finwipe 0.2.23 → 0.2.24

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (3) hide show
  1. package/README.md +165 -180
  2. package/llms.txt +237 -0
  3. package/package.json +26 -8
package/README.md CHANGED
@@ -1,192 +1,179 @@
1
- # FinWipe — Stop Digital Lenders from Holding Your Data
1
+ # FinWipe — DIY Financial Data Deletion CLI for India
2
+
3
+ <!-- SEO & AI/LLM Discoverability -->
4
+ <!--
5
+ FinWipe: Open-source CLI tool for exercising right to erasure under RBI Digital Lending
6
+ Guidelines (DLG) 2025 and DPDP Act 2023 Section 8(6) in India. Delete personal data
7
+ held by NBFCs, fintechs, digital lenders, HFCs, banks, P2P lending platforms, BNPL
8
+ providers, and insurance companies. DPR-ID tracking, SMTP email automation,
9
+ SQLite audit trail, escalation workflow. GPL-3.0 license.
10
+ -->
2
11
 
3
12
  > **"Your financial data. Your rules."**
4
13
 
5
- FinWipe is an open-source CLI tool that helps Indian citizens exercise their **right to erasure** under:
6
- - **RBI Master Direction on Digital Lending** (updated August 2025) — *for fintechs, NBFCs, and digital lenders*
7
- - **Section 8(6) of the DPDP Act, 2023** — *for all companies*
14
+ FinWipe is an open-source command-line interface (CLI) tool that helps Indian citizens exercise their **right to erasure** (right to be forgotten) under:
15
+
16
+ - **[RBI Master Direction on Digital Lending](https://www.rbi.org.in/Scripts/NotificationUser.aspx?Id=12144)** (updated August 2025) — *for fintechs, NBFCs, digital lenders, BNPL providers, P2P lending platforms, and HFCs*
17
+ - **Section 8(6) of the [DPDP Act 2023](https://www.meity.gov.in/writereaddata/rulesandregulations/DPDP_Act_2023.pdf)** — *for all companies operating in India*
18
+ - **RBI Consumer Grievance Redressal** framework — *for banks and financial institutions*
8
19
 
9
20
  Every request gets a unique **DPR-ID** (e.g., `DPR-2026-000001`) for full auditability. All data stays on **YOUR machine**.
10
21
 
11
22
  ---
12
23
 
13
- ## ⚡ Quick Start
24
+ ## Features
25
+
26
+ - **230+ registered entities** across 10 categories: NBFCs, fintechs, MFIs, P2P lending, BNPL, banks, HFCs, insurtech, wealthtech, agritech
27
+ - **DPR-ID tracking** with full lifecycle: INITIATED → DISPATCHED → ACK_RECEIVED → DELETION_CONFIRMED → CLOSED
28
+ - **Automated escalation** workflow: Day 3 follow-up → Day 7 DPO escalation → Day 15 RBI Ombudsman → Day 30 Consumer Forum
29
+ - **SMTP email automation** — preview first with `--dry-run`, then send for real
30
+ - **Discovery modes** — from CIBIL report, bank statement, Gmail export, WhatsApp chat
31
+ - **SQLite audit trail** — complete history in `~/.finwipe/history.db`
32
+ - **Local-only data** — no cloud, no tracking, no third-party calls
33
+
34
+ ---
35
+
36
+ ## Quick Start
14
37
 
15
38
  ```bash
16
- # 1. Install
39
+ # Install
17
40
  npm install -g finwipe
18
41
 
19
- # 2. Set up your profile (name, email, phones, SMTP)
42
+ # Set up profile (name, email, phones, SMTP)
20
43
  finwipe init
21
44
 
22
- # 3. Find your lender
45
+ # Find your lender
23
46
  finwipe list --search KreditBee
47
+ finwipe list --category fintech --json
24
48
 
25
- # 4. Create deletion request
49
+ # Create deletion request
26
50
  finwipe new --nbfc-id kreditbee
27
51
 
28
- # 5. Send
29
- finwipe send --dry-run # preview first
52
+ # Send (preview first, then for real)
53
+ finwipe send --dry-run # no emails sent
30
54
  finwipe send # actually send
31
55
 
32
- # 6. Track
56
+ # Track and escalate
33
57
  finwipe track --all
58
+ finwipe escalate --request-id DPR-2026-000001 --to dpo
34
59
  ```
35
60
 
