Data Policy

Last Updated: 29 September 2026

This Data Policy describes the principles and practices followed by Rkare Technology Services Pvt Ltd, operating the LoansTech platform, for the collection, processing, storage, access, sharing, protection, retention and deletion of customer and business data.

This policy applies to information processed through the LoansTech website, WhatsApp services, customer relationship management systems, loan enquiry processes, internal business systems and associated service channels.

1. Data Processing Principles

LoansTech aims to process personal and business information according to the following principles:

2. Sources of Data

LoansTech may receive information through:

3. Categories of Data

3.1 Customer Identification and Contact Data

3.2 Loan and Financial Data

3.3 Vehicle Data

For vehicle finance and related services, LoansTech may process information including:

3.4 Customer Documents

Depending on the financial service requested and the requirements of the applicable bank, NBFC or other service provider, LoansTech may collect or process supporting documents including:

LoansTech does not require an Income Tax Return (ITR) document as part of its standard document collection described in this policy. Documentation requirements may vary depending on the bank, NBFC, financial institution or other service provider processing the application.

3.5 Technical and System Data

LoansTech systems may process technical information required for security, operation, troubleshooting and service delivery, including:

4. WhatsApp Data Processing

LoansTech uses WhatsApp as one of its customer communication and enquiry channels. Customers may communicate with LoansTech, receive service-related messages and complete structured WhatsApp Flows.

Information processed through WhatsApp may include:

Information submitted through WhatsApp may be automatically transmitted through secure application interfaces and webhooks to the LoansTech CRM or other authorized internal systems for processing and customer service.

5. Purpose of Data Processing

LoansTech processes information for purposes including:

6. CRM and Internal Processing

Customer information received through the LoansTech website, WhatsApp, telephone, email or other approved channels may be stored and managed through LoansTech's customer relationship management systems.

CRM records may contain:

Access to CRM information should be limited to authorized personnel who require the information for legitimate business functions.

7. Sharing with Banks, NBFCs and Financial Institutions

Where required to provide the service requested by the customer, LoansTech may share relevant information with selected:

Information shared will depend on the financial product, eligibility requirements and documentation requirements of the applicable service provider.

Such information may be used by the receiving institution to assess eligibility, conduct verification, perform KYC or other required checks, process applications, make credit decisions and provide the requested financial service.

Banks, NBFCs and other financial institutions are independent organizations and may process customer information under their own privacy policies, data policies, regulatory obligations and internal procedures.

8. Other Third-Party Service Providers

LoansTech may use authorized third-party service providers to support its technology and business operations. These may include:

Such providers should receive access only to information reasonably required to provide their applicable service.

9. Data Access Control

LoansTech seeks to restrict access to personal and financial information based on legitimate operational requirements.

Depending on the system and business function, access controls may include:

Employees and authorized representatives should access customer information only when necessary for their assigned responsibilities.

10. Data Security

LoansTech uses reasonable technical and organizational safeguards designed to protect information against unauthorized access, disclosure, alteration, destruction, loss or misuse.

Depending on the relevant system, safeguards may include:

Although LoansTech takes reasonable measures to protect information, no electronic communication, internet transmission or data-storage system can be guaranteed to be completely secure.

11. Data Accuracy

Customers are responsible for providing information that is accurate and reasonably up to date.

Where a customer identifies inaccurate or outdated information, the customer may contact LoansTech to request an appropriate correction or update.

12. Data Retention

LoansTech retains customer information only for as long as reasonably necessary for the purpose for which the information was collected or subsequently processed.

Retention requirements may depend on:

When information is no longer reasonably required, it may be deleted, anonymized or securely archived, subject to applicable retention obligations.

13. Data Deletion

Customers may request deletion of eligible personal information maintained by LoansTech.

Data deletion requests may be submitted to:

business@loanstech.in

Customers should provide sufficient information to identify the relevant account, enquiry or application. This may include the registered mobile or WhatsApp number.

