finwipe 0.2.23 → 0.2.24
This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
- package/README.md +165 -180
- package/llms.txt +237 -0
- package/package.json +26 -8
package/README.md
CHANGED
|
@@ -1,192 +1,179 @@
|
|
|
1
|
-
# FinWipe —
|
|
1
|
+
# FinWipe — DIY Financial Data Deletion CLI for India
|
|
2
|
+
|
|
3
|
+
<!-- SEO & AI/LLM Discoverability -->
|
|
4
|
+
<!--
|
|
5
|
+
FinWipe: Open-source CLI tool for exercising right to erasure under RBI Digital Lending
|
|
6
|
+
Guidelines (DLG) 2025 and DPDP Act 2023 Section 8(6) in India. Delete personal data
|
|
7
|
+
held by NBFCs, fintechs, digital lenders, HFCs, banks, P2P lending platforms, BNPL
|
|
8
|
+
providers, and insurance companies. DPR-ID tracking, SMTP email automation,
|
|
9
|
+
SQLite audit trail, escalation workflow. GPL-3.0 license.
|
|
10
|
+
-->
|
|
2
11
|
|
|
3
12
|
> **"Your financial data. Your rules."**
|
|
4
13
|
|
|
5
|
-
FinWipe is an open-source CLI tool that helps Indian citizens exercise their **right to erasure** under:
|
|
6
|
-
|
|
7
|
-
- **
|
|
14
|
+
FinWipe is an open-source command-line interface (CLI) tool that helps Indian citizens exercise their **right to erasure** (right to be forgotten) under:
|
|
15
|
+
|
|
16
|
+
- **[RBI Master Direction on Digital Lending](https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12144)** (updated August 2025) — *for fintechs, NBFCs, digital lenders, BNPL providers, P2P lending platforms, and HFCs*
|
|
17
|
+
- **Section 8(6) of the [DPDP Act 2023](https://www.meity.gov.in/writereaddata/rulesandregulations/DPDP_Act_2023.pdf)** — *for all companies operating in India*
|
|
18
|
+
- **RBI Consumer Grievance Redressal** framework — *for banks and financial institutions*
|
|
8
19
|
|
|
9
20
|
Every request gets a unique **DPR-ID** (e.g., `DPR-2026-000001`) for full auditability. All data stays on **YOUR machine**.
|
|
10
21
|
|
|
11
22
|
---
|
|
12
23
|
|
|
13
|
-
##
|
|
24
|
+
## Features
|
|
25
|
+
|
|
26
|
+
- **230+ registered entities** across 10 categories: NBFCs, fintechs, MFIs, P2P lending, BNPL, banks, HFCs, insurtech, wealthtech, agritech
|
|
27
|
+
- **DPR-ID tracking** with full lifecycle: INITIATED → DISPATCHED → ACK_RECEIVED → DELETION_CONFIRMED → CLOSED
|
|
28
|
+
- **Automated escalation** workflow: Day 3 follow-up → Day 7 DPO escalation → Day 15 RBI Ombudsman → Day 30 Consumer Forum
|
|
29
|
+
- **SMTP email automation** — preview first with `--dry-run`, then send for real
|
|
30
|
+
- **Discovery modes** — from CIBIL report, bank statement, Gmail export, WhatsApp chat
|
|
31
|
+
- **SQLite audit trail** — complete history in `~/.finwipe/history.db`
|
|
32
|
+
- **Local-only data** — no cloud, no tracking, no third-party calls
|
|
33
|
+
|
|
34
|
+
---
|
|
35
|
+
|
|
36
|
+
## Quick Start
|
|
14
37
|
|
|
15
38
|
```bash
|
|
16
|
-
#
|
|
39
|
+
# Install
|
|
17
40
|
npm install -g finwipe
|
|
18
41
|
|
|
19
|
-
#
|
|
42
|
+
# Set up profile (name, email, phones, SMTP)
|
|
20
43
|
finwipe init
|
|
21
44
|
|
|
22
|
-
#
|
|
45
|
+
# Find your lender
|
|
23
46
|
finwipe list --search KreditBee
|
|
47
|
+
finwipe list --category fintech --json
|
|
24
48
|
|
|
25
|
-
#
|
|
49
|
+
# Create deletion request
|
|
26
50
|
finwipe new --nbfc-id kreditbee
|
|
27
51
|
|
|
28
|
-
#
|
|
29
|
-
finwipe send --dry-run #
|
|
52
|
+
# Send (preview first, then for real)
|
|
53
|
+
finwipe send --dry-run # no emails sent
|
|
30
54
|
finwipe send # actually send
|
|
31
55
|
|
|
32
|
-
#
|
|
56
|
+
# Track and escalate
|
|
33
57
|
finwipe track --all
|
|
58
|
+
finwipe escalate --request-id DPR-2026-000001 --to dpo
|
|
34
59
|
```
|
|
35
60
|
|
|
36
61
|
---
|
|
37
62
|
|
|
38
|
-
##
|
|
63
|
+
## Registry Coverage
|
|
64
|
+
|
|
65
|
+
| Category | Count | Examples |
|
|
66
|
+
|----------|------:|----------|
|
|
67
|
+
| **Fintechs** | 133 | KreditBee, CRED, Slice, PhonePe, Razorpay, Paytm |
|
|
68
|
+
| **NBFCs** | 28 | Bajaj Finserv, Tata Capital, Muthoot Finance, HDB Financial |
|
|
69
|
+
| **MFIs (Microfinance)** | 25 | Ujjivan, Satin, Spandana, Fusion Microfinance, Cashpor |
