Privacy Policy

1. Overview

This Privacy Policy explains how GoldLoanPro ("we", "us", "our") collects, uses, and protects information when you use our gold loan management platform ("the Service"). It applies to information about your organization's users (account holders) and to the customer data your organization stores in the Service.

2. Information we collect

When you register and use the Service, we collect:

• Account information — name, email address, organization details, and role, provided during registration or team invites.
• Customer Data — information your organization enters about its own borrowers (e.g. KYC details, gold loan records, repayment history) for the purpose of managing your business.
• Billing information — subscription plan and payment status. Card and payment details are handled directly by our payment processor, Razorpay, and are not stored on our servers.
• Usage data — log data such as IP address, browser type, and pages accessed, used for security and to improve the Service.

3. How we use information

We use the information we collect to:

• Provide, operate, and maintain the Service for your organization
• Authenticate users and enforce access controls between organizations
• Process subscription payments and send billing-related communications
• Send account-related emails (e.g. email verification, password reset, team invites)
• Monitor, secure, and improve the Service

We do not sell Customer Data, and we do not use your organization's Customer Data for advertising.

4. Data sharing

We share information only with service providers who help us operate the Service under appropriate confidentiality terms, including:

• Cloud infrastructure and database hosting providers
• Razorpay, for payment processing and subscription billing
• Email delivery providers, for transactional emails

We may also disclose information where required by law or to protect the rights, safety, and security of our users and the Service.

5. Data storage and security

Data is stored on encrypted infrastructure with access controls restricting it to the organization (tenant) it belongs to. We use industry-standard measures — including encryption in transit, role-based access control, and audit logging — to protect information against unauthorized access.

6. Data retention

We retain account and Customer Data for as long as your organization's account is active, and for a reasonable period afterwards to comply with legal, accounting, or regulatory obligations. You may request deletion of your organization's data after account closure, subject to any legal retention requirements.

7. Your rights

Depending on your location, you may have rights to access, correct, or request deletion of your personal information. Account holders can update their profile information directly in the Service. For other requests, contact us using the details below.

8. Cookies

We use essential cookies to keep you signed in and to maintain session security. We do not use third-party advertising or tracking cookies.

9. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "last updated" date above.

10. Contact / Grievance Officer

For privacy-related questions or requests, including data access or deletion requests, contact us at support@goldloanpro.in.