Privacy Policy

Introduction

1. This Privacy Policy (“Policy”) governs ScoremeAA Account Aggregator Services Private Limited ( “our”, “we”, or “us”) practices in relation to the storage, use, processing, and disclosure of Personal Data (defined below) that the Customer (“you”, “your”) has chosen to share with us when you access our website and mobile application (collectively, the “Platform”), or personal data that we may have access to in relation to his/her use of Platform or access to our account aggregation services (collectively, “Services”).

2. By accessing the Platform or otherwise using the Services, you agree to be bound by this Policy and consent to collection, storage, use, disclosure or otherwise processing of the Data that you provide (including sensitive personal information) in accordance with this Policy. We ask for only the least amount of Personal Data necessary and essential for the purposes of provision of Services.

3. This Policy shall be read together with Terms and Conditions available (“Terms”) on our Platform.

Definitions

• “Information” includes data, text, images, codes, computer programmes, software and databases.

• “Personal Data” or “Data” means personal data of the Customer including but not limited to the name, address, e-mail address, telephone number, proof of identity, financial and billing Information and demographic Information that is obtained by us from you, or which may otherwise be made available to us for the provision of the Services pursuant to these Terms.

Data we will collect about you

• When you use our Platform, we collect and store your Personal Data which is provided by you from time to time. You always have the option to not provide Information by choosing not to use a particular service or product provided by us.

• We may collect, store, use and transfer the following kinds of Personal Data about you to provide you with, or in connection with the Services, including:

  1. Data pertaining to your identity and related data, such as your first and last name, gender, title, identity document and proof of addresses, consent records, of or through our Services, feedback, survey responses, etc.

  2. Contact data, including email addresses, phone numbers, addresses, business addresses, etc.

  3. Data about your device, including but not limited to:

     • Location – location data recorded on your device; and

     • Device Information – including hardware model, operating system and version, IMEI and serial numbers, user profile Information, IP addresses,

     • browser types and versions, time zone settings, and Wi-Fi and mobile networks.

  4. Usage data, including Information about how you use our Services;

  5. We may also collect, use, and share aggregated data such as statistical data for any required purpose like provide, maintain and improve ScoremeAA platform and services and to ensure adherence to legal and regulatory requirements for prevention and detection of frauds and crimes.

Cookies:

• We may use "cookies" as required on the Platform. "Cookies" is a term generally used for small text files a web site uses to recognize repeat users, facilitate the user's ongoing access to and use of the site, allow a site to track usage behaviour and compile aggregate data that will allow content improvements and targeted advertising, preferences etc

• Cookies themselves do not personally identify you, but it identifies your device. Generally, cookies work by assigning a unique number to the device that has no meaning outside the assigning site. Cookies also exist within mobile applications when a browser is needed to view certain content or display an ad within the application.

• You are being made aware that ScoremeAA cannot control the use of cookies. If you do not want Information collected through the use of cookies, you may change the settings in your browsers that allows to deny or accept the cookie feature as per your discretion.

Security of data

• We will take required technical and organizational precautions to prevent the loss, misuse or manipulation of the Information shared. Once your Information is in our possession, we adhere to our security guidelines to protect it against unauthorized access in compliance with Applicable Laws.

• We will store all the Personal Data so collected, on our secure password protected and encrypted servers.

• We have adopted reasonable security practices and procedures, to include technical, operational, managerial and physical security controls in order to protect all Information from unauthorized access, or disclosure while it is under our control.

• Our security practices and procedures limit access to Information on a “need to know” only basis. Further, our employees are bound by our Code of Conduct which obligates them to protect the confidentiality of Personal Data.

• While disposing of the Information, we use reasonable procedures to erase it or render it unreadable.

Consent

• All collected Personal Data is subject to your consent to the collection, use, storage, disclosure and otherwise processing of your Information (including sensitive personal information) in accordance with this Policy.

• You may also withdraw your consent at any time. However, in the event you withdraw consent given to us under this Policy, such withdrawal may hamper your access to the Platform or restrict provision of our services to you for which we consider that Information to be necessary.

Retention of data

• The Company shall keep sensitive personal data or information for the period as long as required under any applicable laws.

• You understand and agree that in instances where we are required to disclose the data related to you in compliance with applicable laws, we shall have the right to share such data with relevant agencies or bodies.

Disclosures in relation to Account Aggregation:

• Our Services enable you to provide your consent for the disclosure and transfer of your Financial Information to Financial Information Users. Please note that we will not in any circumstances store any Financial Information pertaining to you, we will retrieve, share, or transfer your Financial Information only with your explicit consent obtained in accordance with the AA Master Directions in a standardized consent artefact.

• At the time of obtaining your consent, we shall inform you of all necessary attributes to be contained in the consent artefact as mentioned below and your right to file complaints with relevant authorities in case of non-redressal of grievances. The consent artefact will contain the following details:

  1. Your identity and contact Information;

  2. The nature of the Financial Information requested;

  3. Purpose of collecting such Financial Information;

  4. The identity of the recipients of the Financial Information, if any;

  5. URL or other address to which notification needs to be sent every time the consent artefact is used to access Information;

  6. Consent creation date, expiry date, identity, and signature/ digital signature of the Company; and

  7. Any other attribute as may be prescribed by the Reserve Bank of India.

• We will also provide you with a functionality to revoke consent to obtain Information that is rendered accessible by a consent artefact, including the ability to revoke consent to obtain parts of such Information.

• You may, at any point in time, access a record of the consents provided by you and the Financial Information Users with whom the Information has been shared on the Platform.

Changes to privacy policy

Please check our Privacy Policy periodically for changes. We may update this Privacy Policy to reflect changes to our Information processing practices.

Privacy Officer

In case you are not satisfied with the resolution provided , you may escalate   your complaint to the:

Grievance Redressal Officer:

Mr.Praveen Khanna

Email: escalations@scoremeaa.com

Address:  903, Tower C, Unitech Business Zone, Nirvana Country, Sector 50, Gurgaon, Haryana-122018

Working hours: Mon-Fri 10 am to 7 pm