Privacy Policy

This Privacy Policy explains how PaisaKhoj (“we”, “us”) handles information when you use paisakhoj.com (the “Site”). It is published under the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, Rule 3(1)(a) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, the “DPDP law”), as and when each applies.

PaisaKhoj is built to need very little personal data. We do not run accounts, we do not take loan or card applications, and we do not collect your PAN, Aadhaar, income, bank, card or credit-bureau details. Please do not send them to us.

• Information you choose to send us: if you use the contact form or write to us, we receive your message, the email address you give, and your name if you provide it. We use these only to reply and to improve the Site.
• Saved products and comparisons: these are kept in your own browser’s local storage on your device. They are not sent to us, are not tied to an account, and disappear if you clear your browser data.
• Calculator inputs: figures you type into a calculator are processed in your browser and are not sent to our servers or to analytics. If you choose to put a result in the address bar to share it, those figures appear in the URL; that is optional.
• Technical data: like all websites, the servers and security services that deliver the Site may automatically process your IP address, device and browser type, pages requested, referring page and date and time of access. This is used to deliver the Site, keep it secure, prevent abuse and diagnose faults, and is kept for a limited period (see section 7).
• Analytics: where we use privacy-focused analytics, it is configured to exclude personal and financial inputs. We do not sell analytics data or use it to build advertising profiles.

We do not knowingly collect sensitive personal data or information such as passwords, financial instrument details, health data or biometric data. We do not collect your personal data for lead generation and do not sell or rent personal data.

• To respond to your message, correction request or complaint (on the basis of the consent you give when you submit the form, and our legitimate use to respond to you).
• To operate, secure and improve the Site, and to understand which pages are useful, using aggregate data.
• To comply with law, court orders and requests from lawful authorities, and to establish or defend legal claims.

We use personal data only for the purpose for which it was given, and for no purpose for which we have not asked for your consent unless the DPDP law permits it.

Where we rely on consent, we ask for it clearly, in plain language and for a specified purpose, at the point you give the data, for example by the tick-box on the contact form. Consent is free, specific, informed, unconditional and unambiguous, and signified by a clear affirmative action. Submitting the form is not possible without it, because we cannot reply without storing your message. You can withdraw consent at any time by writing to the Grievance Officer. Withdrawal does not affect what we did before, and it will mean we cannot continue to deal with the request.

See our Cookie Policy. In short, we use only what is necessary to deliver the Site and, where enabled, privacy-respecting analytics. We do not use advertising cookies or cross-site trackers of our own. Links that take you to a provider or an affiliate network may set cookies on that site once you arrive; those are governed by their policies.

When you click a link to a bank, card issuer or other provider, you leave the Site. The provider, and any affiliate network used to attribute the referral, may collect information about your visit and, if you apply, the details you give them. We do not receive your application details. Their processing is governed by their own privacy policies, and we recommend you read them before sharing any information. Where a link carries a tracking or referral identifier, it identifies the referring page and not you.

• Contact messages and the details in them are kept for as long as needed to resolve your query and for up to 24 months afterwards for records and dispute handling, and then deleted or anonymised.
• Grievance records are kept for at least 3 years, or longer where needed for legal claims or by law.
• Server and security logs are kept for a limited period, normally not more than 180 days unless needed for an investigation or required by law, including the log-retention directions issued by CERT-In.

Where the DPDP law requires us to retain data for longer, or you ask us to erase it earlier, we follow the law.

We do not sell, rent or trade personal data. We share it only with: service providers who host, secure, deliver, email or analyse the Site on our behalf, under confidentiality and security obligations; professional advisers; and courts, regulators, law-enforcement or government agencies where required by law or to protect rights, safety or the Site.

Our service providers may process data on servers inside or outside India. Where the DPDP law restricts transfer to a country, we will comply. If the ownership of the business changes, data may pass to the successor, on terms at least as protective as this Policy.

We use reasonable security practices and procedures, appropriate to the information we hold, including encrypted connections (HTTPS), access controls and limiting what we collect. No system is completely secure and we cannot guarantee the security of information you send over the internet. If a personal data breach occurs that affects you, we will notify the Data Protection Board of India and affected persons as the law requires.

Subject to the DPDP law and as and when each right takes effect, you may:

• ask for a summary of the personal data we hold about you, the processing we do with it, and who we have shared it with;
• ask us to correct inaccurate or misleading data, complete incomplete data, or update it;
• ask us to erase data we no longer need for the purpose it was given or that you have withdrawn consent for, unless the law requires us to retain it;
• withdraw consent at any time;
• have your grievance heard and resolved through our Grievance Officer, and, if you are not satisfied, complain to the Data Protection Board of India;
• nominate another person to exercise your rights if you die or become incapacitated.

To exercise any right, write to the Grievance Officer using the details on the Grievance Redressal page. We may ask for reasonable information to confirm who you are. We will respond within the time the law prescribes and in any case within 15 days for grievances.

The Site is for adults. We do not knowingly collect personal data of anyone under 18. We do not track, monitor the behaviour of or target advertising at children. If we learn that a child’s data has been given to us without the verifiable consent of a parent or lawful guardian, we will delete it. If you believe this has happened, please tell us.

Our Grievance Officer handles privacy and data protection queries and complaints. Contact details and timelines are on the Grievance Redressal page. Email: info@paisakhoj.com.

We may update this Policy when our practices or the law change. The date below shows the latest version, and material changes will be flagged on the Site. If a change requires fresh consent, we will ask for it.

Last updated: 31 October 2026.