Privacy Policy

Welcome to Rainbow Financial Services! We thankful and appreciate your trust in us and are committed to safeguarding your privacy. This document (Hereinafter referred to as “Privacy Policy”) is an electronic record in terms of existing and applicable the Information Technology laws its allied rules, regulations, directions and guidelines, including the amended provisions thereto pertaining to electronic records in various allied statutes as amended pursuant to the Information Technology Act, 2000 (“IT Act”).

This Privacy Policy briefing how Rainbow Financial Services collects, uses, and shares your information when you access our website, mobile application (“Myhero”), or interact with our services.

The following terms and conditions will be deemed to have been accepted by the User, on mere visitation / usage of the Website/ Mobile Application and hence the User is required to read them carefully before using the services on the Website/ Mobile Application.

Personal Information:

Name (including the first, Middle and last name) of the User.
Email address of the User.
Contact details (including the mobile phone number) of the User.
Zip/Postal code of the User’s location.
The demographic profile of the User including inter alia the User’s age, gender, occupation and address.

Security:

We prioritize the safeguarding of all your data. We adhere to widely accepted standards to ensure the protection of Personal Information submitted to us. This encompasses both the

transmission of data and its storage. While we diligently apply security measures, it's essential to acknowledge that no method of transmission over the Internet or electronic storage can guarantee absolute security. If you have inquiries about security pertaining to the said mobile application, feel free to contact us at support@myhero.co.in.

Database Protection:

Our databases are fortified to prevent general employee access, both physically and logically. Furthermore, we employ encryption methods to secure your Service password, ensuring that it remains unrecoverable, even to us. All backup drives and tapes are also encrypted to further enhance security.

Protection Against Unauthorized Data Transfer:

Employees are strictly prohibited from moving sensitive content from the database to insecure machines. This ensures that data cannot be extracted Data from the database is never transferred

to or stored on insecure laptops or devices.

In the Said mobile application, it has been confirmed that SSL encryption technologies are employed to ensure security. to bolster its privacy practices. It's crucial to recognize that these measures exclusively apply to and the said mobile application and systems incorporated in the same.

Your Consent:

By using this Website/ Mobile Application, you consent to the terms of the Company’s Privacy Policy and terms of use of the Website/ Mobile Application and to the Company’s processing of your Information for the purposes given above. There are times, however,

when the Company may need to contact you via emails, or through phone calls or SMS, and offer you their services for the product that you have opted for, or for imparting product knowledge, or to inform you about promotional offers running on the Website/ Mobile Application and/or offers offered by the associated third parties, for which reasons, as well as web aggregation, Personal Information may be collected as detailed above.

Notwithstanding the fact that you have registered yourself under any DND/DNC or NCPR service, you still authorize the Company and its subsidiaries/affiliates to call you for the abovementioned purposes.

It is made clear that the Company shall not be liable in any manner, for any defects or adverse consequences that may arise as a result of limited, incomplete, inaccurate or false Information provided by you.

Storage And Information Sharing:

Any Personal Data that the Company has access to shall never be shared without user consent and without disclosing the purpose behind the same. In various processes /submission of applications /availment of product / service offerings, Company may even seek user explicit consent to use / share user’s Personal Data. In company’s business and operational processes, Company only shares the data on a partial and “need-to-know” basis to designated personnel or partners or service providers/third parties. The details of our partner’s/ service providers/third parties with whom we may share user’s Personal Data on a partial and “need-to-know” basis can be viewed at https://www.rainbowfinserv.com/

The Company receives and stores information or document you enter or upload on our Website /Mobile Application, in line with the product or service opted by you and as required by us or our business partners, including your personal information which will be need-based like first name, middle name, last name, email address, date of birth, residence city etc. You can choose not to provide certain information but then you might not be able to take advantage of many of our services and features. We may also have one-time access to your camera, microphone, location or any other facility necessary for the purpose of onboarding or KYC requirements of us or our Partner with your explicit consent.

Data Retention:

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required by law or for legitimate business purposes. We may also retain certain information for audit purposes, resolving disputes, enforcing our agreements, or as otherwise required by law.

The Company requires your information for the purpose of:

Getting in touch with you, whenever necessary.
Providing you with the products and services that you have specifically requested for.
Preserving social history, as governed by existing law and policy.
Assist us or our business partners in facilitating and delivering services to you, process payments and your applications, communicate with you about products, services and promotional offers;
Sending you information about special promotions or offers. We might also tell you about new features or products/services. These might be our own offers or products/services, or third-party offers or lending partners’ products or products/services with whom Andromeda has a tie-up;
For generating your CIBIL report upon your consent;
File storage permissions on Android/iOS and Website/ Mobile Application for uploading customer documents are obtained for the purpose of processing customer applications by our Partners.

