VastLoan Privacy Policy

This Privacy Policy (the “Policy”) applies to your use of VastLoan, a mobile lending application operated by MANJEET AND FRIENDS LENDING CORPORATION, a corporation duly organized and existing under the laws of the Republic of the Philippines. We value your privacy and are committed to safeguarding any personal data you may provide when using our services. Please read this Policy carefully before proceeding, as it explains how your data is collected, used, stored, and protected while accessing VastLoan. VastLoan may collect personal and device-related information that you voluntarily provide or authorize us to access. This includes, but is not limited to, your full name, contact number, ID details, address, financial data, and mobile device identifiers. Such information is used solely in relation to your loan application and related service processes. Your personal data may also be obtained indirectly through authorized third-party platforms in accordance with your consent, and only to support your use of VastLoan’s financial services. We will retain your information only for as long as necessary to fulfill the stated purposes or as permitted under applicable laws and regulations enforced by relevant agencies such as the Bangko Sentral ng Pilipinas (BSP) and the Securities and Exchange Commission (SEC). By using VastLoan, you agree that the information you provide may be accessed and utilized only for purposes consistent with this Privacy Policy, including risk assessment, customer service, product improvement, and compliance with legal obligations. We will never collect or process your personal data without your express permission. You may also request that we delete your personal information from our system, subject to legal and regulatory limitations. This Policy may be updated or modified at any time. All revisions will be posted within the app, along with the effective date. Your continued use of VastLoan after changes are made signifies your acceptance of the revised terms.

1. Information We Collect

When you use VastLoan, operated by MANJEET AND FRIENDS LENDING CORPORATION, we collect only the information necessary to deliver our services securely and effectively. All data is gathered with your consent and in accordance with applicable privacy laws in the Philippines.All information is collected and transmitted securely via HTTPS to our server at https://api.vastloan.net, using the latest encryption technology. Specifically, we may collect the following categories of personal and device data:

  • Device Identifiers: Android ID, Google Advertising ID (GAID) – used to identify your device uniquely for fraud prevention and service optimization.
  • Installed Applications List: To detect unverified or malicious apps that could compromise your financial safety.
  • Personal and KYC Information: Including your name, contact number, email address, government-issued ID, and other documents you submit to verify your identity, for the purposes of conducting credit checks to assess or verify your credit/financial worthiness and to assist other financial institutions in doing the same; as well as to detect and investigate crime, fraud, or illegal activities, and to utilize and disclose such information for investigation, prevention, prosecution, and compliance with sanctions, including Know Your Customer (KYC) requirements.
  • Bank or Wallet Account Details: Required to disburse approved loan amounts.
  • Device Specifications: Such as manufacturer, device model, operating system, memory status, display metrics, CPU and other hardware-related data for security and performance tracking.
  • Connectivity Details: Including WiFi and internet status, collected to enhance account security.
  • Emergency Contacts: Manually provided by the user, used only in the context of loan recovery or fraud prevention.
  • SMS Information: We filter SMS locally, strictly processing only financial messages from recognized sources (e.g., GCash, Maya, banks) for credit risk evaluation. Private or unrelated messages are not collected or transmitted.
  • Other information that you provide voluntarily or authorize us to access for a smoother loan experience.

    • 2. Permissions and Their Usage

    1. CAMERA: Used solely to capture and upload identity verification documents during the loan application process.
    2. LOCATION: Accessed to ensure account safety by verifying login attempts from different locations. Collected data may include GPS coordinates, time, and method of positioning.
    3. INSTALLED APPS: Accessed to build your credit profile and assess risk. This includes metadata like app names and package identifiers.
    4. SMS: We do not upload all SMS content. Only financial or verification-related messages are filtered locally, never stored beyond the necessary scope. Used for credit scoring and fraud checks.
    5. NOTIFICATIONS: This permission allows us to send you relevant updates like loan status, repayment reminders, and service announcements. We do not collect personal data via notifications.
    To offer seamless access and personalized services, VastLoan requests the following permissions on your device:

