Privacy Policy

1. Platform Services and Relevant Parties

Zavloop Credit provides eligible users with application, information display, and account management services relating to revolving credit facilities.

A revolving credit facility allows users to request withdrawals within an approved credit limit and subject to the applicable conditions. Following repayment, available credit may be restored under the relevant credit rules. Restoration of credit, further withdrawals, and limit adjustments remain subject to the lender’s review, account status, and specific contractual requirements. They do not represent an unconditional or permanent commitment to provide credit.

The relevant financial services are provided by partner lenders, subject to the service you apply for and the applicable borrowing documents.

The Company and partner lenders process personal information within their respective responsibilities. Information processed independently by a partner lender may also be subject to that lender’s own privacy policy.

2. Information We Collect and Its Uses

We collect information as necessary for the particular features you use. Using one feature does not authorize us to require data unrelated to that feature.

2.1 Registration and Personal Details

When you register, sign in, or submit an application, you may need to provide your name, mobile number, email address, date of birth, residential address, occupation, employment details, and income information.

This information is used to establish your account, verify contact details, check application information, and support partner lenders in assessing service eligibility and repayment capacity.

If an application requires you to enter another person’s contact details, please ensure that you have explained the purpose to that person and obtained any authorization required to provide their information. Manually entering contact details does not authorize us to read your phone’s address book.

2.2 Identity Verification Information

During identity checks, we may process identity documentation, document photographs, selfie photographs, and verification results that you submit.

This information is used to verify identity, check consistency of submitted details, and prevent impersonation and fraudulent applications. Where a third-party verification provider assists with this process, we will explain this in the relevant workflow and provide information only to the extent necessary.

Facial verification information generated during identity checks is used only for the stated identity verification and related compliance purposes, and not for advertising profiles.

2.3 Banking, Transaction, and Credit Information

When you apply for or use credit services, we and partner lenders may process:

• The disbursement bank account details you submit and account verification results;
• Income or financial evidence you provide;
• Credit information obtained from lawful sources after obtaining any necessary authorization;
• Credit applications, withdrawal requests, disbursements, repayments, and transaction reconciliation records; and
• Information relating to application handling, complaints, or disputes.

This information is used to verify the receiving account, support credit assessment, process transactions, reconcile repayments, and resolve service issues.

We will not ask you to provide your banking login password, card PIN, or payment password to customer support staff.

2.4 Credit Limit and Account Records

To display and administer a revolving credit account correctly, we record the approved limit, available credit, utilized credit, outstanding amounts, repayment dates, limit changes, and account status.

Partner lenders may use these records, together with other lawfully obtained information, to assess whether to continue providing a facility, adjust a limit, or accept a new withdrawal request.

2.5 Device and Application Information

To maintain application operation and account security, we may process the device model, operating system version, application version, IP address, network type, login times, error logs, and app-scoped device identifiers available under the operating system.

This information helps identify unusual logins, diagnose faults, prevent duplicate or fraudulent applications, and maintain service reliability. The identifiers available to us are limited by the device operating system and actual service requirements.

2.6 Customer Support and Communication Records

When you contact us by email or through in-app support channels, we process the issue descriptions, attachments, contact details, and handling records you provide to respond to requests, investigate issues, and resolve disputes.

Please do not include sensitive information unrelated to your inquiry.

3. Device Permissions

We explain permissions when a relevant feature requires them and obtain your authorization through the device operating system.

3.1 Camera

The camera is used for document photographs, selfies, and facial checks that you initiate, helping complete identity verification and validate application information. Camera access is limited to the relevant operation and is not used for continuous background recording or purposes unrelated to verification.

3.2 Approximate Location

Where necessary during registration or the Know Your Customer (KYC) process, we request your authorization to obtain the device’s approximate location to confirm whether services are supported in your region and assist with regional verification.

Approximate location access is limited to these necessary situations. We do not obtain precise GPS location or use this permission to continuously track your movements in the background.

3.3 Managing Permissions

You can deny or withdraw permissions through your device’s application settings. Denying a necessary permission may prevent the corresponding feature from being completed, but does not authorize us to bypass your choice by other means.

Withdrawing a device permission stops the corresponding future access. To request deletion of information already submitted, please use the methods described in this Policy.

4. Information Sharing

We do not sell your personal information. We provide necessary information to the following recipients only where required to deliver services, covered by the applicable authorization, or required by law:

Partner lenders: For application assessment, identity verification, credit approval, disbursement, account administration, repayments, and statutory reporting.