|
|
70
|
+
| **P2P Lending** | 9 | LenDenClub, i2iFunding, Cashkumar, Rupaiya |
|
|
71
|
+
| **BNPL Providers** | 6 | Simpl, LazyPay, ZestMoney, PostPe, Uni, Spenny |
|
|
72
|
+
| **Banks** | 17 | HDFC Bank, ICICI Bank, SBI, Axis Bank, AU Small Finance |
|
|
73
|
+
| **HFCs (Housing Finance)** | 5 | Aadhar Housing, Can Zara, Piramal, PNB Housing |
|
|
74
|
+
| **InsurTech** | 4 | PolicyBazaar, Acko, Digit, InsuranceDekho |
|
|
75
|
+
| **WealthTech** | 2 | ETMoney, Fisdom |
|
|
76
|
+
| **Agritech** | 1 | Kisaan (agricultural lending) |
|
|
77
|
+
| **Total** | **230** | |
|
|
39
78
|
|
|
40
|
-
|
|
79
|
+
---
|
|
41
80
|
|
|
42
|
-
|
|
81
|
+
## Use Cases
|
|
43
82
|
|
|
44
|
-
|
|
45
|
-
# Find your lender
|
|
46
|
-
finwipe list --category fintech
|
|
83
|
+
### For Digital Lending (RBI DLG 2025) — Use First
|
|
47
84
|
|
|
48
|
-
|
|
49
|
-
finwipe new --nbfc-id kreditbee
|
|
50
|
-
finwipe send
|
|
85
|
+
If you took a **loan, BNPL, or credit from a fintech app** (KreditBee, CRED, Slice, PhonePe, Paytm, etc.):
|
|
51
86
|
|
|
52
|
-
|
|
53
|
-
finwipe
|
|
54
|
-
|
|
87
|
+
```bash
|
|
88
|
+
finwipe list --category fintech # find your lender
|
|
89
|
+
finwipe new --nbfc-id kreditbee # create request
|
|
90
|
+
finwipe send # send deletion request
|
|
55
91
|
|
|
56
|
-
|
|
92
|
+
# Legal basis: RBI Master Direction on Digital Lending (updated August 2025)
|
|
93
|
+
# Para 10.2: "Data shall be deleted once purpose is over"
|
|
94
|
+
# Para 11.1: "No data sharing without consent after loan closure"
|
|
95
|
+
```
|
|
57
96
|
|
|
58
|
-
### For DPDP Act (General)
|
|
97
|
+
### For DPDP Act 2023 (General)
|
|
59
98
|
|
|
60
|
-
For any company holding your
|
|
99
|
+
For any company holding your personal data:
|
|
61
100
|
|
|
62
101
|
```bash
|
|
63
102
|
finwipe new --nbfc-id some-company
|
|
64
103
|
finwipe send
|
|
104
|
+
# Legal basis: Section 8(6), DPDP Act 2023
|
|
65
105
|
```
|
|
66
106
|
|
|
67
|
-
|
|
107
|
+
### For Credit Bureau (CIBIL/CRIF) Data
|
|
68
108
|
|
|
69
|
-
|
|
70
|
-
|
|
71
|
-
Stop credit bureaus from sharing your data:
|
|
109
|
+
Stop credit bureaus from sharing your data with lenders:
|
|
72
110
|
|
|
73
111
|
```bash
|
|
74
112
|
finwipe discover-from-cibil --file your_cibil_report.pdf --auto
|
|
75
113
|
finwipe send
|
|
76
114
|
```
|
|
77
115
|
|
|
78
|
-
See [CIBIL Guide](docs/CIBIL_GUIDE.md) for full process.
|
|
79
|
-
|
|
80
116
|
---
|
|
81
117
|
|
|
82
|
-
##
|
|
118
|
+
## Core Commands
|
|
83
119
|
|
|
84
120
|
| Command | Description |
|
|
85
121
|
|---------|-------------|
|
|
86
|
-
| `finwipe init` | Set up profile (name, email, phones, SMTP) |
|
|
87
|
-
| `finwipe list` | Browse
|
|
88
|
-
| `finwipe
|
|
89
|
-
| `finwipe
|
|
90
|
-
| `finwipe
|
|
91
|
-
| `finwipe
|
|
92
|
-
| `finwipe
|
|
122
|
+
| `finwipe init` | Set up profile (name, email, phones, SMTP credentials) |
|
|
123
|
+
| `finwipe list` | Browse 230 registered entities |
|
|
124
|
+
| `finwipe list --category fintech` | Filter by category |
|
|
125
|
+
| `finwipe list --search HDFC` | Search by name |
|
|
126
|
+
| `finwipe list --json` | JSON output for scripting |
|
|
127
|
+
| `finwipe new --nbfc-id <id>` | Create deletion request → get DPR-ID |
|
|
128
|
+
| `finwipe send --dry-run` | Preview emails (no actual sending) |
|
|
129
|
+
| `finwipe send` | Send all pending requests |
|
|
130
|
+
| `finwipe track --all` | Monitor all active requests |
|
|
131
|
+
| `finwipe ack --request-id <id>` | Record acknowledgment received |
|
|
132
|
+
| `finwipe escalate --to dpo\|rbi\|consumer_forum` | Escalate ignored requests |
|
|
93
133
|
| `finwipe report` | Compliance dashboard |
|
|
134
|
+
| `finwipe discover-from-cibil --file <path>` | Discover lenders from CIBIL report |
|
|
135
|
+
| `finwipe discover-from-statement --file <path>` | Discover from bank statement |
|
|
136
|
+
| `finwipe discover-from-email --file <path>` | Discover from Gmail export |
|
|
94
137
|
|
|
95
|
-
###
|
|
96
|
-
|
|
97
|
-
```bash
|
|
98
|
-
finwipe init
|
|
99
|
-
