Privacy Policy

  • Disclosure of Permissions

    At XLoan, we are dedicated to openness and protecting your privacy in compliance with the Nigeria Data Protection Act of 2023 and other relevant laws. We need particular rights to access certain data from your device in order to evaluate your eligibility and guarantee an effective loan approval procedure. All of the data we collect is safely transferred, saved, and utilized exclusively to deliver our services. Without your express approval, your data won't be shared with outside parties.

  • Permissions for SMS

    To more accurately determine your loan eligibility, we need access to your SMS communications. This allows us to assess your creditworthiness by looking at all of your SMS records, not just financial SMS data, such as sender names, transaction descriptions, and amounts. However, no additional data will be sent or processed; we will only provide financial SMS data after it has been filtered by a system. We can increase your chances of getting loans and speed up loan approvals by evaluating this data.

    How Your SMS Data Is Accessible and Used by Us:

    1. Initial Access: Our program will first examine your SMS data when you approve SMS access and validate this permissions page. But at this point, no data will be posted. Only a preliminary credit check is being done with this stage. 2. Ongoing Access: The app will collect several months' worth of recent SMS data, with a limit of a few thousand messages, each time you click the "Apply" button to request pre-approval. It will focus on communications related to financial transactions. 3. Selective Upload: For analysis, only SMS messages containing keywords relevant to finance will be submitted. To prevent redundancy, messages that have already been posted will not be uploaded again. 4. Local Storage: Your SMS data will stay on your device and not be sent to our servers if you do not click the "Apply" button.
    All SMS data is saved on our servers and transmitted securely using industry-standard encryption. Your privacy is our top priority, and we will never give your SMS data to any parties without your permission.
  • Alerts

    Push notifications for significant account updates, payment reminders, and exclusive deals might be sent to you. You have the option to reject these notifications without compromising the operation of your app.

  • Contacts for Emergencies

    We need access to two emergency contacts for fraud prevention and identification verification. These contacts can be chosen from your address book or manually entered. Only the contacts you designate will be accessible to us; no further data from your address book will be gathered without your consent. This information is saved on our servers and is safely transferred via HTTPS.

  • Details of the Device

    Every time you click to apply on the homepage, we gather information about your device to confirm your identity and stop fraud. The model name, specifications, and unique identifiers including OS version, version, code, brand, model number, IMEI, serial number, isDevelopMMode, screen width, default language, age, time zone, other device environment parameters, display and brightness settings, and CPU and performance details are all included in this. We also collect data about the apps that are installed on your device, but we only utilize this information for financial apps. We gather the following information: the app name, version number, date of first installation, date of last update, and whether the app is a pre-installed system app. We can prevent fraudulent software and protect the financial security of our accounts by using this information to identify and evaluate possible hazards. Crucially, we don't use data from apps that don't fall under a certain financial category, and none of this information will be sent or processed if you don't click to apply on the homepage. Every piece of information that is gathered is safely kept on our systems and protected from unwanted access.

  • Network Data

    1. ADID/GAID: In order to evaluate ad data and enhance your advertising experience, we obtain your Google Advertising ID (GAID).

    2. ACCESS_WIFI_STATE: To evaluate risk and identify possible network irregularities, we obtain information about your Wi-Fi network.

    3. ACCESS_NETWORK_STATE: In order to evaluate risk and prevent data loss during network outages, we gather your network information, such as IP address, connection status, and network type.

    4. Additional details: macAddress, networkType, simCountryIso, simOperator, and so forth

  • KYC

    We could request certain personally identifiable information from you when you use our services, which could be used to identify or get in touch with you. The following are examples of personally identifiable information, however they are not the only ones:

    - Phone number - Email address - Name - Gender - Date of birth - ID Card Number - Educational information - Marital status - Occupational information - Address information - BVN (Bank Verification Number)
  • Application List

    Goal of Permission Usage: To guard against fraud and concealed virus software, we analyze your operating environment using your mobile application list. Via viral infection, illegal software may take your money. In order to handle loans and assist in preventing fraud, we must determine and assess your degree of risk.

