Privacy Policy

Lender Information

ZENCO ADVISORY SERVICES PVT.LTD. is a licensed Non-Banking Financial Company (NBFC) regulated by the RBI, authorized to provide credit services in accordance with applicable financial regulations. Below are the key details of the lender:

Registered Name: ZENCO ADVISORY SERVICES PVT.LTD.
CIN (Corporate Identification Number): U74140WB1995PTC073861
COR No.: 14·07552
Contact Email: [email protected]
Business Address: 5, Clive Row, 3rd Floor Room No 60a Kolkata, West Bengal, 700001 India


Pursuant to the applicable Personal Data Protection Law and its implementing regulations, Tunay Credit (hereinafter referred to as the ''Controller'') provides you with the following information:


How We Handle Your Data and Device Permissions

All entities involved in managing your personal data are contractually obligated to maintain strict confidentiality and must fully comply with the data protection laws that apply in the region where your information is collected, stored, processed, or transmitted.

To deliver and improve our services, we may request access to certain device permissions. These can include: Device Information, Image Information, Camera, Files, APP Installed, APP Use Information, Google Advertising ID (GAID), Mobile Phone Code (IMEi) and View Wi-Fi Connections.

We only use these permissions to support core functionality, personalize your experience, and ensure smooth operation of the app. All data access and usage strictly follow our Privacy Policy, and your personal information will never be used for any purposes beyond what is clearly stated.

Device Information
We gather an array of information related to your device, encompassing the brand, model, OS version, network conditions, WiFi status, device health metrics, memory specifications, mobile device identifiers (like mobile ID or other distinctive IDs), user account details, and specifics about application software installed. Such data is pivotal for facilitating automatic updates, enhancing security protocols, and protecting your account against unauthorized usage. Moreover, it allows us to scrutinize your device's performance patterns and user identity, yielding insights that contribute to service enhancements and personalized user experiences. Our tracking also extends to device characteristics such as screen dimensions, resolution, mobile carrier specifics, and network proximity indicators to uphold privacy standards and deter fraudulent behaviors. This collected data undergoes secure encryption before being sent to https://api.tunaycredit.com for subsequent processing.

Image Information
During the loan application process, we collect photos taken by users, as well as images that customers intentionally select and upload for KYC verification and anti-fraud checks. We do not access or retrieve any other photos from your device's gallery. We are committed to protecting your data through encryption, ensuring its security. All collected information will be securely encrypted and uploaded to https://api.tunaycredit.com.

Camera
In certain cases, such as when applying for a loan, we may need access to your device's camera for real-time detection. This is essential to verify your identity, ensuring that you are the legitimate applicant and enhancing the security of your account. By granting this permission, you allow us to capture live images for identity authentication. We are committed to safeguarding your privacy. Any images collected during the live detection process will be securely encrypted and stored, used strictly for verification purposes. We will not share your images with any third party without your explicit consent.

Please be aware that enabling camera access is required for live detection. Without this permission, you may not be able to complete certain processes, such as loan applications. However, the camera will only be activated with your clear consent, and you can revoke this permission at any time through your device settings. Any transmitted information will be encrypted and uploaded to https://api.tunaycredit.com.

Files
We require permission to access your files to upload and store the documents you choose to submit for your loan application. The Platform will only access the files you select for upload and will not access or modify any other documents on your device. These selected documents will be used solely for processing your loan application and will be securely encrypted before being uploaded to https://api.tunaycredit.com to protect your privacy.

APP Installed
To protect your funds and prevent fraudulent activities, we collect details about the apps installed on your device. This includes information such as the Tunay Credit, installation time, update time, version name, whether the app is a system-built application and more. This data is uploaded to our server to help identify potential fraud and ensure the security of lending transactions. All collected data, along with personal information, is strictly encrypted and securely uploaded to our server at https://api.tunaycredit.com. We assure you that this information will not be utilized for any other purposes without your explicit permission.

APP Use Information
To help prevent fraud while using the app, we collect APP Use Information (which includes package_name, interval_type, start time, end_time, launch_count, last_time_used, total_time_used). This data is securely transmitted, synced, and stored in an encrypted format before being uploaded to https://api.tunaycredit.com.

Google Advertising ID (GAID)
Tunay Credit seeks permission to collect your Google Advertising ID (GAID) in order to assess ad performance and improve your advertising experience. This information is securely encrypted and uploaded to https://api.tunaycredit.com. Should you prefer not to share this data, you have the option to disable the "Personalized Ads" feature in your device settings. Turning off this feature will prevent the collection of your GAID.

