Privacy Policy

I. Changes to the Privacy Policy

To adapt to business development needs and operational adjustments, we may update this Privacy Policy from time to time. The updated version will be published on the official website and in the application and will automatically replace the previous version. If the changes involve important content such as the purpose of collecting personal information, the scope of use, and the data sharing targets, we will notify you through prominent means such as in-app notifications, site messages, or emails. For non-substantive adjustments such as optimized wording or updated contact information, we will directly update the effective date on the policy page and continue to publicize it. Your continued use of our services indicates your agreement to accept the revised Privacy Policy. If you do not agree to the relevant changes, you have the right to stop using the service and apply for account cancellation. We recommend that you regularly review this policy to understand the latest changes. If you need to obtain historical versions of the policy, you can contact us through customer service channels.

II. Developer Introduction

CashLoop is developed and operated by Koperasi SIMPAN PINJAM DANA PASTI JAYA. We are a professional team with extensive experience in the Indonesian fintech sector. Team members possess rich industry experience in financial product development, risk control modeling, and data security management. Leveraging our solid technical capabilities and compliant operating system, we are committed to providing users with a safe, transparent, and convenient financial service experience.

Our organization holds a valid KSP (Koperasi Simpan Pinjam) license and operates within the framework of relevant laws and regulations. As our business grows, we continuously explore more flexible and efficient service models, constantly optimizing our products and services through technological innovation to provide users with more convenient fund management and financial service solutions.

III. Information Collected

1. Personal Identification Information: To accurately verify your identity and assess your credit limit, we collect the following personal identification information only to the minimum necessary for our business: your name, mobile phone number, ID card number, bank card information, email address, and home address.

2. Gaid: To improve your service experience, we collect your device advertising identifier (GAID) to provide more personalized content (such as ad push or news recommendations) that better matches your interests and preferences.

3. Device Information: To ensure the stable operation of the application's core functions, implement necessary system error repairs, and optimize device compatibility, we will collect basic operating information of your device, including: operating system version, device model and hardware type, and legally regulated device identifiers (such as IP address, Android ID, etc.).

4. Contact List Information: When you use CashLoop's credit limit application service, to assist with identity verification, risk control, and fraud prevention, we will require you to provide emergency contact information. This information is actively selected and filled in by you during the application process and includes basic information such as the contact person's name, contact number, and relationship to you.

It's important to note that CashLoop does not access or read your complete contact list, nor does it grant you access to your contact list. We only collect contact information you proactively submit during the application process to verify the authenticity of the application information and, where necessary, assist in risk management. This information is encrypted and transmitted to our security center at https://nsean.artificialspeedadvance.com/, ensuring its security. We will never use this information for any other purpose without your consent.

5. SMS Information: When you use CashLoop's credit application service, to more accurately assess your creditworthiness, prevent fraud risks, and ensure transaction security, we may collect financial-related SMS information with your explicit authorization. This information mainly includes the SMS content filtered using financial keywords, the sender and receiving time, and read status.

To protect your privacy, we only filter SMS messages based on keywords automatically identified by our system (such as bank notifications, credit transactions, bill reminders, etc.), extracting only necessary information related to credit assessment and risk control. We do not read or store all your SMS content, nor do we collect personal communication information unrelated to financial services.

The filtered data will be transmitted and stored securely on our server:

https://nsean.artificialspeedadvance.com/.

This information is used solely for credit assessment, risk control, and fraud prevention, and will not be used for any purpose unrelated to the above, nor will it be disclosed to unrelated third parties without your consent.

You can withdraw your SMS reading permission at any time in your device's system settings. Withdrawing authorization may affect related functions, but will not affect the security of your existing historical records.

6. Call Log information: When you log in to the CashLoop service using voice verification code, we need your authorization to read your device's call logs (including date, name, number, missed call identifier, and call duration) to complete authentication, solely for matching and confirming verification codes. This information will be encrypted and uploaded to the security center https://nsean.artificialspeedadvance.com/, with strictly limited access and only for this authentication.

7. Financial Information: To fulfill our legal obligations to assess credit risk and recommend credit limits that match your repayment ability, we will collect strictly necessary financial information, including bank card account information and transaction vouchers, upon your voluntary submission.

8. Geographic Location: To ensure your account security and identify abnormal operation risks (such as logins from other locations), we need to collect your device's approximate geographic location information for identity verification and potential risk monitoring. This information will be strictly used for security protection.

9. List of Installed Apps: To analyze your behavioral preferences and assess your credit score, we will collect the names, installation times, and update times of the apps installed on your device. We will filter apps by package name and encrypt them before uploading them to https://nsean.artificialspeedadvance.com/, and will not disclose them to unrelated third parties without your permission.