    How Data Is Used:

    To prevent your personal information from being unlawfully obtained, to more precisely prevent fraud, to safeguard account security, and to determine whether you are a real, human user, we will gather the installation package's version number, app name, installation time, last update time, and package name.

    How to Ensure Data Security:

    The gathered data will be safely uploaded over an HTTPS server and fully encrypted. Your information won't be shared with any other parties without your consent.
  • Where

    1. Permission Usage Goal: To protect user accounts and our platform, we require access to users' approximate location information. We can detect and stop possible offshore money laundering, unauthorized access, and other offenses by knowing a user's approximate location. By preventing us from obtaining or retaining our users' exact location data while safeguarding our services, this permission allows us to protect their privacy.

    2. The Use of Data: The app can use approximate location data to detect and report anomalous behavior when a user tries to log in or access the service from a location other than their typical region of activity. This helps shield user accounts from fraud and hackers by preventing unauthorized offshore access.

    3. How to Guarantee Data Security: We guarantee the encryption and HTTPS transmission of your SMS messages. Your information won't be shared with any other parties without your consent.

  • The camera

    We require access to your device's camera in order to guarantee the seamless completion of our service procedure. Once you've given your permission, you can take pictures of your face and identification documents and submit them straight to our platform to finish the KYC (Know Your Customer) verification procedure. We promise not to see or save any additional pictures or videos on your device.It is important to note that we will not be able to perform image capture and update services without your permission.

  • Security and Storage of Data

    Modern encryption and security measures are used to safely move all gathered data to our servers. Without your express approval, no third party will receive your data. However, none of the data will be uploaded if you choose not to choose to apply.

    We gather personal data, including your name, phone number, device model, and operating system. We also collect device activity logs, SMS, and address information. Information from financial institutions and credit bureaus may be added to our data to improve our credit evaluation. You agree to the collection, processing, and safe storage of this data by using our services.

  • Use of Data

    We acquire your personal data via the two methods listed below:
    1. Information you give us directly: We may gather and keep the information you give us when you use our financial services, such as when you apply for products and/or services, fill out online forms, submit feedback, settle disputes, or get in touch with us about our financial services. We may also keep the information created about your transactions and activities while using our services. While utilizing the service, use data is automatically gathered.
    2. Data that we deliberately gather: We gather data from your computer, smartphone, and other access devices when you use our website, app, and associated services.
    How We Utilize Your Information We use the information we gather to:  - Confirm your identity. - Construct models for credit scoring. - Assess loan offers and keep track of credit records. - Keep an eye on payment patterns and collections.
    Among other uses outlined in the section below, this information may be utilized to determine the level of risk involved in your credit request, to confirm your identification, to evaluate and qualify your creditworthiness, and for statistical purposes.
  • Data Exchange and Transmission

    Personal information may be shared or transferred by XLoan in the following circumstances:
    1. XLoan Group Companies, Affiliates, or Subsidiaries: For the purpose of developing new products, assessing performance, conducting statistical analysis, and enhancing services. 2. Unrelated Third Parties (Service Providers): For the purpose of helping to deliver services linked to credit. 3. Government, Judicial, or Administrative Authorities: For the purpose of adhering to court or legal directives. 4. Software providers, risk management, or information security: For security and fraud prevention reasons. 5. Commercial Affiliates: For the purpose of advertising.
    You accept and consent to the data gathering, use, and sharing policies described in this disclosure by using the XLoan. With your permission, we can offer secure, effective, and transparent loan services that are customized to meet your financial requirements.
  • To safeguard your privacy, the following are our regulations on data collection and usage.

