If you do not agree to this Policy or any part thereof, please do not use/ access/ download or install the Platform or any part thereof.
COLLECTION OF USER PERSONAL INFORMATION
When you use our Platform, we collect and store your information which is provided by you from time to time by explicitly seeking permissions from YOU to get the required information. Our primary goal in doing so is to provide you a safe, efficient, smooth and customized experience and Services. This allows us to provide services and features that meets your needs, and to customize our Platform to make your experience safer and easier and to improve the Services provided by us. More importantly, we collect personal information from you that we consider necessary for achieving the aforementioned purpose.
In general, you can browse the Website or App without telling us who you are or revealing any information about yourself. However, to create an account on the Platform, you must provide us with certain basic information required to provide customized services. The information we collect from you, inter alia, includes:
Wherever possible, we indicate the mandatory and the optional fields. You always have the option to not provide any information by choosing not to use a particular service or feature on the Platform. We also collect user account data which includes email address and user public profile information like name, photo, ASID depending on the social media or networking platform used by You like Google or Facebook to log-into an app. This information is required as a part of registration process to access our Service and it is also used to auto-populate relevant fields in the course of the interface of the App. We further collect other identifiable information such as your transactions history on the Platform when you set up a free account with us as further detailed below. While you can browse some sections of our Platform without being a registered member as mentioned above, certain activities (such as availing of loans from the third party lenders on the Platform) require registration and for you to provide the above details. The Platform will clearly display the personal information it is collecting from you, and you have the option to not provide such personal information. However, this will limit the services provided to you on the Platform.
Our app also collects mobile number for verification to check the active SIM status on the device, uniquely identify you and prevent frauds and unauthorised access.
As a part of our Video Know Your Customer (Video KYC) process, collection of your personal information has become mandatory to ensure the completion and authentication of your KYC. In this regard, permissions for microphone, camera will be mandatorily required.
COLLECTION OF FINANCIAL SMS INFORMATION
We don’t collect, read or store your personal SMS from your inbox.
We collect and monitor only financial SMS sent by 6-digit alphanumeric senders from your inbox which helps us in identifying the various bank accounts that you may be holding, cash flow patterns, description and amount of the transactions undertaken by you as a user to help us perform a credit risk assessment which enables us to determine your risk profile and to provide you with the appropriate credit analysis. This process will enable you to take financial facilities from the regulated financial entities available on the Platform. This Financial SMS data also includes your historical data.
While using the app, it periodically sends the financial SMS information to our affiliate server and to us.
COLLECTION OF DEVICE LOCATION AND DEVICE INFORMATION
We collect and monitor the information about the location of your device to provide serviceability of your loan application, to reduce risk associated with your loan application and to provide pre-approved customised loan offers. This also helps us to verify the address, make a better credit risk decision and expedite know your customer (KYC) process.
Information the App collects, and its usage, depends on how you manage your privacy controls on your device. When you install the App, we store the information we collect with unique identifiers tied to the device you are using. We collect information from the device when you download and install the App and explicitly seek permissions from You to get the required information from the device.
The information we collect from your device includes the hardware model, build model, RAM, storage; unique device identifiers like IMEI, serial number, SSAID; SIM information that includes network operator, roaming state, MNC and MCC codes, WIFI information that includes MAC address and mobile network information to uniquely identify the devices and ensure that no unauthorized device acts on your behalf to prevent frauds.
We collect information about your device to provide automatic updates and additional security so that your account is not used in other people’s devices. In addition, the information provides us valuable feedback on your identity as a device holder as well as your device behaviour, thereby allowing us to improve our services and provide an enhanced customized user experience to you.
COLLECTION OF CONTACT INFORMATION
As a part of our loan journey, we require references from the Loan applicant. In this regard, during filing the form on our App, we collect and monitor your contact information which includes name, phone number, account type, contact last modified, favourites and other optional data like relationship and structural address to enable you to autofill the data during the loan application process. This information is required for the purposes of risk analysis, enable us to detect credible references assess your risk profile and to determine your loan eligibility.
COLLECTION OF INSTALLED APPLICATIONS
We collect a list of the installed applications’ metadata information which includes the application name, package name, installed time, updated time, version name and version code of each installed application on your device to assess your credit worthiness and enrich your profile with pre-approved customized loan offers.
We require camera access to scan and capture the required KYC documents thereby allowing us to auto-fill relevant fields.
As a part of our KYC journey, we require access to your camera to enable you to initiate your KYC process. This permission allows us or our authorised agents to perform your Video KYC while also taking screenshots of your original Officially Verified Documents that you present during your Video KYC journey. Video KYC enables you to complete your KYC digitally, smoothly and efficiently. Your video shall be recorded and retained for regulatory purpose along with screenshots of original Official Verified Documents.
We require microphone permissions to enable a two-way communication between our authorised agent and you for the purpose of performing and completing your Video KYC. Your audio shall be recorded for regulatory purpose.
