Infinex.

Privacy Policy

This policy explains how Infinex Corporation handles personal data — both the information we collect through our own website and business, and the data we process on behalf of our clients as their technology partner.

Last updated: 15 July 2026

1. Overview

Infinex Corporation("Infinex", "we", "us" or "our") is a technology and software services company based in Chennai, Tamil Nadu, India. We design, build and operate software platforms for financial businesses such as non-banking financial companies (NBFCs) and gold-loan operators.

We take privacy seriously and are committed to handling personal data in line with applicable Indian law, including the Digital Personal Data Protection Act, 2023 (DPDP Act) and the Information Technology Act, 2000 and rules made under it.

2. Our two roles: controller and processor

Our responsibilities depend on whose data we are handling:

  • As a data fiduciary (controller) — for personal data we collect directly for our own purposes, such as enquiries submitted through this website, communications with prospective and current clients, and recruitment. This policy governs that data.
  • As a data processor— for personal data belonging to our clients' customers (for example, borrowers) that we process only to build and operate platforms on our clients' instructions. In that case, our client is the data fiduciary, their own privacy notice applies, and we handle the data strictly under our contract with them.

3. Information we collect

3.1 Information you give us directly

  • Contact details such as name, email address, phone number and company.
  • The content of enquiries, messages and communications you send us.
  • Information provided during a commercial engagement or contract.

3.2 Information collected automatically

  • Basic technical data such as IP address, browser type, device information and pages viewed, used to keep the website secure and to understand usage.
  • Essential cookies required for the site to function. We do not use the website to build advertising profiles.

3.3 Client and end-customer data (processed on instruction)

When operating a client platform, we may process data such as identity and KYC details, contact information and transaction records belonging to our client's customers. We process this data only to deliver the contracted services and never for our own independent purposes.

4. How we use personal data

  • To respond to enquiries and provide requested information.
  • To deliver, maintain, secure and improve our services and platforms.
  • To manage contracts, billing and our business relationship with you.
  • To comply with legal, regulatory and contractual obligations.
  • To protect the security and integrity of our systems.

We process personal data on the basis of your consent, the performance of a contract, compliance with a legal obligation, and our legitimate business interests, as permitted under applicable law.

6. Sharing and disclosure

We do not sell personal data. We may share it only with:

  • Service providers (such as cloud hosting, communications and analytics vendors) who process data on our behalf under confidentiality and data-protection obligations.
  • Our clients, where we act as their processor and the data belongs to them.
  • Authorities, where required by law, regulation, or valid legal process.

7. Data security

We apply reasonable security safeguards appropriate to financial-grade systems, including encryption in transit, access controls, network security, audit logging and regular reviews. No system can be guaranteed perfectly secure, but we work continuously to protect the data in our care.

8. Data retention

We keep personal data only for as long as necessary for the purposes above or as required by law and contract. Data we process on behalf of clients is retained and deleted according to our agreement with the relevant client.

9. Your rights

Subject to applicable law, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate or incomplete data.
  • Request deletion of your data, where applicable.
  • Withdraw consent where processing is based on consent.
  • Raise a grievance about how your data is handled.

If your query relates to data held within a client's platform (for example, a loan account), we will direct your request to the relevant client, who is the data fiduciary for that information.

10. Contact us

For any privacy question or to exercise your rights, contact us at hello@infinexcorp.io or write to us at Chennai, Tamil Nadu, India.

11. Changes to this policy

We may update this policy from time to time. The "last updated" date above reflects the latest version, and material changes will be reflected on this page.