This Privacy Policy describes how Daily Collection ("we", "us", "our"), a finance daily collection management platform, collects, uses, discloses, and safeguards your Personal Information and Sensitive Personal Data or Information (SPDI) in accordance with Indian law, specifically the Information Technology Act, 2000 and IT (Reasonable Security Practices and Procedures and SPDI) Rules, 2011.
Daily Collection is designed for finance businesses, agents, and administrators managing daily collection routes, EMI collections, client records, cashbox, expenses, and related operations. By using this Service, you agree to the collection and use of information as described in this policy.
- Personal Information: Data relating to an individual that can identify them directly or indirectly, including name, phone number, email, and address.
- Sensitive Personal Data or Information (SPDI): Includes passwords, financial details, payment records, collection route data, biometric data (if enabled for attendance), and any related information as defined by Indian IT Rules 2011.
- Provider of Information: You — the administrator, agent, or end-user who supplies Personal Information or SPDI to Daily Collection.
- Client Data: Information about your borrowers/loan clients entered or managed through the platform.
👤
3. Information We Collect
We may collect the following categories of information through your use of Daily Collection:
- Account & User Information: Name, mobile number, email address, business/company name, user role (admin/agent), and login credentials during registration.
- Client & Borrower Data: Client name, phone number, guardian details, address, loan amounts, repayment schedules, EMI history, loan status, and client documents or profile images uploaded by you.
- Collection Route Information: Daily route assignments, collection schedules, visit logs, collection amounts, and route performance data managed by agents.
- Financial & Transaction Data (SPDI): Loan amounts, EMI collections, daily cash denominations, cashbox balances, expense records, salary entries, bank transfer details, and investment records.
- Regional & Operational Data: Region names, region codes, agent-to-region assignments, and daily collection route information.
- Device & Usage Data: Device type, IP address, operating system, app version, access times, and in-app actions taken.
SPDI is collected only with your explicit written or electronic consent as required by law. You control what client data you enter into the platform.
🎯
4. Purpose of Collection and Use
We collect and use your information strictly for the following purposes:
- Account creation, authentication, and role-based access management
- Daily collection scheduling, route management, and repayment lifecycle management
- Daily collection tracking, cashbox management, and financial reconciliation
- Client and borrower record management with document storage
- Collection due date tracking, overdue monitoring, and settlement management
- Expense recording, salary management, and investment tracking
- Region-wise performance monitoring and agent coordination
- Report generation (collection, turnover, loan, expense, profit reports)
- Security, fraud prevention, and regulatory compliance
- Product analytics and platform improvement
We do not collect data beyond what is necessary for these operational purposes.
📣
5. Marketing and Additional Services
- We may use your contact information to send you updates about Daily Collection features, service announcements, and product improvements.
- With your explicit consent, we may offer additional financial or operational services through our partners, such as loan capital products or collection-related services.
- You may opt out of marketing communications at any time via app settings or by writing to us at support@macberries.com.
- Opting out of marketing will not affect your access to core Daily Collection services.
- Client borrower data you enter into the platform will never be used for marketing to those borrowers without your explicit authorization.
- Consent is obtained via electronic checkbox at registration, OTP-based verification, or signed agreements for enterprise accounts.
- You may withdraw consent at any time through in-app settings or by contacting us. Withdrawal of consent for SPDI collection may limit or affect the delivery of certain platform features.
- Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
As a user of Daily Collection, you have the following rights regarding your Personal Information and SPDI:
- Access: Request a copy of the Personal Information and SPDI we hold about you.
- Correction: Request correction of inaccurate or incomplete data.
- Withdrawal & Deletion: Withdraw consent and request deletion of your data (subject to legal retention obligations).
- Portability: Request export of your account and collection data in a standard format.
- Grievance Redressal: File a complaint with our designated Grievance Officer.
All rights requests are acknowledged within 7 days and processed within 30 days as required under Indian IT Rules 2011.
We retain your data only as long as necessary for the stated operational purposes or as required by applicable Indian law (e.g., tax, financial record-keeping, and labour regulations). Specifically:
- Loan and financial records: Retained for a minimum of 7 years as required under financial regulations.
- Account and user data: Retained for the duration of your subscription and up to 2 years after account closure.
- Client and collection documents: Retained as long as associated loans remain active or as required by law.
Data is securely deleted or irreversibly anonymized after applicable retention periods expire.
🤝
9. Disclosure to Third Parties
- Service Providers: Hosting, cloud storage, SMS/OTP providers, and payment gateways who are contractually bound to maintain equivalent data protection and SPDI compliance.
- Legal & Regulatory Requests: Disclosure only upon valid written request from government or law enforcement authorities, with purpose stated; the recipient is barred from further unauthorized disclosure.
- Corporate Transactions: In the event of a merger, acquisition, or sale of assets, prior notice and your consent will be obtained where required by law.
- Added Services Partners: Data shared only with your explicit consent; all partners are contractually required to comply with IT Rules 2011 and applicable Indian law.
No SPDI — including financial records, client data, or collection route information — is disclosed to any third party without your prior explicit permission, except as required by law.
🌐
10. Cross-Border Data Transfer
SPDI and Personal Information may be transferred outside India only where the recipient country or organization ensures a comparable level of data protection as mandated by Indian law, and the transfer is necessary for contract performance or you have provided explicit informed consent. All cross-border transfers use encryption in transit (TLS 1.3) and at rest (AES-256).
🛡️
11. Security Practices
Daily Collection maintains a documented information security program that includes:
- End-to-end encryption: TLS 1.3 in transit and AES-256 at rest for all financial and client data
- Role-based access controls ensuring agents access only their assigned region's data
- Multi-factor authentication for admin and privileged accounts
- Annual third-party security audits and penetration testing
- Incident response plan aligned with CERT-In guidelines
- Secure password hashing (bcrypt) for all user credentials
We follow internationally recognized security standards (ISO/IEC 27001 or equivalent best practices) with periodic audits as required by Indian IT Rules 2011.
The Daily Collection web platform uses first-party cookies and local storage strictly to maintain session authentication and remember user preferences (e.g., region filters, date ranges). We compile aggregate, anonymized analytics (with IP masking) to improve the platform. No third-party advertising cookies or tracking pixels are used without your explicit opt-in consent.
👨👧
13. Policy for Minors
Daily Collection is a business platform intended exclusively for adults (18 years and above). We do not knowingly collect or process Personal Information from any individual under 18 years of age. If we become aware that a minor's information has been collected without parental consent, such data will be deleted promptly.
📝
14. Updates to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, legal requirements, or platform features. Any material changes will be communicated via in-app notification and posted on our website with an updated effective date. Your continued use of Daily Collection after changes are posted constitutes your acceptance of the revised policy.
✉️
15. Contact Us & Grievance Officer
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please reach out to us. Our Grievance Officer will acknowledge your query within 7 days and resolve it within 30 days.