Privacy Policy

This Privacy Policy explains how Value Garage Private Limited (“Kashew”, “we”, “us”) collects, uses, shares, and protects your information when you use the Kashew mobile application or website (the “Service”). Kashew is a Direct Selling Agent (DSA) — we do not lend, underwrite, or disburse loans. Lending and document handling is performed solely by our partner lenders (e.g. Ruloans, Andromeda and the underlying banks / NBFCs they originate to). By using the Service you consent to the practices described here.

1. Information we collect

Information you give us directly

• Mobile number (used for OTP-based authentication)
• Full name, email, city, employment type and monthly income range (entered during onboarding)
• PAN number (for soft credit checks and lender verification)
• Loan-application details — for example, requested amount, tenure, property details, business details, education details, vehicle details
• Any messages or feedback you send to support

Information we collect on your behalf

• Credit bureau report — fetched from Experian (via Gridlines) using your name, PAN, mobile number and a placeholder date of birth. We store the parsed summary (number of accounts, credit score, max DPD) and the raw response for audit.
• Name verification — Gridlines PAN Lookup confirms your full name against your PAN.
• Bank account (masked) — captured by an admin only after a loan is disbursed; used to credit your monthly cashback. We store only the last four digits in the app.

Information collected automatically

• Device, OS and app-version metadata reported via standard mobile telemetry
• Page-view and click events on the website and app for analytics (PostHog, self-hosted)
• Crash and error logs to keep the Service stable

2. How we use your information

• To authenticate you using OTP on your registered mobile number
• To compute your dynamic EMI cashback rate (recalculated every month from your latest Experian score)
• To match you with the right partner lender and assign a dedicated expert
• To process and track your loan application end-to-end through our partner DSAs
• To upload monthly cashback rows and to disburse your claimed cashback via Razorpay Payouts
• To send transactional SMS via Fast2SMS — application status updates, claim reminders, OTPs
• To comply with applicable laws, prevent fraud, and resolve disputes

3. Sharing your information

We share the minimum information required to deliver the Service:

• Partner lenders & DSAs (Ruloans, Andromeda, and the banks / NBFCs they place leads with) — we share name, PAN, mobile, income range, requested amount, and category-specific form data so they can process your application.
• Service providers— Supabase (cloud database and auth, ap-south-1, Mumbai), Gridlines (PAN lookup & bureau fetch), Fast2SMS (SMS), Razorpay (cashback payouts), PostHog (product analytics).
• Legal & safety — when required by law, court order, regulatory request, or to investigate suspected fraud.

We do not sell your personal information to third parties for marketing.

4. Data retention

We retain your personal and financial data for as long as your account is active and for an additional period required to comply with applicable laws (typically up to 8 years for financial records as required under Indian tax and KYC regulations). You can request deletion of your account at any time — see Section 7.

5. Security

• All traffic is encrypted in transit using TLS 1.2+.
• Passwords are never stored — authentication is OTP-based and managed by Supabase Auth.
• Bureau payloads, PAN, and bank details are stored in an access-restricted table reachable only by service-role keys.
• We follow the principle of least privilege for our admin team and enforce row-level security across all user data.

6. Cookies & tracking

Our website uses a small number of cookies for session continuity and anonymous analytics. The mobile app does not use third-party tracking SDKs. We do not run advertising trackers.

7. Your rights

• Access — request a copy of the personal data we hold about you.
• Correction — fix inaccuracies in your profile directly in the app, or write to us.
• Deletion — ask us to delete your account; we will comply subject to lawful retention obligations.
• Opt-out — withdraw your consent for non-essential communications. OTPs and lender-facing messages cannot be opted out of while you have an active loan in process.

To exercise any right, write to support@kashewapp.in. We respond within 30 days.

8. Grievance officer

Pursuant to the Information Technology Act, 2000 and the Consumer Protection Act, 2019:
Grievance Officer: Nevaid Aggarwal, Value Garage Private Limited
Email: nevaid@maximoney.in

9. Changes

We may update this Policy. Material changes will be notified in-app and on this page with an updated date.

10. Contact

Value Garage Private Limited, India.
Email: support@kashewapp.in