Privacy Policy

1. Platform Overview and Role Definition

Pokket Loan is a mobile application operated by Pokket Finserv Private Limited, created to support digital interactions related to financial products offered by licensed lending institutions.

The application functions as a technology-enabled service layer that allows users to submit loan requests, upload required information, and track application progress. Pokket Finserv does not participate in credit decision-making, fund disbursement, or repayment collection.

All loan assessments, approvals, and disbursements are carried out independently by Salora Capital Ltd., a registered Non-Banking Financial Company (NBFC), in accordance with applicable regulations.

2. Principles of Data Handling

Information collected through Pokket Loan is handled with the objective of enabling secure, lawful, and efficient service delivery. Data processing activities are limited to what is necessary for:

• Facilitating loan-related workflows initiated by users
• Verifying user identity and preventing misuse of the platform
• Supporting system stability, security monitoring, and operational analysis
• Meeting contractual, legal, and regulatory obligations
• Enhancing application usability and functional performance

Data is not processed for purposes unrelated to the core functions of the application.

3. Categories of Information Processed

a. User-Submitted Information

When using the application, users may voluntarily provide personal and financial details, including identification information, contact details, employment indicators, income-related data, banking details, and loan preferences, as required to proceed with loan applications.

b. Permission-Based Device Features

Certain application features may require access to device capabilities, which will be requested only at the time they are needed:

• Camera access – used for capturing identification documents or facial verification during onboarding
• Approximate location access – used for security validation and regional service eligibility checks

These permissions are not used for continuous tracking and remain under user control.

c. Financial Signals and Credit Assessment Inputs

With explicit user authorization, limited financial message data may be analyzed to identify transaction patterns relevant to loan assessment. Credit-related information may also be obtained from authorized credit bureaus to support responsible lending decisions by the lending partner.

4. Technical and Operational Information

To maintain application reliability and protect against unauthorized activity, certain technical data may be collected automatically, such as:

• Device type and operating system version
• Application interaction events
• Network-related information, including IP-based indicators and session timing

This information is used solely for diagnostics, security analysis, and performance improvement.

5. Use of External Service Providers

Pokket Loan may rely on third-party service providers to support infrastructure operations, analytics, and fraud prevention. These providers process limited technical information strictly for their designated functions and operate under contractual confidentiality and data protection obligations.

Third-party tools integrated into the application are not used for behavioral advertising or marketing profiling.

6. Information Sharing Framework

Information processed through the application may be shared only under controlled circumstances, including:

• With Salora Capital Ltd., for the purpose of evaluating loan applications and fulfilling regulatory requirements
• With authorized service partners supporting hosting, security, analytics, or customer assistance
• With government authorities or regulators, where disclosure is required by applicable law

Personal information is not sold or shared for unrelated commercial purposes.

7. Data Retention and Protection Measures

Administrative, technical, and organizational safeguards are implemented to protect information against unauthorized access, loss, or misuse. These measures include access controls, encrypted data transmission, and monitored system interfaces.

Information is retained only for durations necessary to achieve service objectives or comply with legal and regulatory obligations.

8. User Communication Preferences

The application may deliver service-related notifications, account updates, or application status messages. Promotional communications, where applicable, will provide clear opt-out mechanisms.

Optional features requiring additional data inputs will be activated only after obtaining user consent.

9. User Rights and Requests

Users may request access to, correction of, or deletion of their personal information, subject to applicable legal and operational requirements. Requests can be submitted through in-app support channels or official contact methods.

Certain records may be retained after account deactivation where required by law or regulatory standards.

Contact Information