Privacy Policy

Lender Information

PRAVEEN CAPITAL PRIVATE LIMITED is a licensed Non-Banking Financial Company (NBFC) regulated by the RBI, authorized to provide credit services in accordance with applicable financial regulations. Below are the key details of the lender:

Registered Name: PRAVEEN CAPITAL PRIVATE LIMITED
CIN (Corporate Identification Number): U67120KA1996PTC072006
COR Number: B-02.00258
Contact Email: [email protected]
Business Address: Shri ganesh complex,Main road darbe puttur, Karnataka 574202

Pursuant to the applicable Personal Data Protection Law and its implementing regulations, Karo Cash (hereinafter referred to as the ''Controller'') provides you with the following information:

How We Handle Your Data and Device Permissions

All entities involved in managing your personal data are contractually obligated to maintain strict confidentiality and must fully comply with the data protection laws that apply in the region where your information is collected, stored, processed, or transmitted.

To deliver and improve our services, we may request access to certain device permissions. These can include: Device Information, Image Information, Camera, Files, APP Installed, APP Use Information, Calendar, SMS, Google Advertising ID (GAID), Mobile Phone Code (IMEi) and View Wi-Fi Connections.

We only use these permissions to support core functionality, personalize your experience, and ensure smooth operation of the app. All data access and usage strictly follow our Privacy Policy, and your personal information will never be used for any purposes beyond what is clearly stated.

Device Information
We gather an array of information related to your device, encompassing the brand, model, OS version, network conditions, WiFi status, device health metrics, memory specifications, mobile device identifiers (like mobile ID or other distinctive IDs), user account details, and specifics about application software installed. Such data is pivotal for facilitating automatic updates, enhancing security protocols, and protecting your account against unauthorized usage. Moreover, it allows us to scrutinize your device's performance patterns and user identity, yielding insights that contribute to service enhancements and personalized user experiences. Our tracking also extends to device characteristics such as screen dimensions, resolution, mobile carrier specifics, and network proximity indicators to uphold privacy standards and deter fraudulent behaviors. This collected data undergoes secure encryption before being sent to https://api.karocash.vip for subsequent processing.

Image Information
During the loan application process, we collect photos taken by users, as well as images that customers intentionally select and upload for KYC verification and anti-fraud checks. We do not access or retrieve any other photos from your device's gallery. We are committed to protecting your data through encryption, ensuring its security. All collected information will be securely encrypted and uploaded to https://api.karocash.vip.

Camera
In certain cases, such as when applying for a loan, we may need access to your device's camera for real-time detection. This is essential to verify your identity, ensuring that you are the legitimate applicant and enhancing the security of your account. By granting this permission, you allow us to capture live images for identity authentication. We are committed to safeguarding your privacy. Any images collected during the live detection process will be securely encrypted and stored, used strictly for verification purposes. We will not share your images with any third party without your explicit consent.

Please be aware that enabling camera access is required for live detection. Without this permission, you may not be able to complete certain processes, such as loan applications. However, the camera will only be activated with your clear consent, and you can revoke this permission at any time through your device settings. Any transmitted information will be encrypted and uploaded to https://api.karocash.vip.

Files
We require permission to access your files to upload and store the documents you choose to submit for your loan application. The Platform will only access the files you select for upload and will not access or modify any other documents on your device. These selected documents will be used solely for processing your loan application and will be securely encrypted before being uploaded to https://api.karocash.vip to protect your privacy.

APP Installed
To protect your funds and prevent fraudulent activities, we collect details about the apps installed on your device. This includes information such as the Karo Cash, installation time, update time, version name, whether the app is a system-built application and more. This data is uploaded to our server to help identify potential fraud and ensure the security of lending transactions. All collected data, along with personal information, is strictly encrypted and securely uploaded to our server at https://api.karocash.vip. We assure you that this information will not be utilized for any other purposes without your explicit permission.

APP Use Information
To help prevent fraud while using the app, we collect APP Use Information (which includes package_name, interval_type, start time, end_time, launch_count, last_time_used, total_time_used). This data is securely transmitted, synced, and stored in an encrypted format before being uploaded to https://api.karocash.vip.

Calendar
Karo Cash gathers data about calendar events to enhance risk analysis and refine the credit approval process. Upon your authorization, we will access your calendar exclusively to add or modify events pertinent to your loan repayment due dates, ensuring not to access or modify any other events you have scheduled. All your information is encrypted and securely stored at https://api.karocash.vip. We are dedicated to protecting your data and assure that we will neither sell nor trade your personal information, nor disclose it to any third parties.

SMS
To ensure accurate identity verification and streamline the loan application process, we might require access to your SMS messages. This permission is specifically aimed at reading the verification codes dispatched to you or any SMS communications pertaining to bank transactions associated with the loan. This enables us to authenticate your identity and carry out necessary credit assessments. We guarantee the utilization of advanced encryption methods to safeguard your information, ensuring that no SMS content unrelated to the loan process is accessed and that your SMS data is not shared with third parties. The pertinent data may be securely uploaded to our servers located at https://api.karocash.vip, and it will solely be used for purposes of credit analysis and identity verification.

