Privacy Policy

Introduction & Scope

DSA Sarthi provides a CRM and lead-management platform for Direct Selling Agents, loan consultants and finance professionals in India. This policy applies to all users of our Service — account owners, their invited Sub-DSAs, and visitors to our website.

It covers two distinct categories of information: your personal and business information as our subscriber, and the customer / lead data that you collect and store within the Service about your own borrowers and prospects.

Information We Collect

We collect the following categories of information:

How We Use Information

We use the information we collect to:

• Provide, operate, maintain and improve the Service and its features.
• Create and manage your Account and authenticate your access.
• Process Transactions, subscriptions and billing.
• Send service, transactional and (with consent) product-update communications.
• Provide customer support and respond to your requests.
• Monitor usage, prevent fraud and abuse, and maintain the security and integrity of the Service.
• Comply with legal obligations and enforce our Terms.

Legal Basis & Consent

We process personal data on the basis of your consent, the performance of our contract with you, our legitimate business interests, and to comply with applicable law — including the Information Technology Act, 2000 (and its rules) and the Digital Personal Data Protection Act, 2023, as and when in force.

Where we rely on consent (for example, marketing messages on WhatsApp), you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.

Cookies & Tracking

We use cookies, local storage and similar technologies to keep you signed in, remember your preferences, measure usage and understand how visitors arrive at our website (including UTM and referral attribution).

• Essential — required for sign-in, security and core functionality.
• Analytics — help us understand and improve how the Service is used.
• Attribution — record how you discovered us so we can credit the right source.

You can control cookies through your browser settings, though disabling essential cookies may affect how the Service works.

How We Share Information

We do not sell your personal data. We share information only as needed to run the Service:

• Service providers — hosting, storage, analytics and communication vendors who process data on our behalf under confidentiality obligations.
• Payment gateways — to securely process your Transactions. Your information may be shared with them for payment and fraud-verification purposes.
• Banks, NBFCs & lenders — only where you choose to use a feature that routes information to a lender; such sharing is directed by you.
• Legal & safety — where required by law, regulation, court order, or to protect our rights, users or the public.
• Business transfers — in connection with a merger, acquisition or sale of assets, subject to this policy.

Your Customers' Data — Your Responsibility

• You are responsible for collecting that data lawfully and for obtaining any consent required from your leads and borrowers before storing or messaging them.
• You must only upload data you are authorised to process, and use it strictly for legitimate business purposes.
• We process customer data solely to provide the Service to you, and according to your instructions and these policies.
• On termination, we handle customer data in line with the “Data Retention” section below.

WhatsApp & Marketing Communications

If you provide your WhatsApp number and consent, we may send you service updates, tips and product news on WhatsApp, SMS or email. You can opt out of non-essential marketing at any time by replying STOP or contacting support; you will still receive essential service messages.

When you use the Service to message your own leads, you are responsible for their consent and for complying with WhatsApp Business Policy and telecom regulations (including TRAI DLT rules).

Data Security

We use reasonable technical and organisational measures to protect your information, including encryption in transit and at rest, access controls and secure infrastructure hosted in India.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for keeping your login credentials confidential and for using strong, unique passwords.

Data Retention

We retain your information for as long as your Account is active and as needed to provide the Service. After termination, we may retain certain data for a reasonable period to comply with legal, tax, accounting and fraud-prevention obligations, after which it is deleted or anonymised.

You may request an export of your data within a reasonable period before deletion, where technically feasible.

Your Rights

Subject to applicable law, you may have the right to:

• Access the personal data we hold about you and request a copy.
• Request correction of inaccurate or incomplete data.
• Request deletion of your personal data, subject to legal retention requirements.
• Withdraw consent for processing based on consent, such as marketing.
• Raise a grievance or complaint with our Grievance Officer.

To exercise any of these rights, contact us using the details below. We may need to verify your identity before acting on a request.

Children's Privacy

The Service is intended for businesses and users aged 18 and above. We do not knowingly collect personal data from children. If you believe a child has provided us information, please contact us and we will take appropriate steps to delete it.

Third-Party Links & Services

Our Service may contain links to third-party websites or integrate with third-party providers (such as payment gateways, WhatsApp APIs and analytics tools). This policy does not cover their practices, and we are not responsible for their content or privacy practices. We encourage you to review their policies.

Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you within the Service or by email. Your continued use of the Service after changes take effect constitutes acceptance of the updated policy.

Grievance Officer

In accordance with the Information Technology Act, 2000 and the rules made thereunder, you may contact our Grievance Officer with any complaint or concern regarding the processing of your personal data:

• Email: support@dsasarthi.cloud
• We will acknowledge complaints within a reasonable time and endeavour to resolve them in accordance with applicable law.