The Company needs to share your information to provide you with the product or service that you have requested through third parties; or
The Company has your consent to share the Information;
The Company needs to share your information with certain service partners in order to respond to your queries / comments or to resolve service issues and to serve you better.

Changes In Privacy Policy:

Please note that this Privacy Policy may change from time to time. The Company reserve its right to change, modify or update this Privacy Policy at any time without notice. The Company shall not reduce your rights under this Policy without your explicit consent and expects most such changes to be minor. Regardless, the Company will post any Policy changes on this page and, if the changes are significant, we will provide a more prominent notice. Each version of this Policy will be identified at the bottom of the page by its effective date. If you have any questions or concerns about this Policy, please feel free to contact us any time at the contact details provided on this Website/ Mobile Application.

Third-Party Advertising:

Said mobile application might engage ad agencies and/or third- party advertising companies for the purpose of delivering advertisements when you access our website, “https://www.rainbowfinserv.com”. These entities could utilize details/information (excluding your personal details such as email address, telephone number, name, or address) pertaining to your visits to this and other websites. The purpose of this information usage is to present advertisements on this website as well as other websites, showcasing products and services that could capture your interest.

Log Files:

Log information may encompass details such as browser type, internet protocol (IP) addresses, referring/exit pages, internet service provider (ISP), operating system, click stream data, and date/time stamp. This collected log information can aid in improving the services provided, enhancing marketing efforts, refining analytics, and bolstering Website functionality.

OTP Based Sign-On: You can access the said mobile application using one-time OTP services provided by an SMS gateway provider. Your identity is authenticated by these services and you are provided with the option to share specific Personal Information with us, such as your name, sign-in credentials, and contact number, to establish a connection among our platforms.

Links to 3rd Party Sites: The said mobile application may feature links to separate websites, each with distinct privacy practices that may deviate from those of Said mobile application. If you furnish your Information being

of the personal nature to any of these external sites, your information will be subject to their privacy policies. We firmly recommend exercising caution and reading the privacy policy of any website you visit.

Cookie Policy:

When activated, we have the option to place cookies that retain minimal data on your device during your visits to said mobile application. Cookies are small digital files that gather information during visits to the said mobile application, identifying viewed sections. They assist us in identifying preferred features and previously viewed content. While some cookies are session-based, others, known as 'persistent' cookies, remain on your device. 'Persistent' cookies can tailor our content based on your preferences when you revisit the said mobile application.

We and our partners, which include Insurer company , affiliates, and analytics providers, utilize

technologies like cookies, beacons, tags, and scripts like

Google Ad sense and Google Analytics. These technologies mentioned herein aid in analyzing trends, managing the said mobile application, tracking user movements, and gathering demographic information about our user base in aggregate. Reports on the use of these technologies by these entities, both individually and collectively, may be received.

Cookies are employed on our website to tailor our service specifically to your needs. When you utilize the mobile application in question, this customization is extended to that platform as well, you agree that such cookies can be placed on your device. You have the freedom to disable/delete these cookies by adjusting your device settings. Control over cookie usage can be managed at the individual device level. Refusing cookies might not prevent you from using the said mobile application, but it could limit your access to certain features or areas. Unless you modify your device settings to reject cookies, our system will generate cookies when you log into the mentioned mobile application. Please be aware that said Company is not accountable for cookies placed on your device by other

application/websites or the information collected by them.

Communication through email and SMS:

We offer registered customers periodic email and SMS notifications. Furthermore, users have the choice to subscribe to email newsletters, which may occasionally include emails promoting Said mobile application or third-party products. Said mobile application users can choose to stop receiving promotional emails and unsubscribe from newsletters you can opt out of these communications by following the instructions in the emails. However, it's important to note that opting out of these communications will not impact the receipt of service- related emails or SMS, such as alerts.. It's worth noting that our partners also offer these services.

Products and Services by Third Parties:

Said mobile application features various products and services offered by third parties, including Insurance from IRDA registered Insurance company. If you choose

to apply for these specific products or services, disclose information to the providers, or authorize them to collect your data, their utilization of your information is regulated by their individual privacy policies. We advise you to review the practices of

these external service providers before deciding to use their services. It's crucial to recognize that the mentioned mobile application is not accountable for their privacy procedures.

Testimonials, Blogs, and Other Forums:

Upon receiving your consent, Said mobile application may publish your testimonial on the said mobile application, along with your name. Should you desire the removal of your testimonial, kindly get in touch with Said mobile application at support@myhero.co.in.

If you use a blog or any other public forum within the mentioned mobile application, any information you provide there may be accessible to other users, who could potentially read, collect,or utilize it. This information might also be employed to send

you unsolicited messages. Please be aware that the mentioned mobile application cannot be held accountable for any Personal Information you choose to share in these forums.

