finwipe 0.2.4 → 0.2.5

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (5) hide show
  1. package/README.md +160 -232
  2. package/package.json +2 -2
  3. package/templates/emails/deletion_request.txt +12 -7
  4. package/templates/emails/escalation_dpo.txt +15 -4
  5. package/templates/emails/followup.txt +19 -5
package/README.md CHANGED
@@ -1,131 +1,144 @@
1
- # FinWipe — DIY Financial Data Deletion for India
1
+ # FinWipe — Stop Digital Lenders from Holding Your Data
2
2
 
3
3
  > **"Your financial data. Your rules."**
4
4
 
5
- FinWipe is an open-source CLI tool that helps Indian citizens exercise their **right to erasure** under Section 8(6) of the Digital Personal Data Protection Act, 2023 (DPDP Act) and Rule 8 of the DPDP Rules, 2025.
5
+ FinWipe is an open-source CLI tool that helps Indian citizens exercise their **right to erasure** under:
6
+ - **RBI Master Direction on Digital Lending** (updated August 2025) — *for fintechs, NBFCs, and digital lenders*
7
+ - **Section 8(6) of the DPDP Act, 2023** — *for all companies*
6
8
 
7
9
  Every request gets a unique **DPR-ID** (e.g., `DPR-2026-000001`) for full auditability. All data stays on **YOUR machine**.
8
10
 
9
11
  ---
10
12
 
11
- ## 🚀 Install
13
+ ## ⚡ Quick Start
12
14
 
13
- **Option 1 — npm (recommended, cross-platform):**
14
15
  ```bash
16
+ # 1. Install
15
17
  npm install -g finwipe
16
- ```
17
18
 
18
- **Option 2 — Homebrew (macOS/Linux):**
19
- ```bash
20
- brew tap das-rebel/finwipe
21
- brew install finwipe
22
- ```
19
+ # 2. Set up your profile (name, email, phones, SMTP)
20
+ finwipe init
23
21
 
24
- **Option 3 — Direct binary (no package manager):**
25
- ```bash
26
- # macOS (Apple Silicon / M1-M3)
27
- curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-arm64 -o finwipe
22
+ # 3. Find your lender
23
+ finwipe list --search KreditBee
28
24
 
29
- # macOS (Intel)
30
- curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-amd64 -o finwipe
25
+ # 4. Create deletion request
26
+ finwipe new --nbfc-id kreditbee
31
27
 
32
- # Linux (AMD64)
33
- curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-linux-amd64 -o finwipe
28
+ # 5. Send
29
+ finwipe send --dry-run # preview first
30
+ finwipe send # actually send
34
31
 
35
- # Linux (ARM64 / Raspberry Pi)
36
- curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-linux-arm64 -o finwipe
32
+ # 6. Track
33
+ finwipe track --all
34
+ ```
37
35
 
38
- # Windows
39
- curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-windows-amd64.exe -o finwipe.exe
36
+ ---
40
37
 
41
- chmod +x finwipe && sudo mv finwipe /usr/local/bin/
38
+ ## 🎯 Use Cases
42
39
 
