Privacy Policy

1. Scope

This policy applies to the Riverline mobile application, the credit counselling and debt-resolution services made available through it, and related communications. Some features are optional and collect information only when you choose to enable them and grant the relevant permission.

2. Information we collect

Account and verification information

We may collect your mobile number, one-time-password verification records, name, language preference, Permanent Account Number (PAN), consent records and other details you submit to create or use your account.

Credit information

With your affirmative consent, we may obtain your credit information from Experian Credit Information Company of India Private Limited ("Experian"), including your consumer credit information report, credit score, aggregate scores, references, inferences and related details needed for the permitted purpose described below.

Counselling and voice interactions

We may process the information you share during counselling, including text transcripts, call and connection metadata, preferences, action items and, where recording is enabled, audio recordings. We provide notice or request consent where required.

Connected email account

If you connect a Google account, we may access the minimum email data needed to find relevant lender or credit-related conversations, prepare drafts, monitor replies and send a message only after the action has been approved by you. You may disconnect the account at any time.

Financial transactional SMS

If you enable SMS access, we may read and monitor financial transactional messages relevant to bank, loan, card, repayment and related activity. The app is designed so unrelated personal messages are not sent to Riverline. We do not use SMS access for general message collection.

Location

If you enable location access, we may collect approximate location while you are using the app for service availability, fraud prevention and contextual assistance. We do not request precise or background location for these purposes.

Notifications, device and usage data

We may collect a push-notification token, notification status and preferences, device and operating-system information, app version, network and diagnostic data, feature usage, errors, performance data and session-replay data. We take steps to exclude sensitive form fields such as OTPs, PAN values and message contents from analytics and replay tools.

3. How we use information

• Verify your mobile number and maintain your account.
• Retrieve, present and explain your credit information with your consent.
• Provide AI-supported credit counselling, debt-resolution guidance and user-requested assistance.
• Help prepare and manage lender or creditor communications that you review or authorise.
• Operate notifications and optional SMS, email and location features.
• Secure the app, prevent fraud, troubleshoot failures and improve reliability and user experience.
• Comply with legal, regulatory, contractual and audit obligations.

4. Credit information and Experian consent

Before retrieving credit information, Riverline presents a separate, unselected consent control and records your affirmative acceptance. You appoint Riverline as your authorised representative to receive your Credit Information from Experian solely for credit counselling and debt-resolution purposes, including credit information retrieval and analysis, debt-consolidation assistance, settlement or closure of overdue or written-off obligations, and assistance with access to new or refinanced credit where requested by you (the "End Use Purpose").

Your authorisation may operate on an ongoing basis for the period displayed at consent and will not exceed six months. Credit Information is used only for the End Use Purpose and handled in accordance with applicable law, including the Credit Information Companies (Regulation) Act, 2005 and related rules and regulations ("CICRA").

Except as permitted by your consent, CICRA and our agreements with Experian, we do not aggregate, retain, store, copy, reproduce, republish, upload, post, transmit, sell or rent Credit Information. After completion of the relevant transaction or End Use Purpose, the applicable Credit Information is destroyed, purged or erased within one business day, subject to any record we are required to retain by law.

5. Google user data

Our use and transfer of information received from Google APIs will comply with the Google API Services User Data Policy, including its Limited Use requirements. Google user data is used only to provide or improve the user-facing email feature you enable. We do not use it for advertising, data brokerage, determining lending eligibility or creditworthiness, or training general-purpose AI models.

You remain in control of email actions. Drafts are presented for your review, and messages are sent only when you approve the relevant action. You can revoke access through Riverline or your Google Account settings.

6. How we share information

We may share information only as needed with:

• Experian and other authorised credit-information providers for consented credit-report services.
• Lenders, creditors, settlement counterparties or professional advisers when you request or authorise an interaction.
• Technology, communications, hosting, analytics, security and customer-support providers acting for us under contractual safeguards.
• Governmental, regulatory, judicial or law-enforcement authorities where required by law or necessary to protect rights and safety.
• A successor in connection with a merger, financing, acquisition or transfer of business, subject to appropriate confidentiality protections.

We do not sell your personal information.

7. Retention and deletion

We retain account, consent, counselling, communication and operational records only for as long as reasonably necessary to provide the service, meet legal or contractual obligations, resolve disputes, prevent fraud and enforce our agreements. Different categories may have different retention periods. Credit Information received for the Experian End Use Purpose is handled according to the shorter deletion requirement described above.

When information is no longer required, we delete, anonymise or securely isolate it, subject to lawful retention requirements and backup cycles.

8. Security

We use reasonable administrative, technical and organisational safeguards intended to protect information against unauthorised access, loss, misuse or alteration. No transmission or storage system is completely secure, so we cannot guarantee absolute security.

9. Your choices and rights

Subject to applicable law, you may request access, correction or deletion of your personal information, withdraw consent where processing relies on consent, disconnect a connected Google account, change notification preferences, or revoke SMS, microphone and location permissions through device settings. Revoking a permission may limit the related optional feature but does not affect processing that was lawful before revocation.

You may also contact us to raise a privacy question or grievance. We may need to verify your identity before completing a request.

10. Children

Riverline is intended for adults aged 18 or older. We do not knowingly provide the app to children or collect their personal information.

11. Changes to this policy

We may update this policy to reflect changes to the app, our practices or applicable law. We will post the updated version with a revised effective date and provide additional notice where required.

12. Contact us

Pointfront Technologies Private Limited (Riverline)
WeWork Prestige Cube, Site No. 26, Laskar Hosur Road, Adugodi, Koramangala, Bengaluru, Karnataka 560030, India
Email: developers@riverline.ai