Privacy Policy
LendingLeaf is committed to protecting your privacy. This policy explains clearly how your data is collected, used, and protected.
Effective: April 9, 2026 | Operated by: Digitar Media Pvt. Ltd.
LendingLeaf is a Loan Aggregator — Not a Lender
We connect users with RBI-registered banks and NBFCs who make all lending decisions independently. We do not provide loans, set interest rates, or guarantee approvals. We may earn a commission from lenders — this does not affect your loan terms.
Table of Contents
Welcome to LendingLeaf, a digital financial services platform operated by Digitar Media Pvt. Ltd., a company incorporated under the laws of India, with its registered office at Noida Sector-03, Uttar Pradesh – 201301, India.
Important Notice
LendingLeaf is a loan aggregator and not a lender. We do not provide loans directly to users. Our platform connects users with RBI-registered Non-Banking Financial Companies (NBFCs) and scheduled commercial banks who evaluate and approve loan applications independently based on their own policies and eligibility criteria.
This Privacy Policy explains how we collect, use, share, and protect personal information you provide to us when you access or use our website at https://lendingleaf.in (the "Platform"). By using our Platform, submitting any form, or clicking "I Agree" on our consent checkbox, you agree to the terms of this Privacy Policy.
If you do not agree with any part of this policy, please do not use our Platform or submit your personal information.
Effective Date: April 9, 2026 | Last Updated: April 9, 2026
We collect the following categories of information to provide and improve our services:
2.1 Information You Provide Directly
- Full name
- Mobile phone number (used for OTP verification)
- Email address (if provided)
- Date of birth
- Employment type (salaried, self-employed, business owner)
- Monthly income or salary details
- Loan amount required and purpose
- City and pincode
- PAN number (for credit bureau queries, where applicable)
- Any other details voluntarily submitted through our forms
2.2 OTP Verification Data
When you submit your mobile number, we initiate an OTP (One-Time Password) verification to confirm your identity. We retain a log of OTP verification events for fraud prevention and audit purposes. We do not store the OTP itself beyond its expiry period.
2.3 Automatically Collected Information
- IP address and general geographic location
- Browser type, version, and operating system
- Pages visited, time spent, and navigation paths on the Platform
- Referring URL (how you arrived at our site)
- Device type (desktop, mobile, tablet)
- Cookies and similar tracking technologies (see Section 10)
2.4 Information from Third Parties
We may receive information about you from credit bureaus (CIBIL, Experian, Equifax, CRIF Highmark) when you authorize us to fetch your credit score. We may also receive tracking parameters from marketing platforms (Google, Meta) to attribute your visit source accurately.
We do not collect sensitive personal information such as biometric data, caste, religion, or sexual orientation.
We use the information we collect for the following purposes:
Loan Matching
To match your profile with suitable loan offers from our partner lenders based on your income, employment, and loan requirement.
Application Processing
To submit your lead data to one or more RBI-registered NBFCs and banks for them to evaluate your loan eligibility.
OTP Verification
To verify your mobile number and confirm the authenticity of your application submission.
Credit Score Check
If you use our credit score feature, to fetch your credit report from an authorized credit bureau on your behalf.
Communication
To send you transactional messages, loan status updates, promotional offers, and service notifications via SMS, email, or WhatsApp.
Platform Improvement
To analyze usage patterns, fix bugs, and improve the features and performance of our Platform.
Fraud Prevention
To detect, investigate, and prevent fraudulent activity, abuse of our Platform, or violation of our Terms of Service.
Legal Compliance
To fulfill our obligations under applicable Indian laws, regulations, and regulatory guidelines.
Your consent for communication remains valid for a period of 180 days from the date of your application submission, unless withdrawn earlier by you.
Key Disclosure
We share your personal information with third parties only as described in this section. We do not sell, rent, or trade your personal information to unrelated third parties for their own marketing purposes.
4.1 Partner Lenders (RBI-Registered)
When you submit a loan application on our Platform, we share your personal and financial details with one or more of our partner NBFCs and banks. These institutions are regulated by the Reserve Bank of India (RBI) and are responsible for evaluating your eligibility and making all lending decisions independently. You may receive calls, SMS, or email communications from these partners regarding your application.
LendingLeaf does not influence, guarantee, or determine whether a lender approves or rejects your application.