LoansTech may verify the identity of the requester before processing a deletion request.

Information may be retained where retention is reasonably necessary for:

14. Data Correction and Update

Customers may request correction or updating of inaccurate personal information by contacting LoansTech.

LoansTech may request appropriate verification before making material changes to customer records.

15. Consent and Customer Choice

Where consent is required for a particular processing activity, LoansTech may obtain consent through website forms, WhatsApp, electronic communication, written communication or another appropriate mechanism.

Customers may withdraw consent for processing that depends on consent, subject to applicable legal, regulatory and contractual requirements.

Withdrawal of consent may affect LoansTech's ability to continue processing a loan enquiry or provide a requested service where the relevant information is necessary for that service.

16. WhatsApp Communication and Opt-Out

Customers who initiate communication with LoansTech through WhatsApp may receive responses relating to their enquiry, application or requested service.

Where applicable, customers may request that non-essential WhatsApp communications be stopped by replying with an appropriate opt-out request or by contacting LoansTech.

Certain service-related communications may still be necessary while an active enquiry, application or service request is being processed.

17. Automated Data Transfer and Webhooks

LoansTech may use APIs, webhooks and other automated integration mechanisms to transfer information between authorized systems.

For example, information submitted through a LoansTech WhatsApp Flow may be securely transmitted through Meta's WhatsApp Business Platform to a LoansTech server and CRM system.

Such automated processing may be used to:

18. Data Minimization

LoansTech seeks to collect information that is reasonably relevant to the requested service.

The information and documents required may differ depending on the loan product, customer profile, bank, NBFC or other financial service provider.

Customers should avoid submitting unnecessary sensitive information that has not been requested for the applicable service.

19. Internal Responsibilities

Personnel with access to customer information are expected to:

20. Data Incidents

Where LoansTech becomes aware of a suspected unauthorized disclosure, loss or security incident involving customer information, the incident may be investigated and appropriate containment, remediation and security measures may be taken.

Where notification is required under applicable law or regulation, LoansTech will take reasonable steps to provide the required notification to affected parties or competent authorities.

21. Legal and Regulatory Disclosure

LoansTech may preserve or disclose information where reasonably necessary to:

22. Customer Rights

Subject to applicable law and legitimate retention requirements, customers may contact LoansTech regarding:

23. Changes to this Data Policy

LoansTech may update this Data Policy periodically to reflect changes to its technology, services, internal processes, financial-service relationships or applicable legal and regulatory requirements.

The current version will be made available through the LoansTech website. The "Last Updated" date at the top of this policy identifies the latest revision.

24. Relationship with the Privacy Policy

This Data Policy should be read together with the LoansTech Privacy Policy.

The Privacy Policy explains how personal information is collected, used, shared, retained and protected in connection with LoansTech services, while this Data Policy provides additional information regarding LoansTech's operational approach to data management, system processing and information governance.

Where customer information is processed by a bank, NBFC, financial institution or another independent service provider, that organization's own privacy and data-handling practices may also apply.

25. Third-Party Websites and Services

LoansTech services may contain links to or interact with third-party websites, applications, communication platforms, banks, NBFCs or other financial service providers.

LoansTech does not control the independent data practices of third-party organizations. Customers are encouraged to review the applicable privacy policies and terms of those organizations before providing information directly to them.

26. Data Processing Through Meta and WhatsApp

LoansTech uses WhatsApp Business services provided through Meta platforms for customer communication, enquiry management and structured data collection.

A customer may voluntarily initiate a conversation with LoansTech through WhatsApp or interact with a LoansTech WhatsApp message, template or Flow.

Depending on the interaction, Meta's WhatsApp Business Platform may transmit information to LoansTech systems, including:

LoansTech may process this information through its servers, APIs, webhooks and CRM systems to provide the requested service, maintain customer records and manage communications.

Use of WhatsApp is also subject to the applicable terms and privacy practices of WhatsApp and Meta.

