Data Privacy
Your data. Your rights.
This page constitutes the notice required under §5 of the Digital Personal Data Protection Act, 2023.
01Scope
Home Loan Doctor (“we”, “us”) operates the website at homeloandoctor.inand the services described on it. We are a Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) in respect of the personal data we process as described below.
This policy applies to all visitors and registered users of homeloandoctor.in, regardless of how you access the site.
02Data we collect
The data we collect depends entirely on which service you use.
| Service | Personal data collected | How |
|---|---|---|
| Free Loan Check | None | All inputs are processed entirely in your browser. No data is transmitted to our servers. |
| Paid Assessment — registration | Name, email address, phone number, city | Entered by you at homeloandoctor.in/register. |
| Paid Assessment — documents | Loan sanction letter, latest interest certificate | Shared by you directly with your assigned analyst by email, after payment. |
03Purpose of collection
We collect only what we need, and only for the purposes listed below.
| Data | Purpose |
|---|---|
| Name, email, phone | Delivering your assessment; analyst communication; payment coordination. |
| City | Determining eligibility for our Loan Rate Change Assistance service, currently limited to select PIN codes in Bengaluru. |
| Loan documents | Conducting the document-based analysis that forms the core of the Full Assessment. |
| Email (post-assessment) | 12-month rate monitoring — alerts when your lender announces a rate change that affects your EMI. |
04How we use your data
The lawful basis for processing your personal data is your consent, given at the point of registration. You may withdraw consent at any time by emailing privacy@homeloandoctor.in. Withdrawal of consent does not affect the lawfulness of processing before its withdrawal.
- We do not sell, rent, or trade your personal data.
- We do not share your data with any bank, lender, or financial institution.
- We do not earn referral fees or commissions. Your data is never used as part of a referral or lead-generation arrangement.
- We do not use your data for unsolicited marketing.
05Third-party processors
We use the following sub-processors to operate our service. Each processes data only under our instruction and is contractually bound to appropriate data protection standards.
| Processor | Role | Data shared | Location |
|---|---|---|---|
| Supabase | Database and authentication | Registration details — name, email, phone, city | United States · SOC 2 Type II certified |
| Vercel | Web hosting and edge delivery | Request logs (IP address, user agent) — not retained beyond 30 days | United States / global edge |
| Resend | Transactional email | Email address, name, assessment content | United States |
We do not use any third-party analytics, advertising, or tracking tools.
06Retention schedule
We retain personal data only as long as necessary for the stated purpose, or as required by law.
| Data | Retention period |
|---|---|
| Free check inputs | Not stored — processed in your browser only. |
| Registration details (name, email, phone, city) | 12 months after your last interaction with us, then permanently deleted. |
| Loan documents | Deleted within 30 days of delivery of your assessment. |
| Email address (rate monitoring) | Until you unsubscribe, or 12 months after assessment delivery — whichever is earlier. |
| Payment records | 7 years — statutory requirement under applicable Indian tax law. |
07Your rights under the DPDP Act, 2023
As a Data Principal under the DPDP Act, you have the following rights. To exercise any of them, email privacy@homeloandoctor.in with the subject line “DPDP Rights Request — [your name]”. We will acknowledge within 48 hours and respond in full within 30 days.
Right to access (§11)
Request a summary of the personal data we hold about you and the purposes for which it is being processed.
Right to correction and erasure (§12)
Request correction of inaccurate or incomplete personal data, or erasure of data that we are no longer required to retain.
Right to grievance redressal (§13)
Raise a complaint if you believe your personal data has been processed in violation of the DPDP Act. We will respond within 30 days.
Right to nominate (§14)
Nominate another individual to exercise your rights in the event of your death or incapacity. Nomination requests must be submitted in writing to our Grievance Officer.
08Security
- All data is transmitted over TLS 1.2 or higher.
- Database access is restricted to authenticated personnel only.
- Loan documents are accessible only to the analyst assigned to your case.
- No third party has access to your data without your explicit instruction.
09Children's data
Home Loan Doctor is intended for adults who are existing home loan borrowers. We do not knowingly collect or process personal data of individuals under the age of 18. If we become aware that data has been provided by a minor, it will be deleted immediately.
10Changes to this policy
We may update this policy from time to time. If we make material changes, we will notify registered users by email at least 14 days before the change takes effect. The revised policy will be published at homeloandoctor.in/privacywith an updated “Last updated” date. Continued use of our services after that date constitutes acceptance of the revised policy.
11Contact and Grievance Officer
For privacy-related queries, rights requests, or complaints:
Grievance Officer
Home Loan Doctor
privacy@homeloandoctor.inWe will acknowledge your query within 48 hours and resolve it within 30 days, as required under §13 of the Digital Personal Data Protection Act, 2023.
If you are not satisfied with our response, you may approach the Data Protection Board of India once it is constituted under the DPDP Act.
This page constitutes the notice required under §5 of the Digital Personal Data Protection Act, 2023. Home Loan Doctor · homeloandoctor.in · privacy@homeloandoctor.in