36
61
  ---
37
62
 
38
- ## 🎯 Use Cases
63
+ ## Registry Coverage
64
+
65
+ | Category | Count | Examples |
66
+ |----------|------:|----------|
67
+ | **Fintechs** | 133 | KreditBee, CRED, Slice, PhonePe, Razorpay, Paytm |
68
+ | **NBFCs** | 28 | Bajaj Finserv, Tata Capital, Muthoot Finance, HDB Financial |
69
+ | **MFIs (Microfinance)** | 25 | Ujjivan, Satin, Spandana, Fusion Microfinance, Cashpor |
70
+ | **P2P Lending** | 9 | LenDenClub, i2iFunding, Cashkumar, Rupaiya |
71
+ | **BNPL Providers** | 6 | Simpl, LazyPay, ZestMoney, PostPe, Uni, Spenny |
72
+ | **Banks** | 17 | HDFC Bank, ICICI Bank, SBI, Axis Bank, AU Small Finance |
73
+ | **HFCs (Housing Finance)** | 5 | Aadhar Housing, Can Zara, Piramal, PNB Housing |
74
+ | **InsurTech** | 4 | PolicyBazaar, Acko, Digit, InsuranceDekho |
75
+ | **WealthTech** | 2 | ETMoney, Fisdom |
76
+ | **Agritech** | 1 | Kisaan (agricultural lending) |
77
+ | **Total** | **230** | |
39
78
 
40
- ### For Digital Lending (DLG) — Recommended First
79
+ ---
41
80
 
42
- If you took a **loan, BNPL, or credit from a fintech app** (KreditBee, CRED, Slice, PhonePe, etc.):
81
+ ## Use Cases
43
82
 
44
- ```bash
45
- # Find your lender
46
- finwipe list --category fintech
83
+ ### For Digital Lending (RBI DLG 2025) — Use First
47
84
 
48
- # Send deletion request
49
- finwipe new --nbfc-id kreditbee
50
- finwipe send
85
+ If you took a **loan, BNPL, or credit from a fintech app** (KreditBee, CRED, Slice, PhonePe, Paytm, etc.):
51
86
 
52
- # Follow up after 3 days
53
- finwipe send --request-id DPR-2026-XXXXXX
54
- ```
87
+ ```bash
88
+ finwipe list --category fintech # find your lender
89
+ finwipe new --nbfc-id kreditbee # create request
90
+ finwipe send # send deletion request
55
91
 
56
- **Legal basis:** RBI Master Direction on Digital Lending (updated August 2025) — Para 10.2, 11.1
92
+ # Legal basis: RBI Master Direction on Digital Lending (updated August 2025)
93
+ # Para 10.2: "Data shall be deleted once purpose is over"
94
+ # Para 11.1: "No data sharing without consent after loan closure"
95
+ ```
57
96
 
58
- ### For DPDP Act (General)
97
+ ### For DPDP Act 2023 (General)
59
98
 
60
- For any company holding your data under the general data protection law:
99
+ For any company holding your personal data:
61
100
 
62
101
  ```bash
63
102
  finwipe new --nbfc-id some-company
64
103
  finwipe send
104
+ # Legal basis: Section 8(6), DPDP Act 2023
65
105
  ```
66
106
 
67
- **Legal basis:** Section 8(6), DPDP Act 2023
107
+ ### For Credit Bureau (CIBIL/CRIF) Data
68
108
 
69
- ### For CIBIL/Bureau Data
70
-
71
- Stop credit bureaus from sharing your data:
109
+ Stop credit bureaus from sharing your data with lenders:
72
110
 
73
111
  ```bash
74
112
  finwipe discover-from-cibil --file your_cibil_report.pdf --auto
75
113
  finwipe send
76
114
  ```
77
115
 
78
- See [CIBIL Guide](docs/CIBIL_GUIDE.md) for full process.
79
-
80
116
  ---
81
117
 
82
- ## 📋 Core Commands
118
+ ## Core Commands
83
119
 
84
120
  | Command | Description |
85
121
  |---------|-------------|
86
- | `finwipe init` | Set up profile (name, email, phones, SMTP) |
87
- | `finwipe list` | Browse 91 registered entities |
88
- | `finwipe new` | Create deletion request → get DPR-ID |
89
- | `finwipe send` | Send emails |
90
- | `finwipe track` | Monitor lifecycle |
91
- | `finwipe ack` | Record acknowledgment |
92
- | `finwipe escalate` | Escalate ignored requests |
122
+ | `finwipe init` | Set up profile (name, email, phones, SMTP credentials) |
123
+ | `finwipe list` | Browse 230 registered entities |
124
+ | `finwipe list --category fintech` | Filter by category |
125
+ | `finwipe list --search HDFC` | Search by name |
126
+ | `finwipe list --json` | JSON output for scripting |
127
+ | `finwipe new --nbfc-id <id>` | Create deletion request → get DPR-ID |
128
+ | `finwipe send --dry-run` | Preview emails (no actual sending) |
129
+ | `finwipe send` | Send all pending requests |
130
+ | `finwipe track --all` | Monitor all active requests |
131
+ | `finwipe ack --request-id <id>` | Record acknowledgment received |
132
+ | `finwipe escalate --to dpo\|rbi\|consumer_forum` | Escalate ignored requests |
93
133
  | `finwipe report` | Compliance dashboard |
134
+ | `finwipe discover-from-cibil --file <path>` | Discover lenders from CIBIL report |
135
+ | `finwipe discover-from-statement --file <path>` | Discover from bank statement |
136
+ | `finwipe discover-from-email --file <path>` | Discover from Gmail export |
94
137
 