27. WhatsApp Flow Data

LoansTech may use WhatsApp Flows to allow customers to provide structured information relating to loan enquiries and financial service requirements.

Information submitted through a LoansTech WhatsApp Flow may include:

Submitted Flow information may be automatically transferred to the LoansTech CRM and associated with the customer's WhatsApp number for enquiry processing and follow-up.

28. Customer Documents and Sensitive Information

Certain financial services may require customers to provide identity, financial or vehicle-related documentation. Such documents may contain personal or sensitive information.

LoansTech will request such documentation only where reasonably required for the requested service or by the relevant bank, NBFC or other financial service provider.

Customers should submit documents only through communication channels or processes authorized by LoansTech.

LoansTech does not require customers to provide passwords, ATM PINs, UPI PINs, card PINs, internet-banking passwords or one-time passwords (OTPs) used to authorize financial transactions.

Customers should never disclose such authentication credentials to LoansTech employees, representatives or third parties claiming to act on behalf of LoansTech.

29. Credit and Eligibility Information

Information provided through LoansTech regarding income, employment, CIBIL range, existing loans or repayment history may be used to assist with preliminary eligibility assessment and to identify potentially suitable financial service providers.

Information entered by a customer into a LoansTech enquiry or WhatsApp Flow does not itself constitute an official credit assessment or guarantee of loan approval.

Final eligibility, credit assessment, applicable interest rates, loan amount, repayment terms and approval decisions are determined by the applicable bank, NBFC or financial institution according to its own policies and regulatory requirements.

30. Data Transfer Between Authorized Systems

LoansTech may transfer information between authorized internal systems and approved technology services where necessary for business operations.

For example:

LoansTech seeks to limit such transfers to information reasonably necessary for the applicable purpose.

31. Data Processing Records

LoansTech systems may maintain operational records relating to the processing of customer information. These records may include:

Such information may be used for customer service, operational management, security, troubleshooting, audit and compliance purposes.

32. Data Backup and Recovery

LoansTech may maintain backups of business and customer data as part of reasonable business continuity, disaster recovery and security practices.

Backup information may remain available for a limited period after information is removed from active systems. Backup data will ordinarily be removed or overwritten according to applicable backup retention procedures unless longer retention is required for legal, regulatory or security reasons.

33. Data Deletion from Integrated Systems

Where a valid data deletion request is approved, LoansTech will take reasonable steps to remove or anonymize eligible personal information from systems under its control.

Where information has already been lawfully transferred to a bank, NBFC, financial institution or other independent service provider, that organization may maintain the information according to its own legal obligations, retention requirements and privacy policies.

Customers may therefore need to contact the relevant third-party organization separately regarding information held independently by that organization.

34. Business Continuity

LoansTech may maintain reasonable technical and operational procedures intended to support continued availability of important business systems and recovery following service interruptions, system failures or other incidents.

Such procedures may include backups, infrastructure monitoring, recovery procedures and controlled administrative access.

35. Complaints and Data-Related Concerns

Customers may contact LoansTech regarding concerns about the collection, use, disclosure, correction, retention or deletion of their information.

When submitting a complaint or request, customers should provide sufficient information to allow LoansTech to identify the relevant enquiry and understand the issue.

LoansTech may request reasonable identity verification before disclosing, modifying or deleting personal information.

36. Contact for Data and Privacy Requests

Questions, requests or complaints relating to this Data Policy, the LoansTech Privacy Policy or the processing of personal information may be submitted using the contact information below.

LoansTech
Operated by Rkare Technology Services Pvt Ltd

Silpakalakendram Building,
East Kadugaloor,
U C College PO,
Aluva, Ernakulam - 683102,
Kerala, India

Email: business@loanstech.in

Phone: +91 93490 93496

Website: https://loanstech.in/

Contact Page: https://loanstech.in/contact/

37. Effective Date

This Data Policy is effective from 29 September 2026 and remains effective until replaced or updated by Rkare Technology Services Pvt Ltd.