Home
Privacy and Policy
Privacy and Policy
Privacy Policy
Effective Date: April 20, 2026 |
Last Updated: April 2026
This Privacy Policy ("Policy") governs the collection, storage, use, disclosure, and protection of your personal and financial data by Agarwal Assignments Pvt. Ltd. ("Company", "we", "us", "our"), the entity operating the website www.easyrupeeloan.com and its associated digital lending application ("Platform"). This Policy applies to all visitors, users, and borrowers who access or use our Platform or any of our financial products and services.
We are committed to protecting your privacy in accordance with the RBI (Digital Lending) Directions, 2025, the Digital Personal Data Protection Act (DPDPA), 2023, the Information Technology Act, 2000 and all applicable rules and regulations issued by the Reserve Bank of India (RBI) from time to time.
By accessing the Platform or applying for a loan, you confirm that you have read, understood, and agreed to the terms of this Policy. If you do not agree, please discontinue the use of our Platform and Services immediately.
1. Who We Are
Agarwal Assignments Pvt. Ltd.
Website: www.easyrupeeloan.com
We operate as a Lending Service Provider (LSP) / Digital Lending Application (DLA) in association with our partner Regulated Entity (RE) — a bank or Non-Banking Financial Company (NBFC) registered and regulated by the Reserve Bank of India. All loans are sourced, approved, and disbursed by our partner RE. The identity and details of the Regulated Entity are disclosed to you at the time of loan application and in your Key Fact Statement (KFS).
Website: www.easyrupeeloan.com
We operate as a Lending Service Provider (LSP) / Digital Lending Application (DLA) in association with our partner Regulated Entity (RE) — a bank or Non-Banking Financial Company (NBFC) registered and regulated by the Reserve Bank of India. All loans are sourced, approved, and disbursed by our partner RE. The identity and details of the Regulated Entity are disclosed to you at the time of loan application and in your Key Fact Statement (KFS).
2. Information We Collect
We collect only that information which is strictly necessary ("need-based") for processing your loan application and delivering our services. Data collection is carried out with your prior, explicit consent and a maintained audit trail, as required under Para 12 of the RBI (Digital Lending) Directions, 2025. The categories of information we may collect are:
a) Personal Identification Information:
Full name, date of birth, PAN number, Aadhaar number (for KYC purposes as permitted by law), gender, photograph, and residential address.
Full name, date of birth, PAN number, Aadhaar number (for KYC purposes as permitted by law), gender, photograph, and residential address.
b) Contact Information:
Mobile number, email address, and communication preferences.
Mobile number, email address, and communication preferences.
c) Financial Information:
Bank account details (account number, IFSC code), income details, employment information, existing loan obligations, credit bureau reports (CIBIL / Experian / CRIF / Equifax), and bank statements as required for credit assessment.
Bank account details (account number, IFSC code), income details, employment information, existing loan obligations, credit bureau reports (CIBIL / Experian / CRIF / Equifax), and bank statements as required for credit assessment.
d) Transaction Information:
Loan application details, disbursement records, repayment history, outstanding balances, and account statements.
Loan application details, disbursement records, repayment history, outstanding balances, and account statements.
e) Technical & Device Information:
IP address, device type, operating system, browser type, and application usage logs collected for security, fraud prevention, and service improvement purposes.
IP address, device type, operating system, browser type, and application usage logs collected for security, fraud prevention, and service improvement purposes.
f) Location Data (One-Time, with Consent):
We may request one-time access to your device location solely for on-boarding / KYC verification purposes, with your explicit consent. We do not track your location continuously.
We may request one-time access to your device location solely for on-boarding / KYC verification purposes, with your explicit consent. We do not track your location continuously.
g) Camera / Microphone (One-Time, with Consent):
Access to your device camera or microphone may be requested one time, solely for KYC document capture (e.g., selfie, Aadhaar/PAN photo), with your explicit consent before access is granted.
Access to your device camera or microphone may be requested one time, solely for KYC document capture (e.g., selfie, Aadhaar/PAN photo), with your explicit consent before access is granted.
3. What We Do NOT Access
In strict compliance with RBI (Digital Lending) Directions, 2025 (Para 12), our Platform does not access, store, or transmit:
- Your mobile phone contact list or address book
- Call logs or telephony functions
- Photos, media files, or file storage beyond document capture for KYC
- SMS messages or notifications
- Biometric data (fingerprints, facial recognition data), unless expressly required and permitted by applicable law
- Social media data without your express consent
4. How We Use Your Information
Your information is used exclusively for the following purposes:
- Processing and evaluating your loan application
- Verifying your identity and conducting KYC as required by RBI and PMLA regulations
- Assessing your creditworthiness in partnership with our Regulated Entity partner
- Disbursing approved loan amounts directly to your registered bank account
- Sending you loan documents, Key Fact Statement (KFS), sanction letters, repayment schedules, and account statements via registered email/SMS
- Managing repayments, sending payment reminders, and processing collections
- Reporting loan information to Credit Information Companies (CICs) such as CIBIL, Experian, CRIF, and Equifax, as mandated by the Credit Information Companies (Regulation) Act, 2005
- Complying with legal, regulatory, and statutory obligations
- Preventing fraud, unauthorized access, and financial crime
- Improving our Platform and services based on anonymized usage analytics
- Communicating product updates, service notifications, and alerts relevant to your account
We do not use your personal data for unsolicited marketing, profiling for third-party advertising, or any purpose not disclosed in this Policy.
