Privacy Policy

Effective Date: 04 September 2025

Effective Date: 04 September 2025

SCOFIT FINTECH SERVICES PRIVATE LIMITED ("Scofit", "we", "us", or "our") operates its website, applications, APIs, software platforms and related technology services (collectively, the "Service").

Corporate Identification Number (CIN): U72900MP2022PTC061879

Registered Office: Plot No. 260, Scheme No. 54, PU4, Behind Malhar Mall, Indore, Madhya Pradesh – 452001, India

Scofit recognises the importance of maintaining the privacy and security of your information. We value your privacy and appreciate your trust in us. This Privacy Policy explains how we collect, use, process, store and disclose information received from users of our Service.

This Privacy Policy applies to current and former visitors, users, customers, business partners and other persons who interact with our Service, to the extent applicable.

By accessing or using the Service, you acknowledge that you have read and understood this Privacy Policy and agree to the collection and use of information as described herein.

1. Information We Collect

1.1 Contact Information

We may collect information such as:

  • Name
  • Email address
  • Mobile number
  • Telephone number
  • Business/company name
  • Designation
  • Business address
  • Street, city, state and PIN code
  • Country
  • IP address
  • Other contact information provided by you

1.2 Information You Provide or Post

We may collect information that you voluntarily provide when you:

  • Register for an account;
  • Submit an enquiry or contact form;
  • Request a product demonstration;
  • Request API access;
  • Contact our sales, support or technical teams;
  • Provide feedback;
  • Ask us a question;
  • Participate in surveys, events or other activities; or
  • Otherwise provide information through the Service.

If you post information in a public area of the Service or on a third-party social media platform or other publicly accessible service associated with Scofit, such information may be accessible to others.

You should exercise appropriate caution before posting personal or confidential information in any publicly accessible area.

1.3 Demographic and Business Information

We may collect demographic, professional, business or other information provided by you during your use of the Service.

This may include information relating to:

  • Industry;
  • Company type;
  • Business requirements;
  • Professional role;
  • Product preferences;
  • Service requirements; and
  • Other information voluntarily provided by you.

We may also collect such information as part of surveys, research or business interactions.

1.4 Device and Usage Information

When you use the Service, we may collect certain technical and usage information, including:

  • IP address;
  • Browser type and version;
  • Operating system;
  • Device type;
  • Device identifiers, where applicable;
  • Referring website or source;
  • Pages visited;
  • Duration of visits;
  • Interaction with the Service;
  • Date and time of access;
  • Information regarding the website or application you visit after leaving our Service; and
  • Other technical information reasonably required for operating, securing and improving the Service.

2. How We Collect Information

2.1 Information Collected Directly From You

We collect information directly from you when you:

  • Register for an account;
  • Submit a form;
  • Request API or platform access;
  • Request a demonstration;
  • Contact us;
  • Provide feedback;
  • Ask a question;
  • Enter into a commercial relationship with us; or
  • Otherwise voluntarily provide information.

2.2 Information Collected Automatically

We may use technologies such as:

  • Cookies;
  • Web beacons;
  • Analytics tools;
  • Server logs;
  • Browser technologies; and
  • Similar tracking technologies

to understand how users interact with the Service.

These technologies may help us analyse traffic, understand user behaviour, maintain security, improve functionality and enhance our products and services.

2.3 Information Received From Third Parties

We may receive information about you from third parties where permitted by applicable law and where such information is required for providing or improving our Service.

This may include information received through:

  • Integrated services;
  • Business partners;
  • Technology partners;
  • Verification providers;
  • Financial institutions;
  • Credit information providers;
  • Social media integrations; and
  • Other service providers.

Where required, such processing will be subject to applicable permissions, authorisations or consents.

3. Financial and Account Information

Certain Scofit products and services may involve financial information, banking information, credit information or other financial data.

Where you explicitly authorise Scofit to access such information, we may process the information for purposes including:

  • Verification;
  • Financial analysis;
  • Credit assessment;
  • Generating financial insights;
  • Supporting lending or underwriting workflows;
  • Providing curated financial or credit-related products or services;
  • Fraud and risk assessment;
  • Customer onboarding;
  • Account verification;
  • Other purposes specifically communicated to you; and
  • Other purposes for which you have provided appropriate consent or as otherwise permitted by applicable law.

Where additional financial information or financial documents are required for a particular service, such information shall, where applicable, be collected subject to appropriate purpose-specific consent or other lawful basis.

4. Email Account Access

Where a Scofit service specifically requires access to an email account and you voluntarily provide the required authorisation, Scofit may access the account for purposes communicated to you at the time of consent.

Such purposes may include retrieving financial documents or information, such as:

  • Bank statements;
  • Credit card statements;
  • Other financial statements; and
  • Other financial documents required for an explicitly disclosed purpose.