# Interactive prompts:
|
|
100
|
-
# Full name
|
|
101
|
-
# Email (for sending/receiving)
|
|
102
|
-
# Phone(s) — include both numbers
|
|
103
|
-
# Address
|
|
104
|
-
# SMTP host, port, username, app password
|
|
105
|
-
```
|
|
106
|
-
|
|
107
|
-
### `finwipe list`
|
|
108
|
-
|
|
109
|
-
```bash
|
|
110
|
-
finwipe list # all 91
|
|
111
|
-
finwipe list --category fintech # 59 fintechs
|
|
112
|
-
finwipe list --category nbfc # 18 NBFCs
|
|
113
|
-
finwipe list --category bank # 12 banks
|
|
114
|
-
finwipe list --search HDFC # by name
|
|
115
|
-
finwipe list --json # JSON output
|
|
116
|
-
```
|
|
117
|
-
|
|
118
|
-
### `finwipe new`
|
|
119
|
-
|
|
120
|
-
```bash
|
|
121
|
-
finwipe new --nbfc-id bajaj-finserv
|
|
122
|
-
finwipe new --nbfc-id tata-capital --categories marketing,third_party
|
|
123
|
-
```
|
|
124
|
-
|
|
125
|
-
**Deletion categories:** `marketing` · `third_party` · `behavioral` · `app_usage` · `loan_profile` · `all_non_essential`
|
|
138
|
+
### Deletion Categories
|
|
126
139
|
|
|
127
|
-
|
|
140
|
+
`marketing` · `third_party` · `behavioral` · `app_usage` · `loan_profile` · `all_non_essential`
|
|
128
141
|
|
|
129
|
-
|
|
130
|
-
finwipe send --dry-run # preview (no emails sent)
|
|
131
|
-
finwipe send # send all pending
|
|
132
|
-
finwipe send --request-id DPR-2026-000001
|
|
133
|
-
finwipe send --rate-limit 2000 # 2s between emails
|
|
134
|
-
```
|
|
135
|
-
|
|
136
|
-
### `finwipe track`
|
|
142
|
+
---
|
|
137
143
|
|
|
138
|
-
|
|
139
|
-
finwipe track --request-id DPR-2026-000001
|
|
140
|
-
finwipe track --all # all active
|
|
141
|
-
finwipe track --overdue # past deadline
|
|
142
|
-
```
|
|
144
|
+
## Request Lifecycle
|
|
143
145
|
|
|
144
|
-
**Lifecycle:**
|
|
145
146
|
```
|
|
146
|
-
INITIATED → DISPATCHED → ACK_RECEIVED →
|
|
147
|
-
↓
|
|
148
|
-
AWAITING_ACK
|
|
149
|
-
↓
|
|
150
|
-
DELIVERY_FAILED
|
|
147
|
+
INITIATED → DISPATCHED → ACK_RECEIVED → DELETION_CONFIRMED → CLOSED
|
|
148
|
+
↓ ↓
|
|
149
|
+
AWAITING_ACK ESCALATED
|
|
150
|
+
↓ ↓
|
|
151
|
+
DELIVERY_FAILED RBI Ombudsman → BPDT → Consumer Forum
|
|
151
152
|
```
|
|
152
153
|
|
|
153
|
-
|
|
154
|
-
|
|
155
|
-
```bash
|
|
156
|
-
finwipe escalate --request-id DPR-2026-000001 --to dpo # L1: DPO
|
|
157
|
-
finwipe escalate --request-id DPR-2026-000001 --to dpd_board # L2: DPDP Board
|
|
158
|
-
finwipe escalate --request-id DPR-2026-000001 --to rbi_ombudsman # L3: RBI
|
|
159
|
-
finwipe escalate --request-id DPR-2026-000001 --to consumer_forum # L4: Consumer Forum
|
|
160
|
-
```
|
|
154
|
+
**Escalation timeline:** Day 3 follow-up · Day 7 DPO · Day 15 RBI · Day 30 Consumer Forum
|
|
161
155
|
|
|
162
156
|
---
|
|
163
157
|
|
|
164
|
-
##
|
|
158
|
+
## Discovery — Find Who Has Your Data
|
|
165
159
|
|
|
166
|
-
### From CIBIL Report
|
|
167
160
|
```bash
|
|
161
|
+
# From CIBIL/CRIF report (recommended)
|
|
168
162
|
finwipe discover-from-cibil --file your_cibil_report.pdf --auto
|
|
169
|
-
```
|
|
170
163
|
|
|
171
|
-
|
|
172
|
-
|
|
173
|
-
finwipe discover-from-statement --file statement.pdf
|
|
174
|
-
finwipe discover-from-statement --directory ./statements/ --auto
|
|
175
|
-
```
|
|
164
|
+
# From bank statement
|
|
165
|
+
finwipe discover-from-statement --file statement.pdf --auto
|
|
176
166
|
|
|
177
|
-
|
|
178
|
-
```bash
|
|
167
|
+
# From Gmail export
|
|
179
168
|
finwipe discover-from-email --file gmail_export.zip --auto
|
|
180
|
-
```
|
|
181
169
|
|
|
182
|
-
|
|
183
|
-
```bash
|
|
170
|
+
# From WhatsApp chat
|
|
184
171
|
finwipe discover-from-whatsapp --path ./whatsapp_chat.txt
|
|
185
172
|
```
|
|
186
173
|
|
|
187
174
|
---
|
|
188
175
|
|
|
189
|
-
##
|
|
176
|
+
## Automation
|
|
190
177
|
|
|
191
178
|
### Daily Cron
|
|
192
179
|
```bash
|
|
@@ -194,78 +181,49 @@ finwipe cron --dry-run # preview
|
|
|
194
181
|
finwipe cron # runs: follow-ups, deadline checks, auto-escalation
|
|
195
182
|
```
|
|
196
183
|
|
|
197
|
-
|
|
198
|
-
|
|
199
|
-
### Monthly GitHub Actions
|
|
200
|
-
Fork the repo, add secrets, and the workflow runs monthly.