Behavioral Targeting / Re-Targeting:

We partner with a third-party service provider to assist in displaying advertisements within the mentioned mobile application and managing our advertising across various platforms. This third-party partner may utilize technologies like cookies to gather information about your interactions within the mentioned mobile application. This information is then utilized to deliver advertising content to you based on your usage behaviors and interests. If you would rather not have this information used for the purpose of serving you interest-based advertisements, you have the option to opt-out by clicking here. Please be aware that opting out in this manner does not exclude you from receiving ads entirely. You will still receive generic advertisements.

Responsibility for Login Credentials:

You are responsible for maintaining the confidentiality of your login ID and password. Under no circumstances should you share these credentials with third parties. In the event that you suspect your credentials have been compromised or disclosed to others, promptly contact us at support@myhero.co.in. We cannot

be held responsible if unauthorized access occurs as a result of compromised credentials or any breach of this Privacy and Security Policy or the Terms of Use of the mentioned mobile application by you.

Said Mobile Application Partner Privacy Policy:

The said Company recognizes and respects the privacy, confidentiality, and security and the mentioned mobile application has certain expectations from its customers, referred to as "customer," "you," or "your." pertaining to their Personal Information residing with the said mobile application.

Safeguarding and preventing the misuse of customers' Personal Information are key priorities of the said Company.The Said Company is strongly dedicated to preserving the privacy of its customers and has put in place appropriate and reasonable measures that align with industry best practices. These measures are intended to safeguard the confidentiality of customer information and its transmission through the mentioned mobile application. The mentioned mobile application shall not be held accountable for any disclosure of confidential information in accordance with this privacy commitment or as per the Terms of Use of the website or any existing agreements with customers.

This Privacy & Security Policy outlines the principles and practices regarding privacy and security maintained by the company (referred to as Policy) elucidates our approach to safeguarding Personal Information shared on the said mobile application and how we employ this information in relation to the services we offer through the said mobile application (referred to as "Service").

Upon registering on said mobile application, you provide consent for us and our affiliated partners to contact you and extend their services for the chosen product. This includes conveying product-related information, presenting ongoing promotions, and introducing offers from associated third-party entities. Regardless of your registration on Do Not Disturb (DND) or Do Not Call (DNC) lists, you authorize us and our affiliate partners to contact you for the aforementioned purposes For a duration of up to 45 days following your registration, depending on your active opt-in, you may be eligible to receive promotional offers from advertisers or partnering websites, eliminating the need for "Do Not Call" (DNC) verifications.

Data Handling and Usage:

As a partner of the Said mobile application, we are committed to safeguarding the privacy of the data you provide. We collect and utilize your data solely to deliver our best services to you and to enhance our offerings. Your information will be treated in compliance with the terms specified in this privacy policy.

Information Collection:

We gather information from you that are relevant to our partnership and services. This may include contact details, business information, and any data required to facilitate our collaboration.

To enhance and personalize our services based on your preferences and feedback

for legal or administrative purposes, such as addressing outstanding issues or complying with legal obligations.

After the retention period has elapsed, we will permanently delete all your data from our systems, ensuring that it is no longer accessible or recoverable. Please note that this deletion process may take some time due to technical requirements and backup systems, but we are committed to completing it as promptly as possible.

It's important to understand that certain data, such as records related data that is subject to legal retention requirements, may be retained for longer peiods

Your Rights:

You have the right to access, update, and delete your personal information. You can also withdraw consent for marketing communications and request data portability. If you have any questions or concerns about your privacy rights or wish to exercise your rights, please contact us using the contact information provided below.

Deletion Of User Personal Data:

The User may choose to delete his account at any point of time by making such choice by emailing us on The User may choose to delete his account at any point of time by making such choice by emailing us on support@myhero.co.in. With this, the Company will no longer provide user data for external processing, cross-selling, and promotional offers of its lending partners.

However, in all cases company retain user’s Personal Data as long as the purpose for its usage exists, after which the same is disposed off by company except for any record retention required as per applicable law. The provisions of various laws require user transaction logs to be stored for longer periods post the deletion of an account. Further, in the event of the pendency of any legal / regulatory proceeding or receipt of any legal and / or regulatory direction to that effect, Company may be required by the law of the land to retain user Personal Data for longer periods.

. With this, the Company will no longer provide user data for external processing, cross-selling, and promotional offers of its lending partners.

Grievance Redressal:

For any security-related concerns, please reach out to us at support@myhero.co.in. We're committed to addressing your

concerns promptly and with a personalized response.

If you have any inquiries, questions, comments, concerns, or feedback regarding this Privacy and Security Policy or any other privacy or security-related matters, please feel free to email us at support@myhero.co.in.

Corporate Address:43/3 Hazra Main Road, 2nd Floor, Asha

Building. Kolkata – 700019, West Bengal.

Registered Address: 114E/1 Selimpur Road, Kolkata – 700031, West

Bengal.