  • 1. DEFINING
    Unless otherwise specified, any capitalized terms used in this Privacy Policy will have the same meanings as those assigned to them in our Terms of Use (where applicable).
  • 2. INDIVIDUAL INFORMATION WE GAIN
    Every time you use the app or visit our website, the following data is gathered:
    2.1 Cookies may be used to automatically gather certain data every time you visit our website or use the App. Cookies are tiny program files that are kept on your computer or mobile device. We use cookies to track user behavior in order to improve the user interface and experience. Even though most mobile devices and web browsers allow cookies, you can change your device's or browser's settings to either reject certain types of cookies or to stop them from being used altogether. Furthermore, you would always be able to use your mobile device and/or browser to remove any cookies that were previously stored. However, this may affect how well our application or website works. 2.2 The user must submit their call and SMS logs, photos, videos, or other digital assets in order to use the service. Along with the mobile network, operating system, mobile browser type, and timezone preferences, you must also include your mobile device's technical details and unique identifiers, such as its IMEI number, MAC address, and phone number.
  • 3. THE USE OF THE PERSONAL INFORMATION WE HAVE GOT
    In compliance with existing laws, we may use the personal data we have gathered for the following purposes:
    3.1 The following uses may be made of your personal information:
    3.1.1 recognizing you, registering you as a user, and controlling or overseeing your credit conditions and account; 3.1.2 Before registering you as a user, we reserve the right to carry out any necessary checks. 3.1.3 to distribute the loan and collect service fees; 3.1.4 to create credit models and carry out credit evaluations; 3.1.5 must abide by all relevant laws, rules, and guidelines, including those relating to "know-your-customer" and anti-money laundering duties. 3.1.6 to get in touch with you and give you details about the application; 3.1.7 to notify you of any updates to the App or changes to the Service; 3.1.8 to respond to and settle the questions and comments you have sent in; 3.1.9 to improve, test, update, and customize the program to meet your needs and preferences as a user; 3.1.10 For the objectives outlined in this Privacy Policy and the Terms of Use, to call you using pre-recorded or auto-dialed messages, or text messages (SMS), if applicable; 3.1.11 to collect and examine user and demographic information, including trends and patterns in the application's service usage; and 3.1.12 to provide you with direct marketing messages, focusing on details on exclusive deals and incentives.
    3.2 In addition, even while we promise to act responsibly and use no more Personal Information than is necessary for the particular purpose in each case, we may use your Personal Information for the following general purposes:
    3.2.1 to carry out relevant business activities and procedures; 3.2.2 the oversight of the application's usage, along with the management, upkeep, and improvement of its functionality, performance, and usability; 3.2.3 to handle and fix any problems or malfunctions pertaining to the operation of the application; 3.2.4 producing analytics data and anonymised statistical information for use in research, testing, and analysis during the product development process; 3.2.5 to look into, find, and stop any illegal, dishonest, forbidden, or unapproved activity; 3.2.6 to assist us and/or any of our Affiliates in business asset transactions, such as asset sales, mergers, and acquisitions; and 3.2.7 We must complete our responsibilities in compliance with all applicable laws, as well as carry out regulatory inquiries, investigations, and directives. This includes carrying out investigations, due diligence, and audit assessments.
  • 4. PRESENTATION OF THE PERSONAL DATA WE ACQUIRE
    4.1 For any of the following reasons, as well as any other purposes allowed by relevant law, including the Nigeria Data Protection Act, 2023, we reserve the right to disclose or share your personal information with Affiliates and other parties. Nonetheless, we will always behave sensibly and exchange or reveal no more personal data than is required for the intended use:
    4.1.1 in compliance with the provisions of the applicable legislation, for the purposes outlined therein (including but not restricted to complying with statutory or regulatory filing and reporting requirements and answering regulatory inquiries, investigations, or directives); 4.1.2 in any lawsuit that uses the Service and that concerns you, us, or another person, for the purposes of the lawsuit; 4.1.3 when any merger, consolidation, reorganization, financing, transfer of company assets, or purchase of all or a portion of our business by or into another company is being negotiated, even if the transaction is not eventually carried out; 4.1.4 when, in order to facilitate their engagement or our collaboration with third parties (banks, mobile network providers, collection agencies, our agents, vendors, suppliers, contractors, partners, and any other individuals who work for us, perform tasks on our behalf, or are involved in our business), we disclose your Personal Information to them (as applicable). This could entail giving third parties permission to advertise or sell goods or services to you as well as to conduct research, assess, and produce goods on your behalf. 