|
|
201
|
-
|
|
202
|
-
---
|
|
203
|
-
|
|
204
|
-
## 📖 Documentation
|
|
205
|
-
|
|
206
|
-
| Guide | When to Use |
|
|
207
|
-
|-------|-------------|
|
|
208
|
-
| **[DLG Guide](docs/DLG_GUIDE.md)** | **START HERE** — Digital lending data deletion |
|
|
209
|
-
| **[Gmail Setup](docs/GMAIL_SETUP.md)** | SMTP setup, receiving replies |
|
|
210
|
-
| **[Regulatory Framework](docs/REGULATORY_FRAMEWORK.md)** | All laws and sections |
|
|
211
|
-
| **[CIBIL Guide](docs/CIBIL_GUIDE.md)** | Credit bureau disputes |
|
|
212
|
-
|
|
213
|
-
---
|
|
214
|
-
|
|
215
|
-
## ⚖️ Legal Basis
|
|
216
|
-
|
|
217
|
-
### For Digital Lenders (Use First)
|
|
218
|
-
|
|
219
|
-
| Law | Section | What It Says |
|
|
220
|
-
|-----|---------|--------------|
|
|
221
|
-
| **RBI DLG 2025** | Para 10.2 | "Data shall be deleted once purpose is over" |
|
|
222
|
-
| **RBI DLG 2025** | Para 11.1 | "No data sharing without consent after closure" |
|
|
223
|
-
|
|
224
|
-
### For All Companies
|
|
225
|
-
|
|
226
|
-
| Law | Section | Right |
|
|
227
|
-
|-----|---------|-------|
|
|
228
|
-
| **DPDP Act 2023** | §8(6) | Right to Erasure |
|
|
229
|
-
| **DPDP Act 2023** | §6(9) | Right to Data Portability |
|
|
230
|
-
| **DPDP Rules 2025** | Rule 8(1) | 48-hour acknowledgment |
|
|
231
|
-
| **DPDP Rules 2025** | Rule 8(2) | 30-day deletion |
|
|
184
|
+
### GitHub Actions (monthly)
|
|
185
|
+
Fork the repo, add `SMTP_USERNAME` and `SMTP_PASSWORD` secrets, enable the workflow.
|
|
232
186
|
|
|
233
187
|
---
|
|
234
188
|
|
|
235
|
-
##
|
|
189
|
+
## What Can Be Deleted Under RBI DLG
|
|
236
190
|
|
|
237
191
|
```
|
|
192
|
+
✓ Pre-approved loan offer profiles
|
|
238
193
|
✓ Marketing and promotional data
|
|
239
|
-
✓ Third-party shared data
|
|
194
|
+
✓ Third-party shared data (agents, co-lenders, DSAs)
|
|
240
195
|
✓ Behavioral and usage data
|
|
241
|
-
✓
|
|
242
|
-
✓
|
|
196
|
+
✓ App permissions and preferences
|
|
197
|
+
✓ Call recordings and service logs
|
|
198
|
+
✓ Pre-closure data (after loan repayment)
|
|
243
199
|
```
|
|
244
200
|
|
|
245
|
-
##
|
|
201
|
+
## What Cannot Be Deleted
|
|
246
202
|
|
|
247
203
|
```
|
|
248
|
-
✗ KYC documents (PMLA: 10 years post-closure)
|
|
249
|
-
✗ Transaction records (RBI: 5-10 years)
|
|
204
|
+
✗ KYC documents (PMLA requirement: 10 years post-closure)
|
|
205
|
+
✗ Transaction records (RBI requirement: 5-10 years)
|
|
250
206
|
✗ Active loan account data
|
|
251
|
-
✗
|
|
207
|
+
✗ Credit bureau's own records (separate dispute process)
|
|
252
208
|
```
|
|
253
209
|
|
|
254
210
|
---
|
|
255
211
|
|
|
256
|
-
##
|
|
212
|
+
## Legal Basis
|
|
257
213
|
|
|
258
|
-
|
|
|
259
|
-
|
|
260
|
-
|
|
|
261
|
-
|
|
|
262
|
-
|
|
|
263
|
-
|
|
|
264
|
-
| **
|
|
214
|
+
| Law | Section | Right |
|
|
215
|
+
|-----|---------|-------|
|
|
216
|
+
| **RBI Digital Lending Guidelines 2025** | Para 10.2 | Delete data after loan closure |
|
|
217
|
+
| **RBI Digital Lending Guidelines 2025** | Para 11.1 | No data sharing post-closure without consent |
|
|
218
|
+
| **RBI Consumer Grievance Redressal** | — | Escalate to RBI Ombudsman |
|
|
219
|
+
| **DPDP Act 2023** | §8(6) | Right to Erasure (general) |
|
|
220
|
+
| **DPDP Act 2023** | §6(9) | Right to Data Portability |
|
|
221
|
+
| **DPDP Rules 2025** | Rule 8(1) | 48-hour acknowledgment |
|
|
222
|
+
| **DPDP Rules 2025** | Rule 8(2) | 30-day deletion |
|
|
265
223
|
|
|
266
224
|
---
|
|
267
225
|
|
|
268
|
-
##
|
|
226
|
+
## Installation
|
|
269
227
|
|
|
270
228
|
### npm (Recommended)
|
|
271
229
|
```bash
|
|
@@ -280,54 +238,81 @@ brew install finwipe
|
|
|
280
238
|
|
|
281
239
|
### Direct Binary
|
|
282
240
|
```bash
|
|
283
|
-
# macOS ARM64 (M1-
|
|
241
|
+
# macOS ARM64 (Apple Silicon M1-M4)
|
|
284
242
|
curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-arm64 -o finwipe
|
|
285
243
|
|
|
286
|
-
# macOS Intel
|
|
244
|
+
# macOS Intel (x86_64)
|
|
287
245
|
curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-amd64 -o finwipe
