PRIVACY POLICY
Loanvittus.com
Operated by: Vittus Fintech Private Limited
Website: www.loanvittus.com
Last Updated: 01 July 2026
Platform Structure — Read This First
Vittus Fintech Private Limited (“Vittus Fintech”, “Company”, “we”, “us”, “our”) operates two distinct products. This Policy governs both and clearly separates what each one does, because they are not the same service:
| Website (loanvittus.com) | Mobile App (Loan Vittus) | |
| What it does | Loan Against Mutual Funds (LAMF) facilitation through our partner; consultation and documentation-readiness services for Personal and MSME loans; DPR/CMA tools; calculators; educational content | Detailed Project Report (DPR) generation; CMA Data generation; subsidy eligibility assessment; EMI calculator and Funding Readiness Indicator; business consultation booking; educational content |
| Does it process loans? | LAMF only as a facilitator, not a lender. We do not sanction credit or disburse funds; all credit decisions are made by our regulated lending partner. For all other loan types, the Website provides consultation and preparation services only and does not submit applications. | No. The App contains no loan application, loan facilitation, or lending feature of any kind, and does not transmit your data to any lender or NBFC. |
| Governing sections | Sections marked [WEBSITE] | Sections marked [APP] |
In case of any conflict between this Policy and any other content on the Platform, this Policy prevails.
PART B — PRIVACY POLICY
B1. Introduction
This Privacy Policy explains how Vittus Fintech collects, uses, stores, shares, and protects personal data across the Website and the App. For the purposes of the Digital Personal Data Protection Act, 2023 (“DPDP Act”), the Company is the Data Fiduciary and you are the Data Principal.
Reminder of scope: loan-related data (Sections B3.2 and B4, “Loan Application Data”) is collected only through the Website, and only for the Loan Against Mutual Funds (LAMF) facilitation journey. The App never collects loan-application data and never shares your data with a lender or NBFC, because it has no lending feature. See Section 0
B2. Consent
By providing personal data, you give free, specific, informed, and unambiguous consent to the processing described here. You may withdraw consent anytime by writing to our Grievance Officer (Section B10); see Section B8 for consequences. Purpose-specific consent (e.g., marketing) is obtained separately.
B3. Personal Data We Collect
B3.1 Identity and Contact Data:-
Name, mobile number, email, business name/address, your role in the business.
B3.2 Loan Application Data [WEBSITE ONLY]:-
PAN, Aadhaar (masked/last 4 digits, or via DigiLocker/UIDAI consent flow), income details, bank statements, ITRs, GST filings, employment/business details, credit-related information collected only when you apply through the Website for facilitation of a Loan Against Mutual Funds application to our lending partner
B3.3 Business and Financial Inputs :-
Data you enter to generate reports turnover, costs, capital requirement, employment, business vintage, GSTIN used for
DPR/CMA/calculator tools on either Website or App. Self-supplied and not independently verified.
B3.4 Documents You Upload:-
Business/financial documents you choose to upload for report generation, or (Website only) LAMF facilitation.
B3.5 Transaction and Usage Data:-
Services used, reports generated, calculator inputs, in-app/on-site communications, service history.
B3.6 Device and Technical Data:-
IP address, device identifier, OS, app/browser version, approximate geolocation (from IP), session logs for security, fraud prevention, and analytics
B3.7 App Device Permissions [APP ONLY]:-
Camera (to capture business documents for inclusion in your reports) and OTP autofill as supported by your device’s operating system the App does not read or access your SMS inbox, and does not access contacts, gallery, call logs, or background location.
B3.8 Sensitive Categories and Children's Data:-
We do not process data on religion, caste, or political opinion. Aadhaar (Website only) is collected strictly via consent based flows compliant with the Aadhaar Act, 2016. The Platform is not intended for anyone under 18; we do not knowingly collect minors’ data.
