Last Updated: 7th October, 2022.
We, Bueno Gig Credit Building Technologies Pvt Ltd (“Company”; “We”; “us”; “our”, “Bueno Finance”), a company registered under the Companies Act 2013, have developed a mobile application platform under the brand name of “Bueno Loans” and “KreditPe” (“Platform”) through which you may became member of Platform and apply for a short term loan (“Loan”) to be granted by various non-banking financial company or Banks (“Lender”), based on the loan agreement executed between you and Lender. Lender has appointed and authorized us to collect, store, authenticate, verify and distribute the Personal Information (defined below) as may be required by Lender to sanction the Loan. The Personal Information shall be collected through the mobile application form available on the Platform.
We provide services only within the territory of India and to corporations and individuals in India. We do not market or intend to provide our services to individuals or entities outside the territory of India and accordingly do not use information shared by individuals or entities outside the territory of India. Accordingly, we are governed and shall comply with all data protection laws applicable in India.
In order to access the services, you are required to register with the Company by logging in through Third Party Platforms (defined below) (“User Account”). During the application process, you shall be required to share/upload certain personal information such as your name, e-mail address, gender, date of birth, mobile number, mobile phone information , financial information such as PAN card (for KYC purposes), bank account no., data from Credit Information Companies, data required for Know Your Customer compliances, requirement and other relevant details (“Personal Information”) and thereby also providing your prior and explicit consent for collection of aforementioned data by such. You undertake that you shall be solely responsible for the accuracy and truthfulness of the Personal Information you share with us. As part of the services, if required, you authorize us to import your details and Personal Information dispersed over Third Party Platforms. For avoidance of doubt, it is clarified that currently we do not procure your details and Personal Information from Third Party Platforms, however, you authorise us to access such data as and when necessary for providing you the services. “Third Party Platforms” are social networking platforms, such as Facebook, LinkedIn and other similar platforms.
You understand and acknowledge that the Company reserves the right to track your location during the provision of the services, and also in the event that you stop, cease, discontinue to use or access the services, through the deletion or uninstallation of the Platform from the mobile or otherwise, till the event that your obligations to pay the Outstanding Amount(s) to Lender, exist. Deletion, uninstallation, and/or discontinuation of our services, shall not release you from the responsibility, obligation and liability to repay the Outstanding Amount(s). We will collect the below mentioned Personal Information from you. While some information has to be mandatorily provided, others are optional and certain portions of the information will remain private and some will be displayed to other users; We shall always let the User know which is which. Additional information may be gathered during subsequent use of the Platform by the you, whenever you choose to provide it. You shall be provided with an option to give or deny consent for use of specific data, restrict disclosure to third parties (except for cases where such sharing is required as per statutory or regulatory requirement), data retention, revoke consent already granted to collect personal data and if required, make the app delete/ forget the data.
We desist from accessing mobile phone resources like file and media, contact list, call logs, telephony functions, biometric data (unless allowed by regulatory authority) etc. for all the new User onboarded on the Platform. However, if you are an existing User, we may have obtained or accessed such data for the purpose for providing the services effectively. In case you require us to delete such data then you may reach out to us in the manner provided under section for Data Retention. A one-time access may be taken for camera, microphone, location or any other facility necessary for the purpose of on-boarding/ KYC requirements only, with the explicit consent of the User.
We also collect information about you from third parties, including third-party verification services, credit bureaus and publicly available sources. In some circumstances, where lawful, this information may include your government-issued identification number. This includes, without limitation, the receipt and exchange of account or credit-related information with any credit reporting agency or credit bureau, where lawful, and any person or corporation with whom you have had, currently have, or may have a financial relationship, including without limitation past, present, and future places of employment and personal reporting agencies. We will also collect information related to your tenure, role, remuneration and other work-related details from your current employer.
The App has a link to a registered third party SDK which collects data on our behalf and data is stored to a secured server to perform a credit risk assessment. We ensure that our third party service provider takes extensive security measures in order to protect your personal information against loss, misuse or alteration of the data. Our third-party service provider employs separation of environments and segregation of duties and has strict role-based access control on a documented, authorized, need-to-use basis. The stored data is protected and stored by application-level encryption. They enforce key management services to limit access to data. Furthermore, our registered third party service provider provides hosting security – they use industry-leading anti-virus, anti-malware, intrusion prevention systems, intrusion detection systems, file integrity monitoring, and application control solutions
We shall use the Personal Information in the following cases:
(i) to provide you with the services and to assist you in the event you need additional support; (ii) to access your credit worthiness (iii) to more effectively provide services to you; (iv) to improve the services provided to you; (v) to maintain and manage your User Account; (vi) to assist you with technical difficulties that may arise in relation to your use and access of the Platform; (vii) to manage our relationship with you; (viii) for internal analytics purpose. (ix) to comply with our legal or statutory obligations; (x) to contact you about important announcements and other important information about your User Account, the Platform and the services. In addition, some other uses of your Personal Information are as per below:
We do not sell, rent, lease your Personal Information to anybody and will never do so. Keeping this in mind, we may disclose your Personal Information in the following cases:
We will retain your Personal Information for as long as your registration with us is valid and the Outstanding Amount(s) is due and payable to Lender. We may also retain and use your Personal Information as necessary to comply with our legal obligations, resolve disputes, and enforce our agreements. Subject to this section, we will try to delete your Personal Information upon reasonable written request for the same. Please note, however, that there might be latency in deleting Personal Information from our servers and backed-up versions might exist even after deletion.
