Effective Date: From the date of App activation

Thank you for choosing PeraBag. Your trust is important to us. This Privacy Policy outlines how we collect, use, disclose, and safeguard your personal data in connection with your use of our services.

This App is developed and operated by Leaflending Inc. and the lending license is held by Got-It Lending Inc., a corporation registered with the Philippines Securities and Exchange Commission (SEC Registration No. CS201909840, Certificate of Authority No. 3006).

By using PeraBag, you acknowledge and agree to the practices described below.

1. Information We Collect

To deliver secure, personalized, and legally compliant financial services, we collect specific categories of data. We do so only with your explicit consent where required, and always in line with strict data minimization and privacy protection standards.

A. Personal and Identity Information

We collect basic personal data to create and verify your account:

Full name, mobile number, email address, residential address, occupation.
Valid government-issued ID number.
Identity documents including ID photos, selfies, or facial scans for KYC (Know Your Customer) and fraud prevention.

✅ Purpose: Identity verification, account creation, and fraud detection.

B. Device and Network Information

We access device-related data to ensure security and prevent unauthorized access:

Device model, OS version, serial number, Android ID.
IP address, mobile network carrier, connection type (Wi-Fi or mobile data).
VPN usage, battery level, Bluetooth status.

✅ Purpose: Used for fraud detection, ensuring account integrity, and enhancing technical performance of the app.

C. Installed Applications (Financial Only)

With your consent, we collect only metadata about financial-related apps installed on your device (e.g., e-wallets, banking apps, credit platforms), such as:

App name, package name, version code, install time, last update time.

✅ Purpose: This helps us assess your financial behavior, evaluate credit risk, and provide tailored loan recommendations. Non-financial apps are not accessed.

🔐 Data is securely uploaded to servers located in the Philippines, specifically hosted by our authorized provider at https://www.got-it-lending-inc.com. The information is transmitted over encrypted HTTPS channels, and never shared with third parties.

D. SMS Messages (Read-Only)

We access only financial-related SMS messages, such as loan disbursements and bill payments.

✅ Purpose: Assess creditworthiness, detect potential fraud, and tailor financial services to your needs.

🔐 We never access or store private conversations, one-time passwords (OTPs), or messages from personal contacts. All SMS data is processed securely and only with your explicit consent.

📤 The collected SMS metadata is securely transmitted over HTTPS and uploaded to our authorized server located in the Philippines: https://www.got-it-lending-inc.com.

E. Location Data (Approximate Only)

We may collect coarse location data via GPS, Wi-Fi, or mobile network to determine if you are within our serviceable region and to enhance your experience with localized offerings.

✅ Purpose: Verify identity, prevent fraud, and optimize services.

📍 Precise location is never collected, and you may withdraw location access anytime via device settings.

F. Camera

We use your device camera and storage to support identity verification processes:

Capture ID documents and perform facial recognition for KYC.
Submit supporting documents directly within the app.

✅ Purpose: Prevent fraudulent applications and ensure user authenticity.

📸 Captured image data is securely transmitted to https://www.got-it-lending-inc.com via HTTPS and automatically deleted after verification is completed.

G. Image Data for Verification

When you apply for a loan, we may collect facial photos or document images for:

Verifying identity against submitted credentials.
Preventing impersonation and document forgery.

✅ Purpose: Support secure and accurate onboarding.

🛡️ Image data is encrypted and stored temporarily on https://www.got-it-lending-inc.com, and it is deleted immediately once verification is successful or if it is no longer needed.

H. Your Control and Data Deletion

You have full control over your personal data:

You may request deletion of your account and associated data at any time by contacting our customer support at perabag@got-it-lending-inc.com.
You may also delete your account directly within the app under Account Settings.
Upon request, we will delete your data from our servers within a legally mandated timeframe and confirm completion of the process.
You may also manage app permissions (camera, location, SMS, contacts) directly through your device settings at any time.
We perform regular monthly data reviews and delete any non-essential data after use, retaining only the minimal information required to maintain your account and comply with legal obligations.

2. How We Use Your Personal Data

We use your information strictly for legitimate, service-related, and user experience enhancement purposes. Specifically, your data may be used to:

Create, verify, and manage your user account.
Assess your creditworthiness and perform risk and fraud detection.
Tailor loan offerings and personalize service recommendations.
Diagnose technical issues and enhance app performance and usability.
Provide customer support and resolve user concerns.
Send marketing communications or promotional offers, only with your explicit consent.

3. Data Sharing and Disclosure

We respect your privacy and never sell your personal data. However, under limited and legitimate circumstances, we may share your information with trusted third parties:

Authorized Service Providers – such as cloud hosting providers, payment processors, analytics services, or credit assessment partners—who support our business operations.
Financial and Lending Partners – including banking institutions and affiliated lending companies involved in loan disbursement and repayment processing.
Government Authorities or Legal Obligations – where required to comply with applicable laws, court orders, subpoenas, or official investigations.
Business Restructuring – in the event of a merger, acquisition, or asset transfer, subject to confidentiality and data protection obligations.

⚠️ All third-party entities are contractually bound to adhere to strict data privacy standards and may not use your data for unauthorized purposes.

4. Data Security and Retention

We are committed to safeguarding your personal information through robust security practices, including:

Encryption: All data is encrypted both at rest and in transit using industry-standard protocols.
Access Controls: Only authorized personnel can access your data, and all access activities are monitored and recorded.
Continuous Monitoring: Regular security audits and system checks are conducted to prevent vulnerabilities.
Incident Response: In the rare event of a data breach, we will notify affected users and take immediate remedial actions, as required by law.

📍 Your personal data is stored on secure servers located in the Philippines and is retained only for as long as necessary to fulfill operational, regulatory, or legal requirements.

5. Your Rights and Choices

You have full control over your personal information and may exercise the following rights at any time:

Right to Access: Request a copy of the personal data we hold about you.
Right to Rectification: Ask us to correct inaccurate or incomplete data.
Right to Erasure: Request deletion of your data when it is no longer needed or is processed unlawfully.
Right to Restrict Processing: Limit the use of your data under certain legal grounds.

To make a request, please contact our support team. We will respond in accordance with applicable legal timelines under the Philippine Data Privacy Act.

6. Children's Privacy

This App is intended only for users aged 18 and above. We do not knowingly collect or process any personal data of minors.

If we become aware that a child has registered or used the App, we will delete the data immediately.
Parents or guardians are encouraged to notify us if they suspect unauthorized usage by minors.
We may ask for proof of age to prevent misuse and protect underage individuals.

7. Updates to This Privacy Policy

We may revise this Privacy Policy from time to time to reflect legal, regulatory, or operational changes. Any modifications will be posted directly in the App and will take effect immediately upon publication.

Reasons for Update: To comply with new laws, improve services, or address emerging privacy concerns.
Your Options: If you disagree with the changes, you may choose to stop using the App and request the deletion of your account and personal data.