Privacy Policy

Effective 18 October 2026

This policy explains how NexQred Fintech Private Limited (“NexQred”, “we”, “us”) collects, uses and protects personal data when you visit qredpilot.com, contact us, or when our QredPilot AI voice agents speak with people on behalf of our clients. We follow the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, along with applicable RBI guidelines.

1. Who we are

QredPilot is an AI voice calling platform operated by NexQred Fintech Private Limited, a company incorporated in India. For data you share with us directly through this website, we are the data fiduciary. For calls our platform makes for lenders and other financial institutions, our client is the data fiduciary and we act as their data processor (see section 4).

2. What we collect

When you contact us or book a demo

• Your name, work email, company and, if you choose, phone number
• Details you give about your organisation, call volumes, use cases and any message you write

When you browse the website

• Basic technical data such as IP address, browser type and pages requested, recorded by our hosting provider for security and reliability

We do not ask website visitors for financial account numbers, Aadhaar, PAN or passwords.

3. How we use it

• To reply to your enquiry, arrange a demo and discuss our services
• To operate, secure and improve the website
• To meet legal, regulatory and audit obligations

We process enquiry data on the basis of your consent, which you give by submitting the form. You can withdraw it at any time by writing to us. We do not sell personal data, and we do not use enquiry data for unrelated marketing without asking you first.

4. Calls made on behalf of our clients

When a QredPilot agent calls a borrower or customer, it does so on the instructions of our client, such as a bank, NBFC or fintech lender. During these calls we may process the person’s name, phone number, spoken responses, call recordings, transcripts and details relevant to their application or account.

• We process this data only to deliver the service our client has asked for, under a written agreement with them
• Calls are announced as recorded, and consent is captured where the law or our client’s process requires it
• We do not use our clients’ call data to train models for other customers

If you received a call from a QredPilot agent and want to exercise your data rights, please contact the institution that called you. We will support them in responding to you, and you can also write to us directly.

5. Who we share it with

We share personal data only with service providers who help us run QredPilot, under contracts that require them to protect it, including:

• Cloud hosting and infrastructure providers (for example, Vercel)
• Email delivery providers, used to route website enquiries to our team (for example, Resend)
• Telephony and speech-processing providers that carry and process calls

We may also disclose data where required by law, a court order or a regulator, or to protect the rights and safety of our users and the public.

6. Storage and security

We protect data with encryption in transit and at rest, access controls and audit logging. Client call data is stored in Indian data centres in line with RBI data-localisation requirements. Some website service providers may process enquiry data outside India; where this happens, we rely on providers with appropriate safeguards and transfer data only as permitted under Indian law.

7. How long we keep data

We keep enquiry data for as long as needed to respond and maintain our business relationship, and then delete it, normally within 24 months of our last contact unless the law requires longer. Client call data is retained and deleted according to our agreement with the client and their regulatory obligations.

8. Your rights

Under the Digital Personal Data Protection Act, 2023 you can:

• Ask for a summary of the personal data we hold about you and how we use it
• Ask us to correct, complete, update or erase your data
• Withdraw consent you have given
• Nominate another person to exercise your rights in case of death or incapacity
• Raise a grievance with us, and if unresolved, with the Data Protection Board of India

To make a request, write to us at the address below. We will respond within the time required by law.

9. Cookies

This website does not use advertising or tracking cookies. Our hosting provider may use strictly necessary technical mechanisms to deliver pages securely.

10. Changes to this policy

We may update this policy from time to time. The latest version will always be on this page, with its effective date at the top. If changes are significant, we will highlight them on our website.

11. Contact and grievances