Data Storage Policy

1.Operational Overview

This Data Storage Policy explains how CNSD Finance collects, stores, protects, and manages customer data. We maintain data handling practices designed for financial service workflows and applicable compliance requirements.

2.Data Classifications

The platform may store personal identifiers, financial profile information, application documents, KYC verification records, internal application references, technical logs, and session analytics required to provide services.

• Personal identifiers such as name, address, date of birth, PAN, Aadhaar, and contact details.
• Financial profile data such as bank details, income records, employment history, and credit-related information.
• Application assets such as uploaded documents, KYC validations, and internal tracking records.
• Technical logs such as IP details, diagnostics, and session analytics.

3.Security Measures

We apply encryption, role-based access, secure infrastructure controls, monitoring, and periodic reviews to protect stored data from unauthorized access, misuse, loss, or alteration.

• Encryption for sensitive data at rest and in transit.
• Restricted access for authorized personnel only.
• Monitoring and review of critical systems.
• Periodic security assessments and process checks.

4.Retention Lifecycles

Data is retained only for service, legal, regulatory, fraud prevention, audit, and business continuity purposes. Retention periods can vary depending on application status, active loan relationships, statutory obligations, and partner requirements.

5.Deletion Procedures

After applicable retention windows, data is deleted, anonymized, or archived in line with internal procedures and legal obligations. Users may request deletion where legally permitted, subject to active legal, regulatory, or contractual requirements.