Legal

Terms & Conditions · Privacy Policy

Please read these carefully before using GatiPay.

Last updated: 03 Nov 2025

Terms & Conditions

These Terms govern your use of GatiPay operated by NIRANTARA FINACCESS PRIVATE LIMITED (CIN: U65993KA1997PTC063974). By accessing or using our services, you agree to these Terms.

1) Parties & Nature of Services

We provide a digital interface to explore/apply for loans, complete KYC, execute agreements (including e-sign), make repayments (including mandates/autopay), and access related services. Where loans are provided by a regulated entity (RE), your loan is extended and serviced by the RE.

2) Eligibility & Onboarding

  • You must be 18+ and competent to contract.
  • You consent to KYC/AML checks (CKYC/Aadhaar offline or e-KYC where legally permitted), credit bureau enquiries, and other verifications.

3) Disclosures, KFS & Documentation

  • Before acceptance, you will receive a Key Fact Statement (KFS) with APR, charges, penal charges, tenure, repayment schedule, and grievance contacts.
  • You will receive digital copies of the KFS, loan agreement/sanction letter, and acknowledgement. Acceptance may be via e-sign or OTP.

4) Pricing, Fees, and Interest Rate Policy

The exact interest rate (APR), processing fees, and any penal charges for late payments will be explicitly detailed in your Key Fact Statement (KFS) and loan agreement prior to acceptance.

Our maximum Annual Percentage Rate (APR) and other charges strictly adhere to the Fair Practice Code and RBI guidelines. There are no hidden charges. All applicable taxes (e.g., GST) will apply as per prevailing laws.

5) Repayment, Mandates & Collections

  • You authorise setup of e-mandates (e-NACH/UPI Autopay/cards) and pre-debit notices as applicable.
  • On failures, retries may occur as permitted. Late/penal charges may apply.
  • Collections follow non-coercive practices and reasonable contact hours per applicable guidelines.

6) Credit Reporting

We/RE may report your loan performance to credit bureaus. Overdues/defaults can impact your credit score. For disputes, raise a ticket; corrections are processed where due.

7) Integrated Payments & Third-Party APIs

  • We interface with payment aggregators/gateways, UPI PSPs, card tokenisation, e-mandate/NACH, e-sign, Account Aggregators, Aadhaar offline/e-KYC (where authorised), bank verifiers, bureaus, communications, analytics, and cloud services.
  • Card details are not stored by us; we rely on tokenisation. Payment data is processed per applicable localisation and network rules.
  • Third-party outages or limits are outside our control; we coordinate reasonable support.

8) Prohibited Conduct

No misrepresentation, document tampering, identity theft, security circumvention, reverse-engineering, malware, scraping, or unlawful/abusive use.

9) Intellectual Property & Licence

Content and software are protected by IP laws. We grant a limited, revocable, non-transferable licence for personal/authorised business use in India.

10) Liability & Indemnity

To the maximum extent permitted by law, we are not liable for indirect, incidental, punitive, or consequential damages. Our aggregate liability is capped at the fees (if any) paid by you to us in the 3 months preceding the claim or ₹10,000, whichever is lower. You agree to indemnify us/RE against losses from your breach or unlawful use.

11) Suspension & Termination

We may suspend/limit/terminate for fraud, security risk, regulatory requirement, non-payment, or breach. You may stop using the Platform at any time. Accrued rights survive termination.

12) Refund & Cancellation Policy

Failed Transactions: If a payment fails but money is debited, it will be automatically refunded to the original payment method within 5-7 working days.

Duplicate Payments: Excess payments will be adjusted against future dues or refunded within 7-10 working days after reconciliation by GatiPay.

Loan Cancellation: Once disbursed, a loan cannot be cancelled. It can only be prepaid or foreclosed as per your loan agreement.

Chargebacks: Direct chargeback disputes to our Grievance Officer. They will be investigated and resolved within 7-14 working days.

13) Governing Law, Dispute Resolution

Governing law: India. Jurisdiction: courts/tribunals at Bangalore, Karnataka, subject to ombudsman/consumer forum jurisdiction as applicable. Arbitration (if included) must comply with Indian law and consumer protections.

14) Changes to these Terms

We may update these Terms. Continued use after updates constitutes acceptance. Material changes may be notified in-app or via email/SMS.

Note: For loans provided by an RE, the loan agreement with the RE prevails where inconsistent with these Terms.

Privacy Policy

This Privacy Policy explains how NIRANTARA FINACCESS PRIVATE LIMITED (“we”, “us”) collects, uses, stores, and shares your personal data when you use GatiPay. It is aligned with the Digital Personal Data Protection Act, 2023 and applicable sectoral regulations.