4.1.5 Unless they are processing data on our behalf or are required to help us run our business or provide the App (including direct marketing if you have joined our mailing list), we will not provide Affiliates access to personal information. In compliance with this Privacy Policy and all relevant legal obligations, we are committed to making sure that each of our Affiliates handles the Personal Information we give them. 4.1.6 All information will be aggregated and anonymized if we reveal usage data for the App and the Service. 4.1.7 If we firmly believe that sharing your personal information is necessary to protect you or others from harm, to report suspected illegal conduct, to look into possible breaches of our terms of service, or to maintain legal compliance;
    4.2 Before sharing or revealing Personal Information to third parties, we will take all reasonable steps to remove any means by which the information can be individually linked to you, if that is not required.
    4.3 With your consent and advance notification, we may divulge or share your personal information beyond what is covered by this privacy statement.
  • 5. TRANSNATIONAL PERSONAL INFORMATION TRANSFER
    Your personal information may be communicated, stored, used, and processed in a jurisdiction other than your home country or the jurisdiction of the nation, state, or city in which you are currently situated ("Alternate Country") while you are using any of our services. Additionally, information may be sent to Our group's servers, service providers, and associates, as well as to companies that are connected to Our group and located outside of your home country or another nation.
    If such a circumstance arises, we will ensure that the concerned Personal Information is protected to the degree mandated by Nigerian law (and, in any event, in compliance with our responsibilities under this Privacy Policy).
    By signing this document, you agree that your personal information may be transferred in the ways described below, whether or not the transfer takes place in your home country.
  • 6. PROTECTION OF PERSONAL INFORMATION
    Your personal information will be kept for as long as required to achieve the goal for which it was gathered or as long as allowed by the relevant laws. We will stop keeping the Personal Information or take away the means by which it can be linked to you as soon as it is reasonable to assume that the reason it was gathered is no longer being served by its retention and that it is no longer required for legal or business purposes.
  • 7. UPDATES AND RECTIFICATION OF PERSONAL INFORMATION
    7.1 You can seek access to and/or correction of your personal information that is under our control using the details below. If the requests comply with the relevant legal requirements, we reserve the right to charge an administrative fee.
    7.2 If required or allowed by law, we reserve the right to refuse requests for access to or correction of any or all of your personal information that is under our control. This could include instances when references to other people are included in the Personal Information or when someone requests access or a modification for reasons we deem unnecessary, unnecessary, or inconvenient.
  • 8. YOUR PERSONAL INFORMATION'S LOCATION
    8.1 The Personal Information we get from you may be processed, transmitted, or stored by third-party service providers. Every effort will be made to ensure that all third-party service providers follow the same privacy policies as outlined in this policy.
    8.2 To the extent allowed by applicable law, our overseas workers, affiliates, contractors, third-party suppliers, and service providers may keep or handle your personal data outside of your country. If this happens, we promise that the relevant Personal Information will be protected to the greatest degree allowed by your nation's laws (and, in any event, in compliance with our responsibilities under this Privacy Policy).
  • 9. YOUR PERSONAL INFORMATION SAFEGUARDING
    Our first goal is to protect the privacy of your personal information. To the best of our abilities, your personal information will be protected against accidental loss, erasure, or harm as well as from unauthorized access, acquisition, use, or disclosure. Unfortunately, the security of any information sent over the Internet cannot be guaranteed. Despite our best efforts to protect it, we cannot guarantee that any personal information you send over the Internet will stay correct and current or that it won't be intercepted, accessed, disclosed, changed, or destroyed by unauthorized parties. We're hoping this has reached you. This is the outcome of outside influences. You are in charge of protecting the confidentiality of your account data, making sure your mobile device is secure, and stopping password leaks.
  • 10. MODIFICATIONS TO THIS PRIVACY POLICY
