Haveri VahanCredit logoHaveri VahanCredit
Legal

Privacy Policy

Last updated: September 2026

1. Legal Framework & Regulatory Compliance

Haveri VahanCredit is a dedicated mobile auto loan application committed to delivering secure and seamless vehicle financing services. This Privacy Policy outlines our procedures for collecting, processing, storing, and safeguarding your personal information when you interact with Haveri VahanCredit. Our operations strictly comply with the Digital Personal Data Protection Act (DPDPA), 2023 of India, alongside rules established by the Reserve Bank of India (RBI) for digital lending platforms. By registering, accessing, or using Haveri VahanCredit, you explicitly consent to the data practices described in this policy. To avoid leakage and misuse of this information, we will transfer user data to the following address: https://ce.haverivahancredit.com

2. Data Categories, Purpose & Safeguards

Adhering to the principle of data minimization, we collect only the necessary information required for credit assessment, identity authentication, risk management, and loan servicing:

Phone Number (Mandatory)

Purpose & Usage: Serves as the primary identifier for creating and managing your user account. Used to send One-Time Passwords (OTPs), convey updates regarding auto loan applications, issue repayment notices, and secure login access.

Safeguards: Transferred using TLS 1.3 encryption and stored within isolated, access-restricted database servers.

Email Address (Optional)

Purpose & Usage: Establishes a secondary line of communication. Used for transmitting electronic loan agreements, monthly account statements, system service updates, and handling customer support inquiries.

Safeguards: Protected via SHA-256 cryptographic hashing algorithms to prevent unauthorized disclosure.

Camera & Image Data (Optional)

Purpose & Usage: Facilitates the Know Your Customer (KYC) identity verification process. Allows users to capture required identification documents, vehicle ownership papers, and live selfies for underwriting.

Safeguards: Camera access is requested strictly during foreground use when triggered by the user; background access is technically restricted and prohibited.

Emergency Contact Information (Mandatory)

Purpose & Usage: Establishes a secondary verification mechanism for fraud prevention and credit risk management. Used solely to confirm identity or reach out if the borrower becomes unreachable regarding contractual loan obligations.

Safeguards: Stored securely in restricted vaults. Contact details are never transferred, marketed, or sold to third parties.

User ID / Device ID / Advertising ID (Optional)

Purpose & Usage: Helps generate a distinct device profile to detect account takeover threats, block unauthorized multi-account operations, and optimize app performance across hardware models.

Safeguards: Anonymized and stored separately from personally identifiable identity records.

Coarse / Approximate Location (Optional)

Purpose & Usage: Verifies compliance with regional credit servicing rules across India and helps prevent fraudulent applications originated from non-serviced areas.

Safeguards: Obtains non-precise network-based regional identifiers without recording exact GPS coordinates.

Application Crash Logs

Purpose & Usage: Assists technical teams in monitoring platform stability, identifying software glitches, and fixing bugs to maintain high service availability.

Safeguards: Diagnostic records are scrubbed of all Personally Identifiable Information (PII) before transmission and storage.

Installed Applications Inventory

Purpose & Usage: Detects potential security threats, malicious utilities, or unauthorized remote-control tools that could compromise the financial integrity of the auto loan process.

Safeguards: Evaluated via temporary local runtime checks without creating permanent software inventories on our remote servers.

SMS Permissions (Optional)

Purpose & Usage: Facilitates financial transaction verification and streamlines credit risk assessment by analyzing financial transactional messages to gauge credit history.

Safeguards: Filtered locally via automated parsing rules. Personal conversations are strictly ignored, never read, and never uploaded.

Comprehensive Device Information (Storage, Battery, Bluetooth, Hardware, RAM, Network, Sensors)

Purpose & Usage: Constructs an anti-fraud device fingerprint to detect automated scripts, emulators, and device cloning attempts, ensuring genuine device usage.

Safeguards: Parameters are encoded into a non-reversible cryptographic checksum, protecting raw hardware telemetry from exposure.

3. Data Storage, Retention & User Rights

  • Security & Encryption: All data transactions are secured using 256-bit SSL/TLS protocol.
  • Retention Period: Pursuant to RBI guidelines, customer records and loan documentation are retained for a minimum of five (5) years following the closure of the credit facility.
  • User Rights: Under the DPDPA 2023, you reserve the right to access, rectify, or request the erasure of your personal data by reaching out to our official contact email.

4. Official Contact Details