1 BACKGROUND
This Privacy Policy has been framed in accordance with applicable Indian laws and regulatory requirements relating to privacy, data protection and digital lending, including the applicable provisions of the Information Technology Act, 2000 and rules made thereunder, the Digital Personal Data Protection Act, 2023 and rules notified thereunder to the extent applicable and in force, and the Reserve Bank of India (Digital Lending) Directions, 2025, as amended from time to time.
MyInstaCash is a web-based Digital Lending Application ("DLA") operated by GrowthX Business Technology Solutions Private Limited ("GrowthX", "we", "our" or "us"), which acts as a Lending Service Provider ("LSP"). GrowthX bears CIN U70200KA2023PTC172266 and GSTIN 09AAKCG3843Q1ZU. The Platform is available at https://myinstacash.com/.
GrowthX, through MyInstaCash, facilitates digital loan products offered by Orrish Finance Private Limited, CIN U65100CT2019PTC009508, an RBI-registered Non-Banking Financial Company and the Regulated Entity ("RE") / Lender. Orrish Finance remains responsible for final credit decisions, sanction or rejection, loan amount, interest rate, APR, tenure, disbursement, repayment terms and other lender-related obligations.
2 PURPOSE AND SCOPE
This Privacy Policy explains how Personal Data is collected, received, used, processed, shared, stored, protected, retained and deleted when you access the MyInstaCash website, initiate or submit a loan application, provide KYC or financial information, communicate with customer support or otherwise use services facilitated through MyInstaCash.
Where processing of particular Personal Data requires consent, appropriate consent will be sought at the relevant stage of the digital lending journey. If you do not wish to provide information that is essential for processing a requested service, you may discontinue the relevant service or application.
3 DEFINITIONS
"Personal Data" or "Personal Information" means information relating to an individual who is identifiable by or in relation to such information. "User", "you" or "your" means any individual accessing or using MyInstaCash. "Consent" means a free, specific, informed and unambiguous indication of agreement to processing for a specified purpose, wherever consent is required under applicable law.
4 COLLECTION OF INFORMATION
Depending on your loan journey, we, Orrish Finance and/or authorized service providers may process identity and contact information such as your name, date of birth, mobile number, email address, residential or office address, photograph, PAN, KYC documents, address proof and other information required for identity verification.
We may also process employment, occupation, employer, salary or income information; bank account details, bank statements, repayment information and existing financial obligations; and, with your consent and subject to applicable law, credit score, credit history, existing credit facilities and other information obtained from authorized Credit Information Companies.
Information may be obtained directly from you or lawfully from Orrish Finance, Credit Information Companies, KYC and verification providers, banks, Account Aggregators, payment or mandate service providers, bank-verification providers, fraud-prevention providers and other authorized service providers.
Web-Based Data Collection
MyInstaCash presently operates as a web-based digital lending journey and does not seek unrestricted access to your mobile phone. We do not access personal SMS messages, contact lists, call logs, installed application lists or unrelated files stored on your device.
Where required for KYC or identity verification, you may be asked to permit browser-based camera, microphone or location access, or to upload a specific document. Such access will be limited to the disclosed purpose and subject to applicable notice and consent requirements. We do not continuously track your location and do not intentionally collect or store biometric data except where specifically permitted or required under applicable law through an authorized process.
Log Files and Technical Information
When you access MyInstaCash, certain technical information may be generated automatically, including IP address, browser type, operating system, device type, session information, referring or exit pages, pages accessed, access time, cookies, security logs and similar information. Such information may be used for website operation, cybersecurity, fraud prevention, troubleshooting, analytics and service improvement.
5 USE OF INFORMATION
Personal Data may be used for customer identification, authentication, KYC, loan application facilitation, credit assessment support, income and bank verification, documentation, fraud prevention, cybersecurity, customer support, repayment support, grievance handling, regulatory compliance, audit trails and improvement of the MyInstaCash digital journey.
Relevant information may be transmitted to Orrish Finance for eligibility assessment, underwriting and loan servicing. The final decision on approval or rejection of a loan remains with Orrish Finance. We do not sell, lease or trade Personal Data to data brokers, advertisers or unrelated third parties.
6 SHARING AND TRANSFER OF INFORMATION
Personal Data may be shared with Orrish Finance for loan processing, underwriting, KYC, sanction, documentation, disbursement, servicing, repayment, regulatory reporting and grievance handling. Information may also be shared, where necessary and lawful, with authorized Credit Information Companies, KYC or identity-verification providers, banks, Account Aggregators, payment/e-NACH/e-sign providers, technology and hosting providers, cybersecurity vendors and communication service providers.
We may disclose information to the Reserve Bank of India, courts, law-enforcement authorities, tax authorities, statutory bodies or other competent authorities where required or permitted by law. Authorized third parties are expected to process information only for permitted purposes and subject to appropriate confidentiality and security obligations.
GrowthX/MyInstaCash does not directly receive, hold or retain loan repayments, EMIs or other lender-related amounts from borrowers. Such amounts are payable directly to Orrish Finance Private Limited through its authorized repayment channels. Transaction information necessary to facilitate or reconcile such payments may nevertheless be processed in accordance with this Policy and applicable law.
7 COOKIES AND WEB TECHNOLOGIES
MyInstaCash may use cookies, session identifiers and similar technologies for secure operation, session continuity, fraud prevention, website analytics and performance improvement. You may manage non-essential cookies through available cookie preferences or browser settings. Disabling essential cookies may affect Platform functionality.