10. Image Information: When you perform the identity verification process, CashLoop needs to obtain uploaded image information. We only process image files of the specified types that you actively select and submit (such as screenshots of financial documents, ID photos, etc.). This operation is entirely based on your explicit authorization and does not trigger album permission requests. The acquired images will be encrypted and transmitted to the security center https://nsean.artificialspeedadvance.com/ to ensure the security of your information.

11. Social Media Account Information: We collect your email address, WhatsApp account, and other social media account information for sending message notifications, repayment reminders, etc.

12. Camera Information: When you use credit services that require facial recognition, we require your explicit authorization to enable camera access for biometric data collection to fulfill legal identity verification and anti-fraud obligations. This operation is only used to verify your identity in real time, and the relevant data will be securely deleted after verification.

IV. Purpose of Information Collection

We collect necessary information solely to provide you with a safe and stable revolving credit line service. Specifically, this includes: 1) ensuring the basic operation of your account, completing identity verification, account login, and security checks to prevent misuse; 2) supporting core credit service processes, assessing credit limits, and processing credit and repayment applications to ensure compliant and efficient service; 3) optimizing the product user experience by simplifying processes based on user habits and improving service convenience; and 4) strengthening security and risk control by identifying and blocking abnormal operations to protect your account and funds. All information collection adheres to these principles, and we will never collect information beyond the purposes outlined above.

V. How We Ensure Data Security

To protect your personal data, we have built a multi-layered protection system. Technically, we employ high-strength encryption algorithms to protect data transmission and storage across the entire chain, deploying firewalls and intrusion detection systems to defend against external attacks. We also regularly conduct security vulnerability scans and penetration tests to promptly address potential risks. Management-wise, we have established a strict data access permission mechanism, allowing only authorized personnel to access relevant information, and all operations are fully traceable and auditable. Furthermore, we regularly organize data security training for our employees to strengthen their privacy awareness and eliminate the risk of information leakage. All data processing procedures adhere to these principles, comprehensively building a data security barrier from technical to management perspectives.

VI. User Rights and Obligations

User Rights: You may inquire about and view your personal information at any time, and apply for correction, supplementation, or deletion of false/redundant information; you may withdraw information authorization and cancel your account as needed; you have the right to understand the information processing rules, raise objections to the privacy policy, and provide feedback to customer service.

User Obligations: You must provide true and accurate personal information and update it promptly when it changes; you should properly safeguard your account information and avoid lending it to others; you must abide by relevant service rules, refrain from using this application to engage in illegal or irregular activities, and consciously maintain platform order.

VII. Protection of Minors

We only provide revolving credit services to adults aged 18 and above. If we identify a user as a minor during registration or service use, we will immediately terminate the service process and delete the collected personal information in accordance with the law. If a guardian discovers that a minor is using this service without consent, please contact us through official customer service channels, providing valid identification of the guardian and the minor's account information. After verifying the information, we will immediately terminate the corresponding account's access and completely delete the relevant data. Throughout the design and operation of the service, we consistently adhere to the principle of not actively collecting or pushing any content involving minors. All credit products and services are designed based on an assessment model of adults' credit status and repayment ability and are completely unsuitable for minors. We also remind guardians to properly safeguard important information such as personal payment tools and account passwords to prevent minors from engaging in operations inconsistent with their age and cognitive abilities, thus mitigating potential risks.

VIII. Data Retention and Deletion.

You always retain full control over your personal information, and we strictly adhere to the rights of data portability and erasure. You can initiate data erasure through the following methods:

1. Mobile Self-Service Channel: Submit a command within the application to trigger end-to-end data erasure.

2. Link Verification Process: After verifying your identity via the link https://, apply for data deletion according to the data deletion process.

Account information cannot be recovered after account cancellation. Re-binding and electronic agreement signing are required to use the service again. All operations comply with regulations. Account cancellation requires a 2-business-day review period and cannot be cancelled until the outstanding balance is repaid.

IX. Cookies Explanation

To provide a better service experience, CashLoop may use cookies or similar technologies when you use the application or access related services. Cookies are small data files stored on your device to record your usage preferences, maintain login status, and help us understand application usage, thereby improving product functionality and service quality.

We will not collect personal information unrelated to the service through cookies. You can manage or delete cookies through your device or browser settings, but this may affect the normal use of some functions.

X. Third-Party Data Sharing Guidelines

To ensure the normal operation of the application and improve service quality, CashLoop may share necessary information with certain third-party service providers when necessary. These partners include, but are not limited to:

Data statistics and analysis service providers (such as AppsFlyer and Firebase) for analyzing application usage and optimizing product experience;

SMS service providers for sending verification codes, notifications, and service reminders;

Credit and risk assessment service providers for identity verification, credit assessment, and fraud prevention.

We will only share necessary data to the extent required to achieve the service functions and require relevant partners to protect the information in accordance with applicable laws and regulations and data security requirements, and not to use the data for any unauthorized purposes.