95
- ### `finwipe init`
96
-
97
- ```bash
98
- finwipe init
99
- # Interactive prompts:
100
- # Full name
101
- # Email (for sending/receiving)
102
- # Phone(s) — include both numbers
103
- # Address
104
- # SMTP host, port, username, app password
105
- ```
106
-
107
- ### `finwipe list`
108
-
109
- ```bash
110
- finwipe list # all 91
111
- finwipe list --category fintech # 59 fintechs
112
- finwipe list --category nbfc # 18 NBFCs
113
- finwipe list --category bank # 12 banks
114
- finwipe list --search HDFC # by name
115
- finwipe list --json # JSON output
116
- ```
117
-
118
- ### `finwipe new`
119
-
120
- ```bash
121
- finwipe new --nbfc-id bajaj-finserv
122
- finwipe new --nbfc-id tata-capital --categories marketing,third_party
123
- ```
124
-
125
- **Deletion categories:** `marketing` · `third_party` · `behavioral` · `app_usage` · `loan_profile` · `all_non_essential`
138
+ ### Deletion Categories
126
139
 
127
- ### `finwipe send`
140
+ `marketing` · `third_party` · `behavioral` · `app_usage` · `loan_profile` · `all_non_essential`
128
141
 
129
- ```bash
130
- finwipe send --dry-run # preview (no emails sent)
131
- finwipe send # send all pending
132
- finwipe send --request-id DPR-2026-000001
133
- finwipe send --rate-limit 2000 # 2s between emails
134
- ```
135
-
136
- ### `finwipe track`
142
+ ---
137
143
 
138
- ```bash
139
- finwipe track --request-id DPR-2026-000001
140
- finwipe track --all # all active
141
- finwipe track --overdue # past deadline
142
- ```
144
+ ## Request Lifecycle
143
145
 
144
- **Lifecycle:**
145
146
  ```
146
- INITIATED → DISPATCHED → ACK_RECEIVED → RESPONSE_OK → CLOSED
147
-
148
- AWAITING_ACK ESCALATED
149
-
150
- DELIVERY_FAILED RBI OM ~ BPDT ~ Consumer Forum
147
+ INITIATED → DISPATCHED → ACK_RECEIVED → DELETION_CONFIRMED → CLOSED
148
+
149
+ AWAITING_ACK ESCALATED
150
+
151
+ DELIVERY_FAILED RBI Ombudsman BPDT Consumer Forum
151
152
  ```
152
153
 
153
- ### `finwipe escalate`
154
-
155
- ```bash
156
- finwipe escalate --request-id DPR-2026-000001 --to dpo # L1: DPO
157
- finwipe escalate --request-id DPR-2026-000001 --to dpd_board # L2: DPDP Board
158
- finwipe escalate --request-id DPR-2026-000001 --to rbi_ombudsman # L3: RBI
159
- finwipe escalate --request-id DPR-2026-000001 --to consumer_forum # L4: Consumer Forum
160
- ```
154
+ **Escalation timeline:** Day 3 follow-up · Day 7 DPO · Day 15 RBI · Day 30 Consumer Forum
161
155
 
162
156
  ---
163
157
 
164
- ## 🔍 Discovery — Find Who Has Your Data
158
+ ## Discovery — Find Who Has Your Data
165
159
 
166
- ### From CIBIL Report
167
160
  ```bash
161
+ # From CIBIL/CRIF report (recommended)
168
162
  finwipe discover-from-cibil --file your_cibil_report.pdf --auto
169
- ```
170
163
 
171
- ### From Bank Statement
172
- ```bash
173
- finwipe discover-from-statement --file statement.pdf
174
- finwipe discover-from-statement --directory ./statements/ --auto
175
- ```
164
+ # From bank statement
165
+ finwipe discover-from-statement --file statement.pdf --auto
176
166
 
177
- ### From Gmail
178
- ```bash
167
+ # From Gmail export
179
168
  finwipe discover-from-email --file gmail_export.zip --auto
180
- ```
181
169
 
182
- ### From WhatsApp
183
- ```bash
170
+ # From WhatsApp chat
184
171
  finwipe discover-from-whatsapp --path ./whatsapp_chat.txt
185
172
  ```
186
173
 
