THIS PRIVACY POLICY is between You ("User/Borrower") and Vaishali Securities Limited (an NBFC registered with the RBI, operating through its Digital Lending App ZingLoan, hereinafter referred to as "Platform", "Lender", "We", "Us", or "Our").
Formed under the Information Technology Act, 2000, RBI Guidelines on Digital Lending (2022), and relevant data protection regulations (including the Digital Personal Data Protection Act, 2023), We commit to protecting your privacy. This document outlines our strictly regulated practices for collecting, storing, using, processing, and disclosing your personal and financial information provided via our Website or Mobile Application.
ZingLoan is a Digital Lending App (DLA) directly owned and operated by Vaishali Securities Limited. As a regulated entity, We are directly and exclusively responsible for the entire loan lifecycle, including user interface management, KYC data collection, credit assessment, loan sanctioning, fund disbursement, and customer service. We rigorously undertake the obligations of protecting user privacy and complying with all applicable data protection regulations.
By downloading, accessing, or using the Platform, you consent to the terms of this Privacy Policy (a legal agreement between you and Vaishali Securities Limited) and acknowledge the following:
You expressly voluntarily consent to our collection, processing, and storage of your data strictly for the facilitation of installment loans in accordance with this document and relevant laws. You confirm that you are an Indian citizen, at least 18 years of age, have the capacity to enter into a contract under the Indian Contract Act, 1872, and are physically located within India.
Please read this document carefully. If you do not agree with the terms regarding our collection, processing, and disclosure of your data, please do not download, access, or use the Platform.
We strictly adhere to the principle of "Data Minimization" as mandated by the RBI's Digital Lending Guidelines. We collect only the information that is absolutely necessary for processing your installment loan application, completing KYC, and ensuring regulatory compliance.
To verify your identity and allow Us to assess your credit eligibility, we securely collect:
Identity Data: Full Name, Date of Birth, Gender, Marital Status.
Contact Data: Residential Address, Email Address, and Mobile Number.
Government Documents: PAN Card details and Aadhaar Number.
Financial Data: Bank Account Number and IFSC Code (solely for the purpose of fund disbursement and repayment processing).
To prevent financial fraud, unauthorized access, and to ensure the security of the Platform, we collect specific metadata:
Device Information: Hardware model, Operating System (OS) version, generic device identifiers, and screen resolution.
Network Details: IP Address, Mobile Network Operator, and connection type (Wi-Fi/4G/5G) for risk assessment and anti-money laundering (AML) compliance.
We request the following permissions only when required for a specific function. (Note: RBI guidelines strictly prohibit unnecessary access to contacts and media libraries.)
Purpose: Credit profiling and risk management.
Details: To prevent fraud and offer you an appropriate credit limit, we need access to the list of installed applications on your device. We only collect app names and category metadata; we never access or read your personal data within other apps.
Purpose: To complete Know Your Customer (KYC) verification and liveness detection.
Details: We require camera access to capture clear identification documents and verify your identity. Your image data is used exclusively for identity verification and nothing else.
Purpose: To secure your account and prevent unauthorized access.
Details: We collect hardware models, OS versions, mobile network data, and unique device identifiers. This information is solely used to verify device identity, prevent identity theft, and secure your transactions.
Purpose: To verify service availability and conduct anti-fraud risk assessments.
Details: We collect your coarse location data to confirm that you are within our legally serviceable area in India. We do not collect or track precise location data.
Purpose: To support voice input and assist with KYC verification.
Details: This is an optional permission. We will only record audio when you actively use voice-related features. We do not record audio in the background.
To provide a seamless, secure, and verified onboarding experience, we offer third-party authentication options including Truecaller, Google.
If you choose to register or log in using these services, you authorize us to receive basic profile information from these providers, such as your verified email address, phone number, and public profile name.
This data is utilized strictly to authenticate your identity, streamline your account creation, and prevent fraudulent registrations. We do not share your financial or loan data back to these third-party platforms.
For secure phone number verification during login and transactions, we utilize the Google SMS Retriever API to automatically detect and auto-fill the One-Time Password (OTP) sent exclusively by Our Platform.
Important Compliance Note: We DO NOT request, prompt for, or utilize the READ_SMS or RECEIVE_SMS permissions. We have absolutely no access to your personal inbox, transaction messages, or any general SMS data. The API mechanism ensures that the App can only read the specific OTP message designated for our service.
Your information is processed strictly for legitimate business purposes and legal compliance:
Installment Loan Processing: To facilitate the lending process, underwrite your loan application, and generate your Key Fact Statement (KFS) and installment schedule.
Regulatory Compliance: To perform mandatory KYC verification and AML checks as required by RBI regulations.
Service Notifications: To send you essential transaction alerts, OTPs, and timely reminders regarding your upcoming installment due dates.
Security & Fraud Prevention: To continuously monitor and protect the platform against unauthorized access, identity theft, and fraudulent activities.
We maintain the highest standards of confidentiality regarding your data. Since We are the direct lender, your data is processed internally. We share your information externally only under the following circumstances:
Authorized Service Providers: We securely share necessary data with authorized third-party vendors for specific operational services such as secure payment gateway processing, e-signing (Aadhaar eSign), and encrypted data storage. All vendors are strictly bound by non-disclosure agreements (NDAs) and compliance contracts.
Legal & Regulatory Requirements: We are legally obligated to disclose your information to law enforcement agencies, credit information companies (CICs, like CIBIL), courts, or government authorities if strictly required by applicable laws or to protect legal rights.
Location of Data: In uncompromising compliance with RBI directives, all your personal and financial data is stored exclusively on secure cloud servers located within the territory of India.
Retention Period: We retain your information only for as long as necessary to provide services or as required by law (e.g., the Prevention of Money Laundering Act requires the retention of transaction records for a specific period).
Data Destruction: Upon expiration of the mandatory retention period, or upon your successful account deletion request (provided no active installments are pending), your data will be securely and permanently deleted from our systems.
We implement robust, industry-standard security practices and procedures as mandated by the DPDP Act and IT Rules:
Encryption: All data in transit and at rest is encrypted using advanced protocols (e.g., 256-bit AES, SSL/TLS).
Access Control: Strict, role-based access control is enforced for our employees and agents; data access is granted purely on a "need-to-know" basis.
Security Audits: We conduct regular, independent security audits to identify and mitigate any potential vulnerabilities. (Note: While we employ commercially acceptable means to protect your data, no method of transmission over the internet is mathematically guaranteed to be 100% secure.)
Consent Withdrawal: You have the right to revoke your consent for data processing at any time by contacting us. However, please note that if you have an active installment loan, we are legally mandated by the RBI to retain your data until all scheduled installments are fully settled and the loan is officially closed.
Data Correction: You may review and request corrections to any inaccurate or incomplete personal information we hold about you.
In accordance with applicable laws, we have a dedicated mechanism to address your concerns. If you have any complaints or questions regarding this Privacy Policy, data processing, or your loan, please contact our Grievance Redressal Officer:
Company Name: Vaishali Securities Limited
App Name: ZingLoan
Email: grievanceredressal@vaishalisecuritiesltd.com
Customer Support Number: 07969654623
Registered Address: D- 504, Swati Crimson Daskroi, Shilaj Thaltej Ahmedabad Gujarat 380059
We reserve the right to modify this Privacy Policy periodically to reflect changes in applicable legal frameworks, our data handling practices, or technological advancements. We will notify you of any material changes via the App. Your continued use of the Platform after the revised Policy is published constitutes your acknowledgment and acceptance of such changes.