B4. How We Share Data
| Recipient | Purpose |
| Lending partner (and its regulated lenders) | Website only to assess and process your Loan Against Mutual Funds application |
| Technology service providers | Cloud hosting, analytics, communications, support (under data processing agreements) |
| Professional advisers | Delivering consultation services you requested |
| Regulators, law enforcement, courts | Legal compliance |
B5. Purposes of Processing
| Purpose | Description |
| LAMF facilitation [WEBSITE ONLY] | Presenting your application to our lending partner, tracking status |
| DPR/CMA/Subsidy/Calculator services | Generating reports and assessments |
| Account operation | Registration, OTP authentication, fraud prevention |
| Service communications | Transactional SMS/email about your account or requests |
| Legal/regulatory compliance | Record-keeping, responding to lawful requests |
| Analytics and improvement | Aggregated, de-identified analysis |
B5.1 No cross-marketing without separate consent.
We will not use service data to market other products (including, for App users, Website loan services) without your separate,
express consent obtained through a distinct notice. Withdrawing marketing consent does not affect an in-progress service.
B6. Storage, Localisation, Security, Retention
B6.1 Data is stored on secure servers located within India.
B6.2 Security measures include TLS/SSL in transit, encryption at rest for sensitive fields, role-based access control, firewalls, logging/monitoring, and periodic security review..
B6.3 Breach notification:
We will notify affected users and the Data Protection Board of India within DPDP Act timelines, and CERT-In where required under the CERT-In Directions dated 28 April 2022.
B6.4 Retention:
| Data Category | Retention Period |
| Account/profile data | Until account deletion, plus a short audit buffer |
| Loan Application Data (Website) | Per regulatory retention requirements applicable to our lending partner, typically up to 8 years after loan closure/rejection |
| Reports and uploaded documents | Until you delete them or close the account, unless tied to an active engagement |
| Invoice/tax records | 8 years (Income-tax/GST requirements) |
| Transaction and security logs | Up to 180 days, longer where legally required |
| Marketing consent records | Until withdrawn, plus 2 years audit trail |
Data is securely deleted or irreversibly anonymised on expiry of the applicable period.
B7. Your Rights (DPDP Act, 2023)
Access, correction, erasure (subject to legal retention), consent withdrawal, grievance redressal, and nomination rights are available to all users of both the Website and the App. Email: grievance@loanvittus.com with subject “DPDP Rights Request.”
B8. Consequences of Withdrawal/Deletion
Withdrawing consent or requesting deletion during an active service (a LAMF application on the Website, or report generation on either product) may mean we cannot continue that service. Legally mandated records (e.g., invoices, and for the Website lending-partner regulatory records) continue to be held for the mandated period.
B9. Third-Party Links
Government portals (Udyam, PMEGP) may be linked for information. On the Website only, the LAMF application flow operated with our lending partner is linked; its privacy practices are its own and should be reviewed separately. The App links to no lending partner.
B10. Grievance Officer / DPDP Contact
| Grievance Officer | Vittus Fintech Private Limited |
| Name | Jaiyash Bhutada |
| Designation | Chartered Accountant |
| grievance@loanvittus.com | |
| Phone | +91 76204 69659 |
| Working hours | Monday-Saturday, 10:00 AM-6:30 PM IST (Sunday closed) |
| Registered office | 377, Nakshatra, 2nd Floor, Block B, Gandhi Nagar, Nagpur – 440010 |
We acknowledge requests within 48 hours and aim to resolve within 30 days. Unresolved complaints may be escalated to the Data Protection Board of India.
B11. Business Transfer
In a merger, acquisition, investment, or asset transfer, your data may transfer to the successor entity, subject to the same protections under this Policy.
B12. Changes to This Policy
We may update this Policy periodically. Material changes are notified on the Website/App with a revised “Last Updated” date. Continued use after an update constitutes acknowledgement.
B13. Governing Law and Jurisdiction
Governed by the laws of India. Subject to applicable consumer protection law and the DPDP Act grievance mechanism, courts at Nagpur, India have exclusive jurisdiction.
Vittus Fintech Private Limited
CIN: U66190MH2026PTC465595
Registered Office: 377, Nakshatra, 2nd Floor, Block B, Gandhi Nagar, Nagpur – 440010
Email: grievance@loanvittus.com | Phone: +91 7620469659