5. Legal Basis for Processing Your Data
We process your personal data on the following legal bases under the DPDPA, 2023:
- Consent: You provide free, specific, informed, and unambiguous consent at the time of on-boarding and before any data collection or permission is sought.
- Contractual Necessity: Processing is necessary to perform the loan agreement or to take steps at your request before entering into such agreement.
- Legal Obligation: Processing is required to comply with applicable laws, RBI directions, and orders of courts or statutory authorities.
- Legitimate Interest: For fraud detection, security, and service improvement, subject to your privacy rights not being overridden.
6. Sharing of Your Information
We may share your information with the following parties, strictly on a need-to-know basis and subject to appropriate data protection agreements:
a) Our Regulated Entity (RE) Partner:
The partner bank/NBFC that extends the loan to you. All loan-related data is shared with the RE for credit appraisal, disbursement, and account management. The RE's identity is disclosed in your KFS and sanction letter.
The partner bank/NBFC that extends the loan to you. All loan-related data is shared with the RE for credit appraisal, disbursement, and account management. The RE's identity is disclosed in your KFS and sanction letter.
b) Credit Information Companies (CICs):
Loan details are reported to CICs (CIBIL, Experian, CRIF, Equifax) as required under the Credit Information Companies (Regulation) Act, 2005. This may affect your credit score.
Loan details are reported to CICs (CIBIL, Experian, CRIF, Equifax) as required under the Credit Information Companies (Regulation) Act, 2005. This may affect your credit score.
c) KYC / Identity Verification Agencies:
Data shared with UIDAI (Aadhaar), NSDL/UTIITSL (PAN), DigiLocker, or other authorized KYC entities solely for identity verification.
Data shared with UIDAI (Aadhaar), NSDL/UTIITSL (PAN), DigiLocker, or other authorized KYC entities solely for identity verification.
d) Payment Service Providers:
For processing loan disbursements and repayments via NACH, UPI, IMPS, or other RBI-authorized payment channels.
For processing loan disbursements and repayments via NACH, UPI, IMPS, or other RBI-authorized payment channels.
e) Technology & Cloud Service Providers:
Third-party vendors providing hosting, data analytics, SMS, or email services, bound by strict data processing agreements ensuring compliance with this Policy.
Third-party vendors providing hosting, data analytics, SMS, or email services, bound by strict data processing agreements ensuring compliance with this Policy.
f) Recovery Agents (in case of default):
If your loan account becomes overdue, details of the assigned recovery agent (name and contact details) will be communicated to you via email/SMS before any contact is made, in accordance with RBI directions.
If your loan account becomes overdue, details of the assigned recovery agent (name and contact details) will be communicated to you via email/SMS before any contact is made, in accordance with RBI directions.
g) Regulatory & Law Enforcement Authorities:
Where required by law, court order, RBI, SEBI, Income Tax authorities, or any other competent regulatory or statutory authority.
Where required by law, court order, RBI, SEBI, Income Tax authorities, or any other competent regulatory or statutory authority.
We do not sell, rent, or trade your personal data to any third party for commercial or marketing purposes.
7. Data Storage, Retention & Deletion
Storage Location: All personal data is stored exclusively on servers located within India. If any data is processed overseas (e.g., through international cloud services), it is deleted from such foreign servers and restored to India-based servers within 24 hours, in compliance with RBI (Digital Lending) Directions, 2025 (Para 13).
Retention Period: We retain your personal data for as long as is necessary to fulfil the purposes outlined in this Policy, or as required by applicable law, whichever is longer. Typically:
- KYC documents: 5 years from the date of closure of account/relationship, as per PMLA rules.
- Loan records: 8 years from closure of loan account, or as directed by RBI/courts.
- Application data (rejected/cancelled): 2 years from date of rejection.
Data Deletion: Upon expiry of the retention period, or upon receipt of a verified deletion request (where legally permissible), your data will be securely deleted or anonymized in accordance with our data destruction protocols.
Biometric Data: We do not collect or store biometric data unless expressly required and permitted by applicable law.
8. Your Rights as a Data Principal (Borrower)
Under the Digital Personal Data Protection Act (DPDPA), 2023 and RBI guidelines, you have the following rights:
- Right to Access: Request information about what personal data we hold about you and how it is used.
