Privacy Policy
Effective Date: July 10, 2026
App Name: Finplo Cash
Company Name: LENDORA LENDING CORP.
Company Registration No.: CS201916340
Certificate of Authority No.: 3101
Company Address: 23rd Floor, Summit One Tower, 530 Shaw Boulevard, Brgy. Highway Hills Mandaluyong, Metro Manila, 1550 Philippines
Email: lendoramark@lendora-lending.com
Thank you for using Finplo Cash, a personal loan application operated by LENDORA LENDING CORP. (hereinafter referred to as “the Company,” “we,” or “us”). This Privacy Policy explains how we collect, use, process, store, disclose, retain, and delete personal information when you use Finplo Cash and its related services. We are fully committed to protecting your personal information and respecting your privacy rights.
We operate in the Philippines in strict compliance with Republic Act No. 10173, also known as the Data Privacy Act of 2012 (DPA) , its Implementing Rules and Regulations (IRR), and all relevant issuances of the National Privacy Commission (NPC). The Company is duly registered and licensed to operate as a lending service provider in the Philippines.
In accordance with platform requirements, we confirm that:
All loan products offered through Finplo Cash have a minimum repayment term exceeding sixty (60) days. Our loan terms are strictly between 91 days and 360 days.
Please read this Privacy Policy carefully. Where consent is required, we will request your specific and affirmative consent before carrying out the relevant processing.
Information We Collect
To provide our loan services, verify user identity, evaluate loan applications, prevent fraud, and comply with legal obligations, we may collect and process the following categories of information:
Phone Number Information: We collect your mobile phone number to create and secure your account, verify your identity during registration and login, and send essential service-related communications.
Loan Application Information: We may collect information you voluntarily provide during the loan application process, such as your name, date of birth, address, employment information, identification details, loan application details, and other information necessary for identity verification, credit assessment, loan processing, repayment management, and legal compliance.
Identity Verification Information: For KYC and identity verification purposes, we may process government-issued ID documents, selfie images, facial verification results, and related authentication information submitted by you. Such information is used only for identity verification, fraud prevention, loan application review, and compliance purposes.
Camera Permission: We may request camera permission to allow you to capture ID documents, selfie images, or other required supporting documents for identity verification and loan processing. Camera access is used only when you actively use these functions.
User-Selected Image Submission: You may choose to submit specific images or documents through a secure system image picker or file selection function. We only process the images or files that you actively select and submit. We do not request broad access to your photo gallery, media library, videos, external storage, or unrelated files on your device.
Device and Security Information: We may collect basic device and security information, such as device model, operating system version, network status, app version, and technical logs, to improve service stability, detect security risks, prevent fraud, and troubleshoot technical issues.
Loan and Service Records: We may process loan application records, approval results, disbursement records, repayment records, customer service records, and related transaction information necessary to provide and manage our loan services.
Character References and Guarantors
Where character references are requested, their information will be collected through a separate process and used only for identification or verification purposes. Character references are not guarantors and will not be contacted for debt collection.
Guarantor information, where applicable, will be collected through a separate process. A person will be treated as a guarantor only after being informed of the relevant obligation and separately and expressly consenting to act as a guarantor. For debt collection purposes, we will communicate only with the borrower and, where legally permitted, a guarantor who has expressly consented to assume the relevant responsibility.
Children’s Privacy Protection
Target Audience: Our services are intended for adults aged 18 years and above. We do not knowingly collect personal information from anyone under 18.
No Minor Data: If we discover that a minor (under 18) has submitted personal information, we will promptly delete such data and suspend or cancel the associated account.
Parental Rights: If you are a parent or guardian and become aware that your child has provided us with personal information, please contact us using the details in Section 8. We will take necessary measures to delete the minor’s personal information.
How We Use Your Information
We use your information only for lawful, necessary, and clearly stated purposes related to providing our loan services, including:
Identity Verification
To verify your identity through the information you provide, ID documents, selfie verification, facial recognition verification, and OTP verification where applicable. We do not access or read your SMS messages for OTP or identity verification.
Credit Evaluation
To assess your loan application, eligibility, and repayment capacity based on the information you voluntarily submit, identity verification results, loan application details, repayment history, and other lawful and necessary information related to credit assessment.
Fraud Prevention and Security
To detect and prevent fraud, unauthorized access, suspicious activities, identity misuse, and other security risks by using device security information, account activity records, and risk control measures.
Service Provision
To process loan applications, provide loan approval results, support loan disbursement, manage repayment, provide customer service, and maintain your account.
Platform Improvement
To analyze general app usage, improve app performance, fix technical issues, enhance user experience, and improve the stability and reliability of our services.
Legal and Regulatory Compliance
To comply with applicable Philippine laws, regulations, regulatory requirements, lawful requests, dispute resolution, audit, reporting, and other compliance obligations.
We do not collect, read, upload, or analyze your SMS content, call logs, contact list, installed application list, unrelated photos, videos, or files on your device for credit evaluation or any other purpose.
Information Protection Measures
We implement comprehensive technical, organizational, and physical security measures:
Encryption and Secure Transmission:
Personal and sensitive information is transmitted using secure communication protocols such as HTTPS/TLS. Personal information stored in our systems is protected through appropriate technical and organizational safeguards, which may include encryption at rest, access controls, authentication measures, security monitoring, and logging.
Access Control: Personal information is accessible only to authorized personnel on a need-to-know basis.
Security Monitoring: We monitor for vulnerabilities and suspicious activities. In the event of a data breach, we will notify affected individuals and the NPC as required.
