Privacy Policy
Last updated: 1 Oct 2025
Meghdoot Mercantile Private Limited is an NBFC-BL registered with the Reserve Bank of India, holding a valid Certificate of Registration.
CIN: U51909WB1996PTC076952
Registered Office: 3C, 11th Floor, 10 Industry House, Camac Street, Park Circus, Kolkata-700017 (W.B)
We, at Meghdoot Mercantile Private Limited, an RBI-approved NBFC (“Meghdoot” or “We”), understand privacy and its value. Therefore, it is important for us to make You (“You” or “Customer” or “User”), who access our loan products through our approved Digital Lending Apps (DLAs) and Lending Service Providers (LSPs)—including Fatafat Loans (DLA) CreditSea (LSP) and Cash247 (LSP) —(collectively, the “Platform”), understand the reason behind collection of your information and its usage and the manner in which we collect, use, store and share information about you (this “Privacy Policy”).
CONSENT
1. General Consent
You hereby provide your explicit, informed, and freely given consent for the collection, processing, storage, sharing, and usage of your data by MEGHDOOT MERCANTILE PRIVATE LIMITED (“Meghdoot”), and, where applicable, by our authorized DLAs/LSPs acting on our behalf.
2. SMS
We may, with your explicit consent, read the headers of SMS to determine the type of sender. We only read indicative content from recognised 6-digit alphanumeric financial senders for verification purposes.
3. Installed Apps
Our partner apps operating on our behalf may collect the list of installed and system applications on your device and securely share it with our trusted processor, Credeau (www.credeau.com).
4. Location & Device Permissions
Location is collected one-time or as permitted to support serviceability and risk reduction. Device information includes model, OS version, and network status.
COLLECTION OF INFORMATION
Categories of Information Collected:
- User Personal Information: Name, email, PAN, address, mobile number, banking details.
- Social Account Information: Email ID and public profile details if registering via Google.
- Device Information & Installed Apps Data: Unique identifiers, log info, diagnostic data.
- Location, Camera, Microphone Access: For address verification and e-KYC.
- Third-Party Information: Credit bureau data, KYC/payments providers.
DATA RETENTION POLICY
All personal and financial data collected from you is retained only as long as necessary to fulfil the purposes outlined in this Privacy Policy or as required by applicable law. KYC records are kept for a minimum of 10 years, and loan records for 8 years after closure.
GRIEVANCE OFFICER
Mr. Shrey Dehlan
Grievance Officer – Meghdoot Mercantile Private Limited
📧 Email: grievance@meghdootmercantile.com