- Right to Correction: Request correction of inaccurate or incomplete personal data.
- Right to Erasure: Request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, subject to legal retention obligations.
- Right to Withdraw Consent: Withdraw your consent at any time. Please note that withdrawal of consent may affect your ability to use certain services or complete an in-progress loan application.
- Right to Grievance Redressal: Lodge a complaint with our Nodal Grievance Redressal Officer (details below).
- Right to Nominate: Nominate another individual to exercise your rights in the event of death or incapacity.
9. Data Security
We implement industry-standard technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction. These measures include, but are not limited to:
- Encryption of data in transit (TLS/SSL) and at rest (AES-256)
- Multi-factor authentication for internal systems
- Regular security audits and vulnerability assessments
- Strict access controls based on the principle of least privilege
- Employee training on data privacy and security
- Incident response and data breach notification procedures
10. Cookies and Tracking Technologies
Our website uses cookies and similar tracking technologies (including Google Analytics and Meta Pixel as disclosed below) to improve user experience, analyze site traffic, and serve relevant advertisements. You may control cookie preferences through your browser settings. Essential cookies necessary for the functioning of the website cannot be disabled.
Analytics: We use Google Analytics (Google LLC) to collect anonymized data about website usage patterns. Data collected is governed by Google's Privacy Policy.
Advertising Pixel: We use Meta Pixel (Meta Platforms, Inc.) to measure the effectiveness of our advertising campaigns. No personally identifiable financial information is shared with Meta for advertising purposes.
You may opt out of interest-based advertising by visiting aboutads.info.
Advertising Pixel: We use Meta Pixel (Meta Platforms, Inc.) to measure the effectiveness of our advertising campaigns. No personally identifiable financial information is shared with Meta for advertising purposes.
You may opt out of interest-based advertising by visiting aboutads.info.
11. Links to Third-Party Websites
Our Platform may contain links to third-party websites or services. We are not responsible for the privacy practices or content of such third-party sites. We encourage you to read the privacy policies of any third-party websites you visit. This Policy applies solely to information collected by our Platform.
12. Grievance Redressal
In compliance with RBI (Digital Lending) Directions, 2025 (Para 11), we have appointed a Nodal Grievance Redressal Officer to address complaints and concerns related to your data and loan services.
Nodal Grievance Redressal Officer
Name: Mr. Ashwani Mahajan
Designation: Grievance Redressal Officer
Email: grievance@easyrupeeloan.com
Phone: +917428916207
Address: B-1/628, First Floor, Janakpuri, New Delhi-110058
Working Hours: Monday to Saturday, 10:00 AM – 6:00 PM IST (except public holidays)
Name: Mr. Ashwani Mahajan
Designation: Grievance Redressal Officer
Email: grievance@easyrupeeloan.com
Phone: +917428916207
Address: B-1/628, First Floor, Janakpuri, New Delhi-110058
Working Hours: Monday to Saturday, 10:00 AM – 6:00 PM IST (except public holidays)
We will endeavour to resolve your complaint within 30 days of receipt. If your complaint is not resolved to your satisfaction or remains unanswered within 30 days, you may escalate it through:
- RBI Complaint Management System (CMS): cms.rbi.org.in
- RBI Sachet Portal (for reporting unauthorised lending): sachet.rbi.org.in
- RBI Integrated Ombudsman Scheme: Available via the CMS portal or by writing to the RBI's Ombudsman office in your region.
13. Minors
Our Services are intended solely for adults aged 18 years and above. We do not knowingly collect personal data from minors. If we become aware that personal data of a minor has been collected without verified parental/guardian consent, we will delete such data immediately.
14. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, regulatory requirements, or technology. Any material changes will be notified to you via a prominent notice on our Platform or by email/SMS to your registered contact details. The updated Policy will be effective from the date it is published on our website. Continued use of our Platform after the updated Policy is published constitutes your acceptance of the revised terms.
15. Governing Law
This Policy is governed by and construed in accordance with the laws of India. Any disputes arising under this Policy shall be subject to the exclusive jurisdiction of the courts in Delhi, India.
16. Contact Us
For any queries, requests, or concerns related to this Privacy Policy or your personal data, please contact:
Website: www.easyrupeeloan.com
Email: grievance@easyrupeeloan.com
Phone: +91 7428916207
Registered Address: B-1/628, First Floor, Janakpuri, New Delhi-110058
Email: grievance@easyrupeeloan.com
Phone: +91 7428916207
Registered Address: B-1/628, First Floor, Janakpuri, New Delhi-110058
This Privacy Policy has been prepared in compliance with the RBI (Digital Lending) Directions, 2025; Digital Personal Data Protection Act (DPDPA), 2023; Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011; and Google Ads Financial Products and Services Policy. It applies to all users of www.easyrupeeloan.com and its associated digital lending application.
