Application: CASHTREE LMS
Company: CASHTREE Finance Pvt. Ltd.
Effective date: 26 October 2026
CASHTREE Finance Pvt. Ltd. ("CASHTREE", "we", "us" or "our") is committed to protecting personal information processed through the CASHTREE LMS application ("App"). This policy applies specifically to the App. Our general website privacy policy is separate.
CASHTREE LMS supports internal operations for authorized CASHTREE employees and a limited retailer-onboarding application process. It supports attendance, field operations, leads, loan applications, document capture, retailer onboarding, KYC-related workflows, disbursal tracking and related lending operations.
This policy explains the collection, use, protection, disclosure and retention of employee information and customer information handled through the App. Processing is subject to applicable Indian laws and regulatory requirements, including the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, to the extent applicable, and applicable RBI directions. This policy does not replace customer notices, consents or authorizations required for a particular lending or KYC process.
Personal information means information that identifies an individual directly or indirectly. Depending on the feature used, we may process:
Employee names, identifiers, contact details, assigned roles and account authentication information.
Customer names, addresses, telephone numbers, email addresses and relevant demographic information.
Attendance records, duty-session times and attendance selfies.
Information submitted or accessed for leads, loan applications, verification, disbursal and servicing.
The App may process authentication credentials, relevant financial information, credit scores, identity documents, KYC records, photographs and supporting documents required for authorized workflows. Attendance selfie capture does not, by itself, mean biometric facial recognition is performed. Any additional biometric processing requires appropriate disclosure and safeguards.
Information is collected when authorized employees sign in, mark attendance, start or end duty, capture or upload photographs and documents, or enter and retrieve customer and loan records. During active duty tracking, location is collected through device location services. Crash logs and diagnostic information may be processed to maintain application reliability.
Employees must access and submit customer information only within their authorized duties and through applicable customer disclosure and authorization processes.
To authenticate employees, verify identities and manage authorized access.
To record and verify attendance.
To manage leads, loan applications, documentation, KYC-related activities, credit assessment, disbursal and servicing.
To monitor on-duty field activities and help verify reported visits against client locations.
To review movement history, repeated visits and time spent at locations, investigate discrepancies and handle disputes.
To respond to support requests, maintain security, diagnose technical problems and improve the App.
To meet applicable legal, regulatory and record-keeping obligations.
Employee duty-location information is not collected for advertising purposes.
Information collected: During an active duty session, the App collects approximate or precise device location, timestamps and associated employee and duty-session identifiers. Records may be used to display current or last available location, movement history, repeated visits and time spent at locations.
Purpose: Authorized CASHTREE personnel use this information for field activity monitoring, coordination, client-visit verification and review of operational discrepancies.
Tracking period: Collection begins after the employee starts duty and completes the required disclosure, affirmative consent and device-permission steps. Tracking may continue while the App is minimized, in the background, or not in use. An ongoing notification indicates that tracking is active.
Punch Out or ending the duty session stops further location collection for that session. Tracking is not intended to operate outside active duty sessions.
Limitations: Availability and accuracy depend on permissions, device settings, GPS signals, connectivity and operating-system restrictions. Location alone does not conclusively establish that a client meeting occurred or that an employee failed to perform their duties.
Camera access is used to capture employee attendance selfies and photographs or document images required for supported loan applications, customer documentation and KYC-related workflows. Submitted images may be transmitted to and stored in company systems for the relevant business process.
Camera permission does not, by itself, authorize unrelated access to other device information.
The App requests permissions relevant to supported features, including location, background location, camera and notifications where applicable. Before duty-location collection, the App explains its purpose, background operation and disclosure to CASHTREE, and obtains required affirmative consent and device permissions.
Installing the App, signing in or using our website alone is not treated as consent to duty-location tracking. Employees can manage permissions through their device settings. Refusing or withdrawing a permission may prevent the related feature from working. Ending duty stops new duty-location collection; it does not automatically erase previously collected records.
The App may request that employees enable device location services or adjust battery restrictions to support tracking reliability. These settings do not expand the disclosed purposes or authorize tracking outside active duty.
We maintain technical and organizational measures designed to protect personal information against unauthorized access, disclosure, alteration and loss. Measures include access restrictions, confidentiality obligations and encrypted transmission. Access is limited according to assigned responsibilities.
Employees and service providers handling information are subject to applicable confidentiality and security obligations. No electronic storage or transmission method guarantees absolute security.
We do not sell personal information. Information may be disclosed, where necessary and permitted, to:
Authorized CASHTREE personnel performing relevant business functions.
Service providers supporting hosting, storage, maintenance, security and authorized processing on our behalf.
Authorized parties involved in applicable verification, credit-information, lending, disbursal or servicing processes.
Regulators, courts, government agencies, law-enforcement bodies or other competent authorities where disclosure is required or permitted by law.
Disclosure to group companies is subject to the relevant purpose, applicable requirements and any required consent or authorization. Service-provider access is limited to authorized purposes and appropriate confidentiality and security conditions.
Employee location: Duty-location records are retained for field activity monitoring, client-visit verification, discrepancy review, dispute handling and related operational purposes. This policy does not specify a fixed automatic-deletion period. Retention depends on the continuing necessity of these purposes and applicable requirements; it is not a commitment to retain all location information permanently.
Attendance and selfies: Records are retained for attendance administration, verification, audits, disputes and applicable employment-related requirements.
Customer, loan and KYC records: Records are retained according to applicable RBI directions, anti-money-laundering requirements, other applicable laws and company record-retention arrangements. Periods may depend on record category, transaction date, account closure or the end of a customer relationship. A valid investigation, dispute or preservation obligation may require longer retention.
Backups and copies: Backups, exports and service-provider copies remain subject to security and retention controls. Backup storage does not, by itself, justify permanent retention. Information no longer required for its stated purposes or an applicable retention obligation is subject to appropriate deletion, disposal or irreversible anonymisation.
Individuals may contact us with questions or requests concerning access, correction, consent withdrawal or deletion. We may verify identity and authority before processing a request.
Requests are assessed according to applicable requirements and valid retention obligations. Where a request cannot be fulfilled, we will explain the relevant reason and retention criteria. This process does not give employees unrestricted access to alter or erase official attendance, customer, loan or operational records.
The App supports submission of retailer-onboarding applications. Information entered in the onboarding form and supporting documents submitted with it are sent to CASHTREE for review, verification and assessment.
Submitting an application does not immediately provide a login ID, password or access to internal employee functions. Login credentials are issued only after the designated CASHTREE team completes verification and approves the application. Submission alone does not establish employment or guarantee approval.
Onboarding information is accessible to authorized personnel and relevant service providers for processing and verification, subject to the access and disclosure safeguards in this policy. It is retained according to the application outcome, continuing processing needs and applicable requirements. Applicants may contact the privacy contact below regarding their information.
Internal employee functions are intended only for authorized CASHTREE personnel. Prospective retailers may use the limited onboarding process to submit an application; this does not provide access to internal functions. The App is not intended for children or public borrower registration. Employees must protect their account credentials and use information only for authorized duties.
We may update this policy when App features, data practices, business requirements or applicable laws change. The revised policy and effective date will be published at the policy URL provided in the App and its app store listing. Where required, material changes will be explained in the App and additional consent obtained before new processing begins.
For privacy questions, correction requests, consent-related queries or deletion requests, contact:
CASHTREE Finance Pvt. Ltd.Please mention “CASHTREE LMS Privacy Request” and describe your concern. Do not send passwords or unnecessary sensitive documents by email.