Secure Disposal and Retention: Unless a shorter period is required under this Privacy Policy, we retain personal information for five (5) years from the date the user’s account is closed or from the date all loan obligations, transactions, disputes, and other pending matters are fully resolved, whichever occurs later.
Where applicable law or a lawful regulatory requirement requires a longer
retention period, we may retain the relevant information for that longer
period.
After the applicable retention period expires, the information will be
securely deleted, anonymized, or otherwise disposed of so that it can no
longer be associated with the user.
Revocable Permissions: When the purpose for a specific permission has been achieved (e.g., after successful identity verification), we will prompt you to revoke or turn off that permission. You may also manage app permissions at any time through your device settings.
Third-Party Disclosure
General Principle: We do not sell, lease, disclose, or provide your personal information to any third party for their independent marketing, advertising, or commercial use, unless required by applicable Philippine laws and regulations or authorized by your explicit consent.
To ensure the proper operation of our loan services and provide a secure and efficient user experience, we may use the following third-party SDKs and service providers:
1.Dyna.AI (Facial Recognition and Identity Verification)
● Purpose: This service is used to confirm the user’s identity during the verification process and to help detect and prevent fraudulent, unauthorized, or suspicious activities.
● Information Collected: The service may process selfie photos and related facial biometric information submitted by the user for identity verification.
● Data Handling: Such information is collected only after obtaining the user’s consent. The data is transmitted securely through encryption and is used only for identity verification, security checks, and fraud prevention purposes.
2.Alibaba Cloud SDK (Image Upload Service)
● Purpose: This service is used to securely upload images authorized by the user, such as ID documents or selfie photos, for identity verification and authentication purposes.
● Information Collected: Only the images selected and submitted by the user are uploaded. The service does not access other photos, files, or gallery content on the user’s device.
● Data Handling: Uploaded data is transmitted through secure HTTPS connections and is used only for real-name verification and related authentication processes. It will not be used for unrelated purposes.
Our service providers may retain personal information only for the period necessary to provide their services or for the retention period described in this Privacy Policy, unless a different period is required by applicable law. We require service providers to securely delete or anonymize the information after the applicable retention period expires.
Your Rights as a Data Subject
Subject to applicable Philippine laws, you may exercise the following rights:
• Right to Be Informed
• Right to Access
• Right to Object
• Right to Rectification
• Right to Erasure or Blocking
• Right to Data Portability
• Right to Withdraw Consent, where applicable
• Right to File a Complaint with the National Privacy Commission
• Right to Damages
To exercise any of these rights, please contact us at:
lendoramark@lendora-lending.com
We may take reasonable steps to verify your identity before processing your request. Certain requests may be limited where continued processing or retention is required or permitted by applicable law.
Applicable Law
Philippine law governs and controls this Privacy Policy. We will make necessary revisions and updates to ensure your information remains effectively protected under applicable local privacy laws.
Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy, or if you wish to exercise your rights as a data subject, please contact us through the following channels:
Email: lendoramark@lendora-lending.com
Account Deletion and Data Retention
You may request the deletion of your Finplo Cash account through either of the following methods:
1. In the App
Open the Finplo Cash app and go to:
Me > Delete Account
2. By Email
Send your account deletion request to:
lendoramark@lendora-lending.com
Please provide your registered mobile number or other information reasonably
required to identify your Finplo Cash account.
You may submit an account deletion request at any time. However, deletion of your account cannot be completed while your account has any outstanding loan, unpaid balance, overdue payment, pending repayment, pending transaction, active dispute, investigation, or other unresolved obligation.
You must fully settle all outstanding amounts and resolve any pending matters before your account can be deleted. Submitting an account deletion request does not cancel, reduce, suspend, or waive any loan, repayment obligation, applicable charge, or other amount owed under your loan agreement.
After all outstanding obligations and pending matters have been resolved, you may contact us to complete the account deletion process. We may take reasonable steps to verify your identity before processing the deletion.
Following account deletion, personal information associated with your account will be deleted or anonymized, except for information that we are required or permitted to retain for legal, regulatory, accounting, audit, security, fraud prevention, dispute resolution, enforcement of loan agreements, or other lawful purposes.
Such retained information may include account registration information, identity verification records, loan applications, loan agreements, disbursement records, repayment records, transaction records, customer service records, fraud prevention records, and records relating to disputes or regulatory compliance.
Unless a longer period is required by applicable law or a lawful regulatory requirement, retained information will be kept for five (5) years from the date the account is deleted or from the date all loan obligations, transactions, disputes, and other pending matters are fully resolved, whichever occurs later.
During the retention period, the information will be used only for the applicable lawful purpose. After the retention period expires, it will be securely deleted, anonymized, or otherwise disposed of.
Legal Bases for Processing and Consent
We process personal information only when there is an appropriate legal
basis under applicable Philippine law.
Depending on the processing activity, the applicable legal basis may include:
• Your consent, where consent is required;
• Taking steps at your request before entering into a loan agreement;
• Performing and administering a loan agreement;
• Complying with legal and regulatory obligations;
• Preventing fraud and protecting account and service security;
• Establishing, exercising, or defending legal claims; and
• Pursuing legitimate interests that do not override your fundamental rights.
Consent is not inferred solely from installing, opening, or using Finplo Cash.
Where processing is based on consent, you may withdraw your consent, subject to applicable legal and contractual limitations. Withdrawal of consent will not affect processing lawfully carried out before the withdrawal.
