Privacy and Security Policy

 

Last updated on: 30th Nov 2022

THIS PRIVACY POLICY (PRIVACY POLICY) SETS FORTH THE MODES OF COLLECTION, USE AND DISCLOSURE OF YOUR INFORMATION GATHERED ON THE PLATFORM. THIS PRIVACY POLICY APPLIES ONLY TO PERSONAL INFORMATION COLLECTED ON THE PLATFORM. THIS PRIVACY POLICY ALSO APPLY TO INFORMATION COLLECTED BY THE COMPANY IN OTHER WAYS, INCLUDING INFORMATION COLLECTED OFFLINE. PLEASE READ THIS PRIVACY POLICY CAREFULLY. BY CONTINUING TO USE THE SERVICES, OR ACCESS THE PLATFORM YOU AGREE TO THIS PRIVACY POLICY. IF YOU DO NOT AGREE TO THIS PRIVACY POLICY, YOU MAY NOT AVAIL THE SERVICES.

By visiting the website, www.rufilo.com (“Website”) or the Rufilo mobile and/or web application (the “App” or “Rufilo”) (collectively, the “Platform”) and availing the services provided by us (“Services”) you agree to be bound by the terms and conditions (“Terms”) of this Privacy Policy

This Privacy & Security Policy explains how we protect the personal data provided through our Platform and how we use that information in connection with our service offered through the Platform

"Personal Information" for purposes of this Policy means information that identifies you, such as your name, address, phone number, or e-mail address. By providing your number at www.rufilo.com, you are authorizing Rufilo & its representatives to give you a call to offer you our services for the product you have opted for, imparting product knowledge, offering promotional offers running on the website. Irrespective of the fact that you have registered yourself under DND or DNC service, you are still authorizing us, our representatives & our partners to communicate with you for the above-mentioned purposes. There is no DNC check required a number you enter while using Rufilo services.

To register with us, you must be 21 years of age or older and Indian residents. Individuals below the age of 21 years and minors are strictly forbidden from using the service.

  1. How does Rufilo collect the information?
    1. Information provided by you with Rufilo

      If you intend to open a loan account with Rufilo, you would be required to provide details like your name, E-mail address, Residential address, Mobile number, PAN number, Aadhar Card, and other such information which may be needed to assess your creditworthiness. Wherever possible, we indicate the mandatory and the optional fields. You always have the option to not provide any information by choosing not to use a particular service or feature on the Platform. We also collect user account data which includes email address and user public profile information like name, photo, ASID depending on the social media or networking platform used by You like Google or Facebook to log-into an app.

      Access to your Registration Information, Account Information, and any other Personal Information you provide is strictly restricted and used only under specific internal procedures and safeguards governing access, to operate, develop or improve the Service. We may also use third-party service providers to help us provide the Service to you, such as sending e-mail messages or SMS on our behalf or hosting and operating a particular feature or functionality of the Service. We require such third parties to maintain the confidentiality of the information we provide to them. If you telephone us, we may also record and monitor calls for quality checks and staff training. Such recordings may also be used to help us combat fraud.

    2. Information that Rufilo collects from your activities

      In order to provide seamless approval and determine instant creditworthiness of customers, we explicitly request for certain permissions after users complete the signup process:

      FINANCIAL SMS

      We collect all SMSs and upload on our Server to monitor the income, track and analyse financial expenses and determine the creditworthiness for instant credit disbursal. The assessment is automated and the SMSs are encrypted. Even though we have access to all SMSs, we do not read, share or store any of your personal SMS data. Also, we do not share your SMS’s data with any third party app or services.

      DEVICE LOCATION

      The information we collect from your device includes the hardware model, build model, RAM, storage; unique device identifiers like Advertising ID; SIM information that includes network operator, WIFI information and mobile network information to uniquely identify the devices and prevent multiple applicants accessing your device to apply for loan offers.

      CAMERA

      We require camera access to take selfie, scan and capture the required KYC documents thereby allowing us to auto-fill relevant fields.

    3. Cookies

      If enabled, we may place cookies on your machine that store small amounts of data on your computer about your visit to any of the pages of this website. Cookies can identify the pages that are being viewed, and this can assist us in tracking which of our features appeal the most to you and what content you may have viewed on past visits.

      These technologies are used in analyzing trends, administering the Site, tracking users' movements around the Site, and to gather demographic information about our user base as a whole. Third-party vendors, including www.google.com ("Google"), may use cookies to serve ads based on your visits to this Website. You may visit the website of the third party and choose to opt-out of the use of cookies for interest-based advertising if the third party offers such an option.

      We use cookies on our website to personalize our service to you. Users can control the use of cookies at the individual browser level. If you reject cookies, you may still use our Site, but your ability to use some features or areas of our Site may be limited. You may refuse to accept cookies by activating the setting on your browser, which allows you to reject the setting of cookies. Unless you have adjusted your browser setting to reject cookies, our system will issue cookies when you log on to the website.

    4. Information sharing with Third parties

      We may use third-party advertising companies and/or ad agencies to serve ads when you visit our website. These companies may use information (excluding your name, address, e-mail address, or telephone number) about your visits to www.rufilo.com to provide advertisements on this Site and other sites about goods and services that may be of interest to you. If you choose to apply for these separate products or services, disclose information to the providers, or grant them permission to collect information about you, then their use of your information is governed by their privacy policies. You should evaluate the practices of these external service providers before deciding to use their services. www.rufilo.com is not responsible for their privacy practices.

  2. How does Rufilo protect your personal details?
    1. We keep your data secure

      We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it. No method of transmission over the Internet, or method of electronic storage, is 100% secure, however. Therefore, we cannot guarantee its absolute security. We use a combination of firewalls, encryption techniques, and authentication procedures, among others, to maintain the safety and security of your online session and to protect www.rufilo.com accounts and systems from unauthorized access.

      Our databases are protected from general employee access, both physically and logically. We encrypt your Service password so that your password cannot be recovered, even by us. All backup drives and tapes also are encrypted. No employee may put any sensitive content on any unsecured machine (i.e., nothing can be taken from the database and put on an insecure laptop).

    2. Encryption and secure communication

      All communications between your computer and www.rufilo.com that contain any personal information are encrypted. This enables client and server applications to communicate in a way that is designed to prevent eavesdropping, tampering, and message forgery.

    3. Login id and password confidentiality

      You are responsible for maintaining the security of your Login ID and Password, and may not provide these credentials to any third party. If you believe they have been stolen or been made known to others, you must contact us immediately at care@rufilo.com We are not responsible if someone else accesses your account through Registration Information they have obtained from you or through a violation by you of this Privacy and Security Policy or the Terms of Use (ToU).

  3. How can Rufilo utilize your information?

    The intended purpose of collecting information provided by you is to

    1. Establish identity and verify the same;
    2. To complete your Video KYC;
    3. Monitor, improve and administer our Platform;
    4. Provide our service i.e. perform credit profiling for the purpose of facilitating loans to You.
    5. Design and offer customized products and services offered by our third party financial partners;
    6. Analyse how the Platform is used, diagnose service or technical problems and maintain security;
    7. Send communications notifications, information regarding the products or services requested by You or process queries and applications that You have made on the Platform;
    8. Manage Our relationship with You and inform You about other products or services We think You might find of some use;
    9. Conduct data analysis in order to improve the Services / Products provided to the User;
    10. Use the User information in order to comply with country laws and regulations;
    11. Conduct KYC for our third party lending partners based on the information shared by the User;
    12. Use the User information in other ways permitted by law to enable You to take financial services from our lending partners.

    We will use and retain the information for such periods as necessary to provide You the Services on the Platform, to comply with our legal obligations, to resolve disputes, and enforce our agreements.

  4. When you share information with Rufilo

    You can review and edit your personal information at any time by logging in to your account on the Website or by contacting the Rufilo support team on care@rufilo.com. If you choose to close your account, your personally identifiable information will not be used by us for any further purposes, nor sold or shared with third parties, except as necessary to prevent fraud and assist law enforcement, as required by law or under this Privacy Policy.

