01Introduction
This Privacy Policy is published in accordance with the Information Technology Act, 2000 and the rules made thereunder, and the Digital Personal Data Protection Act, 2023 ("DPDP Act"). It is an electronic record generated by a computer system and does not require any physical or digital signature. By accessing or using Capnix, you confirm that you have read, understood and agreed to this Policy. If you do not agree, please do not use the platform.
02Who we are
Capnix is a product owned and operated by Webority Technologies Private Limited, a company incorporated in India with its registered office at 629-634, Vipul Trade Centre, Sector-48, Sohna Road, Gurugram, Haryana 122018, India ("Capnix", "we", "us", "our"). Capnix is a loan facilitation platform; it is not a lender. For the personal data processed through this platform, Webority Technologies Private Limited acts as the Data Fiduciary under the DPDP Act.
03Personal data we collect
- Identity & contact details (name, mobile, email, city)
- Business details (entity type, GST, Udyam, vintage)
- Financial documents (bank statements, GST returns, ITR)
- Account Aggregator data, only with your consent
- Your loan requirement (amount, purpose, tenure)
- Usage & device information
- Payout details, for referral partners
- Communications with us
04How we use your data
We process your data only for the purposes notified to you at collection (Section 5, DPDP Act): to understand your borrowing strength, prepare a clear, lender-ready profile of your business, match you to and approach the lenders most likely to fund you, facilitate your application through to disbursal, respond to your enquiries, operate our partner programme, and meet our legal obligations.
05Consent
Your consent is explicit, granular, purpose-bound and revocable. Nothing is shared with a lender until you approve it. You may withdraw consent for any purpose at any time; doing so stops further processing for that purpose, though it may limit our ability to facilitate your loan.
06How we share your data
With lenders, only on your consent. Facilitating a loan means approaching banks and NBFCs on your behalf. With your explicit consent, we share your business profile and supporting documents with the lenders we approach for you, so they can assess your application and make an offer. You decide whether to proceed with any offer.
With our service providers. We engage processors for hosting (in India), email, analytics, error monitoring, Account Aggregator access, content delivery and security, and partner payouts, each under a written confidentiality and data-processing arrangement. We do not sell, rent or lease your personal data to anyone, and we never share it for advertising.
Cross-border processing for AI features. To read and analyse your uploaded documents, and to power the AI assistant in our website chat, we use Microsoft Azure OpenAI (Azure AI Foundry), which processes this content on servers located outside India (currently in the United States). This transfer is made under Microsoft's data-processing agreement and standard contractual safeguards, and your content is not used to train any AI model. The Digital Personal Data Protection Act, 2023 permits such transfers, and we make them only to perform the loan facilitation you have asked us for. All other personal data and documents remain hosted in India.
07How to access & control your data
You have the right to access your data, correct it, erase it, nominate a representative, and seek grievance redressal (Sections 11 to 14, DPDP Act), and to withdraw consent at any time. Email [email protected] and we respond within 7 days.
08Links to third-party websites
Our platform may link to lender, partner or other third-party websites. Their privacy practices are their own, and this Policy does not cover them. We encourage you to read the privacy policy of any site you visit through Capnix.
09Security
We protect your data with TLS 1.3 in transit, AES-256 at rest, India-based hosting (other than the AI-assisted document analysis described in Section 6), role-based access controls, regular VAPT and CERT-In aligned practices. While we apply strong safeguards, no method of transmission or storage is completely secure, and Webority Technologies Private Limited cannot guarantee absolute security against every loss, misuse or unauthorised access.
10Cookies & similar technologies
Strictly-necessary cookies keep you signed in and the site working, and are on by default. Analytics cookies are consent-gated and load only after you opt in. We use no advertising or cross-site tracking cookies, and you can change your choice at any time through your browser or our cookie banner.
11Your Capnix account
Sign-in is via OTP. Please keep your access secure and let us know promptly of any unauthorised use by writing to [email protected].
12Data retention
We keep your data only as long as needed for the purposes above and to meet our legal obligations: application and facilitation records for the duration of the relationship, KYC and tax invoices for 8 years (CGST), consent records as required by the DPDP Rules, 2025, and access logs for 90 days. After its retention window, data is deleted or anonymised. See our Data Deletion page for erasure on request.
13Children's privacy
Capnix is for authorised signatories of registered businesses and is not directed at anyone under 18. We do not knowingly collect the personal data of children. If we learn that we have, we delete it. Where the DPDP Act requires verifiable parental consent for a child's data, we will obtain it before any processing.
14DPDP compliance & grievance redressal
We map our processing to Sections 4 to 14 of the DPDP Act, 2023 and the DPDP Rules, 2025, and maintain consent and grievance records accordingly. If a grievance is not resolved to your satisfaction, you may escalate to the Data Protection Board of India.
15Grievance Officer & contact
Mr. Navneet Singh is our Grievance Officer. Write to him at [email protected] or Webority Technologies Private Limited, 629-634, Vipul Trade Centre, Sector-48, Sohna Road, Gurugram, Haryana 122018, India, Grievance Officer phone +91 95990 06518. This Policy is governed by the laws of India and the courts at Gurugram, Haryana have exclusive jurisdiction. We give 15 days' notice before any material change to this Policy.
