Privacy Policy

Last updated: 10 August 2026

Quik Rupee is a loan marketplace and referral platform, not a lender. We connect you with lenders registered with the Reserve Bank of India. The service is operated by CYBERTECH LLC, a limited liability company registered in the Republic of Armenia, for users in India.

This policy explains what personal data Quik Rupee collects, why we collect it, who we share it with and what rights you have. It is written to meet the Digital Personal Data Protection Act 2023 (DPDP Act) and the Information Technology Act 2000 and the rules made under them.

1. Who we are (the Data Fiduciary)

Legal entity: CYBERTECH LLC («КИБЕРТЕХ» ООО)

Entity type: Limited liability company

Jurisdiction of incorporation: Republic of Armenia

State register number: 273.110.1319504, registered 24 May 2023

Tax identification number (TIN): 02890929

Registered office: 105/1 Teryan St, office 601, Kentron 0009, Yerevan, Republic of Armenia

Trading as: Quik Rupee, quikrupee.in

Email: privacy@quikrupee.in [[TODO: quikrupee.in has no MX record - support@, privacy@ and grievance@ do not receive mail until the registrar adds one]]

Telephone: +374 10 512345 (Republic of Armenia)

CYBERTECH LLC is the Data Fiduciary for the personal data described in this policy. It is established in the Republic of Armenia, not in India. The Digital Personal Data Protection Act 2023 still applies to this processing, because we offer our service to people inside India, and we comply with it on that basis. CYBERTECH LLC is registered in Armenia and holds no Indian company identification number and no registration with any Indian regulator.

Quik Rupee is a marketplace. We introduce you to lenders. We are not a bank, not a non-banking financial company, and we do not lend money or make credit decisions.

2. What we collect

Details you give us: your name, mobile number, email address if you provide one, employment type, monthly income band, the loan amount and term you are looking for, and your city or PIN code.
Identity details, only when a lender requires them to process your application: date of birth and PAN. We collect these only at the point a specific lender needs them and only with your consent.
Messages: the content of your conversations with us over WhatsApp, email or our web form.
Technical and campaign data: IP address, device and browser information, and the marketing parameters that brought you here, such as UTM tags and click identifiers.

We do not collect biometric data, passwords, full bank account credentials, health data, or the contents of your phone such as your contact list, SMS messages, call log, photos or files. We do not ask for access to those permissions.

3. Why we use it

To check which of our lending partners you may be eligible for.
To pass your enquiry to the specific lender you choose, so they can process your application.
To answer your questions and provide support.
To send you loan-related updates over WhatsApp or email if you have opted in.
To measure which marketing channels work, and to prevent fraud and abuse.
To meet legal, regulatory and record-keeping obligations.

We do not use your data to build advertising profiles for third parties and we do not sell it.

4. Our lawful basis

Under the DPDP Act 2023 we process your data on the basis of the consent you give before you submit an enquiry, and for certain legitimate uses permitted by the Act such as complying with law. You can withdraw consent at any time (see section 8).

5. Who we share it with

Recipient	What is shared	Why
The lending partner you choose	Your enquiry and the details needed to assess it	So they can process your loan application. We name the lender before we share anything.
Our service providers	Only what the service needs: hosting, messaging (WhatsApp Business Solution Provider), CRM, analytics	They process data on our instructions under contract and may not use it for their own purposes.
Authorities	Only what is legally required	Where compelled by law, a court order or a regulator.

We do not sell, rent or trade your personal data.

6. WhatsApp communications

Our WhatsApp service runs on the WhatsApp Business Platform and is subject to Meta's WhatsApp Business Messaging Policy. When you message our WhatsApp number, or tick the consent box on our web form, you agree to receive loan-related messages from us on WhatsApp.

Opt out at any time by replying STOP. We send one confirmation and then stop.
We do not send unsolicited marketing messages and we keep records of your opt-in and opt-out.
We do not share your WhatsApp number with any party other than the lender you choose and our messaging provider.

7. How long we keep it

Enquiries that do not become applications: 90 days from your last contact with us.
Enquiries passed to a lender: retained for as long as required for regulatory and audit purposes, then deleted.
Opt-out records: retained indefinitely so we can honour your request.
Complaint records: 3 years from resolution.

8. Your rights

Under the DPDP Act 2023 you may ask us to:

tell you what personal data we hold about you and who we shared it with;
correct or complete inaccurate data;
erase your data, where we are not required to keep it;
withdraw your consent, which stops any further processing but does not undo an application already sent to a lender;
nominate someone to exercise these rights on your behalf if you die or become incapacitated.

Email privacy@quikrupee.in with the subject "Data Rights Request". We respond within 30 days. If you are not satisfied you may complain to the Data Protection Board of India.

9. Where your data is held and transferred

Quik Rupee is operated by CYBERTECH LLC, which is established in the Republic of Armenia. Your personal data is therefore accessed and processed outside India, by our staff and by our hosting, messaging and CRM providers, in addition to being shared with the Indian lending partner you choose.

The DPDP Act 2023 allows personal data to be transferred outside India except to countries the Central Government restricts by notification. We do not transfer personal data to any country restricted in that way, and every provider that handles your data on our behalf is bound by contract to protect it and to use it only on our instructions.

Where a lending partner or Indian law requires particular data to be held in India, that data sits with the partner in India under the partner's own arrangements.

[[TODO: confirm the actual hosting and sub-processor locations, publish the sub-processor list, and have this section checked against RBI and DPDP cross-border expectations by counsel before launch]]

10. Security

We use TLS encryption in transit, access controls, and restrict who can see your data to the people who need it. No system is perfectly secure, and we will notify you and the Data Protection Board of a personal data breach as the Act requires.

11. Cookies

This site uses a small number of cookies: session cookies needed for the site to work, and marketing attribution cookies that tell us which campaign brought you here. We do not use them to build advertising profiles beyond measuring our own campaigns.

12. Children

Our service is for people aged 18 and over. We do not knowingly process the data of children. If you believe a child has given us data, email privacy@quikrupee.in and we will delete it.

13. Changes

If we change this policy we will update the date at the top. For material changes we will tell you by WhatsApp or email where we hold your contact details.

14. Grievance Officer

Name: [[TODO: full name of the Grievance Officer]]

Designation: [[TODO: designation]]

Email: grievance@quikrupee.in

Telephone: [[TODO: direct line for the Grievance Officer]]

Address: CYBERTECH LLC, 105/1 Teryan St, office 601, Kentron 0009, Yerevan, Republic of Armenia

Appointed under section 13 of the DPDP Act 2023 and the Information Technology Act 2000. We acknowledge complaints on receipt and resolve them within 30 days. Full process: Grievance Redressal Policy.

This document is a pre-launch draft. The operating entity is CYBERTECH LLC, a limited liability company registered in the Republic of Armenia; its registration details are published in the Company details section. The named Grievance Redressal Officer, the support contact details and the governing law clause are still outstanding, and the final text will be reviewed by legal counsel in India and in Armenia before this service accepts applications.