Privacy Policy

1. Introduction

ArisX is the marketing name of Arion Analytics Private Limited (“ArisX”, “we”, “us”). We are committed to protecting your personal data and handling it responsibly. This Privacy Policy explains how we collect, use, share, store, and safeguard your information in line with the Digital Personal Data Protection Act, 2023 (the “DPDP Act”) and other applicable Indian law.

2. Purpose of processing

We collect and process personal data only for specific, lawful purposes, including to:

• Provide and operate our products and services for lender partners and, where relevant, their borrowers.
• Communicate with you about updates, transactions, settlements, and support.
• Improve, secure, and personalise your experience with our platform.
• Meet our legal, regulatory, and audit obligations.

We do not use your data for any purpose beyond those made known to you at the time of collection.

3. Legal basis for processing

We process personal data on the basis of your free, informed, and specific consent, obtained at the point of collection. Where permitted, we may also rely on the “deemed consent” grounds under the DPDP Act (for example, to meet a legal obligation or fulfil a service you have requested).

You may withdraw your consent at any time by writing to us at info@arisx.in. Withdrawal does not affect processing already carried out on the basis of your prior consent.

4. Your rights as a Data Principal

Under the DPDP Act, you have the right to:

• Access — request a summary of the personal data we hold about you and how it is processed.
• Correction — have inaccurate or outdated data corrected or completed.
• Erasure — request deletion of your data where we are not legally required to retain it.
• Grievance redressal — raise concerns about how your data is handled and have them addressed.
• Nominate — nominate another individual to exercise your rights in the event of death or incapacity.

To exercise any of these rights, contact our Grievance Officer at info@arisx.in. We aim to respond within 15 working days.

5. Data retention

We retain personal data only for as long as needed to fulfil the purposes described above or as required by law. Once the purpose is met or consent is withdrawn — and no overriding legal obligation applies — we securely delete or anonymise the data.

6. Cross-border data transfer

We may process or store data with service providers located outside India, only in jurisdictions permitted under applicable law. Where we do, we put appropriate contractual and technical safeguards in place to keep your data protected to the standards required by the DPDP Act.

7. Security measures

We apply reasonable technical and organisational safeguards — including encryption in transit and at rest, access controls, tenant isolation, and audit logging — to protect personal data against unauthorised access, loss, or misuse.

In the event of a personal data breach, we will notify the Data Protection Board of India and affected individuals as required under the DPDP Act.

8. Updates to this policy

We may update this Privacy Policy from time to time. Where changes are material, we will make them known through a notice on our website. Please review this page periodically for the latest version.

9. Contact us

Arion Analytics Private Limited — Regd. Office: 94, Lamora Cube R V Road, Basavanagudi, Bangalore, Karnataka, India, 560004. For any privacy query or to reach our Grievance Officer, email info@arisx.in.