Mobile Phone Code (IMEi)
We utilize your mobile phone's IMEI code to ensure the device used throughout the loan application process remains consistent, aiding in fraud prevention. Your mobile phone number is not automatically collected for completing the application login page, nor do we store any data pertaining to applicants who are not granted a loan. This information is securely uploaded in an encrypted format to our server located at https://api.tunaycredit.com. The data collected is employed to assess and analyze your behavior and risk profile across multiple loans, to evaluate the potential for legal action if necessary, and to strengthen our measures against fraudulent activities.

View Wi-Fi Connections
Tunay Credit gathers your device's IP address, network type, and Wi-Fi address to aid in the detection and prevention of fraudulent activities. This information is utilized to evaluate potential risks and identify any unusual behavior, thereby enhancing the security of your account. All collected data is securely encrypted and transmitted to https://api.tunaycredit.com for further processing.

User Data Collection and Confidentiality Commitments

We treat any personal data you provide—whether directly or indirectly—with strict confidentiality and in full alignment with applicable legal requirements, including both national and international data protection standards.

As a User of our services, you acknowledge and accept that we may collect a range of personal information, which may include but is not limited to:

- Biometric facial data used for identity verification through facial recognition technology
- Still images or videos of your face to confirm your identity
- Photographic copy of your Aadhaar card
- Photographic copy of your PAN card
- Aadhaar number
- Permanent Account Number (PAN)
- Full legal name
- Residential or mailing address
- Contact number
- Email address
- Details regarding your marital status
- Employment and job-related information
- Living condition data
- Communication identifiers and general identification details
- Geolocation information
- Social media profile information, only if expressly permitted by you

Tunay Credit does not collect references or personal recommendation data that Users may optionally submit during product or service applications.

We obtain your explicit consent for data processing through our website https://api.tunaycredit.com, our IT application (the ''App''), and other electronic communication channels—such as phone, video, or digital means (collectively referred to as the ''Electronic Means''). This consent may be recorded automatically at the time of interaction with these platforms.

The personal data we collect is solely used for providing and managing the services and products offered by Tunay Credit (the ''Services''), in strict adherence to the purposes defined within this Privacy Policy.

All parties involved in managing or processing your data are under binding confidentiality obligations and must operate within the constraints of the data protection laws applicable in the jurisdictions where your data is collected, stored, used, or transferred. Your personal information will never be processed or used for any purposes other than those expressly stated in this Privacy Policy.


Types of Personal Data We Gather

We may collect and process different types of personal information, which could include, but are not limited to, the following categories:

- Full legal name
- Date of birth
- Mobile phone number
- Taxpayer identification number
- Unique identification number (Aadhaar/PAN, depending on the jurisdiction)
- Residential or business address
- Government-issued identification document copy
- Bank account details
- Financial and asset-related information
- Personal references' contact information
- Marital status
- Number of dependents

Tunay Credit collects such personal data through its mobile application, website, or telephone interactions.

You will be asked to provide the above data when you:
- Register in the Tunay Credit mobile app to apply for a loan.
- Reach out to Tunay Credit via phone for support or inquiries.

Circumstances Under Which Personal Data May Be Shared

Tunay Credit may disclose your personal data in the following situations:

- To its parent company, subsidiaries, affiliates, or other entities within the same corporate group.

- To government authorities, regulators, or law enforcement bodies as required by applicable laws and regulations.

- To third-party service providers responsible for loan processing, repayment management, and related financial services.

- In the event of corporate restructuring, such as mergers, acquisitions, or other significant organizational changes.

- To financial institutions or third parties involved in credit portfolio transfers, endorsements, or other financial transactions.

- To business partners for the promotion and distribution of financial products and services that benefit users.

- In any other circumstances where sharing is allowed under the relevant legal framework, including India's data protection and financial regulations.

Tunay Credit remains fully committed to safeguarding your personal data, ensuring confidentiality and security, and adhering to all applicable regulations related to data protection and financial privacy under Indian law.

Cookies and Digital Security Practices

The Controller gathers information through cookies when users visit its website. Cookies are small text files that are stored on the user's device after accessing the Controller's online platform. These files may contain data such as a unique identifier or browsing preferences, which allow us to monitor user behavior and improve service performance and the overall browsing experience. Cookies are restricted to accessing only the information explicitly permitted and cannot retrieve data from the device's storage.

If users prefer to adjust their cookie preferences, they can do so through their browser settings. Furthermore, the Controller's digital platforms may include links to third-party websites that are outside its control. The Controller assumes no responsibility or liability for the content or practices of these external websites.


