Privacy Policy

Last updated: 30 October 2026

This Privacy Policy explains how Flextenure Solutions Private Limited ("FlexTenure", "we", "us", "our") collects, uses, shares and protects your personal data when you use the FlexTenure mobile application (package com.flextenure.consumer), our website flextenure.com and related services (together, the "Services").

We process personal data in line with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and the rules made under them. By using the Services, you agree to the practices described in this policy.

1. Information we collect

Information you give us

• Account details: name, email address, mobile number and password, or your Google account name and email if you sign in with Google.
• Identity and KYC details: PAN and other details needed to verify your identity and check eligibility, as required by law and by our regulated partners.
• Payment details: payee details (merchant, contact or beneficiary), amounts, plan and repayment details, and bank or card details you enter to make payments or set up autopay (e-mandate). Card and bank credentials are entered on and processed by our payment partners; we do not store full card numbers or UPI PINs.
• Profile photo or documents you choose to upload.
• Support requests and any information you share when you contact us.

Information collected with your permission

• Contacts: only when you use "Pay Contact", to let you select the person you want to pay. We use the selected contact for that payment and do not upload your full contact list for any other purpose.
• Camera: to scan QR codes for payments and, if you choose, to take a photo for upload.
• Notifications: to send payment alerts, reminders, receipts and service updates.

You can turn these permissions off at any time in your phone settings. Some features will not work without them.

Information collected automatically

• Transaction records: payments, plans, refunds, cashback and repayment history within the Services.
• Device and app information: device model, operating system, app version, device identifiers, push notification token, IP address and crash or error logs, used to keep the Services secure and working.

Information from third parties

• Credit score information, only if you choose to view your credit score in the app and give your consent. FlexTenure does not report to credit bureaus.
• Payment status and verification results from our payment and verification partners.

2. How we use your information

• To create and manage your account and let you sign in securely.
• To verify your identity (KYC), check eligibility and prevent fraud.
• To process payments, flexible payment plans (FlexTenure is not a loan product and no credit is extended), refunds, autopay mandates and cashback.
• To send transaction alerts, reminders, statements and service messages.
• To provide customer support and respond to your requests.
• To keep the Services secure, fix problems and improve them.
• To meet legal, regulatory, tax and audit obligations.

We do not sell your personal data. We do not show third-party advertising in the app.

3. How we share your information

We share personal data only as needed to provide the Services, and only with:

• Payment partners (such as Easebuzz) and banks, to process payments, refunds and autopay mandates.
• Verification partners, to verify PAN and identity and, with your consent, to fetch your credit score.
• Service providers who host and run our systems, such as Google Cloud and Firebase (authentication, database, notifications), Supabase and Amazon Web Services, under contracts that require them to protect your data.
• Government or law enforcement authorities, when required by law or a valid legal request.
• A buyer or successor, if our business is merged or sold, subject to this policy.

4. Data storage and security

Your data is stored on secure cloud servers, with payment-related data stored in India where required by the Reserve Bank of India. We use encryption in transit (HTTPS/TLS), encrypted storage on your device for sensitive tokens, access controls and regular security checks. No system is completely secure, but we work to protect your data and will inform you and the authorities of a data breach as required by law.

5. How long we keep your information

We keep your data while your account is active and for as long as needed to provide the Services. Transaction, KYC and payment records are kept for the period required by applicable laws and regulations (usually up to 8 years after the relationship ends). After that, we delete or anonymise the data.

6. Your rights and choices

• Access and correction: view and update your details in the app, or ask us for a summary of the data we hold about you.
• Withdraw consent: withdraw consent for optional processing at any time. This does not affect processing already done or processing required by law.
• Delete your account: use Profile → Security → Delete account in the app, or email us. We will delete your data, except records we must keep by law.
• Grievance and nomination: raise a complaint with our Grievance Officer, and nominate a person to exercise your rights if you are unable to.

Deleting your FlexTenure account

You can ask Flextenure Solutions Private Limited to delete your FlexTenure account and the data linked to it in either of these ways:

• In the app: open the FlexTenure app, go to Profile → Security → Delete account, choose a reason and confirm.
• By email: write to info@flextenure.com from your registered email address with the subject "Delete my FlexTenure account".

Before deletion, any active plan or pending payment must be closed. We will confirm the request and complete it within 30 days.

Deleted: your profile (name, email, phone number, photo), login details, saved beneficiaries and contacts, notification preferences and device tokens.

Kept: transaction, payment, KYC (including PAN) and mandate records that we must keep under RBI, tax and anti-money-laundering rules, for up to 8 years after your account is closed. These records are kept securely and used only for legal and regulatory purposes, then deleted.

7. Children

The Services are only for people aged 18 and above. We do not knowingly collect data from anyone under 18. If you believe a minor has given us data, please contact us and we will delete it.

8. Changes to this policy

We may update this policy from time to time. We will post the new version on this page with a new "Last updated" date and, for important changes, notify you in the app.

9. Contact and Grievance Officer