Privacy Policy

Information We Collect

This portal collects only the personal information required to process loan applications under government schemes. We collect:

• Full name, date of birth, gender, and residential address
• Mobile number (used for OTP verification and SMS notifications)
• Aadhaar number — collected for KYC purposes only, stored in encrypted form
• Bank account number and IFSC code — stored encrypted, used only for loan disbursement
• Loan application data, uploaded documents, and caste/income certificates

How We Use Your Information

• Processing and evaluating loan applications submitted through this portal
• OTP verification during registration and login
• Communicating application status, sanction, disbursement, and EMI reminders via SMS
• Compliance with Government of Maharashtra reporting requirements
• Maintaining an audit trail as required by CERT-IN guidelines (180-day retention)

Data Storage and Security

All data is stored on government-approved servers located within India. Sensitive fields — including Aadhaar numbers and bank account details — are encrypted at rest using AES-256-GCM. Passwords are hashed using bcrypt and are never stored in plaintext. All data in transit is protected by TLS 1.3. Only authorised staff with role-based access can view applicant records, and even then, sensitive fields are shown in masked form.

Aadhaar Data Handling

Aadhaar numbers are collected solely for KYC verification in accordance with the Aadhaar (Targeted Delivery of Financial and Other Subsidies, Benefits and Services) Act, 2016. Aadhaar data is never stored in plain text, is never shared beyond what is required for UIDAI verification, and is handled in full compliance with UIDAI guidelines and circulars.

Third-Party Sharing

We do not sell or rent your personal data. Data is shared with the following parties only to the extent required for the stated purpose:

• Bank of Baroda — for loan disbursement to your bank account
• UIDAI — for Aadhaar-based identity verification (read-only, consent-based)
• SMS Gateway (authorised vendor) — for OTP delivery only; no personal data retained
• Government of Maharashtra departments, as required for audit and compliance reporting

Your Rights

Under the Digital Personal Data Protection Act, 2023, you have the right to access, correct, or request erasure of your personal data (subject to legal retention requirements). To submit a data access or correction request, write to shabarinsk@gmail.com with the subject line "Data Request — [Your Application ID]".

Compliance

This portal is operated in compliance with the Information Technology Act, 2000 and associated Rules, the Guidelines for Indian Government Websites (GIGW 3.0), and the Digital Personal Data Protection Act, 2023. For any privacy-related concerns, contact the office at 0253-2315860 or write to Shabari Adivasi Vitta Va Vikas Mahamandal, 4th Floor, Tribal Development Department, Nashik — 422001.