*To be read with Privacy Policy and Terms and Conditions available on the website
This Privacy Policy outlines Paisalo Digital Limited’s (“Paisalo”, “We”, or “Us” or “Ours”) practices in relation to the storage, use, processing, and disclosure of personal data that you (“You”) have chosen to share with Us when You download and use Our mobile application “Paisalo Sourcing App”.
At Paisalo, We are committed to protecting Your personal data and respecting Your privacy. Please read the following terms of the Policy carefully to understand Our practices regarding Your personal data and how We will treat it. This Policy sets out the basis on which any personal data We collect from You, We collect about You, or that You provide to Us, will be processed by Us.
By providing Us with the consent to process Your personal data, You acknowledge that We will collect, store, use, and disclose Your personal data in accordance with this Policy.
We collect, transmit, and store personal data about You on Our secured Paisalo server after obtaining Your consent, to provide You with, or in connection with, the Services. Please note that We only collect and process a minimal amount of Your personal data to provide You with the Services. Such personal data includes:
We do not access Your mobile phone resources such as contact list, call logs, telephone functions, and files & media (except in order to enable You to upload documents). We do not collect Your biometric data. However, We may take a one-time access of Your camera, microphone, location (fine and coarse GPS data to provide better services from nearby branches), or any other facility for the purpose of onboarding or KYC checks (for such instance of access), after obtaining Your explicit consent, each time you avail certain Services. We collect, transmit, and store above mentioned data on Our secured server. For certain Services, We may require access to be able to send SMS for the purpose of verification of Your phone number.
We are required to collect Your personal data to provide You with access to the Platform and Services. In certain cases, We are required to collect personal data as required by law, or under the Terms. If you fail to provide Us that data as and when requested by Us, We will not be able to perform Our obligations under the arrangement We have with You or are trying to enter into with You (for example, to provide You with features of the Services). In this case, We may have to cancel or limit Your access to the Services (or part thereof).
We use different methods to collect and process personal data about You. This includes:
Please note that We do not have any control over personal data that You may choose to make publicly available. For example, if You post reviews, comments, or messages on public sections of the Platform or on an application store (such as the Play Store), You do so at Your own risk. We are not liable for third-party misuse of such data.
We will only use Your personal data in accordance with the applicable law. Most commonly, We will use Your personal data to provide You with the Services, or where We need to comply with a legal obligation.
You agree and acknowledge that by using Our Services and creating an account on the Platform, You authorise Us, to contact You via email, phone, or otherwise in relation to making the Services available to You.
In general, We use Your personal data for the following purposes and activities:
You agree and acknowledge that any and all information pertaining to You, whether or not You directly provide it to Us (via the Services or otherwise), including but not limited to personal correspondence such as emails, instructions from You, etc., may be collected, compiled, and shared by Us with third parties after obtaining Your explicit consent, solely in order to render the Services to You. This may include but not be limited to partners such as authorized credit history providers, account aggregators etc. engaged by us who facilitate the provision of Services and products available on Our Platform, storage providers, data analytics providers, consultants, lawyers, and auditors. If You fail to provide consent for sharing of such data when requested by Us, We may not be able to perform Our obligations under the arrangement We have with You or are trying to enter into with You. In this case, We may not be able to provide the Services to You.
You agree and acknowledge that by using Our Services and creating an account on the Platform, You authorize Us to contact You via email, phone, or otherwise. This is to ensure that You are aware of all the features of the Services and facilitate You in Your access and use of the Services.
You agree and acknowledge that We may share Your data, where We are required by law, any court, a government agency, or authority to disclose such information. Such disclosures are made in good faith and belief that it is reasonably necessary to do so for enforcing this Policy or the Terms and conditions, or in order to comply with any applicable laws and regulations.
You hereby declare that all personal data that You provide Us with is accurate, up-to-date, and true. When You use Our Services, We make best efforts to provide You with the ability to review and correct inaccurate or deficient data, subject to any legal requirements. We shall have the right to verify the accuracy of the personal data You provided to Us either directly or through third-party service providers engaged by us.
