Haveri VahanCredit logoHaveri VahanCredit
Legal

Data Retention & Erasure Policy

Last updated: September 2026

1. Purpose & Data Lifecycle Governance

Haveri VahanCredit ("the Application") maintains a structured framework for data lifecycle governance to guarantee responsible handling of personal information. User records are processed exclusively for executing auto loan services, assessing creditworthiness, mitigating financial fraud, and fulfilling obligations under the Digital Personal Data Protection (DPDP) Act 2023, the Prevention of Money Laundering Act (PMLA) 2002, and Reserve Bank of India (RBI) digital lending standards. When user information is no longer needed for regulatory compliance or operational mandates, it is subjected to permanent secure purging or irreversible anonymization.

2. Mandatory Storage Schedules

To comply with statutory directives issued by Indian financial authorities, distinct data categories are kept according to specified retention timetables:

  • Financial Records & KYC Dossiers: Official government identification cards (including PAN and Aadhaar details), credit evaluation metrics, auto loan disbursement histories, and repayment ledgers are preserved for five (5) years following loan clearance or account closure, as required by PMLA compliance rules.
  • User Identity & Account Credentials: Registered mobile numbers, official email addresses, and account setup options remain active throughout your service relationship. Upon account deactivation, these files are transferred to encrypted storage for five (5) years to fulfill regulatory audit requirements.
  • System Telemetry & Technical Metrics: Software crash reports, diagnostic data, and performance indicators are retained for up to two (2) years from collection solely to support application stability, address software errors, and improve service delivery.

3. Data Erasure Framework & Cleanup Procedures

In accordance with user rights granted under the DPDP Act 2023, data deletion is managed via two distinct procedures:

  • User-Initiated Deletion Demands: You possess the legal right to request the erasure of your personal records from our active processing environments. Deletion requests must be submitted using your registered email address to business@haverivahancredit.com. Following identity verification, our compliance team will fulfill valid requests within fifteen (15) business days, subject to data exempted by statutory financial retention rules. You can also submit a request on the Delete Account page.
  • Automated Cleanup of Inactive Profiles: Accounts showing zero platform activity or financial transactions for eighteen (18) consecutive months are queued for automated archiving or data erasure. An advance notification will be dispatched via SMS or email thirty (30) days prior to completing the purge.

4. Data Governance Contact Points