This Privacy Policy ("Policy") explains how Aeternum Tech Private Limited ("ZOROPE", "we", "us" or "our"), a company incorporated under the Companies Act, 2013 and having its registered office at Rz H-4/73, F. No-302, Mahavir Enclave, Bengali Colony, Palam Village, South West Delhi, New Delhi, Delhi, India, 110045, collects, uses, stores, shares and protects personal data when you access or use https://Zorope.com/(the "Website") or use services facilitated through the Website.
Zorope acts as a Lending Service Provider ("LSP") to lending institutions regulated by the Reserve Bank of India ("Lending Partner(s)"). Zorope is not a bank or Non-Banking Financial Company ("NBFC") and does not itself sanction, fund or disburse loans. The applicable Lending Partner is responsible for the lending decision and the loan relationship, and its identity is disclosed during the relevant loan journey and in applicable loan documentation.
This Policy applies to personal data processed by Zorope in connection with the Website and ZOROPE's LSP services. A Lending Partner or other third party may separately process your personal data under its own privacy notice or legal obligations.
This Policy is intended to be read with ZOROPE's Terms & Conditions, Grievance Redressal Policy and Cookie Policy. Where consent is required, ZOROPE will seek it through a clear, specific and affirmative action. Merely visiting the Website does not constitute consent to every type of processing described in this Policy.
1. Applicable Legal and Regulatory Framework
ZOROPE processes personal data in accordance with applicable Indian law and regulatory requirements, including, to the extent applicable and in force:
- The Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025, together with notifications issued thereunder;
- The Information Technology Act, 2000 and applicable rules made thereunder, including the SPDI Rules, where applicable;
- The Reserve Bank of India (Digital Lending) Directions, 2025 and other applicable RBI directions governing digital lending and Lending Service Providers; and
- Applicable telecom and commercial communication requirements, including TRAI customer-preference and consent requirements.
2. Scope of this Policy
This Policy applies to visitors, registered users and loan applicants who use the ZOROPE Website or interact with ZOROPE in connection with a loan application, onboarding, verification, servicing support, repayment-related assistance, customer support or other LSP services.
ZOROPE's Website is intended for individuals who are at least 18 years of age and legally capable of entering into a contract.
3. Personal Data We May Collect
We collect personal data only where it is reasonably required for a disclosed purpose. Depending on the stage of your interaction with ZOROPE, the categories may include:
| Category | Examples |
|---|---|
| Identity and profile data | Name, date of birth, gender where required, photograph/selfie, PAN details and other identification information required for onboarding or verification. |
| Contact data | Mobile number, email address, residential or correspondence address, city, state and PIN code. |
| KYC and verification data | KYC status, masked or permitted identity-document details, verification results, e-Sign/e-Mandate records and other KYC outputs received from authorised providers or the applicable Lending Partner. |
| Financial and employment data | Bank account details, bank statements or account information made available through authorised channels, salary/income information, employer or occupation details, employment status and related financial information. |
| Credit information | Credit score, credit report or credit-history information obtained from a Credit Information Company where permitted and with applicable authorisation/consent. |
| Loan and transaction data | Application reference, requested loan details, application status, sanction/disbursal/repayment status and servicing information received from or shared with the applicable Lending Partner. |
| Device, browser and security data | IP address, browser type, operating system, device/session identifiers, access timestamps, security logs and other technical information used to operate and secure the Website and detect fraud. |
| Marketing and attribution data | Referral source, landing page, campaign/UTM parameters, click identifiers, session information and similar attribution data, subject to applicable cookie and consent choices. |
| Communications and support data | Emails, support requests, complaint records and call recordings where calls are recorded after appropriate notice. |
| Cookie and website usage data | Cookie identifiers, consent preferences, pages viewed, interactions and website-performance information as described in our Cookie Policy. |
ZOROPE does not sell personal data.
4. Data We Do Not Access from Your Device
ZOROPE does not access your phone contact list, call logs, private SMS messages, files/media, telephony functions or installed-application list for the purpose of providing the Website-based lending journey.
Where a browser permission such as camera, microphone or location is genuinely necessary for onboarding or KYC, access will be need-based, limited to the relevant purpose and requested only after an appropriate notice and explicit consent. ZOROPE does not continuously track precise location for lending purposes.
ZOROPE does not store biometric data in its systems. Where biometric or video-based identity verification is lawfully used by an authorised provider or the Lending Partner, the processing and storage are governed by applicable law and the relevant provider/Lender requirements.
5. How We Collect Personal Data
- Directly from you when you register, verify your mobile number, complete an application, provide documents or information, use a consent-based data flow, or contact support.
- Automatically from the Website through cookies, logs and similar technologies, subject to applicable cookie and consent settings.
- From the applicable Lending Partner in connection with your application, loan status, servicing or grievance.
