Last updated: 29 August 2026
Applying for a loan means sharing information that matters to you. This policy explains what we collect, why we need it, who we share it with, how long we keep it, and what you can ask us to do with it. It applies to the website www.rapidooloans.com and to our loan application and servicing processes.
Rapidoo Loans operates as a digital lending platform under RBI-regulated NBFC guidelines through Trivani Vinimay Private Limited, registered under RBI Registration No. B.05.05894. We handle your information in accordance with the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000 and rules made under it, and the Reserve Bank of India's directions on digital lending.
We collect only what we need to assess an application, meet our legal obligations, and service a loan.
We do not collect your contact list, call logs, photo gallery, files or precise location, and we do not operate a mobile application that could request such permissions. Any app claiming to do so in our name is not ours.
Most of it comes directly from you, through the application form and the documents you upload. Some comes from third parties acting on our instructions or under law: credit information companies, KYC and identity verification providers, account aggregators where you have consented, and payment partners confirming a transaction. Where we receive information about you from a third party, we use it only for the purposes described in this policy.
To verify who you are and complete KYC as required by law.
To assess your creditworthiness and decide whether a loan can be offered, and on what terms.
To disburse an approved loan to your bank account and to collect repayments.
To service your account: statements, repayment reminders, and responding to your queries and complaints.
To detect and prevent fraud, money laundering and misuse of the platform.
To meet our reporting, audit and record-keeping obligations to the RBI, credit information companies and other authorities.
To improve the website and our processes, using aggregated or de-identified data wherever possible.
We process your information on the basis of the consent you give when you submit an application, and where processing is necessary to perform our contract with you or to comply with law.
You may withdraw your consent at any time by writing to us. Withdrawal applies going forward and does not affect processing already carried out. Please note that if you withdraw consent while an application is in progress, we will not be able to continue assessing it; and if you have an active loan, we must continue to process certain information to service that loan and to meet our legal obligations, regardless of withdrawal.
We do not sell your personal information, and we do not share it for third-party advertising. We share it only as follows:
With our NBFC lending partner, Trivani Vinimay Private Limited, as the lender of record for your loan.
With credit information companies, to obtain your credit report and to report your loan and repayment conduct, as required under the Credit Information Companies (Regulation) Act, 2005.
With service providers who work on our behalf under contract, such as KYC and verification agencies, payment gateways, banks, cloud hosting providers and communication platforms. They may use the information only for the service they provide to us.
With regulators, courts, law enforcement and other authorities, where disclosure is required or permitted by law.
With professional advisers and auditors, where needed for audit, legal advice or dispute resolution.
Your information is stored and processed in India. Where a service provider processes it outside India, we require contractual safeguards consistent with Indian law.
We keep your information for as long as your loan is active, and after closure for the period required by RBI directions, KYC and anti-money-laundering rules, tax law and limitation periods for legal claims. For applications that are declined or abandoned, we retain a limited record for fraud prevention and audit. When a retention period ends, we delete the information or de-identify it so it can no longer be linked to you.
We use encryption in transit, access controls limiting staff access to what their role requires, audit logging, and contractual security obligations on our service providers. No system can be guaranteed completely secure, so we also ask you to play your part: keep your login credentials and OTPs private, and be alert to anyone contacting you in our name asking for them. If we become aware of a personal data breach affecting you, we will notify you and the Data Protection Board as required by law.
This website uses cookies and similar technologies to keep the site working correctly, remember your preferences, and understand in aggregate how the site is used so we can improve it. You can block or delete cookies through your browser settings. Blocking them may prevent parts of the site from working as intended.
Subject to the conditions and exemptions in applicable law, you may ask us to:
Confirm what personal information we hold about you and how it is being processed.
Correct or complete information that is inaccurate or out of date.
Erase information we no longer have a legal or business reason to keep.
Withdraw a consent you previously gave.
Nominate another person to exercise these rights on your behalf in the event of your death or incapacity.
To exercise a right, write to us using the contact details below. We may need to verify your identity before acting on a request. We will respond within the timelines set by law, and if we cannot do what you have asked, we will explain why.
Our services are intended for adults. We do not knowingly collect personal information from anyone under 18. If you believe a minor has provided us information, contact us and we will delete it.
We may update this policy as our services or the law change. The current version is always published on this page with its last updated date. Where a change materially affects how we use your information, we will bring it to your attention through the website or a direct communication.
For any question about this policy, to exercise a right, or to raise a privacy concern, contact us using the details below. If you are not satisfied with our response, you may escalate through our Grievance Redressal process, and thereafter to the Data Protection Board of India.