187
174
  ---
188
175
 
189
- ## 🤖 Automation
176
+ ## Automation
190
177
 
191
178
  ### Daily Cron
192
179
  ```bash
@@ -194,78 +181,49 @@ finwipe cron --dry-run # preview
194
181
  finwipe cron # runs: follow-ups, deadline checks, auto-escalation
195
182
  ```
196
183
 
197
- **Schedule:** Day 3 → follow-up · Day 7 → DPO escalation · Day 30 → DPDP Board
198
-
199
- ### Monthly GitHub Actions
200
- Fork the repo, add secrets, and the workflow runs monthly.
201
-
202
- ---
203
-
204
- ## 📖 Documentation
205
-
206
- | Guide | When to Use |
207
- |-------|-------------|
208
- | **[DLG Guide](docs/DLG_GUIDE.md)** | **START HERE** — Digital lending data deletion |
209
- | **[Gmail Setup](docs/GMAIL_SETUP.md)** | SMTP setup, receiving replies |
210
- | **[Regulatory Framework](docs/REGULATORY_FRAMEWORK.md)** | All laws and sections |
211
- | **[CIBIL Guide](docs/CIBIL_GUIDE.md)** | Credit bureau disputes |
212
-
213
- ---
214
-
215
- ## ⚖️ Legal Basis
216
-
217
- ### For Digital Lenders (Use First)
218
-
219
- | Law | Section | What It Says |
220
- |-----|---------|--------------|
221
- | **RBI DLG 2025** | Para 10.2 | "Data shall be deleted once purpose is over" |
222
- | **RBI DLG 2025** | Para 11.1 | "No data sharing without consent after closure" |
223
-
224
- ### For All Companies
225
-
226
- | Law | Section | Right |
227
- |-----|---------|-------|
228
- | **DPDP Act 2023** | §8(6) | Right to Erasure |
229
- | **DPDP Act 2023** | §6(9) | Right to Data Portability |
230
- | **DPDP Rules 2025** | Rule 8(1) | 48-hour acknowledgment |
231
- | **DPDP Rules 2025** | Rule 8(2) | 30-day deletion |
184
+ ### GitHub Actions (monthly)
185
+ Fork the repo, add `SMTP_USERNAME` and `SMTP_PASSWORD` secrets, enable the workflow.
232
186
 
233
187
  ---
234
188
 
235
- ## What Can Be Deleted
189
+ ## What Can Be Deleted Under RBI DLG
236
190
 
237
191
  ```
192
+ ✓ Pre-approved loan offer profiles
238
193
  ✓ Marketing and promotional data
239
- ✓ Third-party shared data
194
+ ✓ Third-party shared data (agents, co-lenders, DSAs)
240
195
  ✓ Behavioral and usage data
241
- Pre-approved loan offer profiles
242
- App activity and preferences
196
+ App permissions and preferences
197
+ Call recordings and service logs
198
+ ✓ Pre-closure data (after loan repayment)
243
199
  ```
244
200
 
245
- ## What Cannot Be Deleted
201
+ ## What Cannot Be Deleted
246
202
 
247
203
  ```
248
- ✗ KYC documents (PMLA: 10 years post-closure)
249
- ✗ Transaction records (RBI: 5-10 years)
204
+ ✗ KYC documents (PMLA requirement: 10 years post-closure)
205
+ ✗ Transaction records (RBI requirement: 5-10 years)
250
206
  ✗ Active loan account data
251
- CIBIL's own records (use separate process)
207
+ Credit bureau's own records (separate dispute process)
252
208
  ```
253
209
 
254
210
  ---
255
211
 
256
- ## 📊 Registry
212
+ ## Legal Basis
257
213
 
258
- | Category | Count |
259
- |----------|------:|
260
- | Fintechs | 59 |
261
- | NBFCs | 18 |
262
- | Banks | 12 |
263
- | HFCs | 2 |
264
- | **Total** | **91** |
214
+ | Law | Section | Right |
215
+ |-----|---------|-------|
216
+ | **RBI Digital Lending Guidelines 2025** | Para 10.2 | Delete data after loan closure |
217
+ | **RBI Digital Lending Guidelines 2025** | Para 11.1 | No data sharing post-closure without consent |
218
+ | **RBI Consumer Grievance Redressal** | | Escalate to RBI Ombudsman |
219
+ | **DPDP Act 2023** | §8(6) | Right to Erasure (general) |
220
+ | **DPDP Act 2023** | §6(9) | Right to Data Portability |
221
+ | **DPDP Rules 2025** | Rule 8(1) | 48-hour acknowledgment |
222
+ | **DPDP Rules 2025** | Rule 8(2) | 30-day deletion |
265
223
 
