Your privacy,
straight answers.

01Who we are

Twinline Business Solutions Private Limited ("Twinline", "we", "us", "our") is the operator of this website. We are a company incorporated in India with CIN U72200HR2018PTC077022, having our registered office at 1032–1038, JMD Megapolis, Sector 48, Sohna Road, Gurugram, Haryana 122018.

We build and operate Finpage, a lending platform used by Non-Banking Financial Companies (NBFCs), Micro-Finance Institutions (MFIs), and banks in India.

02Scope of this policy

This privacy policy applies only to personal data collected through this website (twinline.in and related subdomains) from:

• Prospective customers and partners filling out contact or demo-request forms
• Visitors who email, call, or otherwise reach out to us via the contact details published on this website
• Candidates applying for jobs through careers pages (if and when published)

Data handled on behalf of our clients

When you are a borrower or end-customer of one of our NBFC or bank clients, any personal data about you that flows through the Finpage platform is governed by that lender's own privacy policy, not ours. Twinline processes such data strictly on the lender's instructions under a Data Processing Agreement. Please contact the NBFC or bank directly for requests related to your borrower account.

03What data we collect

The data Twinline collects through this website depends on how you interact with us.

We do not collect financial account numbers, Aadhaar numbers, PAN, passwords, or other sensitive personal data through this website. If you attempt to share such data in a contact form, we will not retain it and will ask you to remove it.

04Why we collect it

We use the personal data described above strictly for the following purposes:

• To respond to your enquiries — answer demo requests, schedule calls, share product information, and follow up on sales discussions.
• To manage business relationships — communicate with existing and prospective clients, partners, investors, and vendors.
• To maintain site security — detect and prevent unauthorised access, abuse, or attacks on this website.
• To comply with law — respond to lawful requests from courts, regulators, or government authorities in India.

We do not sell your personal data. We do not share it with advertisers. We do not use it to build profiles for third-party marketing.

05How we share it

Twinline shares the personal data collected through this website only in the following limited circumstances:

• Internal teams. Sales, product, and support staff who need access to respond to your enquiry.
• Service providers. Infrastructure and IT service providers who help us operate this website and our internal tools (e.g. email, CRM, hosting). These providers are bound by confidentiality obligations and may only use the data to serve Twinline.
• Legal obligations. Courts, regulators, or government authorities, where required by applicable law.
• Business transfers. In the event of a merger, acquisition, or sale of business assets, your data may transfer to the successor entity, subject to this privacy policy continuing to apply.

06Where your data is stored

All personal data collected through this website is stored on infrastructure located in India (AWS Mumbai region). We do not transfer personal data outside India for the purpose of storage.

Limited cross-border data access may occur only where necessary to operate globally available tools (for example, email clients) and always in accordance with applicable Indian law, including the Digital Personal Data Protection Act, 2023.

07Cookies

This website uses cookies only for essential session management — for example, remembering that you have accepted a site notice during your browsing session, or keeping a form from losing its contents if you navigate between pages. These are "strictly necessary" cookies and do not track you across sites.

We do not use:

• Analytics cookies (Google Analytics, Hotjar, Mixpanel, or similar)
• Advertising cookies or remarketing pixels (Meta Pixel, LinkedIn Insight Tag, Google Ads, or similar)
• Cross-site tracking cookies

You can configure your browser to block cookies entirely; the website will continue to function with only minor impact on your experience.

08How long we keep it

We retain personal data only for as long as needed for the purpose it was collected:

• Demo / contact enquiries that don't convert: up to 24 months, after which they are deleted or anonymised.
• Active client / partner contact data: for the duration of the commercial relationship and up to 7 years after it ends, in line with standard business and tax record-keeping requirements.
• Technical logs (IP, browser): up to 90 days, unless retained longer for security investigation.

09Your rights under DPDPA 2023

Under the Digital Personal Data Protection Act, 2023, as a Data Principal you have the following rights regarding personal data Twinline holds about you:

• Right to access. Obtain a summary of your personal data we hold and the purposes for which it is processed.
• Right to correction and erasure. Request that we correct inaccurate data, complete incomplete data, update out-of-date data, or erase data no longer needed for its original purpose.
• Right to grievance redressal. Raise a complaint with our Grievance Officer about how your data is handled (see Section 11).
• Right to nominate. Nominate another individual to exercise these rights on your behalf in the event of your death or incapacity.
• Right to withdraw consent. Where processing is based on consent, withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing done before withdrawal.

To exercise any of these rights, please email grievance@twinline.in. We will respond within the timelines required by applicable law.

10Security

We follow reasonable and appropriate security practices to protect personal data, including:

• Encryption in transit (HTTPS) for all connections to this website
• Access controls on internal systems, with role-based permissions
• Regular security reviews of our infrastructure and hosted services
• Confidentiality obligations on all employees, contractors, and service providers

No online service can guarantee absolute security. If we become aware of a breach that affects your personal data, we will notify you and the Data Protection Board of India as required by law.

11Grievance Officer

In accordance with the Digital Personal Data Protection Act, 2023 and the Information Technology Act, 2000, you may contact our Grievance Officer for any complaint, concern, or request regarding the personal data we handle:

12Children

This website is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If you believe we have inadvertently collected personal data from a child, please contact us and we will delete it.

13Changes to this policy

We may update this privacy policy from time to time to reflect changes in our practices, services, or legal requirements. When we make material changes, we will update the "Effective" date at the top of this page and, where appropriate, notify you through the website or direct communication.

We encourage you to review this policy periodically.

14Contacting us

If you have questions about this policy or how Twinline handles your personal data, please reach us through any of the following channels:

Data-specific requests

For access, correction, erasure, consent withdrawal, or any DPDPA-related request, please email grievance@twinline.in rather than the general contact address. This helps us route your request correctly and respond within statutory timelines.