8 DATA SECURITY
We implement reasonable technical, administrative and organizational safeguards designed to protect Personal Data against unauthorized access, disclosure, alteration, loss, misuse or destruction. Measures may include secure transmission, encryption where appropriate, role-based access controls, authentication controls, restricted employee access, audit logs, vulnerability management, vendor-security requirements and incident-response procedures.
No internet-based platform can guarantee absolute security. You are responsible for keeping OTPs, passwords, devices, banking credentials and other authentication information confidential and should never share them with unauthorized persons.
9 DATA STORAGE, RETENTION AND DELETION
GrowthX/MyInstaCash will retain Personal Data only for as long as necessary for the purpose for which it was collected and as permitted or required under applicable legal and regulatory requirements. As an LSP, GrowthX intends to retain only such basic minimum information as is necessary for permitted LSP operations.
Orrish Finance may retain KYC, credit, borrower, transaction and loan information during and after the loan tenure where required for KYC/AML compliance, RBI requirements, credit reporting, taxation, audit, fraud prevention, dispute resolution or other legal obligations. Personal Data relating to the digital lending journey shall be stored in India to the extent required under applicable RBI directions.
Subject to applicable law, you may request correction, withdrawal of consent or deletion of eligible Personal Data by writing to support@myinstacash.com or grievance@myinstacash.com. Deletion may be restricted where an active loan or outstanding obligation exists or where continued retention is required for KYC, AML, audit, fraud prevention, litigation, credit reporting, regulatory compliance or another lawful purpose.
10 THIRD-PARTY WEBSITES AND SERVICES
MyInstaCash may contain links or redirects to services operated by Orrish Finance, KYC providers, banks, Account Aggregators, payment providers, verification providers, government portals or other third parties. Such independent third-party services may be governed by their own terms and privacy policies. You should review the relevant third-party policy before submitting Personal Data through such service.
11 CHILDREN'S INFORMATION AND AGE ELIGIBILITY
MyInstaCash lending services are intended only for individuals who are at least 21 years of age and are otherwise legally eligible to enter into a binding financial arrangement. We do not knowingly process loan applications from individuals below 21 years of age. Age may be verified as part of KYC, onboarding and eligibility assessment.
12 CONSENT AND YOUR RIGHTS
Where consent is required, we will seek specific and informed consent before processing relevant Personal Data. Subject to applicable law and identity verification, you may request access to information being processed about you, correction or updating of inaccurate information, withdrawal of consent where permitted, deletion of eligible Personal Data and grievance redressal. Requests may be submitted to grievance@myinstacash.com.
Withdrawal of consent may affect our ability or Orrish Finance's ability to continue processing a loan application or providing a service dependent on such information. Withdrawal does not affect processing lawfully undertaken before withdrawal and does not override mandatory legal or regulatory retention obligations.
13 MARKETING AND COMMUNICATIONS
GrowthX/MyInstaCash, Orrish Finance and authorized service providers may communicate with you through permitted channels such as telephone, SMS, email or WhatsApp for OTP authentication, application processing, KYC or documentation requirements, loan-status updates, repayment support, customer service, security alerts and grievance handling. Promotional communications, where undertaken, will be subject to applicable law and your communication preferences. You may opt out of promotional communications by writing to support@myinstacash.com.
14 GENERAL
GrowthX may update this Privacy Policy from time to time to reflect changes in law, RBI directions, technology, products, services, security practices, business processes or its arrangement with Orrish Finance. The latest version will be published on the MyInstaCash website with the revised "Last Updated" date. Where a material change requires fresh notice or consent, appropriate measures will be taken.
This Privacy Policy is governed by the laws of India. Subject to mandatory statutory remedies, consumer-protection rights, RBI grievance mechanisms and other applicable legal provisions, matters relating specifically to GrowthX/MyInstaCash shall be subject to the jurisdiction of competent courts at Gautam Budh Nagar, Uttar Pradesh.
15 DISCLAIMER
MyInstaCash is a technology-enabled DLA operated by GrowthX in its capacity as an LSP. GrowthX/MyInstaCash is not the lender. Submission of Personal Data or a loan application does not guarantee approval, sanction, disbursement or any particular loan amount, interest rate, APR or tenure. Final lending terms are determined and communicated by Orrish Finance through the applicable KFS, sanction terms and loan agreement.
Nothing on the Platform constitutes independent financial, investment, tax or legal advice. Nothing in this Disclaimer excludes or limits any statutory responsibility or customer right that cannot lawfully be excluded under applicable Indian law or RBI directions.
16 GRIEVANCE REDRESSAL AND CONTACT DETAILS
MyInstaCash / GrowthX
Partner Lender / Regulated Entity
Where an eligible complaint concerning the Regulated Entity is not satisfactorily resolved within the applicable regulatory timeframe, the customer may avail the complaint-redressal mechanism prescribed by the Reserve Bank of India, including the RBI Complaint Management System / Reserve Bank - Integrated Ombudsman Scheme, where applicable.
17 REVIEW OF THE PRIVACY POLICY
This Privacy Policy shall be reviewed periodically and whenever there is a material change in applicable law, RBI directions, data-processing practices, technology, products or services. The most recent version shall remain available on the MyInstaCash website.
