Sasto Karja Technologies Pvt. Ltd. ("Sasto Karja", "we", "us") operates sastokarja.com and sasto-loan.com. This policy explains what personal information we collect, why we collect it, who we share it with and the choices you have. It is written to comply with the Individual Privacy Act, 2075 (2018) and the Individual Privacy Regulation, 2077, and with the Electronic Transactions Act, 2063 (2008) of Nepal.
Sasto Karja is a comparison and application platform. We are not a bank, finance company or lender. Any loan you take is a contract between you and the bank you choose.
1. Information we collect
Information you give us. When you use the eligibility checker, set a rate alert or submit a loan application, we ask for some or all of the following: your name, mobile number, email address, district and municipality, date of birth, citizenship number, employment type, employer or business name, monthly income, existing EMIs, the loan type and amount you want, and, for a secured loan, basic details of the collateral. You may also upload supporting documents such as a citizenship copy, salary slip, bank statement or lalpurja.
Information collected automatically. Like most websites we record your IP address, browser type, device, pages visited, referring page and the date and time of each visit. We use a first-party analytics cookie and a language-preference cookie (sk_locale). We do not use third-party advertising trackers.
Information from banks. When a bank you applied to updates the status of your application (received, in review, approved, declined), it sends that status back to us so we can show it to you on the tracking page.
2. Why we use it
- To show you loan offers you are likely to qualify for and estimate your eligibility.
- To forward your application to the one bank you selected, and to let you track its progress.
- To send rate alerts and application updates you asked for by SMS, email or WhatsApp.
- To verify your identity and prevent duplicate or fraudulent applications.
- To improve the site, fix errors and understand which comparisons people find useful.
- To meet legal obligations, including requests from Nepal Rastra Bank or a court.
We process this information with your consent, which you give when you submit a form, and where necessary to perform the service you asked for. You may withdraw consent at any time by contacting us, although we will then be unable to process an application in progress.
3. Who we share it with
The bank you choose, and only that bank. Your application and the documents attached to it go to the single bank or financial institution you selected. We do not send your application to multiple lenders, and we do not put your details on any list that lenders can browse.
Service providers. We use a small number of vendors to host the site, send SMS and email and store uploaded files. They may only use your data to provide that service to us and are bound by confidentiality obligations.
Legal requirements. We will disclose information where Nepali law requires it, for example to Nepal Rastra Bank, the Department of Money Laundering Investigation, the police or a court with jurisdiction.
We never sell personal data. We do not rent, trade or sell your information to advertisers, data brokers or anyone else. If Sasto Karja is ever acquired, your data would transfer to the new owner under the same commitments and you would be informed.
4. Where it is stored and for how long
Our servers are hosted by a cloud provider outside Nepal with encryption in transit and at rest. Application data is kept for three years from your last activity so that you can track applications, re-apply without re-entering details and so we can answer disputes. Documents you upload are deleted 90 days after the application is closed unless the law requires longer retention. Analytics data is aggregated after 14 months.
5. Your rights
Under the Individual Privacy Act, 2075 you have the right to:
- ask what personal information we hold about you and receive a copy;
- have inaccurate information corrected;
- ask us to delete your information, subject to legal retention duties;
- withdraw consent for marketing messages at any time;
- complain to the relevant authority if you believe we have mishandled your data.
Send requests to the email address below. We will respond within 15 working days and may ask you to verify your identity first.
6. Security
We use HTTPS everywhere, hash passwords, restrict internal access on a need-to-know basis and log access to application records. No system is perfectly secure; if we discover a breach that affects you, we will notify you without undue delay.
7. Children
Our services are for adults aged 18 and above. We do not knowingly collect information from minors.
8. Changes
We may update this policy. The date at the top shows the latest version. Material changes will be announced on the site before they take effect.
9. Contact
Data protection contact: Sasto Karja Technologies Pvt. Ltd., Kathmandu, Nepal. Email: hello@sastokarja.com.