43
- # Windows: save as finwipe.exe and run from Command Prompt or PowerShell
44
- ```
40
+ ### For Digital Lending (DLG) — Recommended First
45
41
 
46
- **Option 4 — Build from source:**
47
- ```bash
48
- git clone https://github.com/das-rebel/finwipe
49
- cd finwipe && go build -o finwipe ./cmd/finwipe
50
- ```
42
+ If you took a **loan, BNPL, or credit from a fintech app** (KreditBee, CRED, Slice, PhonePe, etc.):
51
43
 
52
- Verify it works:
53
44
  ```bash
54
- finwipe --help
45
+ # Find your lender
46
+ finwipe list --category fintech
47
+
48
+ # Send deletion request
49
+ finwipe new --nbfc-id kreditbee
50
+ finwipe send
51
+
52
+ # Follow up after 3 days
53
+ finwipe send --request-id DPR-2026-XXXXXX
55
54
  ```
56
55
 
57
- ---
56
+ **Legal basis:** RBI Master Direction on Digital Lending (updated August 2025) — Para 10.2, 11.1
57
+
58
+ ### For DPDP Act (General)
58
59
 
59
- ## ⚡ Quick Start (5 Steps)
60
+ For any company holding your data under the general data protection law:
60
61
 
61
62
  ```bash
62
- # 1. Set up your profile (name, email, SMTP)
63
- finwipe init
63
+ finwipe new --nbfc-id some-company
64
+ finwipe send
65
+ ```
64
66
 
65
- # 2. Browse the 91-entity registry
66
- finwipe list --category fintech
67
+ **Legal basis:** Section 8(6), DPDP Act 2023
67
68
 
68
- # 3. Create a deletion request
69
- finwipe new --nbfc-id bajaj-finserv
69
+ ### For CIBIL/Bureau Data
70
70
 
71
- # 4. Preview, then send
72
- finwipe send --dry-run # preview first
73
- finwipe send # actually send emails
71
+ Stop credit bureaus from sharing your data:
74
72
 
75
- # 5. Track responses
76
- finwipe track --all
73
+ ```bash
74
+ finwipe discover-from-cibil --file your_cibil_report.pdf --auto
75
+ finwipe send
77
76
  ```
78
77
 
78
+ See [CIBIL Guide](docs/CIBIL_GUIDE.md) for full process.
79
+
79
80
  ---
80
81
 
81
82
  ## 📋 Core Commands
82
83
 
84
+ | Command | Description |
85
+ |---------|-------------|
86
+ | `finwipe init` | Set up profile (name, email, phones, SMTP) |
87
+ | `finwipe list` | Browse 91 registered entities |
88
+ | `finwipe new` | Create deletion request → get DPR-ID |
89
+ | `finwipe send` | Send emails |
90
+ | `finwipe track` | Monitor lifecycle |
91
+ | `finwipe ack` | Record acknowledgment |
92
+ | `finwipe escalate` | Escalate ignored requests |
93
+ | `finwipe report` | Compliance dashboard |
94
+
83
95
  ### `finwipe init`
84
- One-time setup. Saves to `~/.finwipe/config.yaml`.
96
+
85
97
  ```bash
86
98
  finwipe init
87
- # Interactive prompts for:
88
- # Full name, email, phone, address
89
- # SMTP host (e.g. smtp.gmail.com), port (587), username, app password
99
+ # Interactive prompts:
100
+ # Full name
101
+ # Email (for sending/receiving)
102
+ # Phone(s) — include both numbers
103
+ # Address
104
+ # SMTP host, port, username, app password
90
105
  ```
91
106
 
92
107
  ### `finwipe list`
93
- Browse 91 registered entities.
108
+
94
109
  ```bash
95
110
  finwipe list # all 91
96
111
  finwipe list --category fintech # 59 fintechs
97
- finwipe list --category bank # 12 banks
98
- finwipe list --category nbfc # 18 NBFCs
99
- finwipe list --search HDFC # search by name
100
- finwipe list --json # JSON output
112
+ finwipe list --category nbfc # 18 NBFCs
113
+ finwipe list --category bank # 12 banks
114
+ finwipe list --search HDFC # by name
115
+ finwipe list --json # JSON output
101
116
  ```
102
117
 
103
118
  ### `finwipe new`
104
- Create a deletion request → returns a **DPR-ID**.
119
+
105
120
  ```bash
106
121
  finwipe new --nbfc-id bajaj-finserv
107
122
  finwipe new --nbfc-id tata-capital --categories marketing,third_party
108
123
  ```
109
124
 
110
- **Deletion categories:** `marketing` · `third_party` · `behavioral` · `app_usage` · `call_records` · `loan_profile` · `all_non_essential`
125
+ **Deletion categories:** `marketing` · `third_party` · `behavioral` · `app_usage` · `loan_profile` · `all_non_essential`
111
126
 
112
127
  ### `finwipe send`
113
- Dispatch requests via email or registered post.
128
+
114
129
  ```bash
115
130
  finwipe send --dry-run # preview (no emails sent)
116
131
  finwipe send # send all pending
117
132
  finwipe send --request-id DPR-2026-000001
118
- finwipe send --rate-limit 2000 # 2s between emails
119
- finwipe send --channel post # generate PDF letters
133
+ finwipe send --rate-limit 2000 # 2s between emails
120
134
  ```
121
135
 
122
136
  ### `finwipe track`
123
- Monitor the full lifecycle.
137
+
124
138
  ```bash
125
139
  finwipe track --request-id DPR-2026-000001
126
140
  finwipe track --all # all active
127
141
  finwipe track --overdue # past deadline
128
- finwipe track --awaiting-ack # no response yet
129
142
  ```
130
143
 
131
144
  **Lifecycle:**
@@ -134,183 +147,88 @@ INITIATED → DISPATCHED → ACK_RECEIVED → RESPONSE_OK → CLOSED
134
147
  ↓ ↓
135
148
  AWAITING_ACK ESCALATED
136
149
  ↓ ↓
137
- DELIVERY_FAILED DPDP_BOARD / RBI_OMBUDSMAN
138
- ```
139
-
140
- ### `finwipe ack`
141
- Record an NBFC's acknowledgment.
142
- ```bash
143
- finwipe ack --request-id DPR-2026-000001
144
- finwipe ack --request-id DPR-2026-000001 --reference ABC123XYZ
150
+ DELIVERY_FAILED RBI OM ~ BPDT ~ Consumer Forum
145
151
  ```
146
152
 