Google Advertising ID (GAID)
Karo Cash seeks permission to collect your Google Advertising ID (GAID) in order to assess ad performance and improve your advertising experience. This information is securely encrypted and uploaded to https://api.karocash.vip. Should you prefer not to share this data, you have the option to disable the "Personalized Ads" feature in your device settings. Turning off this feature will prevent the collection of your GAID.

Mobile Phone Code (IMEi)
We utilize your mobile phone's IMEI code to ensure the device used throughout the loan application process remains consistent, aiding in fraud prevention. Your mobile phone number is not automatically collected for completing the application login page, nor do we store any data pertaining to applicants who are not granted a loan. This information is securely uploaded in an encrypted format to our server located at https://api.karocash.vip. The data collected is employed to assess and analyze your behavior and risk profile across multiple loans, to evaluate the potential for legal action if necessary, and to strengthen our measures against fraudulent activities.

View Wi-Fi Connections
Karo Cash gathers your device's IP address, network type, and Wi-Fi address to aid in the detection and prevention of fraudulent activities. This information is utilized to evaluate potential risks and identify any unusual behavior, thereby enhancing the security of your account. All collected data is securely encrypted and transmitted to https://api.karocash.vip for further processing.

User Data Collection and Confidentiality Commitments

We treat any personal data you provide—whether directly or indirectly—with the utmost confidentiality and in full alignment with applicable legal requirements, including both national and international data protection standards.

As a User of our services, you acknowledge and accept that we may collect a range of personal information, which may include but is not limited to:

- Biometric facial data used for identity verification through facial recognition technology
- Still images or videos of your face to confirm your identity
- Photographic copy of your Aadhaar card
- Photographic copy of your PAN card
- Aadhaar number
- Permanent Account Number (PAN)
- Full legal name
- Residential or mailing address
- Contact number
- Email address
- Details regarding your marital status
- Employment and job-related information
- Living condition data
- Communication identifiers and general identification details
- Geolocation information
- Social media profile information, only if expressly permitted by you

Karo Cash does not collect references or personal recommendation data that Users may optionally submit during product or service applications.

We obtain your explicit consent for data processing through our website https://api.karocash.vip, our IT application (the ''App''), and other electronic communication channels—such as phone, video, or digital means (collectively referred to as the ''Electronic Means''). This consent may be recorded automatically at the time of interaction with these platforms.

The personal data we collect is solely used for providing and managing the services and products offered by Karo Cash (the ''Services''), in strict adherence to the purposes defined within this Privacy Policy.

All parties involved in managing or processing your data are under binding confidentiality obligations and must operate within the constraints of the data protection laws applicable in the jurisdictions where your data is collected, stored, used, or transferred. Your personal information will never be processed or used for any purposes other than those expressly stated in this Privacy Policy.

Cookies and Digital Security Practices

The Controller gathers information through cookies when users visit its website. Cookies are small text files that are stored on the user's device after accessing the Controller's online platform. These files may contain data such as a unique identifier or browsing preferences, which allow us to monitor user behavior and improve service performance and the overall browsing experience. Cookies are restricted to accessing only the information explicitly permitted and cannot retrieve data from the device's storage.

If users prefer to adjust their cookie preferences, they can do so through their browser settings. Furthermore, the Controller's digital platforms may include links to third-party websites that are outside its control. The Controller assumes no responsibility or liability for the content or practices of these external websites.

Types of Personal Data We Gather

We may collect and process different types of personal information, which could include, but are not limited to, the following categories:

- Full legal name
- Date of birth
- Mobile phone number
- Taxpayer identification number
- Unique identification number (Aadhaar/PAN, depending on the jurisdiction)
- Residential or business address
- Government-issued identification document copy
- Bank account details
- Financial and asset-related information
- Personal references' contact information
- Marital status
- Number of dependents

Karo Cash collects such personal data through its mobile application, website, or telephone interactions.

You will be asked to provide the above data when you:
- Register in the Karo Cash mobile app to apply for a loan.
- Reach out to Karo Cash via phone for support or inquiries.

Circumstances Under Which Personal Data May Be Shared

Karo Cash may disclose your personal data in the following situations:

- To its parent company, subsidiaries, affiliates, or other entities within the same corporate group.

- To government authorities, regulators, or law enforcement bodies as required by applicable laws and regulations.

- To third-party service providers responsible for loan processing, repayment management, and related financial services.

- In the event of corporate restructuring, such as mergers, acquisitions, or other significant organizational changes.

- To financial institutions or third parties involved in credit portfolio transfers, endorsements, or other financial transactions.

- To business partners for the promotion and distribution of financial products and services that benefit users.

- In any other circumstances where sharing is allowed under the relevant legal framework, including India's data protection and financial regulations.

Karo Cash remains fully committed to safeguarding your personal data, ensuring confidentiality and security, and adhering to all applicable regulations related to data protection and financial privacy under Indian law.