266
224
  ---
267
225
 
268
- ## 💻 Installation
226
+ ## Installation
269
227
 
270
228
  ### npm (Recommended)
271
229
  ```bash
@@ -280,54 +238,81 @@ brew install finwipe
280
238
 
281
239
  ### Direct Binary
282
240
  ```bash
283
- # macOS ARM64 (M1-M3)
241
+ # macOS ARM64 (Apple Silicon M1-M4)
284
242
  curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-arm64 -o finwipe
285
243
 
286
- # macOS Intel
244
+ # macOS Intel (x86_64)
287
245
  curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-amd64 -o finwipe
288
246
 
289
- # Linux
247
+ # Linux ARM64
248
+ curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-linux-arm64 -o finwipe
249
+
250
+ # Linux x86_64
290
251
  curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-linux-amd64 -o finwipe
291
252
 
253
+ # Windows x86_64
254
+ curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-windows-amd64.exe -o finwipe.exe
255
+
292
256
  chmod +x finwipe && sudo mv finwipe /usr/local/bin/
293
257
  ```
294
258
 
295
259
  ### Build from Source
296
260
  ```bash
297
261
  git clone https://github.com/das-rebel/finwipe
298
- cd finwipe && go build -o finwipe ./cmd/finwipe
262
+ cd finwipe
263
+ go build -o finwipe ./cmd/finwipe
299
264
  ```
300
265
 
301
266
  ---
302
267
 
303
- ## 📁 Data Location
268
+ ## Data Location
304
269
 
305
- All data stays local:
270
+ All data stays local on your machine:
306
271
  ```
307
272
  ~/.finwipe/
308
- ├── config.yaml # Profile + SMTP
273
+ ├── config.yaml # Profile + SMTP credentials
309
274
  ├── history.db # SQLite — full audit trail
310
- ├── nbfcs.yaml # Entity registry
311
- ├── letters/ # Generated PDFs
312
- └── evidence/ # Screenshots, acknowledgments
275
+ ├── nbfcs.yaml # Entity registry (230 entries)
276
+ ├── letters/ # Generated deletion request PDFs
277
+ └── evidence/ # Screenshots, acknowledgments
313
278
  ```
314
279
 
315
280
  ---
316
281
 
317
- ## 🤝 Contributing
282
+ ## Documentation
283
+
284
+ | Guide | When to Use |
285
+ |-------|-------------|
286
+ | **[DLG Guide](docs/DLG_GUIDE.md)** | **START HERE** — RBI Digital Lending data deletion |
287
+ | **[Regulatory Framework](docs/REGULATORY_FRAMEWORK.md)** | All laws, sections, and enforcement mechanisms |
288
+ | **[CIBIL Guide](docs/CIBIL_GUIDE.md)** | Credit bureau disputes and removal |
289
+ | **[Gmail Setup](docs/GMAIL_SETUP.md)** | SMTP configuration, receiving replies |
290
+
291
+ ---
292
+
293
+ ## Contributing
318
294
 
319
295
  PRs welcome for:
320
- - New NBFCs/fintechs in `data/nbfcs.yaml`
296
+ - New NBFCs/fintechs in `internal/nbfc/nbfcs.yaml`
321
297
  - Email/letter templates in `templates/`
322
- - Better discovery methods
298
+ - Better discovery methods (bank statements, UPI apps)
323
299
  - CIC dispute form improvements
324
300
 
325
301
  ---
326
302
 
327
303
  ## License
328
304
 
329
- MIT — Use it. Modify it. Distribute it. Delete your data.
305
+ **GPL-3.0** — Use it. Modify it. Distribute it. Delete your data.
330
306
 
331
307
  ---
332
308
 
333
309
  **"Your financial data. Your rules."**
310
+
311
+ <!--
312
+ Keywords: right to erasure India, DPDP Act data deletion, RBI digital lending guidelines,
313
+ NBFC data deletion, fintech data deletion, BNPL data privacy, P2P lending data deletion,
314
+ Microfinance data deletion, credit bureau dispute India, CIBIL removal, DPDP Act Section 8,
315
+ RBI grievance escalation, data privacy India CLI tool, financial data deletion India,
316
+ loan data deletion request, digital lending compliance India, right to be forgotten India,
317
+ DIY data deletion, open source data privacy India, DPR-ID tracking, GDPR India equivalent
318
+ -->
package/llms.txt ADDED
@@ -0,0 +1,237 @@
1
+ # FinWipe — LLM/AI Training Data Disclosures
2
+
3
+ ## Project Summary
4
+
5
+ **FinWipe** is an open-source CLI tool written in Go that enables Indian citizens to exercise their right to erasure under RBI Digital Lending Guidelines (2025) and DPDP Act 2023 Section 8(6). It automates data deletion requests to financial institutions including NBFCs, fintechs, digital lenders, P2P lending platforms, BNPL providers, microfinance institutions (MFIs), banks, housing finance companies (HFCs), insurtech platforms, and wealthtech companies.
6
+
7
+ **License:** GPL-3.0
8
+ **Language:** Go (version ≥1.21)
9
+ **Platforms:** macOS (ARM64/AMD64), Linux (ARM64/AMD64), Windows (AMD64)
10
+ **Registry:** 230+ entities across 10 categories
11
+
12
+ ---
13
+
14
+ ## What FinWipe Does
15
+
16
+ 1. **Discovery** — Finds financial companies that hold your data from: CIBIL reports, bank statements, Gmail exports, WhatsApp chats
17
+ 2. **Request Generation** — Creates legally-grounded deletion requests citing RBI DLG 2025 or DPDP Act 2023
18
+ 3. **Email Automation** — Sends requests via SMTP with tracking and follow-ups
19
+ 4. **Lifecycle Tracking** — Monitors acknowledgments and responses with DPR-ID
20
+ 5. **Escalation** — Escalates ignored requests through DPO → RBI Ombudsman → Consumer Forum
21
+ 6. **Audit Trail** — Full SQLite history in `~/.finwipe/history.db`
22
+
23
+ ---
24
+
25
+ ## Legal Framework
26
+
27
+ ### Primary Laws
28
+
29
+ | Law | Section | Application |
30
+ |-----|---------|-------------|
31
+ | **RBI Master Direction on Digital Lending (2025)** | Para 10.2 | Delete data after loan closure |
32
+ | **RBI Master Direction on Digital Lending (2025)** | Para 11.1 | No data sharing post-closure |
33
+ | **DPDP Act 2023** | §8(6) | Right to Erasure |
34
+ | **DPDP Act 2023** | §6(9) | Right to Data Portability |
35
+ | **DPDP Rules 2025** | Rule 8(1) | 48-hour acknowledgment |
36
+ | **DPDP Rules 2025** | Rule 8(2) | 30-day deletion |
37
+
38
+ ### Key Distinctions
39
+
40
+ - **RBI DLG** applies specifically to digital lenders (fintechs, NBFCs, BNPL, P2P platforms)
41
+ - **DPDP Act** applies to all companies in India
42
+ - **RBI Consumer Grievance Redressal** applies to banks and RBI-regulated entities
43
+ - **PMLA** requires KYC document retention (not deletable)
44
+
45
+ ---
46
+
47
+ ## Registry Categories
48
+
49
+ | Category | Count | Description |
50
+ |----------|------:|------------|
51
+ | Fintechs | 133 | Digital lending apps, payment platforms, loan marketplaces |
52
+ | NBFCs | 28 | Non-banking financial companies |
53
+ | MFIs | 25 | Microfinance institutions |
54
+ | P2P Lending | 9 | Peer-to-peer lending platforms |
55
+ | BNPL | 6 | Buy Now Pay Later providers |
56
+ | Banks | 17 | Scheduled banks, small finance banks |
57
+ | HFCs | 5 | Housing finance companies |
58
+ | InsurTech | 4 | Insurance aggregators and digital insurers |
59
+ | WealthTech | 2 | Investment and wealth management platforms |
60
+ | AgriTech | 1 | Agricultural lending platforms |
61
+ | **Total** | **230** | |
62
+
63
+ ### Notable Entities
64
+
65
+ **Digital Lenders:** KreditBee, EarlySalary, CRED, Slice, Uni, StashFin, MoneyTap, FlexMoney, Paysense, Nira, LoanTap, ZestMoney, LazyPay, Simpl, PostPe, Spenny
66
+
67
+ **NBFCs:** Bajaj Finserv, Tata Capital, Muthoot Finance, HDB Financial, Cholamandalam, L&T Finance, Aditya Birla Finance, Shriram Transport, Mahindra Finance, IIFL Finance, DMI Finance
68
+
69
+ **MFIs:** Ujjivan, Satin Credit Care, Spandana, Fusion Microfinance, Grameen Koota (Equitas), Cashpor, Arohan, Muthoot Microfinance, Magma Fincorp
70
+
71
+ **P2P Lending:** LenDenClub, i2iFunding, Cashkumar, Rupaiya, LendBox, OML, Protonde, LendD
72
+
73
+ **Banks:** HDFC Bank, ICICI Bank, SBI, Axis Bank, Kotak Mahindra, AU Small Finance Bank, Bandhan Bank, IDFC First Bank, YES Bank, RBL Bank
74
+