147
153
  ### `finwipe escalate`
148
- Escalate ignored requests up the chain.
149
- ```bash
150
- finwipe escalate --request-id DPR-2026-000001 --to dpo # L1: Data Protection Officer
151
- finwipe escalate --request-id DPR-2026-000001 --to dpd_board # L2: DPDP Board §27(3)
152
- finwipe escalate --request-id DPR-2026-000001 --to rbi_ombudsman # L3: RBI
153
- finwipe escalate --request-id DPR-2026-000001 --to consumer_forum # L3: Consumer Forum
154
- ```
155
154
 
156
- ### `finwipe close`
157
- Close a request with an outcome.
158
155
  ```bash
159
- finwipe close --request-id DPR-2026-000001 --outcome deleted
160
- finwipe close --request-id DPR-2026-000001 --outcome rejected --notes "claimed already deleted"
161
- ```
162
-
163
- **Outcomes:** `deleted` · `acknowledged_not_deleted` · `partial` · `rejected` · `exemption_claimed` · `no_response`
164
-
165
- ### `finwipe report`
166
- Dashboard with compliance metrics.
167
- ```bash
168
- finwipe report
169
- finwipe report --days 30 --format json
156
+ finwipe escalate --request-id DPR-2026-000001 --to dpo # L1: DPO
157
+ finwipe escalate --request-id DPR-2026-000001 --to dpd_board # L2: DPDP Board
158
+ finwipe escalate --request-id DPR-2026-000001 --to rbi_ombudsman # L3: RBI
159
+ finwipe escalate --request-id DPR-2026-000001 --to consumer_forum # L4: Consumer Forum
170
160
  ```
171
161
 
172
162
  ---
173
163
 
174
- ## 🔍 Discovery Commands
175
-
176
- Find out **who holds your data** before sending requests.
164
+ ## 🔍 Discovery — Find Who Has Your Data
177
165
 
178
- ### `finwipe discover-from-cibil`
179
- Parse a CIBIL report PDF → auto-create requests for every institution that queried your credit.
166
+ ### From CIBIL Report
180
167
  ```bash
181
168
  finwipe discover-from-cibil --file your_cibil_report.pdf --auto
182
169
  ```
183
170
 
184
- ### `finwipe discover-from-bureau`
185
- All 4 bureaus: CIBIL, Experian, Equifax, CRIF HighMark.
186
- ```bash
187
- finwipe discover-from-bureau --file Experian_Report.pdf --auto
188
- ```
189
-
190
- ### `finwipe discover-from-bank-statement`
191
- Extract FI references from bank statement PDFs (EMI deductions, NACH mandates).
171
+ ### From Bank Statement
192
172
  ```bash
193
173
  finwipe discover-from-statement --file statement.pdf
194
174
  finwipe discover-from-statement --directory ./statements/ --auto
195
175
  ```
196
176
 
197
- ### `finwipe discover-from-email`
198
- Parse Gmail Takeout exports.
177
+ ### From Gmail
199
178
  ```bash
200
179
  finwipe discover-from-email --file gmail_export.zip --auto
201
180
  ```
202
181
 
