1. Introduction
[Company Name] ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, and share your personal data when you use our digital lending platform, website, and mobile application (the "Platform").
2. Information We Collect
To facilitate your loan application, we collect the following data with your explicit, affirmative consent:
- Identity & KYC Data: Name, PAN, Aadhaar (masked), date of birth, gender, and photograph (via live selfie).
- Financial Data: Bank account details, salary slips, and bank statements for credit underwriting.
- Device Data: IP address, device ID, operating system, and network information to prevent fraud.
3. Specific Device Permissions
We only request permissions strictly necessary to provide the loan service.
- Camera: Required solely for live KYC verification and capturing document images.
- Location: Required to verify your current jurisdiction and prevent fraudulent applications.
- SMS Data: We may access financial transactional SMS data strictly to assess cash flow and creditworthiness. We do not read personal messages.
- Strictly Prohibited Access: We do not and will not request access to your phone contacts, photo gallery, call logs, or media files under any circumstances.
4. How We Use Your Data
We process your data exclusively for the following purposes:
- To verify your identity and perform Know Your Customer (KYC) checks.
- To assess your credit profile and determine loan eligibility.
- To disburse loan amounts and facilitate EMIs/repayments.
- To report your credit history to authorized Credit Information Companies (e.g., CIBIL, Experian).
- To prevent fraud, money laundering, and illegal activities.
5. Data Storage and Localization
All personal and financial data collected by the Platform is stored securely on servers located within India. We employ industry-standard AES-256 encryption for data at rest and TLS for data in transit.
6. Data Sharing with Third Parties
We only share your data with verified third parties necessary to execute the loan:
- Regulated Entities: Our partner Banks and NBFCs who actually provide the loan funds.
- Credit Bureaus: For mandatory reporting of your credit behavior and defaults.
- Verification Partners: Third-party APIs used strictly for PAN/Aadhaar validation.
- Law Enforcement: If mandated by a valid court order or regulatory directive.
7. Data Retention and Your Right to be Forgotten
We retain your data only for as long as your account is active or as legally required.
- If your loan application is rejected, or if you close your account after full repayment, you may request the deletion of your data.
- Note: We are legally required to retain certain financial transaction records for up to 5 to 7 years to comply with Anti-Money Laundering (AML) laws, even if you request deletion.
8. Grievance Redressal Officer
If you have any concerns regarding how your data is handled, please contact our Grievance Officer: