Privacy Policy

1. Introduction

Welcome to Dhan Vitta. Dhan Vitta Private Limited ("Dhan Vitta", "we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Dhan Vitta mobile application and related services.

This Policy is published in compliance with the Digital Personal Data Protection Act, 2023 (DPDPA), the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Reserve Bank of India's Digital Lending Guidelines, September 2022.

Dhan Vitta acts solely as a Lending Service Provider (LSP). Loans are issued by our NBFC partner(s), who are registered with the Reserve Bank of India. By using our services, you consent to the data practices described in this Policy.

2. Information We Collect

We collect only the information necessary to provide our lending facilitation services. The following categories of data may be collected:

Category	Data Points	Purpose
Personal Information	Full name, date of birth, gender, email address, mobile number, PAN number, Aadhaar number (masked)	Identity verification, KYC compliance, loan processing
Financial Information	Bank account number, IFSC code, income details, employment information, salary slips, bank statements	Credit assessment, loan disbursement, repayment
Device Information	Device ID, operating system version, app version, device model	Security, fraud detection, technical support
Camera Access	Used to capture KYC documents and selfie for liveness detection	Identity verification (KYC), fraud prevention
Usage Data	App navigation patterns, feature usage (anonymised)	Product improvement

What we do NOT collect: We do not access, collect, or store your phone contacts list, call logs, microphone recordings, or any data not listed above. We never read your phonebook.

3. How We Use Your Information

Your information is used exclusively for the following purposes:

• To process your loan application and assess creditworthiness in partnership with our NBFC partner(s)
• To verify your identity through KYC procedures as required by RBI regulations
• To facilitate loan disbursement and repayment via our NBFC partner(s)
• To communicate with you regarding your application, loan account, and EMI reminders
• To comply with applicable laws, regulations, and regulatory reporting requirements
• To prevent fraud, money laundering, and ensure platform security
• To improve our services and user experience (using anonymised, aggregated data only)
• To send you service-related notifications (you may opt out of marketing communications at any time)

We will not use your data for any purpose other than those listed above without obtaining fresh explicit consent from you.

4. Information Sharing

We share your data only to the extent necessary for loan processing and regulatory compliance. Your data may be shared with:

• NBFC Partner(s): All credit decisions and loan disbursements are made by our RBI-registered NBFC partner(s). Your full application data is shared with them for underwriting.
• Credit Information Companies (CICs): Equifax, Experian, CRIF High Mark, and CIBIL TransUnion — for credit enquiries and reporting of your repayment behaviour, as required by RBI.
• eKYC / eSign Service Providers: UIDAI-authorised partners (e.g., Digio, Signzy) — for Aadhaar-based identity verification and electronic signing.
• Payment Gateway: RBI-authorised payment aggregator — for EMI collections via NACH / UPI / Net Banking.
• Cloud / Technology Providers: Operational service providers bound by confidentiality obligations. All data processed in India only.
• Legal / Regulatory Authorities: Courts, law enforcement, or regulators when required by law, court order, or regulatory direction.

We do not sell your personal data to any third party for marketing or commercial purposes.

5. Data Security and Storage

We implement industry-standard technical and organisational measures to protect your personal information, including encryption in transit (TLS 1.2 / TLS 1.3), encryption at rest (AES-256), sensitive field tokenisation, RBAC access controls, and periodic security testing.

Data Localisation — India-Only Storage: All personal data, financial data, and transactional records of Dhan Vitta users are stored exclusively on servers physically located in India (AWS ap-south-1 region, Mumbai). No personal data is transferred outside India.

6. Your Rights under DPDPA 2023

As a data principal under the Digital Personal Data Protection Act, 2023, you have rights including access, correction, erasure (subject to legal/loan obligations), withdrawal of consent, nomination, and grievance redressal.

To exercise these rights, email grievance@dhanvitta.co.in or use the Help & Grievance section in the app.

7. User Consent

We collect consent explicitly at onboarding and via separate consent screens for KYC. Marketing communications require a separate opt-in.

8. Data Retention

We retain data only as long as required for service delivery and legal/regulatory compliance, including KYC and loan records (minimum 8 years from loan closure), transaction records (minimum 5 years), and audit logs (minimum 5 years).

9. Cookies and Tracking

The Dhan Vitta mobile app does not use browser cookies. We may use anonymised, aggregated analytics to understand app usage patterns.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified via the app and by updating the “Last Updated” date.

11. Contact Us & Grievance Officer

If you have any questions, concerns, or complaints, please contact our Grievance Officer at grievance@dhanvitta.co.in.

Name	Grievance Officer, Dhan Vitta Private Limited
Email	grievance@dhanvitta.co.in
Phone	+91 85956 00123 (Mon–Sat, 9:00 AM – 6:00 PM IST)
Address	Dhan Vitta Private Limited, [Registered Office Address], Haryana, India
Response Time	Within 7 working days of receipt of complaint