Knight Fintech | Digital Lending Infrastructure for Banks & NBFCs
Privacy Policy
Your privacy is important to us. This policy outlines how Knight FinTech collects, uses, and protects your personal information.
Last Updated: February 2026
Introduction
Welcome to Knight FinTech. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we look after your personal data when you visit our website or use our services, and tell you about your privacy rights and how the law protects you.
This policy applies to all information collected through our services, including our website, mobile applications, APIs, and any related services (collectively, the "Services").
Important: Please read this privacy policy carefully. By using our Services, you acknowledge that you have read and understood this policy.
Information We Collect
We collect several types of information from and about users of our Services:
Personal Information
- Identity Data: First name, last name, username, date of birth
- Contact Data: Email address, telephone number, billing address
- Financial Data: Bank account details, payment card details, credit history
- Transaction Data: Details about payments and services you have purchased
- Technical Data: IP address, browser type, device information, operating system
Usage Information
- Information about how you use our website, products, and services
- Pages visited, features used, time spent on pages
- Search queries, click patterns, and navigation paths
- Error logs and performance data
Automatically Collected Information
- Cookies and similar tracking technologies
- Device identifiers and advertising IDs
- Geolocation data (with your permission)
- Server logs and analytics data
How We Use Your Information
We use the information we collect for various purposes, including:
Service Delivery
To provide, maintain, and improve our Services, process transactions, and fulfill your requests
Customer Support
To respond to your inquiries, provide technical support, and communicate with you about our Services
Security & Fraud Prevention
To detect, prevent, and address fraud, security breaches, and other potentially harmful activities
Legal Compliance
To comply with legal obligations, resolve disputes, and enforce our agreements
Analytics & Improvement
To analyze usage patterns, optimize our Services, and develop new features
Marketing Communications
To send you promotional materials, newsletters, and updates (with your consent)
Legal Basis for Processing
We process your personal data based on: (1) your consent, (2) performance of a contract with you, (3) compliance with legal obligations, or (4) our legitimate interests in operating and improving our business.
Information Sharing and Disclosure
We may share your personal information in the following situations:
Service Providers
We share information with third-party service providers who perform services on our behalf, such as payment processing, data analysis, email delivery, hosting services, and customer service. These providers are bound by contractual obligations to keep information confidential and use it only for the purposes we specify.
Business Partners
We may share information with our business partners to offer you certain products, services, or promotions. We will only share information necessary for these specific purposes and ensure partners maintain appropriate data protection standards.
Legal Requirements
We may disclose information if required by law, court order, or governmental regulation, or if we believe disclosure is necessary to protect our rights, your safety, or the safety of others, investigate fraud, or respond to government requests.
Business Transfers
In connection with any merger, sale of company assets, financing, or acquisition of all or a portion of our business, your information may be transferred to the acquiring entity, subject to this privacy policy.
We Do Not Sell Your Data: Knight FinTech does not sell, rent, or trade your personal information to third parties for their marketing purposes.
Data Security
We implement appropriate technical and organizational measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction.
Encryption
All data in transit is encrypted using TLS 1.3. Sensitive data at rest is encrypted using AES-256
Access Controls
Strict access controls and authentication mechanisms limit data access to authorized personnel only
Secure Infrastructure
Our systems are hosted in SOC 2 Type II certified data centers with 24/7 monitoring
Regular Audits
We conduct regular security audits, vulnerability assessments, and penetration testing
Important Notice: While we strive to protect your personal information, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security.
Data Retention
We retain your personal information only for as long as necessary to fulfill the purposes outlined in this privacy policy, unless a longer retention period is required or permitted by law.
Active Accounts
Data retained while your account is active and for the duration of our business relationship
Closed Accounts
Data retained for 7 years after account closure for legal and compliance purposes
Marketing Data
Data retained until you withdraw consent or for 2 years of inactivity
Technical Logs
Server logs and analytics data retained for 90 days
When we no longer need your information, we will securely delete or anonymize it in accordance with our data retention and deletion policies.
Your Privacy Rights
Depending on your location, you may have certain rights regarding your personal information:
Right to Access
Request a copy of the personal information we hold about you
Right to Rectification
Request correction of inaccurate or incomplete personal information
Right to Erasure
Request deletion of your personal information in certain circumstances
Right to Object
Object to processing of your personal information for certain purposes
Right to Portability
Receive your personal information in a structured, machine-readable format
Right to Restrict
Request restriction of processing of your personal information
How to Exercise Your Rights
To exercise any of these rights, please contact us at privacy@knightfintech.com. We will respond to your request within 30 days. You may also be able to exercise some of these rights through your account settings.
Cookies and Tracking Technologies
We use cookies and similar tracking technologies to collect and track information about your browsing activities on our Services.
Essential Cookies
Required for the website to function properly. These cannot be disabled without severely affecting your use of the Services.
Analytics Cookies
Help us understand how visitors interact with our Services by collecting and reporting information anonymously.
Functional Cookies
Enable enhanced functionality and personalization, such as remembering your preferences and settings.
Advertising Cookies
Used to deliver relevant advertisements and track campaign performance. You can opt-out of these cookies.
Cookie Control
You can control cookies through your browser settings. However, disabling certain cookies may affect your experience on our Services. Most browsers allow you to:
- See what cookies are stored on your device
- Delete cookies individually or all cookies
- Block third-party cookies
- Block cookies from specific websites
- Block all cookies
Children's Privacy
Our Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.
If we discover we have collected information from a child under 18: We will delete that information as quickly as possible. We are committed to complying with the Children's Online Privacy Protection Act (COPPA) and similar regulations.
International Data Transfers
Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that are different from the laws of your country.
Data Transfer Safeguards
Standard Contractual Clauses: We use EU-approved Standard Contractual Clauses for transfers from the EEA
Adequacy Decisions: We transfer data to countries recognized by the EU Commission as providing adequate protection
Binding Corporate Rules: Internal policies ensuring data protection standards across our global operations
Changes to This Privacy Policy
We may update this privacy policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make changes, we will update the "Last Updated" date at the top of this policy.
How We Notify You of Changes
- We will post the updated policy on our website
- For material changes, we will send you an email notification
- We may display a prominent notice on our Services
- We may require you to acknowledge the changes before continuing to use our Services
We encourage you to review this privacy policy periodically to stay informed about how we are protecting your information.
Contact Us
If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us:
Response time: Within 48 hours
Phone
Monday - Friday, 9 AM - 6 PM IST
Postal Address
Knight FinTech Private Limited
Floor No. 6, Techniplex-II, Goregaon (W), Mumbai 400062
Maharashtra, India
Data Protection Officer
For privacy-related inquiries specific to GDPR or data protection regulations, you may contact our Data Protection Officer directly at hello@knightfintech.com.
Need Help?
Access your data rights or get answers to privacy questions
Exercise Your Rights Privacy FAQs