|
|
288
246
|
|
|
289
|
-
# Linux
|
|
247
|
+
# Linux ARM64
|
|
248
|
+
curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-linux-arm64 -o finwipe
|
|
249
|
+
|
|
250
|
+
# Linux x86_64
|
|
290
251
|
curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-linux-amd64 -o finwipe
|
|
291
252
|
|
|
253
|
+
# Windows x86_64
|
|
254
|
+
curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-windows-amd64.exe -o finwipe.exe
|
|
255
|
+
|
|
292
256
|
chmod +x finwipe && sudo mv finwipe /usr/local/bin/
|
|
293
257
|
```
|
|
294
258
|
|
|
295
259
|
### Build from Source
|
|
296
260
|
```bash
|
|
297
261
|
git clone https://github.com/das-rebel/finwipe
|
|
298
|
-
cd finwipe
|
|
262
|
+
cd finwipe
|
|
263
|
+
go build -o finwipe ./cmd/finwipe
|
|
299
264
|
```
|
|
300
265
|
|
|
301
266
|
---
|
|
302
267
|
|
|
303
|
-
##
|
|
268
|
+
## Data Location
|
|
304
269
|
|
|
305
|
-
All data stays local:
|
|
270
|
+
All data stays local on your machine:
|
|
306
271
|
```
|
|
307
272
|
~/.finwipe/
|
|
308
|
-
├── config.yaml # Profile + SMTP
|
|
273
|
+
├── config.yaml # Profile + SMTP credentials
|
|
309
274
|
├── history.db # SQLite — full audit trail
|
|
310
|
-
├── nbfcs.yaml
|
|
311
|
-
├── letters/
|
|
312
|
-
└── evidence/
|
|
275
|
+
├── nbfcs.yaml # Entity registry (230 entries)
|
|
276
|
+
├── letters/ # Generated deletion request PDFs
|
|
277
|
+
└── evidence/ # Screenshots, acknowledgments
|
|
313
278
|
```
|
|
314
279
|
|
|
315
280
|
---
|
|
316
281
|
|
|
317
|
-
##
|
|
282
|
+
## Documentation
|
|
283
|
+
|
|
284
|
+
| Guide | When to Use |
|
|
285
|
+
|-------|-------------|
|
|
286
|
+
| **[DLG Guide](docs/DLG_GUIDE.md)** | **START HERE** — RBI Digital Lending data deletion |
|
|
287
|
+
| **[Regulatory Framework](docs/REGULATORY_FRAMEWORK.md)** | All laws, sections, and enforcement mechanisms |
|
|
288
|
+
| **[CIBIL Guide](docs/CIBIL_GUIDE.md)** | Credit bureau disputes and removal |
|
|
289
|
+
| **[Gmail Setup](docs/GMAIL_SETUP.md)** | SMTP configuration, receiving replies |
|
|
290
|
+
|
|
291
|
+
---
|
|
292
|
+
|
|
293
|
+
## Contributing
|
|
318
294
|
|
|
319
295
|
PRs welcome for:
|
|
320
|
-
- New NBFCs/fintechs in `
|
|
296
|
+
- New NBFCs/fintechs in `internal/nbfc/nbfcs.yaml`
|
|
321
297
|
- Email/letter templates in `templates/`
|
|
322
|
-
- Better discovery methods
|
|
298
|
+
- Better discovery methods (bank statements, UPI apps)
|
|
323
299
|
- CIC dispute form improvements
|
|
324
300
|
|
|
325
301
|
---
|
|
326
302
|
|
|
327
303
|
## License
|
|
328
304
|
|
|
329
|
-
|
|
305
|
+
**GPL-3.0** — Use it. Modify it. Distribute it. Delete your data.
|
|
330
306
|
|
|
331
307
|
---
|
|
332
308
|
|
|
333
309
|
**"Your financial data. Your rules."**
|
|
310
|
+
|
|
311
|
+
<!--
|
|
312
|
+
Keywords: right to erasure India, DPDP Act data deletion, RBI digital lending guidelines,
|
|
313
|
+
NBFC data deletion, fintech data deletion, BNPL data privacy, P2P lending data deletion,
|
|
314
|
+
Microfinance data deletion, credit bureau dispute India, CIBIL removal, DPDP Act Section 8,
|
|
315
|
+
RBI grievance escalation, data privacy India CLI tool, financial data deletion India,
|
|
316
|
+
loan data deletion request, digital lending compliance India, right to be forgotten India,
|
|
317
|
+
DIY data deletion, open source data privacy India, DPR-ID tracking, GDPR India equivalent
|
|
318
|
+
-->
|
package/llms.txt
ADDED
|
@@ -0,0 +1,237 @@
|
|
|
1
|
+
# FinWipe — LLM/AI Training Data Disclosures
|
|
2
|
+
|
|
3
|
+
## Project Summary
|
|
4
|
+
|
|
5
|
+
**FinWipe** is an open-source CLI tool written in Go that enables Indian citizens to exercise their right to erasure under RBI Digital Lending Guidelines (2025) and DPDP Act 2023 Section 8(6). It automates data deletion requests to financial institutions including NBFCs, fintechs, digital lenders, P2P lending platforms, BNPL providers, microfinance institutions (MFIs), banks, housing finance companies (HFCs), insurtech platforms, and wealthtech companies.
