Privacy Policy
WhatIff (“we”, “us”) runs an anonymous, information-only home-loan rate registry. Borrowers share the rate they actually got; everyone else sees anonymised aggregates. This policy explains what we collect, why, and your choices. We aim to collect as little as possible.
1. Who we are
WhatIff is an independent service. We are not a bank, lender, broker, direct selling agent (DSA) or loan service provider (LSP), and we are not paid by any lender. We do not arrange, facilitate or apply for loans.
2. What we collect
- The rate you submit — your bank, interest rate, the year and size of the loan, its original tenure, an optional outstanding balance, rate type, how you got the loan, employment type and credit-score band. This is stored to build anonymous aggregates. No name is attached to it.
- Your sign-in — to add a rate you sign in with Google or with an email and password, through our authentication provider (Supabase Auth). We receive an account identifier and your email address (and, for Google, basic profile info). This is used only to keep out spam, duplicate and fake submissions. It is never shown to other users and never attached to the figures we display.
- Technical data — a random identifier stored in your browser to prevent accidental duplicate submissions, and cookieless, aggregate visitor analytics (via Umami) that do not identify you.
We do not collect your loan account number, PAN, Aadhaar, address, phone number, or any document. Please don’t enter such details anywhere on the site.
3. How we use it
- To show anonymised aggregates (medians, ranges and counts) so borrowers can compare.
- To keep the data honest — detecting outliers and preventing spam, duplicate or fake submissions.
- To understand overall usage in aggregate.
4. What we never do
- We never sell your data.
- We never share your identity, email or individual submission with lenders, brokers, agents or advertisers.
- We never display an individual rate or contact detail — only aggregates.
5. Where it’s stored
Data is stored with our infrastructure providers — Supabase (database and authentication) and Vercel (hosting) — who process it on our behalf. Access to raw data is restricted; the public website can only read aggregates, never raw rows.
6. Retention
Anonymous rate data is kept to power the aggregates. Your sign-in account details are kept while they’re needed for anti-spam, and removed on request.
7. Your choices and rights
Subject to applicable law, including India’s Digital Personal Data Protection Act, 2023, you can ask us to access, correct or delete the personal data we hold about you (your sign-in account, including the email you signed in with). Resubmitting on the site also supersedes your earlier entry. To make a request, contact us below.
8. Children
The site is intended for adults (18+) and not directed at children.
9. Changes
We may update this policy; the “last updated” date will change. Continued use means you accept the current version.
10. Contact
Questions or requests: hello.whatiff@gmail.com.
This policy is provided for transparency and is not legal advice. See also our Terms of Use.