Consent Revocation & Data Removal

As a data principal under the Digital Personal Data Protection Act, 2023 (DPDP Act) and a credit information subject under the Credit Information Companies (Regulation) Act, 2005 (CICRA), you have the following rights with respect to the data held by Capora Fintech Private Limited:

• Right to Withdraw Consent — You may withdraw the consent you granted for Capora to collect, store, or process your personal data at any time. Withdrawal does not affect the lawfulness of processing that occurred prior to withdrawal.
• Right to Erasure / Data Purge — You may request that Capora erase or purge your personal data and credit information from its systems, subject to legal and regulatory retention obligations.
• Right to Correction — You may request correction of inaccurate or incomplete personal data we hold about you.
• Right to Grievance — If your request is not processed within the stated timeline, you may escalate it through our Grievance Redressal mechanism or to the Data Protection Board of India.

When you sign up for Capora, you provide consent for us to:

• Fetch your credit report from a licensed credit bureau (e.g., CIBIL, Experian, CRIF) using your PAN and other identifiers
• Store and process your credit information to provide score monitoring, improvement recommendations, and alerts
• Share your contact and basic profile details with partner lenders or insurance providers only if you opt in to a referral
• Send you transactional and promotional communications via email and SMS

You may revoke any or all of these consents at any time by submitting the request form below or writing to us at privacy@capora.in.

A data purge request (also called a right-to-erasure or right-to-be-forgotten request) asks Capora to permanently delete your personal data and/or credit information from our active systems and, where technically feasible, from our backup systems.

You may request purge of:

• Personal Data — name, mobile number, email address, date of birth, PAN (masked), and account profile
• Credit Information Data — credit report data fetched from bureaus and stored by Capora for your score monitoring history
• Behavioural & Usage Data — in-app behaviour logs, improvement plan history, and alert history associated with your account
• Marketing Preferences & Consent Records — opt-in/opt-out records, communication history

You can submit a consent revocation or data purge request in either of the following ways:

Whether you use the form above or email us directly, please include the following to help us verify your identity and process your request promptly:

1. Your full name as registered with Capora
2. Your registered mobile number (used at sign-up)
3. Your registered email address
4. The type of request: consent revocation, data purge, or both
5. The specific data category if you want a partial revocation or targeted purge (e.g., credit data only, marketing only)
6. Any supporting information you wish us to consider (optional)

• Acknowledgement: Within 3 business days of receiving your request
• Identity Verification (if required): We will contact you within 5 business days
• Consent Revocation Processing: Within 7 business days of identity confirmation
• Data Purge Processing: Within 30 days of identity confirmation — active systems purged within 30 days; backup purge within 90 days, subject to technical feasibility and legal obligations
• Confirmation Notice: You will receive a written confirmation at your registered email once your request has been processed

Revoking consent will have the following effects depending on the scope of your request:

If you revoke consent for credit report fetching & processing:

• Capora will immediately stop fetching new credit reports for your account
• Score monitoring, improvement recommendations, and credit alerts will be suspended
• Your account will remain active but with restricted functionality
• Your active subscription will be paused — contact support to discuss refund eligibility

If you revoke consent for marketing communications:

• You will be removed from all promotional email, SMS, and in-app marketing campaigns
• Transactional communications (billing, security alerts, service notices) will continue as they are necessary for the service

If you revoke consent for referral data sharing:

• Your profile will no longer be shared with any partner lender or insurance provider
• Any pending referral already in progress will be notified that you have withdrawn consent

Revocation does not affect:

• Processing that lawfully occurred before your consent was withdrawn
• Data retention required by applicable law (e.g., financial records under the Income Tax Act, AML/KYC obligations)

Capora fetches your credit information from licensed Credit Information Companies (CICs) such as TransUnion CIBIL, Experian, CRIF High Mark, or Equifax, under the Credit Information Companies (Regulation) Act, 2005 (CICRA) and the RBI Master Direction on Credit Information.

Please note the following regarding credit bureau data:

• Capora can purge the copy of your credit report stored on our platform. We cannot alter or delete data held directly by the credit bureaus.
• To request corrections or deletion of data at the bureau level, you must contact the respective bureau directly (e.g., CIBIL Dispute Resolution at cibil.com, Experian at experian.in).
• Lenders who have reported information to a bureau are responsible for the accuracy of that data. Bureau data corrections must be initiated through the reporting lender or via the bureau's own dispute process.

In certain circumstances, we may be unable to fully process a consent revocation or data purge request. We will inform you in writing if this applies and explain the reason. Examples include:

• Legal Retention Obligations: Data that we are required to retain under law (e.g., KYC records under PMLA, 2002; transaction records under IT Act, 2000; financial records for tax purposes)
• Ongoing Legal Proceedings: Data that is subject to a court order, regulatory investigation, or dispute resolution process
• Fraud Prevention: Where erasure would impair our ability to investigate or report suspected fraud or financial crime
• Identity Cannot Be Verified: We cannot process a purge request if we are unable to verify that the requester is the registered account holder or authorised representative

In all other cases, we will honor your request fully and within the timelines specified in Section 6.

For all consent and data requests, contact our Data Protection Officer:

If your request is not resolved within 30 days, or if you are dissatisfied with the outcome, you may:

• Escalate to our Grievance Officer at grievance@capora.in — see our Grievance Redressal page for the full escalation matrix
• File a complaint with the Data Protection Board of India (once constituted and operational under the DPDP Act, 2023)