Access to an email account, where supported by a particular Scofit service, shall be based on the authorisation mechanism provided by the relevant email provider.

You may choose whether to provide such access where the relevant service makes such access optional.

Where access is provided for a specific purpose, Scofit will seek to limit its processing to the information necessary for that purpose, subject to the technical functionality of the service and applicable law.

Scofit does not intend to access personal emails unrelated to the disclosed purpose.

Where automated systems or algorithms are used to identify, retrieve or analyse relevant financial information, such processing may be performed automatically.

5. SMS and Transaction Information

Where a Scofit application or service specifically requires access to transaction-related SMS information and you provide the required permission, Scofit may process information relating to financial transactions for disclosed purposes such as financial analysis or expense management.

Such information may include:

  • Transaction details;
  • Names of transacting parties;
  • Transaction descriptions; and
  • Transaction amounts.

Scofit will seek to limit collection and processing to information necessary for the stated purpose and subject to applicable permissions and law.

Personal SMS communications unrelated to the disclosed purpose are not intended to be collected, read or stored.

6. Use of Personal Information

We may use information collected from you for the following purposes.

6.1 To Respond to Requests

We may use your information to:

  • Respond to service requests;
  • Answer questions;
  • Provide technical support;
  • Respond to enquiries; and
  • Communicate with you regarding our products and services.

6.2 To Provide and Improve Our Products and Services

We may use information to:

  • Provide our Service;
  • Develop new products and services;
  • Improve existing products and services;
  • Customise your experience;
  • Understand product usage;
  • Improve website functionality;
  • Improve API and platform performance; and
  • Develop relevant features and functionality.

6.3 Financial and Credit-Related Purposes

Where applicable and subject to appropriate consent or other lawful basis, information may be used for:

  • Credit assessment;
  • Financial analysis;
  • Underwriting support;
  • Risk assessment;
  • Financial insights;
  • Customer verification;
  • Product recommendations;
  • Financial product matching;
  • Fraud prevention; and
  • Other explicitly disclosed financial purposes.

Any additional information required for a new or different purpose may be collected subject to appropriate consent or other lawful basis, where required.

6.4 To Understand Site Trends and Customer Interests

We may use information to:

  • Analyse trends;
  • Understand customer requirements;
  • Improve the Service;
  • Improve product offerings;
  • Understand how users interact with our website and applications; and
  • Combine information collected from different sources where permitted by applicable law.

6.5 For Security and Fraud Prevention

We may use information to:

  • Protect our company;
  • Protect our customers and users;
  • Protect our websites, applications and infrastructure;
  • Detect and prevent fraud;
  • Detect unauthorised activity;
  • Investigate security incidents; and
  • Maintain the security and integrity of our Service.

6.6 Transactional Communications

We may send you transactional communications relating to:

  • Your account;
  • API access;
  • Service requests;
  • Security events;
  • System notifications;
  • Support requests;
  • Transactions; and
  • Other service-related matters.

These communications may be sent through email, SMS, telephone, application notifications or other appropriate channels.

6.7 As Permitted or Required by Law

We may use information where necessary to comply with applicable laws, regulations, legal processes, governmental requirements or other lawful obligations.

7. Sharing of Information With Third Parties

7.1 Service Providers

We may share information with third-party vendors and service providers who perform services on our behalf.

These may include providers supporting:

  • Cloud infrastructure;
  • Hosting;
  • Analytics;
  • Communications;
  • Security;
  • Technology;
  • Verification;
  • Data processing;
  • Customer support; and
  • Other business operations.

Some service providers may be located outside India, subject to applicable law and contractual or other safeguards.

7.2 Business Partners

We may share information with business partners where necessary to provide a requested service, fulfil a transaction, support a business workflow or otherwise perform services requested by you.

Such partners may process information in accordance with their own privacy policies and applicable contractual requirements.

7.3 Legal and Regulatory Requirements

We may disclose information where we reasonably believe that disclosure is necessary to:

  • Comply with applicable law;
  • Respond to a court order;
  • Respond to a government authority;
  • Respond to an investigation;
  • Protect our rights or property;
  • Protect the safety of our users or others; or
  • Investigate, prevent or address fraud, security or technical issues.

7.4 Business Transfers

If Scofit, or any part of its business, is involved in a merger, acquisition, restructuring, financing, sale of assets or similar transaction, information may be transferred as part of that transaction, subject to applicable law.

7.5 Other Purposes

If we intend to use or disclose your information for a material purpose that is not reasonably covered by this Privacy Policy, we will provide appropriate notice and/or seek consent where required by applicable law.

8. Data Security

Scofit takes reasonable measures designed to protect information against unauthorised access, disclosure, alteration, misuse or destruction.

