents relating to change in personal information for the purpose of verification by Suprb.
11.1. Your Privacy Controls: You have certain choices regarding the information we
collect and how it is used:
(i) Your device may have controls that determine what information we collect. For example, You can modify permissions on your Android/iOS device or Browser to remove any permissions that may have been given. However, Website/ Mobile
Application does not provide a guarantee of Services if any such controls are exercised.
(ii) Delete the App from your device
(iii) You can also request to remove content from our servers in accordance with Clause
11.2. Withdrawal/Denial of consent: You acknowledge that the Website/Mobile
Application has duly collected the information with your consent and you have the option to not provide such information or deny consent for use of specific information or revoke the consent already given. However, any withdrawal of such personal information will not be permitted in case any Service availed by you is active. Where a consent has been withdrawn the Website/ Mobile Application does not guarantee or be liable for providing such Service. You shall have the following rights pertaining to your information collected by Us.
(i) Deny Consent: You shall have the right to deny consent for use of specific data,
restrict disclosure to third parties, data retention, revoke consent already granted to collect personal data and if required, make the App delete/ forget the data. However, any such denial will not prejudice our right to retain any data in relation to the loans availed by you. Further, in case of a denial of consent, the Website/Mobile Application does not provide a guarantee or will not be liable towards the continued facilitation of the Services if any such controls are exercised.
(ii) Withdraw Consent: You may withdraw your consent to contact you, for the continued collection, use or disclosure of your information, at any time, or request for deletion of Your Login account by raising a request on the Website or by mailing Us at support@suprb.in. However, Website/Mobile Application does not provide a guarantee of Services if any such controls are exercised. Further, we shall have the right to continue processing your information till such credit facility has been repaid in full, along with any interest and dues payable and/or for such period as may be allowed under applicable law. However, we shall not retain your data and information if it is no longer required by us and there is no legal requirement to retain the same. Do note that multiple legal bases may exist in parallel, and We may still have to retain certain dataand information at any time to comply with applicable law. Also, the information may still be used for execution of any outstanding or termination activity of any Services.
11.3. Report an issue: You have a right to report a security incident to the grievance
redressal officer (details mentioned herein below). You are entitled to prevent
unauthorized such usage of your information by our personnel/agents by informing us,
within 10 days of being informed of the proposed use, that you do not wish to disclose
such information. You can also exercise the right at any time by contacting us at
support@suprb.in.
11.4. Notwithstanding anything to the contrary stated above, the following are specific scenarios listed below which may have consequences for your withdrawal of consent:
(i) Marketing and Communication: The consent for this information be withdrawn if you write an email to the email address provided under clause 12.
(ii) Information/data deletion may not be implemented for ongoing Services including loan and insurance policy.
12.1. For any information regarding the Privacy Policy, please contact support@suprb.in. In case you have grievance relating to collecting receiving, possessing, storing,
dealing or handling of Personal Information provided by You may contact our Grievance Officer on the following address or write an email:
Mr. Rajiv Jain
Email: support@suprb.in
Summup Fintech Private Limited
C-124, Sobha City, Sector-108
Gurgaon, India - 122017
Time: Mon – Fri (10:00 – 18:00)