    We do not retain your personal data for longer than required for the purpose for which the information may be lawfully used. At any point in time, users can choose to request for deletion of any Personal Information shared for use of the Platform. However, you may not be able to use our Services at all after such deletion. You can share the request for deletion by contacting the Rufilo support team at care@rufilo.com.

    All other information shall be treated as non-confidential and non-proprietary and Rufilo shall be under no obligation of any kind concerning such information and shall be free to reproduce, use, disclose, and distribute the information to others without limitation. Additionally, Rufilo shall be free to use any ideas, concepts, know-how, or techniques contained in such information for any purpose whatsoever, including, but not limited to, developing or marketing services incorporating such information.

    There is no legal obligation to destruct the data from the server upon you closing the account or non-usage of our services from your end. The data will be retained securely on our server and shall help Rufilo:

    1. To comply with legal duties and requirements, either statutory or regulatory;
    2. To avoid liability through "spoliation," the improper destruction or alteration of documents in a litigation situation;
    3. To support or oppose a position in an investigation or litigation;
    4. To protect from unnecessary expense and time during discovery;
    5. To maintain control over discovery and e-discovery, and
    6. To keep documents confidential and avoid leakage to attackers or competitors.
    7. To enforce our Terms and Conditions
  5. LINK TO THIRD-PARTY SDK

    The App has a link to a registered third party SDK which collects data on our behalf and data is stored to a secured server to perform a variety of services such as analyzing your in-app actions, serving retargeting ads, do location based targeting on social media accounts, deliver personalized push notifications, perform credit assessment based your information. We share limited information such as Device IDs, Android IDs, Page status, Location, Workflow events with analytics and marketing service providers who may use it to serve targeted, contextual ads to you. We ensure that our third party service provider takes extensive security measures in order to protect your personal information against loss, misuse or alteration of the data.

    We follow generally accepted standards to protect the personal information submitted to us, both during transmission and once we receive it using secure cryptographic techniques over HTTPS APIs. However, no method of transmission over the Internet, or method of electronic storage, is 100% secure. Therefore, we cannot guarantee its absolute security. We use a combination of firewalls, encryption techniques and authentication procedures, among others, to maintain the security of your online session and to protect https://rufilo.com accounts and systems from unauthorized access.

    Furthermore, our registered third party service provider provides hosting security – they use industry-leading anti-virus, anti-malware, intrusion prevention systems, intrusion detection systems, file integrity monitoring, and application control solutions.

    We do not sell or misuse your data. We do not share your personal identifiable information and Government IDs such as PAN, Aadhaar Card, VID number with these 3rd parties. We also don't allow unauthorized access to your non-public personal contacts or financial transaction SMS data with any 3rd party.

  6. YOUR RIGHTS REGARDING THE DATE
    Right to rectification

    In the event that any personal data provided by you is inaccurate, incomplete or outdated then you shall have the right to provide us with the accurate, complete and up to date data and have us rectify such data at our end immediately. We urge you to ensure that you always provide us with accurate and correct information/data to ensure your use of our Services is uninterrupted.

    Right to withdraw consent

    To prevent further sharing of your data, you can also uninstall the app. Your device may have controls that determine what information we collect. For example, you can modify permissions on your Android device for access to Camera or Audio permissions.

    Marketing Opt-Out

    We may email or send push notifications to you from time to time about our latest offerings and updates. You may opt out of receiving such promotional emails from us by writing to us. You may also opt out of receiving emails and other messages from us by following the unsubscribe instructions in those messages. However, even if you have opted out of receiving information from us, we will still send non-promotional communications, such as repayment reminders and loan approvals message etc.

    You can opt out of receiving push notifications through your device settings. Please note that opting out of receiving push notifications may impact your use of the App.

  7. Contact Information

    We and our Lending Partner have appointed a data grievance officer. Our data grievance officer is: Suraj S, accessible via email at: care@rufilo.com. You can contact the officer confidentially by email to enquire about the treatment of your data by us or our Lending Partner.