Privacy Policy
LAST UPDATED · [27 JULY 2026]
This Privacy Policy explains how Rultosh Edufun Private Limited ("Rultosh Edufun," "Mint Ferry," "we," "us," or "our") collects, uses, discloses and safeguards information in connection with the Mint Ferry platform, including our website (mintferry.com) and the co-lending and investment fund products made available to our institutional clients ("Platform").
This Policy is intended for our institutional clients (banks, NBFCs and fund managers) and their authorized users. It does not address consumer/borrower-level data handling, which is governed separately by the data-sharing and processing agreements in place with each client institution.
1. Information We Collect
- Business contact details (name, designation, company, email, phone number) submitted through our contact/sales forms
- Account and user information for individuals authorized by client institutions to access the Platform (name, role, official email, institution affiliation)
- Information submitted in the course of onboarding, due diligence or contracting (e.g., company registration details, authorized signatory information)
- Standard web analytics (pages visited, referring URL, browser/device type, approximate location derived from IP address)
- Platform usage logs for authenticated users (login times, actions taken, maker-checker approvals) for audit and security purposes
- As part of operating the co-lending and investment fund workflows, Mint Ferry processes loan application, sanction and disbursement data, and fund participation data, on behalf of and at the direction of our client institutions. This data is processed under the terms of the applicable client agreement and is not used by Rultosh Edufun for any purpose beyond providing the contracted service, except as required by law.
2. How We Use Information
We use the information described above to:
- Operate, maintain and secure the Platform
- Provide maker-checker workflows, business rule engine (BRE) processing and core-banking integration as contracted
- Respond to inquiries submitted via our website or sales channels
- Maintain audit trails and configuration change logs required for regulatory and operational purposes
- Improve the Platform's reliability, performance and features
- Meet legal, regulatory, and compliance obligations, including those arising under RBI guidelines applicable to our client institutions
We do not sell personal information and we do not use client-institution loan or fund data for advertising or unrelated commercial purposes.
3. Data Sharing and Disclosure
We may share information with:
- Client institutions and their authorized counterparties (e.g., the co-lending bank/NBFC pair, or fund participants), strictly as required for the workflow being processed
- Sub-processors and infrastructure providers (e.g., cloud hosting, in accordance with contractual data protection terms)
- Regulators or authorities, where required by law, regulation or valid legal process
- Professional advisors (legal, audit) under confidentiality obligations, where necessary
We do not share information with third parties for their own independent marketing purposes.
4. Data Security
We maintain administrative, technical and physical safeguards designed to protect information processed on the Platform, including:
- Encryption of data in transit and at rest
- Role-based access control with maker-checker enforcement on sensitive actions
- Audit logging of configuration and workflow changes
- Hosted on secure cloud infrastructure with regular backups and operational monitoring
No method of transmission or storage is completely secure; we work to maintain industry-appropriate safeguards and to promptly address any identified vulnerabilities.
5. Data Retention
We retain information for as long as necessary to provide the Platform to client institutions, to meet contractual and regulatory retention requirements (including those applicable to lending records under RBI guidelines), and thereafter in accordance with applicable law and our data retention schedule agreed with each client.
6. Your Rights
Depending on applicable law (including India's Digital Personal Data Protection Act, 2023, where applicable), individuals may have rights to access, correct or request deletion of their personal information, subject to our contractual and regulatory obligations to client institutions. Requests can be directed to hello@mintferry.com.
7. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "LAST UPDATED" date above, and where appropriate, communicated directly to client institutions.