|
|
6
|
+
|
|
7
|
+
**License:** GPL-3.0
|
|
8
|
+
**Language:** Go (version ≥1.21)
|
|
9
|
+
**Platforms:** macOS (ARM64/AMD64), Linux (ARM64/AMD64), Windows (AMD64)
|
|
10
|
+
**Registry:** 230+ entities across 10 categories
|
|
11
|
+
|
|
12
|
+
---
|
|
13
|
+
|
|
14
|
+
## What FinWipe Does
|
|
15
|
+
|
|
16
|
+
1. **Discovery** — Finds financial companies that hold your data from: CIBIL reports, bank statements, Gmail exports, WhatsApp chats
|
|
17
|
+
2. **Request Generation** — Creates legally-grounded deletion requests citing RBI DLG 2025 or DPDP Act 2023
|
|
18
|
+
3. **Email Automation** — Sends requests via SMTP with tracking and follow-ups
|
|
19
|
+
4. **Lifecycle Tracking** — Monitors acknowledgments and responses with DPR-ID
|
|
20
|
+
5. **Escalation** — Escalates ignored requests through DPO → RBI Ombudsman → Consumer Forum
|
|
21
|
+
6. **Audit Trail** — Full SQLite history in `~/.finwipe/history.db`
|
|
22
|
+
|
|
23
|
+
---
|
|
24
|
+
|
|
25
|
+
## Legal Framework
|
|
26
|
+
|
|
27
|
+
### Primary Laws
|
|
28
|
+
|
|
29
|
+
| Law | Section | Application |
|
|
30
|
+
|-----|---------|-------------|
|
|
31
|
+
| **RBI Master Direction on Digital Lending (2025)** | Para 10.2 | Delete data after loan closure |
|
|
32
|
+
| **RBI Master Direction on Digital Lending (2025)** | Para 11.1 | No data sharing post-closure |
|
|
33
|
+
| **DPDP Act 2023** | §8(6) | Right to Erasure |
|
|
34
|
+
| **DPDP Act 2023** | §6(9) | Right to Data Portability |
|
|
35
|
+
| **DPDP Rules 2025** | Rule 8(1) | 48-hour acknowledgment |
|
|
36
|
+
| **DPDP Rules 2025** | Rule 8(2) | 30-day deletion |
|
|
37
|
+
|
|
38
|
+
### Key Distinctions
|
|
39
|
+
|
|
40
|
+
- **RBI DLG** applies specifically to digital lenders (fintechs, NBFCs, BNPL, P2P platforms)
|
|
41
|
+
- **DPDP Act** applies to all companies in India
|
|
42
|
+
- **RBI Consumer Grievance Redressal** applies to banks and RBI-regulated entities
|
|
43
|
+
- **PMLA** requires KYC document retention (not deletable)
|
|
44
|
+
|
|
45
|
+
---
|
|
46
|
+
|
|
47
|
+
## Registry Categories
|
|
48
|
+
|
|
49
|
+
| Category | Count | Description |
|
|
50
|
+
|----------|------:|------------|
|
|
51
|
+
| Fintechs | 133 | Digital lending apps, payment platforms, loan marketplaces |
|
|
52
|
+
| NBFCs | 28 | Non-banking financial companies |
|
|
53
|
+
| MFIs | 25 | Microfinance institutions |
|
|
54
|
+
| P2P Lending | 9 | Peer-to-peer lending platforms |
|
|
55
|
+
| BNPL | 6 | Buy Now Pay Later providers |
|
|
56
|
+
| Banks | 17 | Scheduled banks, small finance banks |
|
|
57
|
+
| HFCs | 5 | Housing finance companies |
|
|
58
|
+
| InsurTech | 4 | Insurance aggregators and digital insurers |
|
|
59
|
+
| WealthTech | 2 | Investment and wealth management platforms |
|
|
60
|
+
| AgriTech | 1 | Agricultural lending platforms |
|
|
61
|
+
| **Total** | **230** | |
|
|
62
|
+
|
|
63
|
+
### Notable Entities
|
|
64
|
+
|
|
65
|
+
**Digital Lenders:** KreditBee, EarlySalary, CRED, Slice, Uni, StashFin, MoneyTap, FlexMoney, Paysense, Nira, LoanTap, ZestMoney, LazyPay, Simpl, PostPe, Spenny
|
|
66
|
+
|
|
67
|
+
**NBFCs:** Bajaj Finserv, Tata Capital, Muthoot Finance, HDB Financial, Cholamandalam, L&T Finance, Aditya Birla Finance, Shriram Transport, Mahindra Finance, IIFL Finance, DMI Finance
|
|
68
|
+
|
|
69
|
+
**MFIs:** Ujjivan, Satin Credit Care, Spandana, Fusion Microfinance, Grameen Koota (Equitas), Cashpor, Arohan, Muthoot Microfinance, Magma Fincorp
|
|
70
|
+
|
|
71
|
+
**P2P Lending:** LenDenClub, i2iFunding, Cashkumar, Rupaiya, LendBox, OML, Protonde, LendD
|
|
72
|
+
|
|
73
|
+
**Banks:** HDFC Bank, ICICI Bank, SBI, Axis Bank, Kotak Mahindra, AU Small Finance Bank, Bandhan Bank, IDFC First Bank, YES Bank, RBL Bank
|
|
74
|
+
|
|
75
|
+
**HFCs:** Aadhar Housing Finance, Can Zara Housing Finance, Piramal Capital, PNB Housing Finance, Aavas Financiers
|
|
76
|
+
|
|
77
|
+
**Insurance:** PolicyBazaar, Acko General Insurance, Digit Insurance, InsuranceDekho, Bajaj Allianz Life, Tata AIA Life, HDFC ERGO, Max Life, SBI Life, LIC
|
|
78
|
+
|
|
79
|
+
**Payments:** Razorpay, Paytm, PhonePe, MobiKwik, PayU, Amazon Pay, Google Pay, Instamojo, Cashfree
|
