Privacy Policy

RupeeCollect (“we”, “our”, “us”) is a cloud-based loan collection management platform operated from Coimbatore, Tamil Nadu, India. We provide software services to NBFCs, microfinance institutions, and private finance businesses.

This Privacy Policy applies to all users of our web application, mobile application, and related services.

Account Information: When you register, we collect your company name, owner name, email address, mobile number, and city/district.

Business Data: Data you enter into the platform, including customer (member) details, loan records, collection entries, and employee information. This data belongs to your company.

Usage Data: Information about how you use the Service, including login times, features accessed, and actions performed. This helps us improve the platform.

Device and Technical Data: IP address, browser type, operating system, and device identifiers for security and analytics purposes.

Payment Data: Subscription payment records. We do not store card numbers or UPI credentials — these are processed by our payment gateway partner.

We use the information collected to:

• Provide, operate, and improve the RupeeCollect Service
• Send account-related communications (OTP, credentials, renewal reminders)
• Process subscription payments and issue invoices
• Provide customer support and respond to queries
• Detect, investigate, and prevent fraudulent or unauthorized use
• Comply with legal obligations under Indian law
• Send product updates and feature announcements (you can opt out)

We do not use your business data (customer records, loan data) for any purpose other than providing the Service to you.

You retain full ownership of all customer and financial data you input into the platform. RupeeCollect acts as a data processor on your behalf.

As the data controller, you are responsible for:

• Ensuring you have a lawful basis (such as customer consent) to store personal data on a third-party cloud platform
• Informing your customers that their data may be stored digitally
• Complying with applicable data protection regulations relevant to your business

We do not sell, rent, or share your personal data or business data with third parties for marketing purposes.

We may share information in limited circumstances:

• Service Providers: Trusted third parties who assist us in operating the platform (e.g., cloud hosting, email delivery, payment processing). They are bound by confidentiality obligations.
• Legal Requirements: When required by law, court order, or government authority in India.
• Business Transfer: In the event of a merger or acquisition, data may be transferred to the new entity, subject to the same privacy protections.

We implement industry-standard security measures to protect your data:

• All data is transmitted over HTTPS (TLS encryption)
• Passwords are hashed using bcrypt — we never store plaintext passwords
• Database access is restricted and monitored
• Regular security reviews and updates

Despite these measures, no system is 100% secure. In the event of a data breach that affects your data, we will notify you within 72 hours of becoming aware of it.

Active accounts: Data is retained for as long as your subscription is active.

After expiry: Data is retained for 30 days after subscription expiry, during which you can export or renew. After 30 days, all data is permanently and irreversibly deleted.

Account deletion: If you request account deletion, all your data will be deleted within 30 days.

Our web application uses browser local storage to remember your theme preference (light/dark mode) and language setting. We do not use third-party tracking cookies.

Our mobile application uses secure device storage (Expo SecureStore) to store your authentication session and language preference.

You have the right to:

• Access: Request a copy of the personal data we hold about your account
• Correction: Update inaccurate account information via your profile settings
• Deletion: Request deletion of your account and all associated data
• Portability: Export your business data in a standard format (CSV)
• Opt-out: Unsubscribe from marketing communications at any time

To exercise any of these rights, contact us at info@rupeecollect.in.

The Service is intended for business use by adults. We do not knowingly collect personal data from individuals under the age of 18. If you believe a minor has provided us with personal information, please contact us and we will delete it promptly.

We may update this Privacy Policy from time to time. When we make material changes, we will notify registered users by email and update the “Last updated” date at the top of this page.

Continued use of the Service after changes take effect constitutes your acceptance of the updated Policy.

If you have any questions, concerns, or requests regarding this Privacy Policy, please contact our data protection team: