Data Retention & Erasure Protocol

Last updated: December 2024

1. Governance of Data Lifecycle

At Mallapur Mudra, we view data storage not as a default, but as a temporary necessity. We pledge to retain your personal data only for the absolute minimum period required to facilitate loan guidance services, execute fraud modeling, and satisfy statutory limitation periods under Indian law. Once these purposes are met, your data is systematically purged or anonymized.

2. Retention Timelines by Category

We categorize collected data into three distinct retention tiers based on sensitivity and operational utility.

Tier A: Transient Data

Short-Term Retention (30 days - 6 months)

Scope: Call Logs, Camera/Images, Approximate Location

•Call Logs: Processed instantly, only verification hash kept for 6 months
•Images & Location: Removed from storage within 30 days if unused

Tier B: Risk Assessment Data

Medium-Term Retention (12 months - 3 years)

Scope: Installed Apps, Crash Logs, Device Hardware Info

•Installed Apps: Retained for 3 years to analyze credit behavior trends
•Device Info & Crash Logs: Stored for 12-24 months for anti-fraud training

Tier C: Identity Data

Long-Term Retention (5+ years)

Scope: Phone, Email, User IDs, Emergency Contact

•Active Accounts: Retained indefinitely while you use the service
•Closed Accounts: Archived in Cold Storage for 5 years per Indian regulations

3. Mechanisms for Data Destruction

We provide clear pathways for you to exercise your "Right to be Forgotten."

3.1. Voluntary Deletion Request

Contact our Data Protection Officer at business@viramgamdisha.com

•Verification: Requests must originate from your registered email
•SLA: We process valid requests within 15 business days
•Outcome: Tier A and B data erased immediately; Tier C data locked until statutory period expires

3.2. Automated Dormancy Purge

Accounts with zero activity for 18 consecutive months are classified as "Dormant."

•Notification: Warning sent to your email 30 days prior to purge
•Action: Without intervention, account and non-legal data are automatically wiped

4. Contact for Data Rights

For inquiries about your data deletion or to request an export before deletion:

Email: business@viramgamdisha.com

Website: https://www.viramgamdisha.com