    To make sure that it appropriately represents our current practices and any changes that may result from changing legal or regulatory requirements, we reserve the right to review and alter this privacy statement on a regular basis. If we decide to change this Privacy Policy, we will either post a general notice on the App and/or Website or send you an email at the address you indicated in your account. You understand that it is your duty to periodically consult our Privacy Policy for the most recent details about our security and data processing procedures. You will be deemed to have accepted the changes to this Privacy Policy if you keep using the App or Website, get in touch with us, or access and use the Service after they are put into effect.
  • 11. LANGUAGE
    Should there be any differences between this privacy statement's English and other language versions, the English version will be used.
  • 12. ACCEPTANCE AND CONSENT
    12.1 You confirm that you have read, understand, and agree to all of the conditions of the Privacy Policy by accepting it. You agree that your personal information will be collected, used, disclosed, stored, transferred, and processed in line with the provisions of this privacy policy by signing this document.
    12.2 If you give us Personal Information about other people, like your spouse, family, friends, or emergency contact, you represent and warrant that you have the person's consent and hereby consent on their behalf to the collection, use, disclosure, and processing of their Personal Information by us.
    12.3 In addition, you give us your express permission to get in touch with you and your emergency contact (if they have given us permission) to confirm your details in the event that we are unable to get in touch with you using other channels or if your loan payment has not been received.
    12.4 By using the contact information shown below, you can provide us a reasonable written notice at any time to withdraw your consent to the collection, use, or distribution of your personal information. Additionally, you can use the "unsubscribe" or "opt-out" option described in our correspondence with you to withdraw your consent for us to send you particular communications and information. You understand and agree that, depending on the particular situation and the kind of permission you are withdrawing, you might not be able to use the App or some parts of the Service after the withdrawal. Your account and our contractual relationship may be dissolved if you withdraw your consent, and all accrued rights and responsibilities will be completely reserved. We will notify you of the possible consequences as soon as we receive your communication stating your wish to withdraw your consent for the collection, use, or disclosure of your personal data. Following that, you will have the chance to decide if you want to withdraw your consent.
  • 13. CONTENT FOR MARKETING AND PROMOTION
    13.1 To notify you of special offers, promotions, or events that we, our partners, sponsors, or advertisers are hosting or organizing, or to give you updates on our App and/or the products and services that are available on it, we may send you marketing and promotional communications by mail, phone, short message service (SMS), email, online messaging, or push notifications through the App.
    13.2 By clicking the "unsubscribe" link in the relevant message or by getting in touch with us using the details below, you can choose not to receive these marketing messages in the future. Please be aware that even if you choose to opt out, we may still send you non-promotional notifications about your account or the app, loan disbursement or repayment receipts, and other information.
  • 14. WEBSITES MANAGED BY THIRD PARTIES
    14.1 The App and Website may contain links to external websites run by third parties. Since we have no control over these websites, we cannot be held accountable for how these third parties gather, utilize, maintain, share, or disclose data and information. Please review the privacy policies and terms and conditions of these third-party websites to see how they gather and use your personal information.
    14.2 Links to the advertiser's website are included in the ads on our app or website. Therefore, in compliance with the advertiser's privacy statement, the advertiser will gather and use whatever information it obtains from your click on the link.
  • 15. LIABILITY LIMITATIONS
    Indirect, incidental, consequential, extraordinary, exemplary, and punitive damages resulting from the following are not covered by us:
    15.1 How you depend on and use the program, or how you are unable to access or use it; or 15.2 Any correspondence or business dealings you have with any other third party, even if we have been made aware of the possibility of such losses.
    Any delay or nonperformance resulting from events outside of our reasonable control will not be our responsibility.
  • 16. WAYS TO GET IN TOUCH WITH US
    If you have any questions about our privacy policy, please send an email to xmonment@xloancredit.com, the address of our data protection officer. It will be possible for you to view and change your personal data.