- From authorised third parties such as KYC/identity-verification providers, e-Sign/e-Mandate providers, Account Aggregators or banking-data providers, payment/service providers, fraud-prevention providers and Credit Information Companies, where permitted by law and applicable consent.
- From public or regulatory sources where lawful and reasonably necessary for compliance, fraud prevention or verification.
6. Why We Process Your Personal Data
Depending on the service requested and the permissions given by you, ZOROPE may process personal data for the following purposes:
- To create and secure your ZOROPE account and verify your registered mobile number.
- To facilitate identity verification and KYC requirements applicable to the relevant Lending Partner.
- To facilitate your loan application and transmit information to the applicable Lending Partner.
- To support credit assessment, fraud detection, risk assessment and verification carried out by or for the Lending Partner.
- To facilitate permitted digital documentation, e-Sign, mandates, disbursal and repayment-related servicing.
- To provide application-status information, customer support and grievance redressal.
- To prevent, detect and investigate fraud, impersonation, cybersecurity incidents, money laundering or other unlawful activity.
- To maintain audit trails, records and evidence required for legal, regulatory, contractual or dispute-resolution purposes.
- To operate, secure, troubleshoot and improve the Website and its user experience.
- To measure marketing attribution and campaign effectiveness where permitted by your cookie and communication choices.
- To send service, transactional and regulatory communications and, where you have provided the required consent, promotional communications.
- To comply with applicable law, regulatory directions, court orders and lawful requests from competent authorities.
7. Consent, Choice and Data Minimisation
ZOROPE seeks to collect only information that is necessary for the relevant stage of your journey. Where processing is based on consent, the purpose of the consent will be presented to you at or before the time the data is requested.
Subject to applicable law and the requirements of the requested service, you may be given the ability to:
- Give or deny consent for specific categories or uses of personal data;
- Restrict disclosure of personal data to third parties where such disclosure is not required by law or essential to the requested service;
- Withdraw a consent previously given; and
- Request deletion or erasure of data that is no longer required to be retained under law, regulatory instructions or an existing loan relationship.
Withdrawal of consent does not affect processing lawfully carried out before withdrawal. It may prevent ZOROPE or the applicable Lending Partner from continuing a pending application or providing a feature that necessarily depends on the relevant data. Withdrawal of consent does not cancel an existing Loan or any repayment or legal obligation.
8. How We Share Personal Data
ZOROPE may share personal data only for a legitimate, disclosed and permitted purpose, including with the following categories of recipients:
8.1 Applicable Lending Partner
Your application information and relevant supporting data may be shared with the applicable RBI-regulated Lending Partner that evaluates or services your Loan. The identity of the applicable Lending Partner is disclosed during the loan journey and in applicable loan documentation.
8.2 Credit Information Companies
Where permitted and with the required authorisation or consent, information may be obtained from or shared with Credit Information Companies for credit assessment and reporting obligations applicable to the Lending Partner.
8.3 Service Providers
We may use appropriately authorised service providers for functions such as KYC/identity verification, e-Sign, e-Mandate, Account Aggregation or banking-data processing, fraud and device-risk analysis, cloud/infrastructure, cybersecurity, analytics, communications, customer support, payment-related services and document management. Such providers are required to process personal data only for authorised purposes and subject to appropriate confidentiality, security and contractual controls.
8.4 Recovery and Servicing
Where a Loan is in repayment or default, relevant data may be shared with authorised servicing or recovery providers appointed by or on behalf of the Lending Partner, in accordance with applicable RBI requirements and the Lending Partner's instructions.
8.5 Legal, Regulatory and Government Authorities
We may disclose personal data where required by applicable law, a court or tribunal, the Reserve Bank of India, the Data Protection Board of India, law-enforcement authorities or another competent statutory or regulatory authority.
8.6 Corporate Transactions
If ZOROPE undergoes a merger, restructuring, acquisition, financing, transfer of business or similar corporate transaction, relevant data may be transferred subject to applicable law and appropriate confidentiality and data-protection safeguards.
9. Data Storage, Localisation and Security
Personal data collected in connection with digital lending is stored on servers located in India in accordance with applicable RBI requirements. Where any processing outside India is permitted, it will be handled in accordance with applicable law and RBI conditions governing localisation, return and deletion of such data.
ZOROPE maintains reasonable technical and organisational safeguards designed to protect personal data against unauthorised access, disclosure, alteration, loss or misuse. These measures may include access controls, encryption in transit and at rest where appropriate, authentication controls, audit logs, network and application security controls, vendor-security requirements, backup controls, vulnerability management and incident-response procedures.
No electronic system can be guaranteed to be completely secure. ZOROPE therefore continually reviews its controls and responds to identified security risks in accordance with applicable requirements.
10. Retention and Deletion
ZOROPE retains personal data only for as long as necessary for the disclosed purpose, to perform its LSP obligations, to support an existing loan relationship where applicable, or to comply with legal, regulatory, contractual, audit, fraud-prevention or dispute-resolution requirements.
