Privacy and Data Use Policy

Eraavat Capital Private Limited ("we", "us", "our", or "Company") is a Non-Banking Financial Company (NBFC) registered under the laws of India, with the Corporate Identification Number (CIN): U65990RJ2018PTC062722. We are authorized and regulated by the Reserve Bank of India (RBI) to provide financial services, including loan products, through our platform.

Our registered office is located at Beh Shiv Temple, Neel Kanth Colony, Solank Talkies Road, Jaipur, Rajasthan 311001, India. We are committed to protecting your privacy and handling your personal data with the highest level of care.

This Privacy Policy ("Policy") explains how we collect, store, use, share, and process your personal data when you use the Eraavat Loan App ("App"), which is developed and operated by Eraavat Capital Private Limited for providing financial services, including loans. By using the App, you consent to the collection and processing of your personal data as outlined in this Policy. If you do not agree with the terms of this Policy, please stop using the App immediately.

Introduction to Our Services

Eraavat Capital Private Limited, as both a service provider and lender, offers financial products and services through the Eraavat Loan App. We are dedicated to providing a seamless, transparent, and secure loan experience to our users, and we prioritize your privacy. In compliance with Indian laws and industry regulations, we take all necessary steps to ensure that your personal data is protected and only used for legitimate purposes.

Legal Compliance

This Privacy Policy has been prepared in accordance with the following applicable laws and regulations:

• Information Technology Act, 2000 and the Reasonable Security Practices and Procedures Rules, 2011.
• Digital Personal Data Protection Act, 2023 (DPDPA) and associated rules.
• Guidelines on Digital Lending Services issued by the Reserve Bank of India (RBI), 2022.
• Other applicable laws, regulations, and guidelines issued by relevant authorities, including the Reserve Bank of India (RBI).

This Policy is designed to comply with these legal frameworks and reflect our commitment to safeguarding your personal data while offering our financial services.

Scope of This Privacy Policy

This Privacy Policy covers the following key areas:

• Account Creation and Registration: Information required to create and manage your account with Eraavat Capital.
• Loan Services: Data usage related to the provision of loan products, including your personal, financial, and transaction data.
• Additional Services: Any other financial or value-added services provided through the App (e.g., bill payments, financial advisory services, etc.).
• Data Retention and Security: How we store and protect your data, including the duration of data retention.
• Sharing of Data: Details of how and with whom we share your data for processing, compliance, and service provision.

Purpose of Data Collection

• Providing personalized loan services.
• Verifying your identity and assessing your financial eligibility.
• Complying with regulatory requirements, including those set by the Reserve Bank of India (RBI).
• Improving the services offered on the App and enhancing your user experience.

The Information We Gather and How It's Used

We collect certain information provided by you and some data automatically collected as you use the App. We only collect data with your explicit consent and respect your privacy.

Face Data

To provide a safer and more convenient service, our app may collect your facial data. Below is a detailed explanation of how we collect, use, store, and protect this data:

1. Facial Data Collected

We collect your facial image through your device's camera. This data will be used for identity verification and fraud prevention checks. The facial data we collect includes, but is not limited to, facial images, facial features, and facial recognition data. Please note that this data is only used to verify your identity and ensure that only authorized users can access their accounts.

2. Use of Facial Data

The facial data we collect will only be used for the following purposes:

Identity Verification: To ensure the authenticity of your identity information, so that you can smoothly pass the verification process and access the service.

Fraud Prevention: To prevent fraudulent activities and ensure the security of your account.

3. Facial Data Processing

We process your facial data in the following ways:

Local Processing: All facial images and data will be processed and recognized locally on your device. Your facial data will not be uploaded to our servers unless it has been encrypted.

Encrypted Data Upload: Only encrypted facial feature data (e.g., facial vectors) will be uploaded to our servers, not the full facial image. All encrypted data transmission is secured using HTTPS to ensure the security of the data during transfer.

4. Facial Data Storage and Deletion

We are committed to minimizing the storage time of facial data to fully protect your privacy:

Storage Time: Facial data will only be used during the verification process and will be deleted within 24 hours after verification is completed. The encrypted facial feature data uploaded to the server will also be deleted within 24 hours after verification is completed.

Automatic Deletion Mechanism: Facial data will be deleted immediately after verification is completed, ensuring that the data is not stored for an extended period.

5. Sharing and Disclosure of Facial Data

We are committed to not sharing your facial data with any third parties, unless required by law or with your explicit consent:

We do not share your full facial image or recognition data with any third parties.

Our partners and service providers will only have access to encrypted data, and are bound by strict contractual and privacy protection obligations to ensure compliance with privacy protection requirements.

6. Data Security

We place great importance on your data security:

Encryption Technology: We use industry-standard encryption technologies (such as AES-256) to encrypt facial data, ensuring the security of the data during storage and transmission.

Secure Transmission: All encrypted data is transmitted via secure HTTPS protocols to ensure that the data is not tampered with or leaked.

Account Data

What is Collected: Name, phone number, date of birth, PIN code, PAN, Aadhaar details, email address, etc.

Purpose: To enable the App and its services, for customer support, legal and compliance requirements, communication, and marketing.

Verification Data

What is Collected: Scanned copies of your PAN, Aadhaar, and other identity documents.

Purpose: For identity verification and completing KYC process.

Transaction Information

What is Collected: Loan amount, date, interest rate, repayment method, and payment details.

Purpose: To process your loan and facilitate repayment.

Feedback Data

What is Collected: Feedback, reviews, or survey responses.

Purpose: To improve our services and customer support.

Usage Analytics

We collect data about how you interact with the App, including clicks, screen views, and session time, to optimize your experience.

Third-Party Service Providers

We may share data with third-party service providers (e.g., payment gateways or support vendors) strictly for operational purposes and in compliance with data protection laws.

Push & Location-Based Notifications

We may use app usage and location data to send personalized offers, reminders, and updates.

Contacts Access

What is Collected: Contact list from your device.

Purpose: To enhance loan approval accuracy.

Advertising Identifier (IDFA)

What is Collected: Advertising ID for app performance tracking.

Purpose: To improve app efficiency and notifications.

Security and Data Retention

We use encryption, access controls, and secure storage to protect your personal data. Retention complies with legal obligations and service needs.

Cross-Border Data Transfers

Your data may be processed on servers outside India under compliant safeguards.

User Rights

You have the right to access, correct, delete, or withdraw consent for your data. Contact us at support@eraavatcapital.com.

Security and Confidentiality

We implement encryption, access controls, and restricted authorization to ensure data confidentiality. No internet method is 100% secure, but we strive to minimize risks.

Retention and Deletion of Your Data

We retain personal data as long as required by service or legal needs. Upon request or account deletion, your data is removed per policy and law.

Your Rights and Control Over Your Data

Access, correction, deletion, objection, data portability, or consent withdrawal rights are available by contacting us via our official email.

Modifications to This Policy

We may update this Policy periodically. Updates will reflect on this page with an adjusted "Last Updated" date.