Data Protection Policy
Comprehensive framework governing how personal, financial, and confidential data is collected, processed, encrypted, and safeguarded by CoverMantra Services Private Limited.
Statutory Purpose
The purpose of this Data Protection Policy is to ensure that personal, financial, and confidential data handled by CoverMantra Services Pvt. Ltd. is collected, processed, stored, and disposed of in a secure and lawful manner, strictly complying with the Digital Personal Data Protection Act, 2023, RBI Digital Lending Directions, and ISO 27001 data governance standards.
Scope & Applicability
Protected Data Categories
Full Name, Current Address, Date of Birth, Email, Mobile.
Aadhaar eKYC XML, PAN, Bank Statements, ITR records.
Lender application tokens, sanction numbers, e-mandates.
IP address, browser fingerprint, session logs, timestamps.
Core Governance Principles
Technical & Infrastructure Safeguards
- End-to-End Encryption: TLS 1.3 for in-transit communication and AES-256 for data at rest.
- Multi-Factor Authentication (MFA): Required across all operational consoles and administrative panels.
- Zero Storage of Credentials: CoverMantra never stores net banking passwords, ATM PINs, or raw biometric data.
- Isolated Cloud VPC: Private subnets with web application firewalls (WAF) and automated intrusion prevention.
Data Protection Officer (DPO)
For regulatory inquiries, compliance audits, or customer data rights assistance under the DPDP Act:
CoverMantra Services Private Limited
CIN: U46109DL2024PTC438732
Right to rectification, data portability, and consent revocation strictly maintained.
CoverMantra never charges consumers for data protection or grievance services.