As an LSP, ZOROPE seeks to retain only the minimum information reasonably necessary for its permitted functions. Loan, KYC and regulatory records may also be retained by the applicable Lending Partner for the period required under its legal and regulatory obligations.
Where a statutory or regulatory retention period applies, the relevant data will be retained for that period. Where no specific retention period applies, ZOROPE periodically reviews whether the data remains necessary and deletes or anonymises it when it is no longer required. A deletion request is subject to any lawful retention requirement, an existing Loan, fraud-prevention need, legal hold or other permitted exception.
11. Service and Marketing Communications
Where you provide your consent through our website, lead forms, social media platforms, digital campaigns or other channels, ZOROPE may contact you regarding its products, services, offers, promotional communications and pre-launch or launch updates. Such communications may be made through telephone calls, SMS, RCS, Whatsapp, email or other permitted electronic communication channels. You may withdraw or modify your marketing consent at any time through the opt-out mechanism provided in the communication or by contacting us using the details provided in this Policy. Withdrawal of marketing consent will not affect service, transactional, security or regulatory communications that are necessary or otherwise permitted under applicable law.
12. Cookies and Similar Technologies
The ZOROPE Website may use cookies, pixels, local storage and similar technologies to operate and secure the Website, maintain sessions, remember preferences, understand usage, detect fraud and measure campaign performance.
Where required, non-essential analytics or marketing technologies will be used only after the relevant consent or preference has been obtained. You can manage applicable choices through the Website cookie interface and/or browser settings.
13. Your Rights
Subject to applicable law and any lawful exceptions, you may have the following rights in relation to personal data processed by ZOROPE:
| Right | What it means |
|---|---|
| Access information | Request information or a summary regarding personal data being processed and relevant processing activities, as provided under applicable law. |
| Correction and updating | Request correction, completion or updating of inaccurate, incomplete or outdated personal data. |
| Erasure | Request erasure of personal data where it is no longer necessary to retain it, subject to applicable legal, regulatory and contractual requirements. |
| Withdraw consent | Withdraw consent for processing that is based on consent, subject to the consequences described in this Policy. |
| Grievance redressal | Raise a grievance regarding ZOROPE's processing of personal data and receive redressal through the applicable grievance mechanism. |
| Nomination | Nominate another individual to exercise applicable rights in the event of death or incapacity, where provided under applicable data-protection law. |
To exercise an applicable right, contact our Grievance Officer using the details in Section 17. We may need to verify your identity before acting on a request. Requests will be handled within the timelines prescribed under applicable law.
14. Personal Data Breaches
If ZOROPE becomes aware of a personal data breach, it will take reasonable steps to contain, investigate and remediate the incident. ZOROPE will notify affected individuals, the Data Protection Board of India and/or other competent authorities where and in the manner required by applicable law and regulatory directions.
15. Children and Minors
ZOROPE's lending-facilitation services are not intended for persons below 18 years of age. We do not knowingly solicit loan applications from or knowingly collect personal data for lending purposes from minors. If we become aware that personal data of a minor has been collected in error, we will take appropriate steps to delete or otherwise handle it in accordance with applicable law.
16. Third-Party Websites and Services
The Website may contain links to third-party websites or services. Their privacy practices are governed by their own terms and privacy notices. ZOROPE is not responsible for the independent privacy practices of third parties that are not acting on ZOROPE's instructions.
17. Grievance Officer and Data-Privacy Contact
For questions, requests or grievances regarding this Policy or ZOROPE's handling of personal data, please contact:
Grievance Redressal & Data-Privacy Contact
Corporate Address: Aeternum Tech Private Limited, Quattro Tech Park, Ground Floor, 422B, Phase IV, Udyog Vihar, Sector 18, Gurugram, Haryana 122015
Where your grievance concerns personal-data processing and remains unresolved after you have used the applicable grievance mechanism, you may approach the Data Protection Board of India in accordance with the Digital Personal Data Protection Act, 2023 and the procedures made available by the competent authority.
Official information on the Data Protection Board of India: https://www.meity.gov.in/data-protection-board-of-india
For complaints relating to the lending service or the applicable Lending Partner, please refer to ZOROPE's Grievance Redressal Policy. Eligible complaints against a covered Regulated Entity may be escalated through the RBI Complaint Management System after following the applicable RBI grievance process.
RBI Complaint Management System: https://cms.rbi.org.in/
18. Changes to this Policy
ZOROPE may update this Policy to reflect changes in law, regulatory requirements, technology, services or data-processing practices. The latest version will be published on the ZOROPE Website with the updated date. Where a change requires a fresh notice or consent under applicable law, ZOROPE will provide the relevant notice and seek consent before undertaking the new processing.
19. Related Policies
This Privacy Policy should be read together with the following ZOROPE policies and borrower-facing documents available on the Website:
- Terms & Conditions
- Grievance Redressal policy