Purpose of Collecting and Using Personal Data

Tunay Credit collects and processes personal data for the following purposes:

I. Essential Purposes

a. Fulfill contractual obligations arising from service requests and agreements.

b. Verify and authenticate the user's identity, as well as validate the accuracy of the information provided, including personal details, references, guarantors, or co-applicants, as applicable to the contracted service.

c. Administer, operate, and monitor the services requested or availed through Tunay Credit.

d. Assess the user's creditworthiness by analyzing their financial and personal information, including risk evaluation, repayment capacity, transaction status, and other assessments required by applicable financial regulations.

e. Establish and formally recognize the contractual relationship between the user and Tunay Credit.

f. Store user data in our records and maintain documentation, either directly or through authorized third-party service providers.

g. Process user requests submitted through digital platforms, customer support channels, or telephonic communication.

h. Create and manage user profiles within the App, including credit eligibility verification and financial background assessments.

i. Conduct credit checks and obtain credit reports from relevant financial institutions or credit bureaus.

j. Offer service enhancements, upgrades, or extensions to existing financial products.

k. Notify users about Tunay Credit updates, policy changes, and service modifications.

l. Conduct data analysis, market research, and service quality assessments to improve the user experience on our digital platforms.

m. Send service-related communications through digital channels, including transaction updates, notifications, and service advisories.

n. Manage collection and recovery processes for overdue payments.

o. Carry out customer satisfaction and quality assurance surveys to improve service standards.

p. Provide users with financial services and products as per their requests.

q. Inform users about modifications, enhancements, or newly available services that may be relevant to their existing relationship with Tunay Credit.

II. Non-Essential Purposes

a. Send promotional offers, discounts, or marketing-related content regarding financial products, services, and exclusive events that may be of interest to the user.

b. Distribute newsletters, updates, and promotional materials, including benefits and special offers from business affiliates and partners.

Users may opt out of non-essential data processing by sending an email request to [email protected]. If no such request is received, it will be understood that the user consents to the use of their data for the aforementioned purposes.

Availability and Acknowledgment of the Privacy Policy
The Privacy Policy can be accessed at any time through our official website https://api.tunaycredit.com and within the application, even after acceptance. By using our digital services and interacting with the provided features, the Owner explicitly agrees to the terms and conditions set forth in this Privacy Policy. For any questions regarding notifications, please reach out to [email protected].


Procedure for Exercising ARCO Rights and Withdrawing Consent

In accordance with applicable laws, the Owner holds the right to protect their Personal Data, which includes the ability to exercise ARCO Rights (Access, Rectification, Cancellation, and Opposition), as well as the option to withdraw consent at any time. These rights may be exercised directly by the Owner or through a legal representative.
To initiate the process, a formal request should be sent to the Responsible Party's email address at [email protected], accompanied by a copy of a valid official ID or, when applicable, the legal representative's identification and the power of attorney that authorizes them to act on the Owner's behalf. The request must include the following details:
- Full name
- Current residential address
- Contact phone number
- Email address
- Customer ID and details of the relevant product
- A clear indication of the specific ARCO Right being exercised or the intention to withdraw consent
- A brief explanation of the reason for the request

Once the request is received, Tunay Credit will provide a resolution within 20 (twenty) days. If the request is granted, the changes will be made within 15 (fifteen) business days from the notification of the decision. If the request lacks necessary documentation or is incomplete, the Responsible Party will inform the Owner of the missing information within 5 (five) business days. Should the Owner fail to respond within this period, the request will be deemed as not submitted. For requests involving data rectification, the Responsible Party will have 10 (ten) business days from receipt to evaluate and implement the necessary corrections.
The Owner is responsible for ensuring that their Personal Data remains accurate and up-to-date. In the case of an access request, Tunay Credit will provide the requested data either via email or as a simple document copy. Consent for processing Personal Data can only be withdrawn following these procedures, in compliance with applicable laws and regulations.
Tunay Credit reserves the right to deny ARCO Rights requests where permitted by law or regulations.
Should any modification or deletion not impact the ongoing legal obligations between the Owner and the Responsible Party, the Owner may withdraw consent for the processing of their Personal Data without retroactive effects. The withdrawal procedure will follow the same steps as those for exercising ARCO Rights.

Methods to Limit the Use or Disclosure of Personal Data

The Owner has the option to limit the use or sharing of their Personal Data by following the steps specified in the section "Procedures for Exercising ARCO Rights and Withdrawing Consent." The request should include at least the following:

- The Responsible Party's processing of the data as outlined in this agreement;

- Consent for sharing personal data with the Owner; and

- Authorization for the Owner to utilize personal data for agreed services, including big data-based credit validation services.


Modifications to the Privacy Policy

The Controller maintains the right to amend this Privacy Policy at regular intervals to reflect changes in legal requirements, internal policies, or the nature of services provided.

Any such updates to this Privacy Policy will be promptly posted on our official website. The Owner may review the current version by visiting https://api.tunaycredit.com.

Effective Date: July 8, 2025