4.2 Service Providers
We work with trusted third-party service providers who assist us in operating the Platform:
- Cloud hosting providers (for data storage and processing)
- OTP and SMS gateway providers (for mobile verification)
- Credit bureau API providers (CIBIL, Experian, Equifax, CRIF)
- Analytics and performance monitoring tools (e.g., Google Analytics)
- Customer support tools and CRM platforms
- Marketing and ad attribution platforms (Google Ads, Meta)
These providers access your data only as necessary to perform their services and are contractually bound to protect it.
4.3 Legal & Regulatory Disclosure
We may disclose your information to government authorities, regulators, or courts when required by law, legal process, or in response to a lawful request from a governmental authority (including tax authorities, regulatory bodies such as RBI, SEBI, or law enforcement agencies).
4.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets of Digitar Media Pvt. Ltd., your data may be transferred to the acquiring entity, subject to equivalent privacy protections.
Mandatory Disclosures
LendingLeaf is not a lender and does not provide loans directly.
We may share your information with partner banks and NBFCs for loan processing.
You may receive communication (calls, SMS, email) from our lending partners.
We may earn a commission from lenders when users choose their loan products.
This commission arrangement does not affect the interest rates or loan terms offered to you.
Aggregator Clarification
LendingLeaf does not generate, calculate, or own credit scores. All credit information is fetched directly from authorized, RBI-regulated Credit Information Companies (CICs).
5.1 Authorized Credit Bureaus
When you use our credit score feature, we act as your authorized representative to fetch your credit report from:
- TransUnion CIBIL Limited
- Experian Credit Information Company of India Pvt. Ltd.
- Equifax Credit Information Services Pvt. Ltd.
- CRIF High Mark Credit Information Services Pvt. Ltd.
5.2 Consent for Credit Enquiry
By using the credit score feature on our Platform, you hereby authorize LendingLeaf (operated by Digitar Media Pvt. Ltd.) to act as your authorized representative to:
- Submit your PAN number and personal details to the credit bureau
- Receive your credit report and credit score on your behalf
- Display your credit score and relevant credit summary on the Platform
This consent is valid for a period of 6 (six) months from the date of credit score request, or until the purpose is fulfilled, whichever is earlier.
5.3 Data Handling
Credit information fetched from bureaus is used solely for the purpose of displaying your score and matching you with appropriate lenders. We shall not:
- Aggregate, retain, or store the full credit information report beyond required timelines
- Copy, reproduce, or sell credit information to any unauthorized party
- Use credit information for any purpose other than the stated End Use Purpose
Credit information shall be purged within 1 Business Day upon completion of the transaction, in accordance with CICRA (Credit Information Companies Regulation Act, 2005) and applicable RBI guidelines.
Checking your own credit score through our Platform constitutes a "soft inquiry" and does not negatively affect your CIBIL score.
We collect and process your personal information only with your explicit, informed, and freely given consent. Consent is obtained through:
6.1 Form Submission Consent
When you submit any form on our Platform (loan application, credit score request, or newsletter sign-up), you are presented with a mandatory, unchecked checkbox that reads:
This checkbox is not pre-selected. You must manually check it before submitting. Forms cannot be submitted without this consent.
6.2 What You Consent To
By checking the consent box and submitting your application, you agree that:
- Your personal and financial data may be shared with RBI-registered lenders for loan evaluation
- You may be contacted via phone calls, SMS, WhatsApp, or email by LendingLeaf and/or its lending partners
- Your mobile number may be registered on NDNC/DND, but this consent overrides DND for loan-related communication
- LendingLeaf may fetch your credit score from authorized bureaus on your behalf
- LendingLeaf earns a commission from lenders — this does not affect your loan terms
6.3 Revoking Consent
You may withdraw your consent at any time by emailing unsubscribe@lendingleaf.in or grievance@lendingleaf.in. Please note that withdrawal of consent may result in discontinuation of services for which your data is required. It will not affect any data already shared with partner lenders prior to revocation.
We take the security of your personal information seriously. We implement industry-standard technical, administrative, and organizational safeguards to protect your data from unauthorized access, disclosure, alteration, or destruction.
Data Encryption
All data transmitted between your device and our servers is encrypted using TLS/SSL (256-bit) protocols.
Secure Storage
Personal data is stored in access-controlled, encrypted databases hosted on reputable cloud infrastructure in India.
Access Control
Only authorized personnel with a legitimate business need can access personal data. All access is logged and audited.
