On this page
- Introduction
- What we are, and what we are not
- What data do we collect?
- What do we use your data for?
- What we do NOT do with your data
- Who we share data with, and why
- Where your data is stored
- How long do we keep your data?
- Your rights, and how to exercise them
- How we protect your data
- Cookies
- Changes to this Policy
- Governing law
- Grievance redressal
- Board approval and adoption
| Document reference | VG/POL/PRIV/2026-27/01 |
|---|---|
| Version | 1.0 |
| Policy owner | Data Protection Officer — Mr. Mayank Garg |
| Approving authority | Board of Directors |
| Date of Board approval | 12 August 2026 |
| Effective date | 12 August 2026 |
| Review cycle | Annual, and upon any change to the data the Company collects or the purposes for which it is used |
| Next review due | 12 August 2027 |
| Publication | Displayed on https://maximoney.in and within the MaxiMoney application |
Introduction
Welcome. We at Value Garage Private Limited (CIN U66190DL2025PTC453505), which operates the MaxiMoney platform (“MaxiMoney”, “we”, “us”, “our”, “the Company”), take the privacy of our customers seriously. This Privacy Policy (“Policy”) explains what personal data we collect from you, why we collect it, what we do with it, how long we keep it, and what rights you have over it.
This Policy applies to every person who visits our website, uses the MaxiMoney application, or avails any of our services (“you”, “your”, the “User”).
MaxiMoney is a brand and trading name of Value Garage Private Limited. It is not a separate company. Every obligation in this Policy is an obligation of Value Garage Private Limited.
We have written this Policy in plain language because a privacy policy you cannot understand protects nobody. If anything here is unclear, please write to us at the address in the Grievance Redressal section below and we will explain it.
What we are, and what we are not
So that there is no confusion about who you are dealing with:
We are not a bank, a non-banking financial company, or any entity regulated by the Reserve Bank of India. We are not a lender and we do not lend money.
We do not decide whether you get a loan, on what terms, or at what rate. Where you choose to proceed with a loan, that decision is made by the bank or non-banking financial company concerned, and your loan relationship is with that lender.
We help you understand your own credit position and, if you wish, we refer you to lenders through our loan-distribution channel partners.
We do not report anything about you to any credit bureau. We receive credit information; we do not supply it.
What data do we collect?
We collect only what we need. Broadly, this falls into the following categories.
| Category | What it includes | Why we need it |
|---|---|---|
| Identity and contact data | Name, date of birth, gender, mobile number, email address, postal address | To create and operate your account, to identify you, and to communicate with you |
| Identification data | Permanent Account Number (PAN) and such other identifiers as are required to retrieve your credit information or to complete a referral | To match you correctly with your own credit record and to pass a referral to a lender at your request |
| Credit information | Your credit report and credit score, obtained from a credit information company only with your consent, at the moment you give it | To show you your own credit information and insights, and to help you assess your eligibility |
| Financial information you provide | Income, existing loans and their terms, and similar details you choose to tell us | To advise you on reducing the interest cost of your existing borrowings |
| Usage and device data | IP address, device and browser information, application version, pages viewed and actions taken | To operate the platform securely, to detect fraud and misuse, and to improve the service |
| Communications | Your messages to us, support tickets, and records of calls where these are made | To answer your questions and to handle any complaint |
A note on your credit information. We obtain it from a credit information company only after you have given specific consent for that particular retrieval, and only for the purpose stated in that consent. We keep a permanent record of the consent you gave — who consented, when, to what, and through which channel — because we must be able to demonstrate that every retrieval was authorised by you. The credit report itself is a separate matter and is dealt with under How long do we keep your data below.
Age. Our services are for adults. By using them you confirm that you are 18 years of age or older. We do not knowingly collect the personal data of children.
What do we use your data for?
- To create and operate your account and to provide the services you have asked for.
- To retrieve and display your own credit information and insights, where you have consented to that retrieval.
- To advise you on your existing borrowings and on options for reducing your interest cost.
- To refer you, at your request, to a bank or non-banking financial company through our channel partners, where you wish to proceed with a loan.
- To communicate with you about your account and the services you use, and to respond to your questions and complaints.
- To keep the platform secure, detect and prevent fraud, and protect our systems and our users.
- To comply with law, and to respond to a court, regulator or other lawful authority.
- To improve our services, using aggregated or de-identified information wherever that is sufficient for the purpose.
What we do NOT do with your data
We think it is as important to tell you what we do not do.
- We do not sell your personal data or your credit information to anyone. Not to lenders, not to data brokers, not to advertisers, not to anyone else.
- We do not share your credit information with any lender or with any channel partner. Your credit report is retrieved for you and shown to you. Where you ask us to refer you to a lender, that referral proceeds on the information and documents you provide — not on your credit report.
- We do not use your credit information to make any decision about you, to price anything, to profile you, to market to you, or for analytics.
- We do not pass your credit information to any group company, subsidiary, affiliate or associate. The Company has no such entities.
- We do not send your data outside India. See Where your data is stored below.
Who we share data with, and why
| Who | What is shared | Why |
|---|---|---|
| Credit information companies — presently Experian | The identifiers needed to locate your credit record, such as name, date of birth, mobile number and PAN | So that your credit report can be retrieved and shown to you, after you have consented |
| Loan-distribution channel partners — presently Ruloans and Andromeda — and, through them, the lender you choose | Only the details required to progress the referral you have asked for. Never your credit report or credit score | To place your loan enquiry with a lender, at your request |
| Technology service providers | Data held on infrastructure operated on our behalf, all located in India | To host and operate the platform |
| Courts, regulators and lawful authorities | What we are legally required to provide | To comply with law |
Every service provider that handles your data is bound by a written agreement requiring confidentiality, appropriate security, restrictions on further sharing, and the return or deletion of data when the engagement ends.
