Privacy Policy of LoanOne (Operated by AssistFin Technologies Private Limited)

1. Introduction

Welcome to LoanOne, a digital-first financial services platform operated by AssistFin Technologies Private Limited ("we", "us", "our"). We are committed to protecting your privacy and handling your personal information with transparency and care. This Privacy Policy outlines our policies and practices regarding the collection, use, storage, disclosure, and protection of personal data obtained from users ("you", "your") through our platform, including but not limited to our website, mobile applications, and other related services (collectively, the "Platform"). This Privacy Policy complies with applicable Indian laws including the Information Technology Act, 2000 and the rules thereunder, as well as the Digital Personal Data Protection Act, 2023 ("DPDP Act") where applicable. By accessing or using our Platform, you agree to the terms of this Privacy Policy and consent to the processing of your personal data as described herein. If you do not agree with this Policy, please refrain from using our services.

2. Definitions

Personal Data refers to any data about an individual who is identifiable by or in relation to such data. Processing means any operation performed on personal data, such as collection, use, storage, disclosure, or deletion. A Data Principal is the natural person to whom the personal data relates. The Data Fiduciary is the entity (LoanOne/AssistFin Technologies) that determines the purpose and means of processing personal data. A Data Processor is any person who processes personal data on behalf of the Data Fiduciary.

3. Information We Collect

We collect various types of personal and non-personal information for legitimate business purposes, including the provision of financial services and to comply with legal obligations. This includes personal information such as your full name, date of birth, gender, contact information (address, phone number, email address), government-issued IDs (such as PAN, Aadhaar, Voter ID), bank account details and financial statements, employment details and income information, and credit score and credit history as received from credit bureaus. We also collect technical and usage information such as your IP address, browser type and version, operating system, device type and unique identifiers, access times and referring URLs, and your usage patterns and preferences on the Platform. If permitted by you, we may collect geolocation data. Additionally, we use cookies and similar technologies to enhance your experience, and you can manage cookie preferences through your browser settings.

4. Purpose of Data Collection

We collect and process your information to provide and manage financial services, including assessing loan eligibility, processing applications and transactions, performing KYC (Know Your Customer) verifications, personalizing user experiences, improving the functionality and security of the Platform, complying with legal, regulatory, and audit requirements, preventing fraud and misuse of our services, and communicating with you regarding transactions, service updates, marketing (only if you have opted-in), and customer support.

5. Legal Basis for Processing

We process your data based on consent, the performance of a contract, compliance with a legal obligation, and our legitimate interests.

6. Consent Management

We obtain your explicit consent before collecting sensitive personal data or sharing it with third parties. You have the right to withdraw your consent at any time, subject to legal or contractual restrictions.

7. Data Sharing and Disclosure

We do not sell your personal data. However, we may share your data with partner financial institutions such as banks and NBFCs for processing loans, credit bureaus and KYC verification service providers, regulatory authorities as required by law, and service providers and contractors for IT, analytics, and customer support. Legal advisors, auditors, and law enforcement may also receive your data where applicable, and all such parties are bound by confidentiality agreements.

8. Data Retention

We retain your data for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by applicable laws. In certain circumstances, such as disputes or legal requirements, retention periods may be extended.

9. Data Security

We implement industry-standard security measures including encryption of sensitive data, secure servers and firewalls, access control and authentication mechanisms, and regular security audits to protect your data. Despite our efforts, no system is completely secure, and we cannot guarantee absolute security. However, we are committed to notifying you promptly in the event of any data breaches that may affect your rights.

10. Your Rights

Subject to applicable law, you may have the right to access your personal data, request correction, seek data portability, request erasure, withdraw consent, and submit grievances. You may exercise these rights by contacting our Data Protection Officer as detailed below.

11. Children’s Privacy

Our services are not intended for individuals under the age of 18. We do not knowingly collect personal data from minors. If we discover that we have inadvertently collected such information, we will promptly take steps to delete it.

12. International Data Transfers

Your data may be stored or processed outside India where permitted by law. We ensure that any such transfers are in compliance with applicable data protection laws.

13. Grievance Redressal and Contact Information

If you have any questions, concerns, or grievances regarding this Privacy Policy or our data processing practices, please contact our Grievance Officer/Data Protection Officer at AssistFin Technologies Private Limited, T28-1802, Nirala Estate, Plot No. Gh4, Techzone IV, Gautam Buddha Nagar, Noida, Uttar Pradesh-201306, Email: info@assistfin.com, Phone: 7700840543. We aim to respond to your inquiries within 15 working days.

14. Updates to This Policy

We may update this Privacy Policy periodically. The latest version will always be available on our Platform with the effective date mentioned at the top. We encourage you to review this Policy regularly to stay informed of any changes.

15. Governing Law and Jurisdiction

This Privacy Policy shall be governed by the laws of India. Any disputes arising in relation to this Policy shall be subject to the exclusive jurisdiction of the courts at Uttar Pradesh.