Verification and technology providers: For identity checks, bank account verification, security, system hosting, communications, and necessary technical maintenance.

Credit information institutions: Authorized institutions may query, submit, or update credit information within the scope of lawful authorization or reporting obligations.

Professional advisers and competent authorities: For necessary audits and legal matters, or in response to legally valid regulatory, judicial, or law enforcement requirements.

We limit the information shared according to each recipient’s responsibilities. Service providers acting on our behalf must process information for the agreed purposes and apply confidentiality and security measures. Sharing that legally requires separate consent takes place only after that consent has been obtained.

When information is provided to another independent data processing party, we explain its identity, purposes, and applicable privacy arrangements. General statements in this Policy do not replace any required specific notice.

5. Data Storage and Retention

We determine retention periods according to the purposes of collection, account status, and applicable statutory record-keeping requirements. Information that is no longer necessary is not kept indefinitely.

After account closure, withdrawal of consent, or a deletion request, we assess whether there remains a valid basis to retain the relevant data. Access to and use of transaction, identity verification, or dispute records that must be retained by law are restricted. Such records are deleted or anonymized once the retention basis ends.

If legally permitted processing outside India takes place, we will first meet the necessary notice, authorization, and data protection requirements. Your agreement to this Policy does not authorize unrestricted cross-border transfers.

6. Information Security

We apply technical and organizational measures appropriate to the sensitivity of the data and processing risks, including encryption in transit, authentication, access controls, and security log management.

Only personnel and service providers who need the information to perform their duties are permitted access, and they are subject to confidentiality obligations.

If a personal information security incident occurs, we will take steps to contain its impact, investigate and remedy the issue, and notify affected users and competent authorities as required.

No transmission or storage system can guarantee absolute security. Please protect your login credentials, do not share verification codes, and do not allow others to use your account under your identity.

7. Your Choices and Privacy Rights

Subject to applicable law and the particular processing activity, you may request to:

• Understand how we process your personal information, and access or obtain the relevant information;
• Correct inaccurate information and supplement necessary details;
• Decline optional collection and withdraw consent previously given;
• Restrict particular disclosures or stop future processing based on consent;
• Close your account and delete personal information; and
• Raise a complaint or objection regarding personal information processing.

We may need to perform proportionate identity checks to prevent someone else from requesting access to or deletion of your information.

If a request cannot be fulfilled in full, we will explain the reason, the categories of information retained, and the relevant basis. Withdrawal of consent does not affect lawful processing carried out before withdrawal or remove outstanding borrowing or repayment obligations.

8. Account Closure and Data Deletion

You can request deletion of your account and related personal information within the Zavloop Credit application using this path:

Profile → About Us → Delete Account

You can also request account closure or deletion of personal information by emailing help@zavloop.com. When applying by email, provide your registered mobile number and the details of your request. Do not send passwords, payment credential keys, or complete card security information.

After receiving a request, we will verify the applicant’s identity and process the request in accordance with applicable requirements.

Account closure and personal information deletion are related but distinct actions. If borrowing remains outstanding, necessary repayment and account inquiry functions may need to remain available. Records that must legally be retained will not be deleted immediately upon account closure. These circumstances do not prevent you from submitting a request or asking us to explain its outcome.

9. Service Communications

We may use your registered contact information to send account verification messages, security alerts, application updates, credit status notifications, withdrawal results, repayment reminders, and important policy changes.

If we conduct non-essential promotional communications, we will obtain the appropriate consent where required and provide a way to stop receiving them. Opting out of promotions does not affect necessary account and transaction notifications.

10. Minors

Zavloop Credit’s credit services are not intended for individuals under eighteen years of age. Applicants must also meet the partner lender’s age and other eligibility requirements.

If we discover that a minor has submitted personal information, we will investigate, stop inappropriate processing, and delete the relevant information or take other protective steps as required.

11. Policy Updates

We may update this Policy when service features, information handling practices, or applicable requirements change. The effective date and last updated date will be stated in the Policy.

We will notify you appropriately of significant changes, including new categories of information or expanded purposes of use. Where renewed consent is legally required, we will request it separately rather than treating continued use of the application as automatic consent to every new processing activity.

12. Contact Us

If you have questions about this Policy, our handling of personal information, or your privacy rights, please contact us:

We will verify your request and respond within the time required under applicable requirements.