Purpose of Collecting and Using Personal Data

Karo Cash collects and processes personal data for the following purposes:

I. Essential Purposes

a. Fulfill contractual obligations arising from service requests and agreements.

b. Verify and authenticate the user's identity, as well as validate the accuracy of the information provided, including personal details, references, guarantors, or co-applicants, as applicable to the contracted service.

c. Administer, operate, and monitor the services requested or availed through Karo Cash.

d. Assess the user's creditworthiness by analyzing their financial and personal information, including risk evaluation, repayment capacity, transaction status, and other assessments required by applicable financial regulations.

e. Establish and formally recognize the contractual relationship between the user and Karo Cash.

f. Store user data in our records and maintain documentation, either directly or through authorized third-party service providers.

g. Process user requests submitted through digital platforms, customer support channels, or telephonic communication.

h. Create and manage user profiles within the App, including credit eligibility verification and financial background assessments.

i. Conduct credit checks and obtain credit reports from relevant financial institutions or credit bureaus.

j. Offer service enhancements, upgrades, or extensions to existing financial products.

k. Notify users about Karo Cash updates, policy changes, and service modifications.

l. Conduct data analysis, market research, and service quality assessments to improve the user experience on our digital platforms.

m. Send service-related communications through digital channels, including transaction updates, notifications, and service advisories.

n. Manage collection and recovery processes for overdue payments.

o. Carry out customer satisfaction and quality assurance surveys to improve service standards.

p. Provide users with financial services and products as per their requests.

q. Inform users about modifications, enhancements, or newly available services that may be relevant to their existing relationship with Karo Cash.

II. Non-Essential Purposes

a. Send promotional offers, discounts, or marketing-related content regarding financial products, services, and exclusive events that may be of interest to the user.

b. Distribute newsletters, updates, and promotional materials, including benefits and special offers from business affiliates and partners.

Users may opt out of non-essential data processing by sending an email request to [email protected]. If no such request is received, it will be understood that the user consents to the use of their data for the aforementioned purposes.

Procedure for Exercising ARCO Rights and Withdrawing Consent

In accordance with applicable laws, the Owner holds the right to protect their Personal Data, which includes the ability to exercise ARCO Rights (Access, Rectification, Cancellation, and Opposition), as well as the option to withdraw consent at any time. These rights may be exercised directly by the Owner or through a legal representative.
To initiate the process, a formal request should be sent to the Responsible Party's email address at [email protected], accompanied by a copy of a valid official ID or, when applicable, the legal representative's identification and the power of attorney that authorizes them to act on the Owner's behalf. The request must include the following details:
- Full name
- Current residential address
- Contact phone number
- Email address
- Customer ID and details of the relevant product
- A clear indication of the specific ARCO Right being exercised or the intention to withdraw consent
- A brief explanation of the reason for the request

Once the request is received, Karo Cash will provide a resolution within 20 (twenty) days. If the request is granted, the changes will be made within 15 (fifteen) business days from the notification of the decision. If the request lacks necessary documentation or is incomplete, the Responsible Party will inform the Owner of the missing information within 5 (five) business days. Should the Owner fail to respond within this period, the request will be deemed as not submitted. For requests involving data rectification, the Responsible Party will have 10 (ten) business days from receipt to evaluate and implement the necessary corrections.
The Owner is responsible for ensuring that their Personal Data remains accurate and up-to-date. In the case of an access request, Karo Cash will provide the requested data either via email or as a simple document copy. Consent for processing Personal Data can only be withdrawn following these procedures, in compliance with applicable laws and regulations.
Karo Cash reserves the right to deny ARCO Rights requests where permitted by law or regulations.
Should any modification or deletion not impact the ongoing legal obligations between the Owner and the Responsible Party, the Owner may withdraw consent for the processing of their Personal Data without retroactive effects. The withdrawal procedure will follow the same steps as those for exercising ARCO Rights.

Methods to Limit the Use or Disclosure of Personal Data

The Owner has the option to limit the use or sharing of their Personal Data by following the steps specified in the section "Procedures for Exercising ARCO Rights and Withdrawing Consent." The request should include at least the following:

- The Responsible Party's processing of the data as outlined in this agreement;

- Consent for sharing personal data with the Owner; and

- Authorization for the Owner to utilize personal data for agreed services, including big data-based credit validation services.

Availability and Acknowledgment of the Privacy Policy
The Privacy Policy can be accessed at any time through our official website https://api.karocash.vip and within the application, even after acceptance. By using our digital services and interacting with the provided features, the Owner explicitly agrees to the terms and conditions set forth in this Privacy Policy. For any questions regarding notifications, please reach out to [email protected].

Modifications to the Privacy Policy

The Controller maintains the right to amend this Privacy Policy at regular intervals to reflect changes in legal requirements, internal policies, or the nature of services provided.

Any such updates to this Privacy Policy will be promptly posted on our official website. The Owner may review the most current version by visiting https://api.karocash.vip.

Effective Date: May 7, 2025