1. Introduction
This Privacy Policy explains how Reachout Tech Private Limited ("myScorr", "we", "us", "our"), a company incorporated under the laws of India (CIN: U62099KA2024PTC190922) with its registered office at 22, 4th Floor, 1st Main, Royal Placid, Haralur, HSR Layout, Bangalore South, Karnataka – 560102, collects, uses, stores, shares and otherwise processes your personal information when you use the myScorr website, the myScorr mobile application for iOS and Android, and any related services (together, the "Platform").
By accessing or using the Platform, you agree to the collection and use of information in accordance with this Policy. If you do not agree with this Policy, please do not use the Platform.
This Policy is intended to comply with applicable Indian data protection law, including the Information Technology Act, 2000 and the rules made under it, and the Digital Personal Data Protection Act, 2023, to the extent applicable.
2. Information we collect
Information you give us
- Contact and identity details: name, mobile number, email address, date of birth, PAN, address and PIN code.
- Employment and income details you choose to share, where relevant to a loan, card or account application.
- Documents you upload, such as bank statements or UPI app statements, for the Statement Intelligence feature.
- Any information you enter while communicating with our support team.
Information we collect automatically
- Device and usage information: device type, operating system, app version, IP address and general usage patterns within the app.
- Basic website analytics (pages viewed, referring source) when you visit myscorr.com.
Information from third parties
- Your credit score and credit report, obtained from our credit bureau partner strictly on the basis of your explicit consent for each request.
- Where you apply for a loan, credit card or bank account through the app, application status updates from the relevant lending, card or banking partner.
3. How we collect it
- Registration: when you sign up using your mobile number or email and verify with an OTP.
- Bureau consent flow: when you provide your PAN and explicit consent for us to request your score and report on your behalf.
- Statement uploads: when you voluntarily upload a bank or UPI statement PDF for analysis. You may delete an uploaded statement at any time from within the app.
- OTP autofill: on Android, we may use the SMS Retriever API to autofill the OTP you receive, which does not require broad access to your message inbox.
- Cookies: when you visit myscorr.com, we may use basic cookies for analytics, described further in Section 8.
4. How we use your information
- To create and manage your account and verify your identity.
- To fetch your credit score and report from our credit bureau partner, with your consent, and to generate your AI-ranked improvement plan.
- To analyse uploaded bank or UPI statements and generate spend, income and tamper-check insights.
- To match you with loan, credit card and bank account offers you are likely to qualify for, and to facilitate your application if you choose to apply.
- To send you service updates, score-change alerts and, where you have consented, product communications by SMS, email, push notification or WhatsApp.
- To detect and prevent fraud, and to maintain the security of the Platform.
- To comply with applicable law, regulatory requests and court orders.
5. Credit information & bureau consent
- We request your score and report from our credit bureau partner only after you provide explicit, informed consent for each pull, or for the refresh frequency associated with your chosen myScorr Plus plan.
- Your consent for a bureau pull remains valid for the period disclosed to you at the time of consent, and you may withdraw it at any time by writing to us, subject to any services already in progress.
- We retain your credit report and score only for as long as necessary to deliver the relevant service, and in line with applicable law and our arrangement with the bureau partner.
- We do not share your raw credit report or score with lending, card or account-opening partners unless you have explicitly applied for a specific product through the app, or where required by applicable law.
7. AI-assisted features
myScorr uses AI to help rank improvement insights and generate your personalised plan, and may use third-party AI service providers to support these features. Where we use third-party AI providers, we take reasonable steps to avoid sending directly identifying information (such as your name, PAN or full account numbers) beyond what is strictly necessary to generate the relevant output. AI-assisted insights are informational only and do not constitute financial, legal or tax advice; see Section 4 of our Terms & Conditions for further detail.
9. Data security
- Data is encrypted in transit and at rest.
- Access to personal information is restricted to authorised personnel on a need-to-know basis.
- We conduct periodic security reviews of our systems and vendors.
No method of transmission or storage is completely secure, and while we work to protect your information, we cannot guarantee absolute security.
10. Retention & deletion
We retain your personal information for as long as your account is active, and for a reasonable period afterwards where required for legal, accounting, audit or dispute-resolution purposes. You may request deletion of your account and associated data at any time via the app's profile settings, or by writing to alerts@myscorr.com. We will action verified deletion requests within a reasonable time, subject to information we are legally required to retain.
11. Your rights
- Access: request a copy of the personal information we hold about you.
- Correction: ask us to correct inaccurate or incomplete information.
- Deletion: request deletion of your account and personal data (Section 10).
- Withdraw consent: withdraw consent for a future bureau pull or marketing communication at any time.
To exercise any of these rights, write to alerts@myscorr.com. We aim to respond within 30 days.
12. Children's privacy
The Platform is intended for use by individuals who are 18 years of age or older and legally capable of entering into a binding contract under Indian law. We do not knowingly collect personal information from anyone under 18.
13. Changes to this policy
We may update this Policy from time to time to reflect changes in our practices or applicable law. The "Last updated" date at the top of this page will reflect the most recent revision. Continued use of the Platform after an update constitutes your acceptance of the revised Policy.
14. Grievance officer & contact
If you have any concern about how your personal information is handled, please contact us:
| alerts@myscorr.com | |
| Address | 22, 4th Floor, 1st Main, Royal Placid, Haralur, HSR Layout, Bangalore South, Karnataka – 560102 |
15. Governing law
This Policy is governed by the laws of India, and the courts at Bangalore, Karnataka shall have exclusive jurisdiction over any disputes arising from it.