DPDP Act 2023 Disclosure

Our Obligations Under DPDP Act 2023

The Digital Personal Data Protection Act 2023 (DPDP Act) governs how Fusionpact Technologies Private Limited collects, processes, and protects personal data of Indian citizens.

Data Fiduciary

Fusionpact Technologies Private Limited is the Data Fiduciary for data processed through the FusionKYC platform. Housing Finance Companies using our platform are joint Data Fiduciaries for borrower data.

Consent Management

We obtain explicit, purpose-specific consent before processing any personal data. Consent is obtained separately for:

• KYC verification (Aadhaar, PAN, DigiLocker)
• Income assessment (Account Aggregator, bank statements)
• Credit decisioning (underwriting engine)
• Communication (SMS, email regarding application status)

Consent may be withdrawn at any time by contacting kyc@fusionpact.com. Withdrawal may affect the ability to process your loan application.

Your Rights

• Right to Access: Request a copy of your personal data held by us
• Right to Correction: Request correction of inaccurate personal data
• Right to Erasure: Request deletion of data (subject to regulatory retention requirements)
• Right to Grievance: Raise concerns with our Grievance Officer
• Right to Nominate: Nominate another individual to exercise rights on your behalf

Data Localisation

All personal data of Indian citizens is stored on servers located in India. Our infrastructure is hosted on Supabase (AWS Mumbai region).

Grievance Officer

Name: Designated Grievance Officer, Fusionpact Technologies Private Limited
Email: kyc@fusionpact.com
Response time: Within 72 hours of receipt