Where your data is stored
All of your personal data, and all credit information, is stored and processed within India. Our infrastructure is hosted in the Bangalore region of DigitalOcean, with encryption key management on Google Cloud in an Indian region. This applies equally to our primary systems, backups, snapshots and logs.
We maintain no server, database, replica, standby, backup or log store outside India, and we do not transfer your data outside India.
How long do we keep your data?
| What | How long | Why that period |
|---|---|---|
| Your credit report and score | Only as long as needed for the purpose you consented to, and never more than six months from when we receive it. Then it is securely deleted | This is a hard limit under the rules that govern access to credit information |
| The record of your consent | Permanently. This is a record that you gave permission — not a copy of your credit report | We must be able to demonstrate that every retrieval of your credit information was authorised by you |
| Your account and contact data | For as long as you hold an account with us, and thereafter only for as long as the law requires | To provide the service, and to meet legal record-keeping duties |
| Complaint records | Five years | So that we can evidence how a complaint was handled |
| Security and system logs | At least 180 days, within India | Required under the CERT-In directions applicable to all companies |
When a retention period ends, we delete the data securely and irrecoverably, and we log the deletion.
Your rights, and how to exercise them
You have the following rights. Exercising any of them is free, and we will not treat you differently for doing so.
| Right | What it means | How to use it |
|---|---|---|
| Withdraw consent | You may withdraw your consent to our holding or retrieving your credit information at any time, as easily as you gave it. We will delete any credit information we hold and confirm the deletion to you within five working days. If we hold none, we will tell you that | Email hello@maximoney.in or use the grievance form |
| Access | Ask us what personal data of yours we hold and what we have done with it | Email hello@maximoney.in |
| Correction | Ask us to correct data that is inaccurate, or complete data that is incomplete | Email hello@maximoney.in |
| Erasure | Ask us to delete your personal data where we no longer need it and no law requires us to keep it | Email hello@maximoney.in |
| Grievance | Complain about anything we have done with your data | See the Grievance Redressal section below |
| Nominate | Nominate another person to exercise these rights on your behalf if you are unable to | Email hello@maximoney.in |
One thing we cannot delete. If you ask us to erase your data, we will not delete the record that you once gave consent to a credit information retrieval, or the record that you withdrew it. We are required to keep that record so we can show that each past retrieval was properly authorised. We will delete the credit information itself.
If you are not satisfied with how we handle any request or complaint about your personal data, you may approach the Data Protection Board of India under the Digital Personal Data Protection Act, 2023.
How we protect your data
- Your data is encrypted both in transit and when stored.
- Access is limited to those of our people who need it to do their job, is individually logged, and is reviewed regularly.
- Everyone at the Company is bound by a confidentiality undertaking that continues after they leave.
- Our systems are protected by firewalls, restricted administrative access, multi-factor authentication and monitoring.
- We test for vulnerabilities, and an independent auditor examines our handling of credit information every year.
- If a security incident affects your personal data, we will notify the authorities as the law requires and, where it affects you, we will notify you.
We take security seriously, but no system anywhere can be guaranteed absolutely secure. What we undertake is to apply appropriate safeguards, to keep them under review, and to be straight with you if something goes wrong.
Cookies
Our website uses cookies to keep you signed in, to remember your preferences, and to understand how the site is used so that we can improve it. You can control cookies through your browser settings; if you disable them, some parts of the site may not work as intended.
Changes to this Policy
We may update this Policy as our services change or as the law changes. The current version is always published on our website and in the application, with the date of the last update shown. Where a change materially affects your rights, we will bring it to your attention rather than relying on you to notice it.
Governing law
This Policy is governed by the laws of India. Any dispute arising under it is subject to the exclusive jurisdiction of the courts at Delhi, India.
Grievance Redressal
If you have any question, concern or complaint about your personal data or about this Policy, please contact us. We will acknowledge you within 24 hours and respond substantively as set out in our Consumer Grievance Redressal Policy.
| Details | |
|---|---|
| Grievance Redressal Officer | Mr. Suraj Agarwalla, Director — suraj@maximoney.in |
| Data Protection Officer | Mr. Mayank Garg — mayank@maximoney.in |
| General support | hello@maximoney.in | +91 99584 21835 | Monday to Saturday, 10:00 a.m. to 7:00 p.m. |
| Online | https://maximoney.in/grievance |
| Post | The Grievance Redressal Officer, Value Garage Private Limited, Flat No. 26, Vandana Apartment, East Delhi – 110092, Delhi, India |
Board approval and adoption
The Privacy Policy set out above was placed before the Board of Directors of Value Garage Private Limited and was considered, approved and adopted by the Board at its meeting held on 12 August 2026 at 10:00 a.m. at the Registered Office of the Company at Flat No. 26, Vandana Apartment, East Delhi – 110092, at which both directors were present.
For and on behalf of the Board of Directors
| Signature | (signed) |
|---|---|
| Name | Mr. Nevaid Aggarwal |
| Designation | Director |
| DIN | 07621702 |
| Date | 12 August 2026 |
| Place | Noida, Uttar Pradesh |
(Company seal, where applicable)