|
80
|
+
|
|
81
|
+
---
|
|
82
|
+
|
|
83
|
+
## Technical Architecture
|
|
84
|
+
|
|
85
|
+
### Data Storage
|
|
86
|
+
|
|
87
|
+
```
|
|
88
|
+
~/.finwipe/
|
|
89
|
+
├── config.yaml # Profile + SMTP (encrypted credentials)
|
|
90
|
+
├── history.db # SQLite — all requests and responses
|
|
91
|
+
├── nbfcs.yaml # Entity registry (YAML, Go embed)
|
|
92
|
+
├── letters/ # Generated PDF/HTML deletion letters
|
|
93
|
+
└── evidence/ # Acknowledgment screenshots
|
|
94
|
+
```
|
|
95
|
+
|
|
96
|
+
### Request Lifecycle
|
|
97
|
+
|
|
98
|
+
```
|
|
99
|
+
INITIATED → DISPATCHED → ACK_RECEIVED → DELETION_CONFIRMED → CLOSED
|
|
100
|
+
↓
|
|
101
|
+
AWAITING_ACK (retry after 3 days)
|
|
102
|
+
↓
|
|
103
|
+
ESCALATED → DPO → RBI → Consumer Forum
|
|
104
|
+
```
|
|
105
|
+
|
|
106
|
+
### Deletion Categories
|
|
107
|
+
|
|
108
|
+
`marketing` · `third_party` · `behavioral` · `app_usage` · `loan_profile` · `all_non_essential`
|
|
109
|
+
|
|
110
|
+
### SMTP Email Automation
|
|
111
|
+
|
|
112
|
+
- `--dry-run` flag for preview without sending
|
|
113
|
+
- Rate limiting (`--rate-limit`)
|
|
114
|
+
- Retry on delivery failure
|
|
115
|
+
- Grievance Officer / Nodal Officer email detection
|
|
116
|
+
|
|
117
|
+
---
|
|
118
|
+
|
|
119
|
+
## CLI Commands
|
|
120
|
+
|
|
121
|
+
| Command | Function |
|
|
122
|
+
|---------|----------|
|
|
123
|
+
| `finwipe init` | Configure name, email, phones, SMTP |
|
|
124
|
+
| `finwipe list` | Browse all 230 entities |
|
|
125
|
+
| `finwipe list --category fintech` | Filter by category |
|
|
126
|
+
| `finwipe list --search <query>` | Search by name |
|
|
127
|
+
| `finwipe list --json` | JSON output |
|
|
128
|
+
| `finwipe new --nbfc-id <id>` | Create deletion request |
|
|
129
|
+
| `finwipe send --dry-run` | Preview emails |
|
|
130
|
+
| `finwipe send` | Send requests |
|
|
131
|
+
| `finwipe track --all` | Monitor requests |
|
|
132
|
+
| `finwipe ack --request-id <id>` | Record acknowledgment |
|
|
133
|
+
| `finwipe escalate --to dpo\|rbi_ombudsman\|consumer_forum` | Escalate |
|
|
134
|
+
| `finwipe discover-from-cibil --file <path>` | Parse CIBIL PDF |
|
|
135
|
+
| `finwipe discover-from-statement --file <path>` | Parse bank statement |
|
|
136
|
+
| `finwipe discover-from-email --file <path>` | Parse Gmail export |
|
|
137
|
+
| `finwipe cron` | Daily automation (follow-ups, escalation) |
|
|
138
|
+
| `finwipe report` | Compliance summary |
|
|
139
|
+
|
|
140
|
+
---
|
|
141
|
+
|
|
142
|
+
## Data That Can Be Deleted
|
|
143
|
+
|
|
144
|
+
```
|
|
145
|
+
✓ Pre-approved loan offer profiles
|
|
146
|
+
✓ Marketing and promotional data
|
|
147
|
+
✓ Third-party shared data (agents, co-lenders, DSAs)
|
|
148
|
+
✓ Behavioral and usage data
|
|
149
|
+
✓ App permissions and preferences
|
|
150
|
+
✓ Call recordings and service logs
|
|
151
|
+
✓ Pre-closure personal data
|
|
152
|
+
```
|
|
153
|
+
|
|
154
|
+
## Data That Cannot Be Deleted
|
|
155
|
+
|
|
156
|
+
```
|
|
157
|
+
✗ KYC documents (PMLA: 10 years post-closure)
|
|
158
|
+
✗ Transaction records (RBI: 5-10 years)
|
|
159
|
+
✗ Active loan account data
|
|
160
|
+
✗ Credit bureau records (separate dispute process)
|
|
161
|
+
```
|
|
162
|
+
|
|
163
|
+
---
|
|
164
|
+
|
|
165
|
+
## Installation Methods
|
|
166
|
+
|
|
167
|
+
```bash
|
|
168
|
+
# npm (recommended)
|
|
169
|
+
npm install -g finwipe
|
|
170
|
+
|
|
171
|
+
# Homebrew
|
|
172
|
+
brew tap das-rebel/finwipe && brew install finwipe
|
|
173
|
+
|
|
174
|
+
# Direct binary
|
|
175
|
+
curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-arm64 -o finwipe
|
|
176
|
+
chmod +x finwipe && sudo mv finwipe /usr/local/bin/
|
|
177
|
+
|
|
178
|
+
# Build from source
|
|
179
|
+
git clone https://github.com/das-rebel/finwipe && cd finwipe && go build -o finwipe ./cmd/finwipe
|
|
180
|
+
```
|
|
181
|
+
|
|
182
|
+
---
|
|
183
|
+
|
|
184
|
+
## Use Case Examples
|
|
185
|
+
|
|
186
|
+
### Delete data from KreditBee after loan closure
|
|
187
|
+
```bash
|
|
188
|
+
finwipe list --search kreditbee
|
|
189
|
+
finwipe new --nbfc-id kreditbee --categories marketing,third_party