We require storage permission so that your KYC and other relevant documents can be securely downloaded and saved on your phone. You can then easily upload the correct KYC related documents for faster loan application details filling and disbursal process. This ensures that you are provided with a seamless experience while using the application.
COLLECTION OF OTHER NON-PERSONAL INFORMATION
We automatically track certain information about you based upon your behaviour on our Platform. We use this information to do internal research on our users’ demographics, interests, and behaviour to better understand, protect and serve our users and improve our services. This information is compiled and analysed on an aggregated basis. We also collect your Internet Protocol (IP) address and the URL used by you to connect your computer to the internet, etc. This information may include the URL that you just came from (whether this URL is on our Website or not), which URL you next go to (whether this URL is on our Website or not), your computer browser information, and your IP address.
If you choose to make a purchase through the Platform, we collect information about your buying behaviour.
We retain this information as necessary to resolve disputes, provide customer support and troubleshoot problems as permitted by law.
If you send us personal correspondence, such as emails or letters, or if other users or third parties send us correspondence about your activities or postings on the Website, we collect such information into a file specific to you.
USE AND DISCLOSURE OF YOUR PERSONAL AND OTHER INFORMATION
We use the information to:
In our efforts to continually improve our product and service offerings, we collect and analyze demographic and profile data about our users' activity on our Platform.
PURPOSE OF COLLECTING INFORMATION
The intended purpose of collecting information provided by you is to:
We will use and retain the information for such periods as necessary to provide You the Services on the Platform, to comply with our legal obligations, to resolve disputes, and enforce our agreements.
DISCLOSURE TO THIRD PARTIES
We will share Your information with only our registered third parties including our regulated financial partners for provision of Services on the Website/ App. We will share Your information with third parties only in such manner as described below:
In case we use or disclose your information for any purpose not specified above, we will take your explicit consent.
LINK TO THIRD-PARTY SDK
The App has a link to a registered third party SDK which collects data on our behalf and data is stored to a secured server to perform a credit risk assessment. We ensure that our third party service provider takes extensive security measures in order to protect your personal information against loss, misuse or alteration of the data.
Our third-party service provider employs separation of environments and segregation of duties and have strict role-based access control on a documented, authorized, need-to-use basis. The stored data is protected and stored by application-level encryption. They enforce key management services to limit access to data.
Furthermore, our registered third party service provider provides hosting security – they use industry-leading anti-virus, anti-malware, intrusion prevention systems, intrusion detection systems, file integrity monitoring, and application control solutions.
ACCESSING YOUR INFORMATION / CONTACTING US
At any point of time Users can choose to edit/modify or delete/withdraw any Personal Information shared for use of the Platform. Please note that deleting or withdrawing information may affect the Services we provide to you. In case of modification of Personal Information, Users will be required to furnish supporting documents relating to change in Personal Information for the purpose of verification by the Company.
YOUR PRIVACY CONTROLS
You have certain choices regarding the information we collect and how it is used:
The Platform intends to protect your information and to maintain its accuracy as confirmed by you. We implement reasonable physical, administrative and technical safeguards to help us protect your information from unauthorized access, use and disclosure. For example, we encrypt all information when we transmit over the internet. We also require that our registered third party service providers protect such information from unauthorized access, use and disclosure.
Our Platform has stringent security measures in place to protect the loss, misuse and alteration of information under control. We endeavour to safeguard and ensure the security of the information provided by you. We use Secure Sockets Layers (SSL) based encryption, for the transmission of the information, which is currently the required level of encryption in India as per applicable law.
We blend security at multiple steps within our products with the state of the art technology to ensure our systems maintain strong security measures and the overall data and privacy security design allow us to defend our systems ranging from low hanging issue up to sophisticated attacks.
We aim to protect from unauthorized access, alteration, disclosure or destruction of information we hold, including:
We or our affiliates maintain your information on servers located in India. Data protection laws vary among countries, with some providing more protection than others. We also comply with certain legal frameworks relating to the transfer of data as mentioned and required under the Information Technology Act, 2000 and rules made thereunder
When we receive formal written complaints, we respond by contacting the person who made the complaint. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of your data that we cannot resolve with you directly.
LINKS TO OTHER SITES
Our Platform links to other websites that may collect information about you. We are not responsible for the privacy practices or the content of those linked websites. With this Policy we’re only addressing the disclosure and use of data collected by Us. If You visit any websites through the links on the Website, please ensure You go through the privacy policies of each of those websites. Their data collection practices, and their policies might be different from this Policy and We do not have control over any of their policies neither do we have any liability in this regard.
In accordance with Information Technology Act 2000 and rules made there under, the name and contact details of the Grievance Officer are provided below for your reference:
Name: Ms Bhavisha
Address: Finheal Finserve Private Limited,
B-3, 1st Floor, Rama Park, Uttam Nagar, New Delhi – 110059