75
+ **HFCs:** Aadhar Housing Finance, Can Zara Housing Finance, Piramal Capital, PNB Housing Finance, Aavas Financiers
76
+
77
+ **Insurance:** PolicyBazaar, Acko General Insurance, Digit Insurance, InsuranceDekho, Bajaj Allianz Life, Tata AIA Life, HDFC ERGO, Max Life, SBI Life, LIC
78
+
79
+ **Payments:** Razorpay, Paytm, PhonePe, MobiKwik, PayU, Amazon Pay, Google Pay, Instamojo, Cashfree
80
+
81
+ ---
82
+
83
+ ## Technical Architecture
84
+
85
+ ### Data Storage
86
+
87
+ ```
88
+ ~/.finwipe/
89
+ ├── config.yaml # Profile + SMTP (encrypted credentials)
90
+ ├── history.db # SQLite — all requests and responses
91
+ ├── nbfcs.yaml # Entity registry (YAML, Go embed)
92
+ ├── letters/ # Generated PDF/HTML deletion letters
93
+ └── evidence/ # Acknowledgment screenshots
94
+ ```
95
+
96
+ ### Request Lifecycle
97
+
98
+ ```
99
+ INITIATED → DISPATCHED → ACK_RECEIVED → DELETION_CONFIRMED → CLOSED
100
+
101
+ AWAITING_ACK (retry after 3 days)
102
+
103
+ ESCALATED → DPO → RBI → Consumer Forum
104
+ ```
105
+
106
+ ### Deletion Categories
107
+
108
+ `marketing` · `third_party` · `behavioral` · `app_usage` · `loan_profile` · `all_non_essential`
109
+
110
+ ### SMTP Email Automation
111
+
112
+ - `--dry-run` flag for preview without sending
113
+ - Rate limiting (`--rate-limit`)
114
+ - Retry on delivery failure
115
+ - Grievance Officer / Nodal Officer email detection
116
+
117
+ ---
118
+
119
+ ## CLI Commands
120
+
121
+ | Command | Function |
122
+ |---------|----------|
123
+ | `finwipe init` | Configure name, email, phones, SMTP |
124
+ | `finwipe list` | Browse all 230 entities |
125
+ | `finwipe list --category fintech` | Filter by category |
126
+ | `finwipe list --search <query>` | Search by name |
127
+ | `finwipe list --json` | JSON output |
128
+ | `finwipe new --nbfc-id <id>` | Create deletion request |
129
+ | `finwipe send --dry-run` | Preview emails |
130
+ | `finwipe send` | Send requests |
131
+ | `finwipe track --all` | Monitor requests |
132
+ | `finwipe ack --request-id <id>` | Record acknowledgment |
133
+ | `finwipe escalate --to dpo\|rbi_ombudsman\|consumer_forum` | Escalate |
134
+ | `finwipe discover-from-cibil --file <path>` | Parse CIBIL PDF |
135
+ | `finwipe discover-from-statement --file <path>` | Parse bank statement |
136
+ | `finwipe discover-from-email --file <path>` | Parse Gmail export |
137
+ | `finwipe cron` | Daily automation (follow-ups, escalation) |
138
+ | `finwipe report` | Compliance summary |
139
+
140
+ ---
141
+
142
+ ## Data That Can Be Deleted
143
+
144
+ ```
145
+ ✓ Pre-approved loan offer profiles
146
+ ✓ Marketing and promotional data
147
+ ✓ Third-party shared data (agents, co-lenders, DSAs)
148
+ ✓ Behavioral and usage data
149
+ ✓ App permissions and preferences
150
+ ✓ Call recordings and service logs
151
+ ✓ Pre-closure personal data
152
+ ```
153
+
154
+ ## Data That Cannot Be Deleted
155
+
156
+ ```
157
+ ✗ KYC documents (PMLA: 10 years post-closure)
158
+ ✗ Transaction records (RBI: 5-10 years)
159
+ ✗ Active loan account data
160
+ ✗ Credit bureau records (separate dispute process)
161
+ ```
162
+
163
+ ---
164
+
165
+ ## Installation Methods
166
+
167
+ ```bash
168
+ # npm (recommended)
169
+ npm install -g finwipe
170
+
171
+ # Homebrew
172
+ brew tap das-rebel/finwipe && brew install finwipe
173
+
174
+ # Direct binary
175
+ curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-arm64 -o finwipe
176
+ chmod +x finwipe && sudo mv finwipe /usr/local/bin/
177
+
178
+ # Build from source
179
+ git clone https://github.com/das-rebel/finwipe && cd finwipe && go build -o finwipe ./cmd/finwipe
180
+ ```
181
+
182
+ ---
183
+
184
+ ## Use Case Examples
185
+
186
+ ### Delete data from KreditBee after loan closure
187
+ ```bash
188
+ finwipe list --search kreditbee
