Privacy Policy

Last updated: 17 October 2026

This Privacy Policy explains how Nord Feron Labs (“Track Finance”) collects, uses and protects personal data when you use the platform. We handle personal data in accordance with India’s Digital Personal Data Protection Act, 2023 (DPDP Act).

1. Who we are

Nord Feron Labs, Munagapaka, Anakapalle District, Andhra Pradesh — 531033, India, is the data fiduciary for account data of lenders and the processor/fiduciary for borrower data entered by lenders, as applicable.

2. Data we collect

• Account data: name, phone, email, password (hashed), role, business details.
• Borrower data (entered by lenders): name, contact, address, photograph, and identity details. The full Aadhaar number is stored encrypted and never shown in full except to the claiming lender/admin through an audited, access-logged action; elsewhere only the last 4 digits are shown. Aadhaar is used for identification only.
• Loan & payment records you create on the platform.
• Billing data: credit purchases are processed by our payment partner (Razorpay). We do not store full card or bank numbers.
• Usage & security data: log-in history, device/IP for security and audit.

3. How we use data

• To provide and operate the platform (accounts, loans, collections, ratings, reports).
• To compute borrower ratings and power the shared borrower directory (see Terms §5).
• To process payments, send transactional emails (OTP, receipts, notices), and provide support.
• To secure the service, prevent abuse, and meet legal obligations.

4. Legal basis & consent

We process personal data on the basis of consent and for the legitimate provision of the service you request. Lenders are responsible for obtaining their borrowers’ consent before entering borrower data.

5. Sharing

We do not sell personal data. We share it only with service providers who help us run the platform — hosting, our email provider (Brevo) and our payment partner (Razorpay) — and where required by law. Borrower rating information is shared between lenders only as described in the Terms, with default/amount details withheld unless the originating lender opts to share.

6. Security

We use encryption in transit (HTTPS) and encrypt sensitive identifiers at rest (AES-256). Access to full identity data is restricted and audited. Passwords are hashed; sessions are revocable; sensitive actions are logged.

7. Retention

We retain data for as long as your account is active and as needed to provide the service or meet legal obligations. On verified deletion requests we remove or irreversibly anonymise data, subject to lawful retention requirements.

8. Your rights

Subject to the DPDP Act, you may request access to, correction of, or erasure of your personal data, and may withdraw consent. To exercise these rights, contact our Grievance Officer below.

9. Grievance Officer

10. Children

The platform is for business use by adults (18+). It is not directed at children.

11. Changes

We may update this policy; material changes will be notified in-app or by email.