Privacy Policy

a. Information you give us directly

• Identity and contact details— name, email address, phone number.
• Financial profile— income, employment details, expenses, existing obligations, financial preferences, goals and requirements.
• Credit information— credit score, credit report and credit bureau data, where you provide it or authorise us to retrieve it on your behalf.
• Identity and verification documents— photographs and scans of identity documents (such as PAN, Aadhaar or other government identification) and photographs of yourself, where you upload or capture them for a credit application.
• Financial documents— bank statements, salary slips, account statements and similar records that you upload, forward or otherwise submit to us, including where you share them as the content of an email or message.
• Conversation content— queries and messages you send through our conversational interface relating to loans, credit cards, insurance and other financial products.

We do not read your device’s SMS, iMessage or mailbox. iOS provides no such access and we request none. Documents reach us only when you actively submit them.

b. Information collected automatically

• Device and usage information— device model and operating system, browser type, IP address, in-app interaction logs.
• Diagnostics— crash reports and performance data used to keep the Platform stable. This is not linked to your identity.

c. Information from third parties

• Information provided by financial institutions, service partners or APIs, where you have consented to that exchange.

We use the information described above to:

• Provide the Platform and deliver conversational guidance and financial insights;
• Personalise the products and options presented to you, based on the profile and financial information you provide;
• Prepare and forward a credit application, together with the documents you submit, to the lending partner you select;
• Analyse usage of the Platform in order to improve its accuracy, reliability and performance;
• Maintain the security and stability of the Platform and investigate misuse;
• Comply with applicable legal and regulatory obligations.

We do not verify the documents you submit. Verification is performed by the lending partner to whom your application is forwarded.

FinsageX uses artificial intelligence and machine learning models (including Birbal) to:

• Understand user queries in natural language
• Generate relevant, contextual, and unbiased insights
• Continuously improve guidance quality

While AI assists in analysis and recommendations, final financial decisions remain with the user.

If you choose to connect your Gmail account in the Birbal.club app, we access your Gmail data through Google APIs only to track and send correspondence with the banks and housing finance companies that hold your home loans. Connecting Gmail is optional, and the app works without it.

What we access, and why

• Read bank emails (gmail.readonly):we read only emails from the email domains of banks and housing finance companies, including the lender you write to through Birbal, so that we can detect your lender's replies to your rate-reset and other loan requests and show them to you in the app. We check for new lender emails in the background while Gmail is connected. We do not read other emails.
• Send emails you approve (gmail.send): we prepare the email to your lender and show it to you in full in the app. It is sent from your Gmail account only after you review it and explicitly tap Send, one email per tap, and only to your lender. We do not create drafts in your Gmail, and we never send an email on your behalf without your approval for that email.

How we use it

• We use Gmail data only to provide and improve the user-facing loan-correspondence features described above.
• We may use automated processing, including AI models, to read your lender's emails and prepare replies for you to review in the app. This processing serves only your own loan requests.
• We do not use Gmail data to develop, improve or train generalised or non-personalised AI or machine learning models.
• We do not use Gmail data for advertising, and we do not sell it or transfer it to data brokers or information resellers.
• We do not use Gmail data to determine creditworthiness or for lending purposes.
• Our staff do not read your Gmail data unless you give us your consent for a specific message, it is necessary for security purposes (such as investigating abuse), it is required to comply with applicable law, or the data has been aggregated and anonymised for internal operations.

Sharing

We transfer Gmail data to others only as needed to provide these features (for example, to our hosting and AI-processing service providers, who act on our instructions), to comply with applicable law, or as part of a merger, acquisition or sale of assets, with notice to you. When you tap Send, the email you approved goes to the lender address shown to you.

Storage, retention and deletion

• Email content we store is encrypted at rest, and your Google access tokens are encrypted with a managed key service.
• Stored lender emails are deleted automatically 90 days after we receive them.
• You can disconnect Gmail at any time from Profile → Gmail in the app. When you do, we stop monitoring your inbox, revoke our access to your Google account and delete the stored email content.
• You can also revoke access at any time from your Google Account's third-party access settings, or delete your Birbal.club account as described below.

Where this section conflicts with any other part of this Privacy Policy, this section governs how we handle Gmail data.

Lending partners

When you choose to proceed with a specific credit product, we forward your application and the documents you have submitted to that lending partner so it can process your application. This transfer happens only at your election, and only to the partner you select. We do not send your documents to lenders you have not chosen. The lending partner acts as an independent controller of your information once it receives it, under its own privacy policy, and is solely responsible for verification, credit assessment and any resulting credit agreement.

Technology and infrastructure providers

We use service providers for hosting, storage, communications and analytics. They process information only on our instructions and under contractual confidentiality and security obligations.

Legal and regulatory disclosures

We may disclose information where required by law, regulation, court order or a lawful request from a competent authority.

• We do not use your information for advertising or marketing purposes.
• We do not link information collected through the Platform with data from third parties for advertising purposes.
• We do not share your information with data brokers.
• We do not integrate third-party advertising SDKs or advertising attribution SDKs in our mobile applications.
• We do not use advertising identifiers, and we do not track your activity across other companies' apps or websites.

Cookies and similar technologies

Cookies and similar technologies are used on our website only for essential functionality and to understand aggregate usage so that we can improve the Platform. They are not used to build advertising profiles. You may manage or disable cookies through your browser settings.

We implement industry-standard security measures, including:

• Secure servers and encrypted communications
• Restricted access to personal data
• Continuous monitoring and safeguards against unauthorized access

Despite best efforts, no system is completely secure, and users share information at their own discretion.

You may access, correct or delete your personal information, obtain a copy of it, and withdraw consent where applicable.

Requesting account deletion

Whether you signed up through our iOS app, Android app or website, you can request deletion of your Birbal.club account and associated personal data. Visit our Delete Account page and follow the instructions, or write directly to support@birbal.club from the email address associated with your account. A single request covers your account across all platforms. Once we receive and verify your request, we will delete your data within 30 days.

Some information may be retained where we are legally required to keep it, or where a lending partner is independently required to retain records relating to an application you submitted. Deleting your Birbal.club account does not delete information already held by a lending partner; to exercise rights against that lender, contact the lender directly.

We retain personal information only for as long as necessary to:

• Provide services
• Meet legal, regulatory, or operational requirements

Our Platform may contain links to third-party websites or services. FinsageX is not responsible for the privacy practices or content of those external platforms.

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date. Continued use of the Platform constitutes acceptance of the revised policy.

Effective date: 21 Sep 2026 · Last updated:21 Sep 2026 — expanded disclosure of documents and credit information collected; clarified that we do not lend, verify or track; added in-app account deletion path and grievance officer.

You may contact the Grievance Officer with any complaint regarding the processing of your personal information.

We will acknowledge your complaint within 48 hours and respond within 30 days of receipt.

If you have questions, concerns or requests regarding this Privacy Policy, please contact us:

Finsagex Technologies Pvt Ltd

3rd Floor, A-306, THE FIRST, B/s Keshavbaug Party Plot, B/h ITC Hotel, Vastrapur, Ahmedabad, Gujarat 380015, India

See also our Terms and Conditions and Refund and Cancellation Policy.