We implement appropriate security measures and access controls to protect Your personal data from unauthorized access, and follow technology standards prescribed by applicable law, including the Information Technology Act, 2000, Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, the Digital Personal Data Protection Act, 2023 and the rules enacted thereunder (as and when enforced), and by RBI ensuring up-to-date physical security, such as secure areas in offices; electronic safeguards, such as passwords, firewalls, and encryption; and secure development procedures. Our safety and security processes are audited by a third-party cyber security audit agency from time to time.
In the scenarios where personal data collection is mandatory, for instance any information required to pull bureau report or for loan application, We encrypt the data with the latest security algorithms before transmitting the data. All such data is encrypted at rest.
Information You provide and receive during the Services is transmitted through a secure sockets layer (SSL) transmission. We encrypt and store personal data wherever it is possible. No data is shared with any third party unless until it is a core feature to serve the end-user, in all such scenarios the user consent is taken.
We restrict access to Your personal data only to those employees authorized persons, third-party service providers who are required to know such information in order to provide Our Services to You. We train Our employees, authorized persons, third-party service providers on all Our security procedures.
We have internal processes and policies in place to tackle incidents of information security breach. This process enables the incident response team to detect, analyse, contain, eradicate and recover from information security breach incidents. In the event there is a security breach, we will take adequate timely measures to mitigate any risk to the data collected/ stored and take all necessary actions required under applicable law. In the event Your data is impacted, We will take reasonable measures to keep You informed.
While We impose strict contractual obligations on Our service providers regarding data protection, Our service providers are independent third parties. We shall not be liable for any unauthorized acts or data breaches by the service providers that occur outside the scope of their authorized activities or in violation of Our contractual requirements. We shall only be responsible for ensuring that the service providers are contractually obligated to comply with applicable data protection laws and Our security standards.
For information about Our retention and destruction practices, please refer to our Terms and Conditions.
Under certain circumstances, You have the right to:
Notwithstanding Your right 9.1 (a) and (c), We reserve the right to retain information to the extent required for below mentioned purposes:
If You wish to exercise any of the rights set out above, please write an email to the Grievance Officer, whose details are mentioned in Section 15 of this Policy, providing in as much detail as possible, the right(s) You wish to exercise. Please also include a description of the personal data You believe We hold or process about you, so that We may be able to locate such personal data. In the event that We need additional information from You, Our Grievance Officer will contact You further.
We will be able to reply to Your request(s) within 30 (thirty) days of raising the request. In the event that We are not able to respond to or acknowledge Your request within 30 (thirty) days of receipt due to any reason, We will inform You.
Please note that all Your data, including financial data collected by Us, is only stored on systems located in India. We do not transfer Your personal data to any third country.
Our Services may, from time to time, contain services provided by or links to and from the websites of Our partner networks, service providers, financial institutions, advertisers, and affiliates (“Third Party Services”). Please note that the Third-Party Services that may be accessible through Our Services are governed by their own privacy policies. We do not accept any responsibility or liability for the policies or for any personal data that may be collected through such Third-Party Services. Please check their policies before You submit any personal data to such websites or use their services.
You agree and acknowledge that in the event We go through a business transition, such as a merger, acquisition by another organization, or sale of all or a portion of our assets, Your personal data might be among the assets transferred.
We keep Our Policy under regular review and may amend it from time to time, at Our sole discretion.
The terms of this Policy may change and if it does, these changes will be posted here and, where appropriate, notified to You by email or through SMS.
You may contact Our Grievance Officer with any enquiry relating to this Policy or Your personal data.
Name: Mr. Anurag Sinha
Email Address: grievance@paisalo.in
Phone: +9111 43518888
Address: : CSC, Pocket 52, CR Park, Near Police Station, New Delhi - 110019