1) Key Definitions & Scope

  • Personal Data: data relating to an identifiable individual; may include sensitive data such as KYC/financial information.
  • Roles: We act as Data Fiduciary for our own purposes and as a Processor for our RE partners, as applicable. For loan accounts, the RE is typically the primary controller.

2) What We Collect

  • Identity & KYC: Name, DOB, gender, addresses, email, mobile, PAN, CKYC details/identifier, Aadhaar (offline XML/e-KYC where permitted), photos/doc scans, video (for V-CIP where applicable).
  • Financial & Employment: bank details/statements, employment, income docs, GST/ITD info, liabilities, bureau scores/tradelines.
  • Loan & Repayment: applications, offers, KFS acknowledgement, loan agreements, disbursals, repayments, charges/fees/penal charges.
  • Payments & Mandates: UPI VPA, card tokens, mandate IDs (e-NACH/UPI Autopay), pre-debit logs, chargeback/failure metadata.
  • Usage & Device: device IDs, OS, app version, IP, time zone, language, referral, cookies/SDK events, crash logs.
  • Communications: emails/SMS/WhatsApp, call recordings for quality/legal compliance.

3) Sources

Data is collected from you, our RE partners, Account Aggregators (with consent), CKYC, credit bureaus, PAN/ITD, bank verifiers, payment providers/UPI PSPs, e-sign/e-mandate providers, analytics and anti-fraud vendors, and lawful government databases.

4) Lawful Grounds & Purposes

  • Onboarding/KYC/AML, eligibility & underwriting, fraud prevention, risk scoring.
  • KFS presentation, documentation (e-sign), disbursal, repayment/collections, support.
  • Regulatory compliance, audits, and statutory reporting.
  • Analytics, product improvement, security/incident response.

5) Consent Management

We record verifiable consent for optional processing and for specific pulls (AA, bureau, e-KYC/e-Sign). You may withdraw consent for optional processing (e.g., marketing). Core processing required for KYC/AML/loan servicing may continue as required by law/contract.

6) Automated Decisions & Profiling

Models/rules may be used for eligibility, pricing, and fraud. You may request a meaningful explanation of factors for adverse decisions and ask for manual review.

7) Payments, Tokenisation & Mandates

  • We do not store raw card data; we rely on network/issuer tokenisation.
  • UPI Autopay/e-NACH mandates are created only with your confirmation; pre-debit notices are sent where required.
  • Payment data is stored/processed per applicable localisation requirements.

8) Disclosures to Third Parties

Disclosures occur on a need-to-know basis with RE partners, KYC/e-KYC/e-Sign/e-Mandate providers, AA, bureaus, payment aggregators/UPI PSPs, banks, verification vendors, anti-fraud/analytics, communications, cloud hosting, and regulators/courts when required.

9) International Transfers

We strive to keep Indian payment data in India. Other data may be transferred subject to lawful safeguards, contracts, and technical controls.

10) Security

  • Encryption in transit/at rest (where applicable), tokenisation, MFA/least-privilege.
  • Logging/monitoring, secure SDLC, vulnerability scans, incident/breach response.
  • We will notify affected users and competent authorities as required by law in case of a qualifying breach.

11) Retention

Data is retained only as necessary for the above purposes or as required by law/contract. Typical baselines: KYC/transaction records at least 5 years after loan/account closure; mandate/accounting records as per tax/regulatory limits; consent logs retained for compliance defence. Thereafter, we delete or irreversibly anonymise.

12) Children

The Platform is not intended for minors under 18. We do not knowingly onboard minors.

13) Your Rights

  • Access a copy of your personal data (subject to law).
  • Request correction/erasure of inaccurate or unnecessary data.
  • Lodge a grievance with our Grievance Officer; if unresolved within 30 days, escalate to the Data Protection Board of India and/or RBI Ombudsman (as applicable).
  • Nomination right (where available) to appoint a nominee for rights exercise.

14) Cookies & SDKs

We use essential, analytics, and marketing cookies/SDKs. You can manage preferences in the app or via your browser/OS; disabling may impact functionality.

15) Changes

We will post updates here with a new “Last updated” date. Material changes may be notified in-app or via email/SMS.

Disclaimer: This page summarises our practices for convenience and does not replace your loan agreement with the RE. In case of conflict, the RE’s loan agreement and mandatory disclosures (KFS) prevail for the loan.

Contacts & Grievance Redressal

  • Company:NIRANTARA FINACCESS PRIVATE LIMITED (CIN: U65993KA1997PTC063974)
  • Address:NIRANTARA FINACCESS PRIVATE LIMITED, NO. 8/19, NANDINI LAYOUT, GANESHA BLOCK, 8TH CROSS, 1ST MAIN, BANGALORE - 560096, KARNATAKA, INDIA
  • Jurisdiction:Bangalore, Karnataka · Effective: 03 Nov 2025