Stepway Online is committed to protecting your personal information. This policy explains what data we collect, how we use it, and your rights as a user.
1. Overview
Stepway Online Fintech India Private Limited ("Stepway Online", "we", "us", or "our") operates the Stepway Online platform. This Privacy Policy applies to all users — agents, customers, and visitors — and governs the collection, use, and disclosure of personal information submitted to or collected through our platform.
2. Data We Collect
We collect the following categories of personal information:
- Identity Data — Name, Date of Birth, PAN, Aadhaar — for KYC verification and application processing.
- Contact Data — Mobile number, email, address — for communication and OTP delivery.
- Financial Data — Income, bank account, CIBIL score — for loan/card eligibility assessment.
- Employment Data — Employer name, salary slips — for loan application requirements.
- Device & Usage Data — IP address, browser, app usage logs — for security, fraud prevention, and analytics.
- Agent Activity Data — Applications submitted, commissions — for commission calculation and reporting.
3. How We Use Your Data
- To process and submit your applications to partner banks, NBFCs, and insurance companies.
- To verify your identity (KYC) as required by RBI and IRDAI regulations.
- To communicate application status updates, OTPs, and service alerts.
- To calculate and disburse agent commissions.
- To detect, prevent, and investigate fraud and misuse.
- To improve our platform through analytics and user feedback.
- To comply with applicable legal obligations.
We do not use your data for unsolicited marketing without your explicit consent.
4. Data Sharing
We share your personal data only in the following circumstances:
- Partner Institutions: Banks, NBFCs, and insurance companies you apply to through our platform.
- KYC & Credit Bureaus: Entities like CIBIL, Experian, or NSDL for identity and credit verification.
- Payment Processors: For commission settlements and refunds.
- Regulatory Authorities: RBI, IRDAI, FIU, or other government bodies when required by law.
- Service Providers: Cloud hosting, SMS gateways, analytics vendors — bound by confidentiality agreements.
We do not sell, rent, or trade your personal information to third parties for marketing purposes.
5. Data Storage & Security
All personal data is stored on servers located within India, in compliance with data localization requirements. We implement the following security measures:
- AES-256 encryption for data at rest.
- TLS 1.2+ encryption for data in transit.
- Multi-factor authentication for platform access.
- Regular security audits and penetration testing.
- Information security management aligned with recognised industry standards.
We retain personal data for as long as necessary to fulfill the purposes outlined in this policy, or as required by law — typically 7 years for financial records.
6. Cookies & Tracking
Our platform uses cookies and similar technologies. See our Cookie Policy for details on the cookies we use and how to manage them.
7. Your Rights
Under applicable Indian data protection laws, you have the right to:
- Access: Request a copy of the personal data we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Deletion: Request deletion of your data, subject to legal retention requirements.
- Withdrawal of Consent: Withdraw consent for processing at any time (may affect service availability).
- Grievance Redressal: Lodge a complaint with our Grievance Officer.
To exercise any of these rights, email [email protected] from your registered email address.
8. Children's Privacy
Stepway Online services are not directed at individuals under the age of 18. We do not knowingly collect personal data from minors. If you believe a minor has provided us with personal information, please contact us immediately.
9. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be communicated via the platform or SMS to your registered mobile number. Continued use of the platform after the effective date constitutes acceptance of the updated policy.
10. Contact & Grievance Officer
Grievance Officer
Amit Kumar — Stepway Online Fintech India Private Limited
Email: [email protected]
Acknowledgement: Within 24 hours of receipt of the complaint.
Resolution: Within 15 days of receipt of the complaint.