In case you do not wish/want us to collect, disclose, share and use users’ information, including but not limited to any Personal Information, you may choose not to register for an account or terminate your account on the Platform in accordance with the applicable T&Cs available on the Platform.
You have the right to demand us to erase your Personal Information and we will do so without undue delay, provided that the data is no longer required by us and there is no legal requirement to retain the data. Do note that multiple legal basis may exist in parallel and we may still have to retain certain Personal Information at any time, despite your request to delete it.
You may write to us at firstname.lastname@example.org to withdraw your consent to any specific data processing. However, please note that, you may not be able to access certain parts of the Platform, as well as certain services on the Platform if you withdraw your consent. Do note that multiple legal basis may exist in parallel and we may still have to retain certain Personal Information at any time, despite your withdrawal request
Subject to the above, we will delete all other Personal Information including the banking details (debit/credit card), and passwords of user when the User Account is terminated.
In case you need to access, review, and/or make changes to the Personal Information, you shall have to login to your User Account and change the requisite details. You shall keep your Personal Information updated to help us better serve you.
We may provide you with certain ancillary services such as chat rooms, blogs and reviews for the primary services. Subject to any applicable laws, any communication shared by you via the Platform or through the blogs, reviews or otherwise to us (including without limitation contents, images, audio, financial information, feedback etc. collectively “Feedback”) is on a non-confidential basis, and we are under no obligation to refrain from reproducing, publishing or otherwise using it in any way or for any purpose. You shall be responsible for the content and information contained in any Feedback shared by you through the Platform or otherwise to us, including without limitation for its truthfulness and accuracy. Sharing your Feedback with us, constitutes an assignment to us of all worldwide rights, titles and interests in all copyrights and other intellectual property rights in the Feedback and you authorize us to use the Feedback for any purpose, which we may deem fit.
We value your Personal Information, and protect it on the Platform against loss, misuse or alteration by taking extensive security measures We have up-to-date physical security, such as secure areas in offices; electronic safeguards, such as passwords, firewalls, and encryption; and procedural safeguards to prevent ID theft.
We may use cloud services such as Amazon Web Services (AWS) or Google Cloud Platform (GCP) to store your personal data. Information you and our partners provide and receive during the services is transmitted through a secure sockets layer (SSL) transmission. We carefully select and monitor partners, who have access to Personal Information, and we have specific provisions in our contracts requiring them to keep it safe and secure. We do not allow them to use or share the information for any purpose other than provide the services to you.
We restrict access to your Personal information only to those employees who are required to know such information in order to provide our Services to you. We train our employees on all our security procedures, and we conduct audits to check compliance.
You must also ensure the security of your information such as keeping passwords secret and not permitting unauthorized use of your account. You are responsible for all actions that take place under your User Account. If you choose to share your User Account details and password or any Personal Information with third parties, you are solely responsible for the same. If you lose control of your User Account, you may lose substantial control over your Personal Information and may be subject to legally binding actions.
No security measures can provide absolute protection of data, but we will strive to protect your information. Although we provide appropriate firewalls and protections, we cannot warrant the security of any Personal Information transmitted as our systems are not hack proof. Data pilferage due to unauthorized hacking, virus attacks, technical issues is possible and we take no liabilities or responsibilities for it.
If you choose to use our blog or our Social Network pages (Facebook Fan page, Twitter, LinkedIn, Google Play Store, Apple iTunes store etc), any information you submit can be read, collected, or used by other users of these sites. We are not responsible for the subsequent use of information, which you have submitted to the said sites, by its other users.
The collection, usage, and sharing of Personal Information by us shall be in compliance with the Information Technology ( Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 and other applicable laws.
You authorize Bueno Finance to share your personal information with its group companies and other third parties, in so far as required for joint marketing purposes/offering various services/report generations /checking if you have a credit bureau presence with a credit information company and you also authorize credit information companies to confirm the fact of your bureau presence with them.
You consent to make the payment as per the schedule. In case you fail to make the payment, Bueno Finance reserves the right to collect money from you. This can be done either internally or through third parties. The same data would be reported to credit bureaus which can impact your credit history.
Member agrees to expressly authorize Bueno Finance to make calls, even in the case that Member’s contact number is listed as DND with the concerned telecom regulatory authority.
The Services provided by the Company or the Company Partner (as applicable) are only intended for Users who are 18 years of age or older. If you are not of the requisite age you are not to provide any User Information or other information to the Company. If it comes to the Company’s attention, that any User Information or information shared pertains to an individual under the age of 18 years, such User Information or information will be deleted without notice to you.