    3. How We Share Your Personal Information

    1. Internal Entities: VastLoan’s affiliates, parent company, and authorized personnel.
    2. Third-Party Partners: Service providers for data processing, credit scoring, customer support, IT infrastructure, and payment gateway services.
    3. Regulatory Authorities: Government or law enforcement agencies when required by law.
    4. Credit Bureaus: For credit checks and reporting of non-payment or overdue accounts.
    5. Business Partners: In case of joint services or promotions.
    6. Debt Collection Agencies: To collect outstanding dues or enforce payment obligations.
    7. Others: As required to protect our rights, ensure product functionality, or with your explicit consent. We ensure all third-party processing complies with the Data Privacy Act and contractual safeguards are in place.

    4. Your Rights

    Under the Philippine Data Privacy Act, you are entitled to the following rights:

    1. 4.1 Right to be informed: Know how your data is collected and processed.
    2. 4.2 Right to access: View the data we collect about you.
    3. 4.3 Right to object or withdraw consent: Revoke access to specific permissions (e.g., SMS, contacts).
    4. 4.4 Right to erasure or blocking: Request deletion of your data, subject to legal retention limits.
    5. 4.5 Right to rectify Request correction of inaccurate or outdated information.
    6. 4.6 Right to data portability: Request your data in a structured format.
    7. 4.7 Right to file a complaint: Lodge a complaint with the National Privacy Commission (NPC) or our internal DPO.
      8. To exercise your rights, please contact us using the details provided below.

    5. Security of Your Personal Information

    We employ strong administrative, technical, and physical safeguards to protect your data, including:

    1. Encrypted data transmission (SSL)
    2. Two-factor authentication
    3. Role-based access control
    4. Periodic audits and vulnerability testing
    While we strive for 100% protection, no method of transmission over the internet is completely secure. We continually update our security practices based on risk assessments.

    6. Retention of Personal Information

    We retain your data only as long as necessary to fulfill the purposes stated above, or as required by law. After the retention period, your data will be securely deleted or anonymized.

    7. Withdrawal of Consent

    You have the right to:

    1. You can revoke your consent to data access (e.g., SMS, location, contacts) anytime through:
    2. App settings (permissions toggle)
    3. Emailing our Data Protection Officer
    4. Uninstalling the VastLoan app
      5. Note: Some features may become unavailable after consent is withdrawn.

    8. Cookies and Tracking Technologies

    We use cookies and similar technologies (e.g., analytics tools) to improve user experience and service functionality. You may disable cookies via your browser or mobile settings. However, doing so may affect app performance.

    10. Removal of Personal Data

    If you wish to delete your VastLoan account and associated personal data, you may do so directly within the app through the “Delete Account” feature or by submitting a request via email or customer service. Upon receiving a valid deletion request, VastLoan will permanently remove your personal data from our active systems, except where data retention is required by applicable laws or regulatory obligations. This empowers you to exercise control over your personal data and digital footprint.

    Important Considerations:

    Irreversible Action: Once your data and account are deleted, the action is final and cannot be reversed. All account-related data—including your loan history, profile settings, and usage records—will be permanently erased. Re-registration will require starting as a new user.

    Regulatory Compliance: In compliance with applicable financial regulations, VastLoan may retain certain minimal data (e.g., transaction logs, audit trails) for a legally prescribed period, even after your account is deleted

    11. Updates to this Privacy Policy

    We may revise this Policy from time to time. The updated version will be posted in the app, and your continued use of the services constitutes your acceptance of the changes. We encourage you to check this page periodically.

    12. Inquiries and Complaints

    For inquiries, corrections, or complaints, you may contact our Data Protection Officer (DPO):

    1. Data Protection Officer
    2. Email cs@vastloan.net
    3. Phone 9319887017
    4. Address 6795 Ayala Avenue, corner V.A. Rufino St, Makati, 1209 Metro Manila, Philippines

    13. Consent and Acknowledgment

    By using VastLoan, you confirm that you have read, understood, and agreed to the terms of this Privacy Policy. If you do not agree, please refrain from using our app and services.

    \