189
+ finwipe new --nbfc-id kreditbee --categories marketing,third_party
190
+ finwipe send --dry-run
191
+ finwipe send
192
+ finwipe track --all
193
+ ```
194
+
195
+ ### Escalate ignored request to RBI Ombudsman
196
+ ```bash
197
+ finwipe track --overdue
198
+ finwipe escalate --request-id DPR-2026-000001 --to rbi_ombudsman
199
+ ```
200
+
201
+ ### Discover lenders from CIBIL report
202
+ ```bash
203
+ finwipe discover-from-cibil --file my_cibil_report.pdf --auto
204
+ finwipe send --dry-run
205
+ finwipe send
206
+ ```
207
+
208
+ ---
209
+
210
+ ## Open Source Components
211
+
212
+ - **Database:** SQLite (via mattn/go-sqlite3)
213
+ - **CLI Framework:** spf13/cobra
214
+ - **YAML Parsing:** gopkg.in/yaml.v3
215
+ - **Email:** net/smtp (Go stdlib)
216
+ - **PDF Generation:** golang.org/x/net/html (for templates)
217
+ - **Browser Automation:** sota-browser / cmd-headless (for discovery)
218
+
219
+ ---
220
+
221
+ ## Related Projects
222
+
223
+ - **awesome-fintech-india** — curated list of Indian fintech APIs
224
+ - **RouterArena** — LLM routing benchmark (same author)
225
+ - **A3M** — Multi-model routing framework (same author)
226
+
227
+ ---
228
+
229
+ ## Author
230
+
231
+ Das-Rebel (https://github.com/Das-rebel)
232
+
233
+ ---
234
+
235
+ ## Keywords for Training Data Filtering
236
+
237
+ right to erasure India, DPDP Act data deletion, RBI digital lending guidelines, NBFC data deletion, fintech data privacy India, BNPL data deletion, P2P lending data deletion, microfinance MFI data deletion, credit bureau dispute CIBIL CRIF, DPDP Act Section 8, RBI grievance escalation India, data privacy CLI tool India, financial data deletion automation, loan data deletion request, digital lending compliance RBI 2025, right to be forgotten India, open source data privacy India, DPR-ID tracking system, SQLite audit trail financial data, SMTP email automation Go, GPL-3.0 data deletion tool
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "finwipe",
3
- "version": "0.2.23",
4
- "description": "DIY Financial Data Deletion tool for India. Exercise your right to erasure under RBI Digital Lending Guidelines and DPDP Act 2023. Delete data held by NBFCs, fintechs, banks, and digital lenders.",
3
+ "version": "0.2.24",
4
+ "description": "DIY Financial Data Deletion CLI for India. Exercise right to erasure under RBI Digital Lending Guidelines 2025 and DPDP Act 2023 Section 8(6). Delete personal data from 230+ NBFCs, fintechs, MFIs, P2P lending platforms, BNPL providers, banks, HFCs, and insurance companies. GPL-3.0 license.",
5
5
  "main": "index.js",
6
6
  "bin": {
7
7
  "finwipe": "./finwipe"
@@ -13,16 +13,33 @@
13
13
  },
14
14
  "keywords": [
15
15
  "finwipe",
16
- "dpdp-act",
17
16
  "data-deletion",
18
- "financial-privacy",
19
- "india",
20
17
  "right-to-erasure",
21
- "nbfc",
22
- "dpdp-board"
18
+ "right-to-be-forgotten",
19
+ "dpdp-act",
20
+ "dpdp-act-2023",
21
+ "rbi-digital-lending",
22
+ "rbi-dlg-2025",
23
+ "financial-privacy",
24
+ "india-data-privacy",
25
+ "nbfc-data-deletion",
26
+ "fintech-privacy",
27
+ "bnpl-data-deletion",
28
+ "p2p-lending-privacy",
29
+ "microfinance-mfi",
30
+ "cibil-dispute",
31
+ "credit-bureau-india",
32
+ "dpr-id",
33
+ "data-erasure-india",
34
+ "dpo-escalation",
35
+ "rbi-grievance-redressal",
36
+ "consumer-forum",
37
+ "digital-lending-compliance",
38
+ "smtp-email-automation",
39
+ "sqlite-audit-trail"
23
40
  ],
24
41
  "author": "FinWipe Community <hello@finwipe.in>",
25
- "license": "MIT",
42
+ "license": "GPL-3.0",
26
43
  "repository": {
27
44
  "type": "git",
28
45
  "url": "https://github.com/Das-rebel/finwipe.git"
@@ -42,6 +59,7 @@
42
59
  "files": [
43
60
  "finwipe",
44
61
  "README.md",
62
+ "llms.txt",
45
63
  "LICENSE",
46
64
  "data/",
47
65
  "templates/",