203
- ### `finwipe discover-from-whatsapp`
204
- Extract FI contacts from WhatsApp Business chat exports.
182
+ ### From WhatsApp
205
183
  ```bash
206
184
  finwipe discover-from-whatsapp --path ./whatsapp_chat.txt
207
185
  ```
208
186
 
209
- ### `finwipe discover-from-aa`
210
- Discover FIs via Account Aggregator apps (NADL, CAMS, SAafe, Finvu).
211
- ```bash
212
- finwipe discover-from-aa --provider nadl
213
- ```
214
-
215
- ---
216
-
217
- ## ⚖️ Enforcement Commands
218
-
219
- ### `finwipe portability`
220
- Request **all data** an entity holds about you (§6(9), DPDP Act). Company must respond in 72 hours.
221
- ```bash
222
- finwipe portability --nbfc-id bajaj-finserv
223
- finwipe portability --nbfc-id tata-capital --send
224
- ```
225
-
226
- ### `finwipe verify`
227
- Confirm an NBFC actually deleted your data.
228
- ```bash
229
- finwipe verify --request-id DPR-2026-000001 --method certificate
230
- ```
231
- **Methods:** `email` · `certificate` · `login`
232
-
233
- ### `finwipe mass-request`
234
- Send to ALL entities in a category at once.
235
- ```bash
236
- finwipe mass-request --category fintech --dry-run
237
- finwipe mass-request --category bank --exclude hdfc-bank,icici-bank
238
- ```
239
- ⚠️ You'll receive ~90 acknowledgment emails.
240
-
241
- ### `finwipe compliance`
242
- Community compliance rates + shame list.
243
- ```bash
244
- finwipe compliance
245
- finwipe compliance --shame # worst offenders
246
- ```
247
-
248
187
  ---
249
188
 
250
189
  ## 🤖 Automation
251
190
 
252
- ### `finwipe cron`
253
- Daily automation: follow-ups, deadline checks, auto-escalation.
254
- ```bash
255
- finwipe cron --dry-run # preview
256
- finwipe cron # full automation
257
- ```
258
- **Schedule:** Day 3 → follow-up · Day 7 → DPO escalation · Day 30 → DPDP Board
259
-
260
- ### `finwipe wizard`
261
- Interactive guided flow for first-time users.
191
+ ### Daily Cron
262
192
  ```bash
263
- finwipe wizard
193
+ finwipe cron --dry-run # preview
194
+ finwipe cron # runs: follow-ups, deadline checks, auto-escalation
264
195
  ```
265
196
 
266
- ### `finwipe ask`
267
- Quick consent-withdrawal wizard (no `finwipe init` needed).
268
- ```bash
269
- finwipe ask
270
- ```
197
+ **Schedule:** Day 3 → follow-up · Day 7 → DPO escalation · Day 30 → DPDP Board
271
198
 
272
199
  ### Monthly GitHub Actions
273
- Fork the repo, add secrets (`SMTP_HOST`, `SMTP_PORT`, `SMTP_USERNAME`, `SMTP_PASSWORD`, `FINWIPE_FULL_NAME`, `FINWIPE_EMAIL`, `FINWIPE_PHONE`, `FINWIPE_ADDRESS`), and the workflow runs `finwipe send` monthly on the 1st.
200
+ Fork the repo, add secrets, and the workflow runs monthly.
274
201
 
