Privacy policy

Yashodhan Co-operative Credit Society Limited ("the Society", "we") is a co-operative credit society registered under the Maharashtra Co-operative Societies Act, 1960. We run the Yashodhan mobile app and this website, and we decide how the personal data described here is used.

For anything about this policy or your data, write to info@yashodhansociety.com, call 97667 69939 or 97667 69959 (10 AM – 6 PM, Monday to Saturday), or visit the registered office at 147/146 Jay Vijay Nagari Phase II, Yashvant Gavar, Near Shiva Temple, Nallasopara West, Palghar.

• Who you are: your name, mobile number, email address, date of birth, address and photograph.
• Identity and address documents you upload in the app or hand in at a branch, such as PAN, Aadhaar, voter ID, passport, driving licence and address proof. We store your PAN masked and only the last four digits of your Aadhaar number, alongside the document images.
• Your own bank account details (bank, branch, account number and IFSC) and passbook, so that we can pay you and collect instalments.
• Your accounts and dealings with the Society: deposit accounts and their transactions, shares, dividends, fees and receipts, nominees, joint holders and guardians.
• Loan applications and their documents (for example proof of income), insurance quote requests, policies and claims.
• The messages we send you by SMS, email and app notification, and whether they were delivered.
• Technical data: an identifier the app creates for your sign-in, your phone's notification token, the app version, and your IP address and device or browser type, which our security logs record.
• What you send through this website's forms: callback requests, contact messages and job applications.

The app does not read your contacts, SMS messages, call log or location. It shows no advertising and uses no advertising identifier. It uses your camera or your files only when you choose to photograph or attach a document.

• To open and run your membership and accounts: recording transactions, paying interest, dividends and maturities, and issuing statements and receipts.
• To verify your identity and meet our KYC and record-keeping duties under co-operative, tax and anti-money-laundering law.
• To sign you in securely with one-time codes and passwords, and to detect and prevent fraud.
• To process the loan applications, insurance requests and claims you make.
• To tell you about activity on your accounts by SMS, email and app notification.
• To answer your questions and complaints, and to keep the app and website working.

We do not sell your personal data, and we do not use it for advertising.

• Lending partners. When you apply for a loan, we send your application and its documents to the financier we place it with. From then on that partner also holds your data, under its own privacy policy.
• Insurance partners. When you ask for a quote or make a claim, the details go to the insurer concerned.
• Service providers that work for us under contract and only for these purposes: Amazon Web Services (hosting and storage, in Mumbai), MSG91 (SMS), Amazon Simple Email Service (email) and Google Firebase Cloud Messaging (app notifications).
• Authorities and auditors, when the law requires it: the Registrar of Co-operative Societies, the Society's statutory auditors, tax authorities, courts and law enforcement.

We keep your records for as long as you are a member or customer, and afterwards for as long as co-operative, tax and anti-money-laundering law requires us to keep them.

If you only signed up in the app and never opened an account, bought shares, applied for a loan or asked for insurance, and you ask us to delete your account, we erase your personal data.

Security logs are kept for a limited period and then deleted.

You can ask us to delete your app account in the app (Profile, then Delete my account), on this website (sign in, then Your profile), or at any branch. How to delete your account.

We complete requests within 30 days. When we do, every signed-in session ends, and your password and notification tokens are deleted. If you have no accounts, shares, loans or policies with us, we also erase your name, contact details, KYC documents and messages.

If you do have them, we keep the records the law requires, and you can still be served at the branch. Deleting your app account does not close your accounts or your membership; that is done at the branch.

• Everything between the app or this website and our servers travels over encrypted connections (HTTPS), and is stored encrypted in Amazon Web Services' Mumbai region.
• Staff see only what their role needs. Every movement of money needs a second person's approval, and changes are recorded in an audit log.
• Passwords are stored only as one-way hashes, and sign-in codes expire within minutes.

Under the Digital Personal Data Protection Act, 2023, you can ask us for a summary of the personal data we hold about you, have it corrected or completed, have it erased where the law allows, withdraw consent for anything that relies on your consent, and nominate someone to act for you. Most contact details can be corrected in the app; others are changed at a branch with proof.

To use any of these rights, or to complain about how we handle your data, write to our Grievance Officer at info@yashodhansociety.com. We aim to reply within 30 days. If you are not satisfied with our answer, you can complain to the Data Protection Board of India.

The app is for people aged 18 and over. Accounts for minors are opened at a branch with a parent or guardian, who operates them.

When this policy changes, we publish the new version here with a new date. Before a significant change takes effect, we tell members in the app.