The consent model
Nothing about you moves through GrydFi because you signed up. It moves because you said yes to that specific thing, for that specific purpose — and it stops moving when you say so.
Draft — pending legal review. Not yet in force. effective date
What consent means here
Consent is not a checkbox at the start. It is asked for in steps, and each step is a separate decision you can refuse without losing the ones you already made.
Each request tells you three things before you answer: what is being asked for, what it will be used for, and how long that permission lasts. If we cannot say those three things plainly, we should not be asking.
What you are asked for, and when
Seeing your options asks for the least. You can compare what institutions would offer someone with your profile without giving a name, a phone number or a document.
More is asked only as you go further, and only for the step in front of you: financial information to make the match accurate, verification to turn an indicative offer into a firm one, and finally identity — released to the single institution you choose, and to no one else.
What GrydFi never does with it
Your data is never sold. It is never used to build a marketing profile, and it is never shared with an institution you did not choose.
Institutions on the network see that a profile matches their criteria. They do not see you until you pick one of them.
Changing your mind
Any permission you have given can be withdrawn, individually, at any time — including after a match and after an offer.
When you withdraw one, everything that depended on it is withdrawn with it, across every participant that relied on it. You do not have to chase anyone. Withdrawal does not undo a loan you have already taken: obligations under a signed agreement continue, and your lender's own terms govern from that point.
Your consent receipt
Every permission you grant is recorded with what it covers, who it was granted to, when it was given and when it expires. That record is yours to read, and it is the same record shown to a regulator asking us to account for ourselves.
Account Aggregator
Where financial information is shared, it moves through the RBI-regulated Account Aggregator framework, using consent artefacts you can inspect and revoke in that framework as well as here.
GrydFi does not store the credentials of any account you connect and cannot initiate a transaction on any of them.