275
202
  ---
276
203
 
277
- ## 📄 Supporting Commands
204
+ ## 📖 Documentation
278
205
 
279
- | Command | Description |
280
- |---------|-------------|
281
- | `finwipe letter` | Generate PDF deletion letters |
282
- | `finwipe evidence attach` | Attach screenshots/acknowledgments to a DPR-ID |
283
- | `finwipe cic` | Generate CIC (CIBIL/Experian/Equifax/CRIF) dispute forms |
284
- | `finwipe parse` | Parse CIBIL report → extract NBFC names |
285
- | `finwipe update-registry` | Update NBFC registry from awesome-fintech-india |
286
- | `finwipe setup-forward` | Set up FinWipe cloud inbox for passive discovery |
287
- | `finwipe sync` | Sync discoveries from FinWipe cloud |
288
- | `finwipe cloud-status` | Check cloud connectivity |
206
+ | Guide | When to Use |
207
+ |-------|-------------|
208
+ | **[DLG Guide](docs/DLG_GUIDE.md)** | **START HERE** — Digital lending data deletion |
209
+ | **[Gmail Setup](docs/GMAIL_SETUP.md)** | SMTP setup, receiving replies |
210
+ | **[Regulatory Framework](docs/REGULATORY_FRAMEWORK.md)** | All laws and sections |
211
+ | **[CIBIL Guide](docs/CIBIL_GUIDE.md)** | Credit bureau disputes |
289
212
 
290
213
  ---
291
214
 
292
- ## 📊 By the Numbers
215
+ ## ⚖️ Legal Basis
293
216
 
294
- | Metric | Value |
295
- |--------|------:|
296
- | Version | 0.1.4 |
297
- | Registry | 91 entities (12 banks · 18 NBFCs · 59 fintechs · 2 HFCs) |
298
- | Legal basis | DPDP Act 2023 + RBI DLG |
299
- | npm | [finwipe](https://www.npmjs.com/package/finwipe) |
300
- | Homebrew | [das-rebel/finwipe](https://github.com/Das-rebel/homebrew-finwipe) |
217
+ ### For Digital Lenders (Use First)
301
218
 
302
- ---
219
+ | Law | Section | What It Says |
220
+ |-----|---------|--------------|
221
+ | **RBI DLG 2025** | Para 10.2 | "Data shall be deleted once purpose is over" |
222
+ | **RBI DLG 2025** | Para 11.1 | "No data sharing without consent after closure" |
303
223
 
304
- ## ⚖️ Legal Basis
224
+ ### For All Companies
305
225
 
306
226
  | Law | Section | Right |
307
227
  |-----|---------|-------|
308
- | DPDP Act 2023 | §8(6) | Right to Erasure |
309
- | DPDP Act 2023 | §6(9) | Right to Data Portability |
310
- | DPDP Act 2023 | §27(3) | Complaint to DPDP Board |
311
- | DPDP Rules 2025 | Rule 8(1) | 48-hour acknowledgment |
312
- | DPDP Rules 2025 | Rule 8(2) | Deletion within 30 days |
313
- | RBI DLG 2022 | Para 10.2, 11.1 | Data deletion in lending |
228
+ | **DPDP Act 2023** | §8(6) | Right to Erasure |
229
+ | **DPDP Act 2023** | §6(9) | Right to Data Portability |
230
+ | **DPDP Rules 2025** | Rule 8(1) | 48-hour acknowledgment |
231
+ | **DPDP Rules 2025** | Rule 8(2) | 30-day deletion |
314
232
 
315
233
  ---
316
234
 
@@ -321,7 +239,6 @@ Fork the repo, add secrets (`SMTP_HOST`, `SMTP_PORT`, `SMTP_USERNAME`, `SMTP_PAS
321
239
  ✓ Third-party shared data
322
240
  ✓ Behavioral and usage data
323
241
  ✓ Pre-approved loan offer profiles
324
- ✓ Call recordings and service logs
325
242
  ✓ App activity and preferences
326
243
  ```
327
244
 
@@ -331,68 +248,79 @@ Fork the repo, add secrets (`SMTP_HOST`, `SMTP_PORT`, `SMTP_USERNAME`, `SMTP_PAS
331
248
  ✗ KYC documents (PMLA: 10 years post-closure)
332
249
  ✗ Transaction records (RBI: 5-10 years)
333
250
  ✗ Active loan account data
334
- ✗ CIBIL's own records (separate fiduciary duty)
251
+ ✗ CIBIL's own records (use separate process)
335
252
  ```
336
253
 
337
254
  ---
338
255
 
339
- ## 📁 Data Location
256
+ ## 📊 Registry
340
257
 
341
- All data stays local at `~/.finwipe/`:
342
- ```
343
- ~/.finwipe/
344
- ├── config.yaml # Profile + SMTP
345
- ├── history.db # SQLite (WAL) — full audit trail
346
- ├── nbfcs.yaml # Entity registry
347
- ├── letters/ # Generated PDFs
348
- └── evidence/ # Screenshots, acknowledgments
349
- ```
258
+ | Category | Count |
259
+ |----------|------:|
260
+ | Fintechs | 59 |
261
+ | NBFCs | 18 |
262
+ | Banks | 12 |
263
+ | HFCs | 2 |
264
+ | **Total** | **91** |
350
265
 
