LyonLoan Privacy Policy

Lyon Investment And Industries Private Limited (hereinafter referred to as "we," "us," or "the Company") places the highest importance on the protection of your privacy. This Privacy Policy (hereinafter referred to as "the Policy") aims to inform you about how we collect, use, store, share, and protect your personal information when you use our mobile application "LyonLoan" (hereinafter referred to as "the App") and related services, as well as the rights you have concerning this information.

We are a Non-Banking Financial Company (NBFC) incorporated under Indian law and registered with the Reserve Bank of India (RBI). Our registered office address is: 202/203, Magnum Opus, Shantinagar Industrial Estate, Vakola, Santacruz East, Mumbai City, Maharashtra 400055.

Before using the App, please read and understand the entire content of this Policy. Once you start using the App or submitting personal information, you acknowledge that you have understood and agreed to our processing of your information as described in this Policy. If you do not agree with any terms of this Policy, please immediately discontinue use of the App.

To provide you with services such as loan applications, account management, credit assessment, customer support, and product improvement, we collect the following categories of personal information based on the principles of legality, legitimacy, necessity, and data minimization:

2.1 Identity Information

• Official Information: PAN card number, Aadhaar number, name, gender, date of birth, etc.
• Identity Proof Documents: Images or files of your PAN card and Aadhaar card that you voluntarily upload.

2.2 Personal and Family Information

Education level, marital status, number of children, household income and expenditure, etc.

2.3 Financial and Occupational Information

Employment status, years of employment, type of work, personal income, etc.

2.4 Device Information

Device model, operating system version, device identifiers (e.g., IDFA), IP address, mobile network information.

2.5 Location Information

• Precise Location Information (only after obtaining your explicit consent): Precise location obtained via GPS, used to confirm that you are within Indian territory and for anti-fraud and compliance checks (such as KYC requirements). You can turn off this permission in your device settings at any time.

2.6 Contact Information

We may request access to and collect your contact information to assist you in completing application forms quickly, saving your time, and making the App more convenient for you to use.

2.7 Sensitive Personal Information (as defined under the Digital Personal Data Protection Act of India)

We will use your personal information only for the following explicitly stated purposes:

3.1 Core Service Provision:

• Processing your loan application, conducting credit assessment and risk-based pricing.
• Verifying your identity and the information you provide to fulfill KYC and Anti-Money Laundering (AML) obligations.
• Disbursing loan funds to your designated bank account.
• Managing your loan account, processing repayments, sending statements and reminders.
• Communicating loan status and service updates via SMS, email, or in-app notifications.

3.2 Business Operations and Improvement:

• Maintaining and improving the functionality, security, and performance of the App.
• Conducting data analysis to develop new products, optimize risk assessment models, and improve user experience.
• Conducting internal audits, compliance checks, and dispute resolution.

3.3 Security and Anti-Fraud:

• Detecting, preventing, and investigating fraud, money laundering, or other illegal activities.
• Protecting the rights, property, and safety of us, you, and other users.

3.4 Legal and Compliance:

• Complying with all applicable laws and regulations in India, particularly the regulatory guidelines of the Reserve Bank of India (RBI).
• Responding to lawful requests from judicial bodies, law enforcement, or other government agencies.

3.5 Marketing and Promotions (only after obtaining your explicit consent):

• Sending you information about new products, services, special offers, or marketing campaigns.
• Please note that you have the right to opt-out of receiving such marketing communications at any time through the App settings or by contacting us.

We do not sell your personal information. We share necessary information with trusted third parties only under the following circumstances:

4.1 Credit Information Companies:

As per RBI regulations, we share details of your loan account (such as loan amount, repayment history) with credit information companies to establish and maintain your credit history.

4.2 Financial Service Partners:

We share information with partners who provide core services to us, such as banks (for fund transfer and repayments), payment gateways, and verification service providers.

4.3 Technology Service Providers:

We share information with third-party technology service providers who assist us in operating the App, providing cloud storage, data analysis, and customer support. These providers process data on our behalf under contractual obligations and may not use it for their own purposes.

4.4 Legal and Regulatory Authorities:

We disclose information to courts, law enforcement, or regulatory bodies like RBI to comply with legal obligations, enforce our terms, or respond to lawful requests.

4.5 Affiliates and Business Transfers:

We share information within our corporate group for consistent service delivery or as part of a merger, acquisition, or sale of assets.

4.6 With Your Consent:

We share information with other parties after obtaining your explicit consent.

5.1 Data Localization:

In accordance with Indian RBI and other relevant regulations, we store and process all your personal data on servers located within India.

5.2 Retention Period:

We retain your information only for as long as necessary to fulfill the purposes stated in this Policy, or for a longer period if required by law (e.g., Income Tax Act, RBI Act). After the closure of a loan account, we may retain certain information for a reasonable period to fulfill legal obligations, resolve disputes, and enforce agreements.

5.3 Security Measures:

We implement administrative, technical, and physical security measures consistent with industry standards to protect your information from unauthorized access, disclosure, alteration, or destruction. These measures include, but are not limited to: encryption in transit (SSL/TLS), database encryption, access controls, regular security audits, and employee confidentiality training. Please note that while we strive to protect your information, no method of internet transmission or electronic storage is 100% secure.

Under applicable laws, particularly the Digital Personal Data Protection Act of India, you have the following rights regarding your personal data:

6.1 Right to Access and Correction:

You can request access to the personal data we hold about you and correct any inaccurate or incomplete information.

6.2 Right to Manage and Withdraw Consent:

You can withdraw any previously given consent for specific purposes (e.g., marketing) at any time through the App settings or by contacting us. The withdrawal of consent does not affect the lawfulness of processing based on consent before its withdrawal.

6.3 Right to Deletion:

Under specific circumstances (e.g., when the data is no longer necessary for the purpose for which it was collected, or you withdraw consent and there is no other lawful basis for processing), you can request us to delete your personal data. Please note that we may need to retain certain data to comply with legal obligations or to establish, exercise, or defend legal claims.

6.4 Right to Data Portability:

Where technically feasible, you have the right to receive the personal data you have provided to us in a structured, commonly used, and machine-readable format, and you have the right to request that we transmit this data to another data controller.

6.5 Right to Grievance Redressal:

If you have any concerns regarding our processing of your personal data, you have the right to lodge a grievance. Please first contact us via the channels provided in Section 7 (Contact Us).

If you have any questions, comments, concerns regarding this Privacy Policy, wish to exercise your rights, or wish to report any security issues, please contact our customer support team or Grievance Officer via the following methods:

Customer Support Email:

• Email: info@lyoninvestment.com

Grievance Officer:

• Name: Anandpal Singh
• Email: asingh@lyoninvestment.com

Company Address:

Lyon Investment And Industries Private Limited
202/203, Magnum Opus, Shantinagar Industrial Estate,
Vakola, Santacruz East, Mumbai City,
Maharashtra 400055, India

We are committed to responding to your contact within a reasonable timeframe (generally within 30 days) and making our best effort to address your concerns.

We may update this Privacy Policy from time to time to reflect changes in law, technology, or business practices. Any material changes will be notified to you through a prominent notice within the App (such as a pop-up or in-app message) or via email before the changes take effect. We encourage you to review this Policy periodically for the latest information. The "Effective Date" at the top of this Policy will indicate the most recent version.