Depending on the nature of the information and service, safeguards may include:

  • Access controls;
  • Authentication mechanisms;
  • Encryption;
  • Monitoring;
  • Secure infrastructure;
  • Logging;
  • Internal controls; and
  • Other technical and organisational security measures.

However, no method of transmission or storage can be guaranteed to be completely secure.

9. Data Retention

We retain information only for as long as reasonably necessary for the purposes for which it was collected, including providing services, complying with contractual obligations, resolving disputes, maintaining business records, preventing fraud and complying with applicable legal or regulatory requirements.

The retention period may vary depending on:

  • Nature of the information;
  • Purpose of processing;
  • Applicable law;
  • Contractual requirements; and
  • Legitimate business requirements.

When information is no longer required, we may securely delete, anonymise or otherwise dispose of it in accordance with applicable law and our internal policies.

10. Your Choices and Rights

Depending on applicable law, you may have rights relating to your personal information, which may include:

  • Requesting access to information held about you;
  • Requesting correction of inaccurate information;
  • Requesting deletion where legally permissible;
  • Withdrawing consent where processing is based on consent;
  • Raising a grievance or complaint; and
  • Exercising other rights available under applicable law.

Requests may be subject to applicable verification and legal requirements.

You may contact us using the details provided in this Privacy Policy to exercise applicable rights.

11. Email Opt-Out

You may opt out of receiving promotional or marketing communications from Scofit.

To opt out, you may use the unsubscribe mechanism included in the relevant communication or contact Scofit at [info@scofit.app](mailto:info@scofit.app).

Even if you opt out of marketing communications, we may continue to send transactional or service-related communications necessary for operating your account or providing requested services.

12. Third-Party Websites and Services

Our Service may contain links to third-party websites, applications or services.

If you click on a third-party link, you may be directed to a website or service that we do not control.

This Privacy Policy does not govern the privacy practices of such third parties.

We encourage you to review the applicable privacy policy and terms of each third-party website or service before providing personal information.

Scofit is not responsible for the privacy practices, content or security of third-party websites or services.

13. Cookies

Scofit may use cookies and similar technologies to:

  • Enable website functionality;
  • Remember preferences;
  • Understand usage;
  • Analyse traffic;
  • Improve website performance; and
  • Support security.

You may be able to control or disable cookies through your browser settings. Certain website functionality may be affected if cookies are disabled.

14. Children's Privacy

Our Service is primarily intended for businesses, enterprises and users who are legally capable of using the relevant services.

We do not knowingly seek to collect personal information from children where such collection is prohibited by applicable law.

If you believe that a child has provided personal information to us in circumstances where such collection was not permitted, please contact us so that we can take appropriate action.

15. Grievance Officer

In accordance with applicable Indian laws and regulations relating to privacy and data protection, the details of the designated Grievance Officer are provided below:

Grievance Officer: Neha Bhavsar

Email: [grievance@scofit.app](mailto:grievance@scofit.app)

Address:

SCOFIT FINTECH SERVICES PRIVATE LIMITED Plot No. 260, Scheme No. 54, PU4, Behind Malhar Mall, Indore, Madhya Pradesh – 452001, India

Users may contact the Grievance Officer regarding privacy-related concerns, complaints or requests.

16. Jurisdiction and Governing Law

This Privacy Policy shall be governed by and interpreted in accordance with the laws of India.

Subject to applicable law, any dispute arising out of or relating to this Privacy Policy shall be subject to the jurisdiction of the courts having competent jurisdiction in Indore, Madhya Pradesh, India.

17. Changes to This Privacy Policy

Scofit may update or modify this Privacy Policy from time to time.

Any changes will become effective when the revised Privacy Policy is published on the applicable Service, unless otherwise stated.

We encourage you to periodically review this Privacy Policy.

If we make material changes to this Privacy Policy, we may provide appropriate notice through the Service, email or other reasonable means, where required by applicable law.

Your continued use of the Service after the revised Privacy Policy becomes effective constitutes acknowledgement of the updated Privacy Policy to the extent permitted by applicable law.

18. Contact Us

If you have any questions, concerns or requests regarding this Privacy Policy or Scofit's privacy practices, please contact us at:

SCOFIT FINTECH SERVICES PRIVATE LIMITED

CIN: U72900MP2022PTC061879

Registered Office:

Plot No. 260, Scheme No. 54, PU4, Behind Malhar Mall, Indore, Madhya Pradesh – 452001, India

Email: [info@scofit.app](mailto:info@scofit.app)

For privacy-related complaints or grievances, you may contact our Grievance Officer:

Neha Bhavsar Email: [grievance@scofit.app](mailto:grievance@scofit.app)