351
266
  ---
352
267
 
353
- ## 🛠️ Tech Stack
268
+ ## 💻 Installation
354
269
 
355
- - **Go 1.21+** — single binary, no runtime deps
356
- - **Cobra** — CLI framework
357
- - **SQLite (WAL)** — request history
358
- - **gofpdf** — PDF generation
359
- - **Viper** — configuration
270
+ ### npm (Recommended)
271
+ ```bash
272
+ npm install -g finwipe
273
+ ```
360
274
 
361
- ---
275
+ ### Homebrew
276
+ ```bash
277
+ brew tap das-rebel/finwipe
278
+ brew install finwipe
279
+ ```
362
280
 
363
- ## 🤝 Contributing
281
+ ### Direct Binary
282
+ ```bash
283
+ # macOS ARM64 (M1-M3)
284
+ curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-arm64 -o finwipe
364
285
 
365
- PRs welcome — especially:
366
- - New NBFCs/fintechs in `data/nbfcs.yaml`
367
- - Email/letter templates in `templates/`
368
- - Better PDF parsing
369
- - CIC dispute form improvements
286
+ # macOS Intel
287
+ curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-amd64 -o finwipe
288
+
289
+ # Linux
290
+ curl -fsSL https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-linux-amd64 -o finwipe
291
+
292
+ chmod +x finwipe && sudo mv finwipe /usr/local/bin/
293
+ ```
294
+
295
+ ### Build from Source
296
+ ```bash
297
+ git clone https://github.com/das-rebel/finwipe
298
+ cd finwipe && go build -o finwipe ./cmd/finwipe
299
+ ```
370
300
 
371
301
  ---
372
302
 
373
- ## 📦 Installation Links
303
+ ## 📁 Data Location
374
304
 
375
- | Platform | Command / Link |
376
- |----------|---------------|
377
- | **npm** | `npm install -g finwipe` |
378
- | **Homebrew** | `brew tap das-rebel/finwipe && brew install finwipe` |
379
- | **macOS ARM64** | [finwipe-darwin-arm64](https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-arm64) |
380
- | **macOS AMD64** | [finwipe-darwin-amd64](https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-darwin-amd64) |
381
- | **Linux AMD64** | [finwipe-linux-amd64](https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-linux-amd64) |
382
- | **Linux ARM64** | [finwipe-linux-arm64](https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-linux-arm64) |
383
- | **Windows** | [finwipe-windows-amd64.exe](https://github.com/Das-rebel/finwipe/releases/latest/download/finwipe-windows-amd64.exe) |
384
- | **Source** | `git clone https://github.com/das-rebel/finwipe` |
305
+ All data stays local:
306
+ ```
307
+ ~/.finwipe/
308
+ ├── config.yaml # Profile + SMTP
309
+ ├── history.db # SQLite — full audit trail
310
+ ├── nbfcs.yaml # Entity registry
311
+ ├── letters/ # Generated PDFs
312
+ └── evidence/ # Screenshots, acknowledgments
313
+ ```
385
314
 
386
315
  ---
387
316
 
388
- ## 📖 Documentation
317
+ ## 🤝 Contributing
389
318
 
390
- | Guide | Description |
391
- |-------|-------------|
392
- | **[Gmail Setup Guide](docs/GMAIL_SETUP.md)** | SMTP sending (Gmail), receiving replies via forwarding rules, alternatives (Outlook, iCloud, ProtonMail) |
393
- | **[CIBIL Guide](docs/CIBIL_GUIDE.md)** | Stop CIBIL sharing data, freeze credit report, DPDPA erasure request to CIBIL |
394
- | **[Regulatory Framework](docs/REGULATORY_FRAMEWORK.md)** | DPDPA 2023, RBI Guidelines, SEBI Circulars, CIC Dispute forms |
395
- | **[CONTRIBUTING.md](CONTRIBUTING.md)** | How to contribute, add new NBFCs, submit pull requests |
319
+ PRs welcome for:
320
+ - New NBFCs/fintechs in `data/nbfcs.yaml`
321
+ - Email/letter templates in `templates/`
322
+ - Better discovery methods
323
+ - CIC dispute form improvements
396
324
 