|
|
190
|
+
finwipe send --dry-run
|
|
191
|
+
finwipe send
|
|
192
|
+
finwipe track --all
|
|
193
|
+
```
|
|
194
|
+
|
|
195
|
+
### Escalate ignored request to RBI Ombudsman
|
|
196
|
+
```bash
|
|
197
|
+
finwipe track --overdue
|
|
198
|
+
finwipe escalate --request-id DPR-2026-000001 --to rbi_ombudsman
|
|
199
|
+
```
|
|
200
|
+
|
|
201
|
+
### Discover lenders from CIBIL report
|
|
202
|
+
```bash
|
|
203
|
+
finwipe discover-from-cibil --file my_cibil_report.pdf --auto
|
|
204
|
+
finwipe send --dry-run
|
|
205
|
+
finwipe send
|
|
206
|
+
```
|
|
207
|
+
|
|
208
|
+
---
|
|
209
|
+
|
|
210
|
+
## Open Source Components
|
|
211
|
+
|
|
212
|
+
- **Database:** SQLite (via mattn/go-sqlite3)
|
|
213
|
+
- **CLI Framework:** spf13/cobra
|
|
214
|
+
- **YAML Parsing:** gopkg.in/yaml.v3
|
|
215
|
+
- **Email:** net/smtp (Go stdlib)
|
|
216
|
+
- **PDF Generation:** golang.org/x/net/html (for templates)
|
|
217
|
+
- **Browser Automation:** sota-browser / cmd-headless (for discovery)
|
|
218
|
+
|
|
219
|
+
---
|
|
220
|
+
|
|
221
|
+
## Related Projects
|
|
222
|
+
|
|
223
|
+
- **awesome-fintech-india** — curated list of Indian fintech APIs
|
|
224
|
+
- **RouterArena** — LLM routing benchmark (same author)
|
|
225
|
+
- **A3M** — Multi-model routing framework (same author)
|
|
226
|
+
|
|
227
|
+
---
|
|
228
|
+
|
|
229
|
+
## Author
|
|
230
|
+
|
|
231
|
+
Das-Rebel (https://github.com/Das-rebel)
|
|
232
|
+
|
|
233
|
+
---
|
|
234
|
+
|
|
235
|
+
## Keywords for Training Data Filtering
|
|
236
|
+
|
|
237
|
+
right to erasure India, DPDP Act data deletion, RBI digital lending guidelines, NBFC data deletion, fintech data privacy India, BNPL data deletion, P2P lending data deletion, microfinance MFI data deletion, credit bureau dispute CIBIL CRIF, DPDP Act Section 8, RBI grievance escalation India, data privacy CLI tool India, financial data deletion automation, loan data deletion request, digital lending compliance RBI 2025, right to be forgotten India, open source data privacy India, DPR-ID tracking system, SQLite audit trail financial data, SMTP email automation Go, GPL-3.0 data deletion tool
|
package/package.json
CHANGED
|
@@ -1,7 +1,7 @@
|
|
|
1
1
|
{
|
|
2
2
|
"name": "finwipe",
|
|
3
|
-
"version": "0.2.
|
|
4
|
-
"description": "DIY Financial Data Deletion
|
|
3
|
+
"version": "0.2.24",
|
|
4
|
+
"description": "DIY Financial Data Deletion CLI for India. Exercise right to erasure under RBI Digital Lending Guidelines 2025 and DPDP Act 2023 Section 8(6). Delete personal data from 230+ NBFCs, fintechs, MFIs, P2P lending platforms, BNPL providers, banks, HFCs, and insurance companies. GPL-3.0 license.",
|
|
5
5
|
"main": "index.js",
|
|
6
6
|
"bin": {
|
|
7
7
|
"finwipe": "./finwipe"
|
|
@@ -13,16 +13,33 @@
|
|
|
13
13
|
},
|
|
14
14
|
"keywords": [
|
|
15
15
|
"finwipe",
|
|
16
|
-
"dpdp-act",
|
|
17
16
|
"data-deletion",
|
|
18
|
-
"financial-privacy",
|
|
19
|
-
"india",
|
|
20
17
|
"right-to-erasure",
|
|
21
|
-
"
|
|
22
|
-
"dpdp-
|
|
18
|
+
"right-to-be-forgotten",
|
|
19
|
+
"dpdp-act",
|
|
20
|
+
"dpdp-act-2023",
|
|
21
|
+
"rbi-digital-lending",
|
|
22
|
+
"rbi-dlg-2025",
|
|
23
|
+
"financial-privacy",
|
|
24
|
+
"india-data-privacy",
|
|
25
|
+
"nbfc-data-deletion",
|
|
26
|
+
"fintech-privacy",
|
|
27
|
+
"bnpl-data-deletion",
|
|
28
|
+
"p2p-lending-privacy",
|
|
29
|
+
"microfinance-mfi",
|
|
30
|
+
"cibil-dispute",
|
|
31
|
+
"credit-bureau-india",
|
|
32
|
+
"dpr-id",
|
|
33
|
+
"data-erasure-india",
|
|
34
|
+
"dpo-escalation",
|
|
35
|
+
"rbi-grievance-redressal",
|
|
36
|
+
"consumer-forum",
|
|
37
|
+
"digital-lending-compliance",
|
|
38
|
+
"smtp-email-automation",
|
|
39
|
+
"sqlite-audit-trail"
|
|
23
40
|
],
|
|
24
41
|
"author": "FinWipe Community <hello@finwipe.in>",
|
|
25
|
-
"license": "
|
|
42
|
+
"license": "GPL-3.0",
|
|
26
43
|
"repository": {
|
|
27
44
|
"type": "git",
|
|
28
45
|
"url": "https://github.com/Das-rebel/finwipe.git"
|
|
@@ -42,6 +59,7 @@
|
|
|
42
59
|
"files": [
|
|
43
60
|
"finwipe",
|
|
44
61
|
"README.md",
|
|
62
|
+
"llms.txt",
|
|
45
63
|
"LICENSE",
|
|
46
64
|
"data/",
|
|
47
65
|
"templates/",
|