Privacy Policy
Last updated: 13 September 2026
Nexa24India ("we", "us") operates an online comparison marketplace for insurance, credit cards, personal loans, mobile plans and mutual funds. This policy explains what personal data we process, why, and the choices and rights you have under India's Digital Personal Data Protection Act, 2023 (DPDP).
Data we collect
- Account: your mobile number or email address, used to sign you in with a one-time code (OTP), and — if you use Google sign-in — the email and name from your Google account.
- Profile you provide: details you enter for eligibility and comparison (e.g. age, city, income band, existing obligations, spends). You choose what to share.
- KYC: where a product requires it, your PAN for verification. Your PAN is stored masked (e.g. ABCxxxx4F) — never in full.
- Usage: pages viewed and actions taken, and — only with your consent — analytics identifiers.
How we use your data
To run comparisons and produce suitability-based rankings, check eligibility, verify identity where required, connect you to a provider you choose, send you service messages (like OTPs and application updates), and to secure and improve the service.
Sharing — only with your consent
We are a comparison platform, not a lender, insurer or investment adviser. We share your details with a specific provider only after you give explicit consent for that provider, and we keep a record of that consent. We do not sell your personal data.
Service providers who process data on our behalf include our KYC verifier, payment gateway, and messaging providers (SMS, WhatsApp, email). Google processes your data when you choose Google sign-in.
Where your data is stored
Your account and financial data are stored on infrastructure located in India. Some processors (for example email or messaging delivery) may process limited data outside India to deliver a message you requested.
Security
We protect data with encryption in transit, hashed one-time codes, masked PAN storage, and access controls. We do not store full card numbers — card payments are handled by a PCI-DSS compliant gateway.
Retention
We keep personal data only as long as needed for the purposes above or as required by law, after which it is deleted or anonymised. You can request deletion at any time.
Your rights under DPDP
- Access and correct your data.
- Withdraw consent, and request erasure of your data.
- Nominate another person to exercise your rights.
- Raise a grievance and have it addressed.
You can export or delete your data from your account, or contact us using the details below.
Cookies & analytics
Essential cookies keep you signed in. Any analytics or advertising identifiers are set only after you consent, and you can decline them.
Contact & grievances
For any privacy question or to exercise a right, reach us through our Support page. We will respond within the timelines required under DPDP.
Changes
We may update this policy; material changes will be posted here with a new "last updated" date.