397
325
  ---
398
326
 
package/package.json CHANGED
@@ -1,7 +1,7 @@
1
1
  {
2
2
  "name": "finwipe",
3
- "version": "0.2.4",
4
- "description": "DIY Financial Data Deletion tool for India under DPDP Act 2023. Exercise your right to erasure against NBFCs, banks, and fintechs.",
3
+ "version": "0.2.5",
4
+ "description": "DIY Financial Data Deletion tool for India. Exercise your right to erasure under RBI Digital Lending Guidelines and DPDP Act 2023. Delete data held by NBFCs, fintechs, banks, and digital lenders.",
5
5
  "main": "index.js",
6
6
  "bin": {
7
7
  "finwipe": "./finwipe"
package/templates/emails/deletion_request.txt CHANGED
@@ -1,15 +1,15 @@
1
- Subject: Request for Erasure of Personal Data under Section 8(6), DPDP Act 2023 — {{.NBFCName}}
1
+ Subject: Data Deletion Request — RBI Digital Lending Guidelines — {{.NBFCName}} — {{.RequestID}}
2
2
 
3
3
  To,
4
- The Grievance Officer / Data Protection Officer
4
+ The Grievance Officer / Nodal Officer
5
5
  {{.NBFCName}}
6
6
  {{.NBFCCategory}}
7
7
 
8
- Subject: Request for Erasure of Personal Data under Section 8(6) of the Digital Personal Data Protection Act, 2023 (DPDP Act)
8
+ Subject: Data Deletion Request under RBI Master Direction on Digital Lending — {{.NBFCName}}
9
9
 
10
10
  Dear Sir/Madam,
11
11
 
12
- I, {{.FullName}}, residing at {{.Address}}, am writing to exercise my right to erasure of personal data as provided under Section 8(6) of the Digital Personal Data Protection Act, 2023 (DPDP Act).
12
+ I, {{.FullName}}, residing at {{.Address}}, am writing to exercise my right to erasure of personal data under **RBI Master Direction on Digital Lending (updated August 2025)**.
13
13
 
14
14
  My details:
15
15
  - Name: {{.FullName}}
@@ -23,14 +23,18 @@ Specifically, I request deletion of:
23
23
  {{range .Categories}}- {{.}}
24
24
  {{end}}
25
25
 
26
- This request is made under Section 8(6) of the DPDP Act, 2023.
26
+ As per **RBI Master Direction on Digital Lending**, you are required to complete the deletion within 7 days of receiving this request and provide written confirmation.
27
27
 
28
- Please confirm receipt of this request as soon as reasonably practicable and proceed with erasure where applicable under Section 8(6) of the DPDP Act, 2023.
28
+ Please confirm receipt of this request and proceed with erasure where applicable.
29
29
 
30
- If you fail to comply with this request within the stipulated timeframe, I reserve the right to escalate this matter to the Data Protection Board of India under Section 27(3) of the DPDP Act, 2023.
30
+ If you fail to comply with this request within the stipulated timeframe, I reserve the right to escalate this matter to:
31
+ 1. Your Data Protection Officer
32
+ 2. RBI Ombudsman
33
+ 3. Consumer Forum
31
34
 
32
35
  Please direct all future correspondence regarding this matter to:
33
36
  - Email: {{.Email}}
37
+ - Phone: {{.Phone}}
34
38
  - Address: {{.Address}}
35
39
 
36
40
  Yours faithfully,
@@ -41,3 +45,4 @@ Yours faithfully,
41
45
  ---
42
46
  Request ID: {{.RequestID}}
43
47
  Date: {{.Date}}
48
+ Legal Basis: RBI Master Direction on Digital Lending (updated August 2025)
package/templates/emails/escalation_dpo.txt CHANGED
@@ -5,19 +5,30 @@ To: The Data Protection Officer
5
5
 