OTP Security
OTPs are time-limited and single-use. We never store OTPs in plain text and expire them immediately after use.
Vulnerability Assessments
We conduct regular security assessments to identify and address potential vulnerabilities in our systems.
Incident Response
We maintain a data breach response protocol to notify affected users and regulators as required by law.
While we implement robust security measures, no method of electronic storage or transmission over the internet is 100% secure. We encourage you to protect your login credentials and notify us immediately at support@lendingleaf.in if you suspect any unauthorized use of your account.
We retain your personal information for as long as necessary to fulfil the purposes outlined in this Privacy Policy, comply with our legal obligations, resolve disputes, and enforce our agreements.
| Data Type | Retention Period |
|---|---|
| Loan application data | 3 years from application date or as legally required |
| OTP verification logs | 90 days for audit purposes, then purged |
| Credit bureau query data | 1 Business Day post-transaction (CICRA requirement) |
| Communication records | 1 year from the date of last interaction |
| Device/IP data (analytics) | 13 months (standard analytics retention period) |
| Newsletter email addresses | Until unsubscription + 30 days for processing |
When your data is no longer required, we securely delete or anonymize it using industry-standard procedures. Data that has been shared with partner lenders becomes subject to their own retention policies, which we cannot control.
You have the following rights with respect to your personal information held by LendingLeaf. To exercise any of these rights, contact us at grievance@lendingleaf.in.
Right to Access
You may request a copy of the personal information we hold about you. We will respond within 30 days of receiving a verified request.
Right to Correction
You may request that we correct inaccurate or incomplete personal information. We will update it within a reasonable time.
Right to Deletion
You may request deletion of your personal data ("right to be forgotten"). Note: we may be unable to delete data that is required by law or that has already been shared with partner lenders.
Right to Withdraw Consent
You may withdraw your consent for marketing communications at any time by emailing unsubscribe@lendingleaf.in. This will not affect the lawfulness of processing prior to your withdrawal.
Right to Opt-Out of Communication
You can opt out of promotional emails, SMS, and calls from LendingLeaf. Note that you may still receive communications from partner lenders who received your data prior to opt-out.
Right to Grievance Redressal
If you believe your privacy rights have been violated, you may raise a complaint with our Grievance Officer (see Section 13) or with the relevant regulatory authority in India.
Our Platform may contain links to third-party websites, applications, or services — including the websites of our lending partners. These external links are provided for your convenience and information only.
Important Notice
LendingLeaf does not control, endorse, or take responsibility for the privacy practices, content, or data handling of any third-party website. When you click on a partner link and leave our Platform, you are governed by that third party's privacy policy — not ours. We encourage you to review the privacy policies of any external sites before submitting personal information.
Our loan offer links redirect you to the lenders' own applications or onboarding flows. Any personal information you submit directly on a lender's platform is governed by their privacy policy.
We may update or revise this Privacy Policy from time to time to reflect changes in our practices, legal requirements, regulatory guidelines, or business operations.
When we make significant changes, we will:
- Update the 'Last Updated' date at the top of this page
- Display a notice on our Platform homepage for a reasonable period
- Where required, notify you via email or SMS if the change materially affects how we use your data
Your continued use of the Platform after such changes are posted constitutes your acceptance of the updated Privacy Policy. If you disagree with any changes, please discontinue use of the Platform and contact us to request deletion of your data.
We recommend reviewing this page periodically. Historical versions of this policy are available on request.
If you have any questions, concerns, or requests related to this Privacy Policy or your personal data, please contact us through the following channels:
Registered Business Address
Digitar Media Pvt. Ltd.
Noida Sector-03, Uttar Pradesh – 201301, India
Phone: 0120-4308780
Governing Law & Jurisdiction
This Privacy Policy is governed by and construed in accordance with the laws of India. Any disputes arising out of or in connection with this Privacy Policy shall be subject to the exclusive jurisdiction of the competent courts at Delhi/NCR, India.
We aim to respond to all privacy-related requests within 30 business days of receipt.
256-bit SSL
Encryption
RBI Ecosystem
Regulated Partners
Your Consent
Required Always
Your Data, Your Control
We are committed to protecting your privacy and giving you full control over your personal information. You can access, update, or delete your data at any time. To raise a privacy concern, contact our Data Protection Officer at privacy@lendingleaf.in. We will respond within 30 business days.