Privacy Policy & UIDAI Consent Terms
Commitment to user data protection, DigiLocker e-KYC compliance, and RBI Digital Lending data localization mandates.
1. Scope & Commitment to Privacy
Udaann Capital NBFC Limited values customer trust and is committed to protecting your sensitive personal data and financial information. This policy governs how we collect, process, store, and safeguard your data during loan application, credit bureau assessment, and account lifecycle management in compliance with the Digital Personal Data Protection (DPDP) Act, 2023 and RBI Digital Lending Directions.
2. Data Collection (Need-Based Only)
Full legal name, mobile number, email, PAN card number, and paperless DigiLocker Aadhaar XML verification with explicit OTP consent.
Bank account number, IFSC code, account holder name, and penny drop verification status for direct disbursement and NACH auto-debits.
3. Zero Intrusive Device Access (Strict RBI Compliance)
In adherence to statutory RBI Digital Lending Guidelines, Udaann Capital:
- DOES NOT access or collect your mobile contacts or phonebook.
- DOES NOT read personal SMS or call log histories.
- DOES NOT access photos, videos, or media storage files.
- DOES NOT track continuous background biometric location.
4. UIDAI Aadhaar e-KYC Consent Terms
By submitting your Aadhaar details, you provide voluntary and explicit consent to Udaann Capital NBFC Ltd. to access your basic identity details via authorized DigiLocker / UIDAI API gateways solely for digital KYC identification.
Masking & Security: As required by UIDAI regulations, full 12-digit Aadhaar numbers are never permanently stored in unencrypted form. Only masked Aadhaar (last 4 digits visible) is retained in encrypted databases for statutory audit trails.
5. Data Storage & Domestic Localization
All customer data, KYC records, loan agreements, and transaction audit trails are hosted on ISO 27001 certified secure cloud servers located strictly within the sovereign territory of the Republic of India. No customer financial or KYC data is transmitted or stored outside India.