6
6
  Dear DPO,
7
7
 
8
- I am escalating my data deletion request (Reference: {{.RequestID}}) as I have not received any acknowledgment or response from {{.NBFCName}} despite multiple follow-ups.
8
+ I am escalating my data deletion request (Reference: {{.RequestID}}) as I have not received any acknowledgment or response from {{.NBFCName}} despite follow-ups.
9
+
10
+ This request is made under **RBI Master Direction on Digital Lending (updated August 2025)** which mandates data deletion compliance.
9
11
 
10
12
  Request Details:
11
13
  - Request ID: {{.RequestID}}
12
14
  - Original Request Date: {{.RequestDate}}
13
15
  - Categories Requested for Deletion: {{range .Categories}} {{.}} {{end}}
14
- - Nature of Non-Compliance: Failure to acknowledge and erase as soon as reasonably practicable under Section 8(6), DPDP Act 2023
16
+ - Nature of Non-Compliance: Failure to acknowledge and erase as per RBI DLG
17
+
18
+ I request your immediate intervention to ensure compliance with RBI Master Direction on Digital Lending.
15
19
 
16
- I request your immediate intervention to ensure compliance with Section 8(6) of the DPDP Act, 2023.
20
+ I reserve the right to escalate to RBI Ombudsman and Consumer Forum if this matter is not resolved within 7 days.
17
21
 
18
- I reserve the right to escalate to the Data Protection Board of India if this matter is not resolved within 7 days.
22
+ Contact:
23
+ - Email: {{.Email}}
24
+ - Phone: {{.Phone}}
19
25
 
20
26
  Yours faithfully,
21
27
  {{.FullName}}
22
28
  {{.Email}}
23
29
  {{.Phone}}
30
+
31
+ ---
32
+ Request ID: {{.RequestID}}
33
+ Original Request Date: {{.RequestDate}}
34
+ Legal Basis: RBI Master Direction on Digital Lending (updated August 2025)
package/templates/emails/followup.txt CHANGED
@@ -1,19 +1,33 @@
1
- Subject: Follow-up: Erasure of Personal Data — {{.RequestID}} — No Response Received
1
+ Subject: Follow-up: Data Deletion Request — RBI Digital Lending Guidelines — {{.NBFCName}} — {{.RequestID}}
2
2
 
3
- Dear Grievance Officer / Data Protection Officer,
3
+ Dear Grievance Officer / Nodal Officer,
4
4
 
5
- I am writing to follow up on my earlier request (Reference: {{.RequestID}}) dated {{.RequestDate}} for erasure of my personal data under Section 8(6) of the Digital Personal Data Protection Act, 2023.
5
+ I am writing to follow up on my earlier data deletion request (Reference: {{.RequestID}}) dated {{.RequestDate}} under **RBI Master Direction on Digital Lending**.
6
6
 
7
7
  As of today, I have not received:
8
8
  1. An acknowledgment of my deletion request, or
9
9
  2. Confirmation of data erasure
10
10
 
11
- This is a second follow-up. If I do not receive a response within 7 days, I will escalate this matter to the Data Protection Board of India under Section 27(3) of the DPDP Act, 2023.
11
+ This is a follow-up reminder. If I do not receive a response within 7 days, I will escalate this matter to the Data Protection Officer and subsequently to RBI Ombudsman.
12
12
 
13
13
  My original request reference: {{.RequestID}}
14
14
 
15
- Please treat this as urgent.
15
+ As per **RBI Master Direction on Digital Lending (updated August 2025)**, you are required to acknowledge deletion requests within 48 hours and complete deletion within 7 days.
16
+
17
+ Please treat this as urgent and provide:
18
+ 1. Receipt acknowledgment
19
+ 2. Confirmation of data deletion or timeline
20
+
21
+ Contact:
22
+ - Email: {{.Email}}
23
+ - Phone: {{.Phone}}
16
24
 
17
25
  Yours faithfully,
18
26
  {{.FullName}}
19
27
  {{.Email}}
28
+ {{.Phone}}
29
+
30
+ ---
31
+ Request ID: {{.RequestID}}
32
+ Original Request Date: {{.RequestDate}}
33
+ Legal Basis: RBI Master Direction on Digital Lending (updated August 2025)