Privacy Policy
Last updated: April 2026
At Malapaga, we are committed to protecting your privacy and the security of your personal data. This policy describes how we collect, use, and protect your information.
1. Information We Collect
To provide our loan management services, we collect the following personal information:
- Contact information: Name, email, phone number
- Identification: National ID (cédula), date of birth
- Financial data: Loan information, payment history, outstanding balances
- Preferences: Preferred language, notification preferences, contact method
We only collect information necessary to provide our services. We never request sensitive financial information such as bank account numbers or passwords.
2. How We Use Your Information
We use your personal data for the following purposes:
- Loan management: Process loan applications, calculate payments, generate payment schedules, and manage the loan lifecycle
- Notifications: Send pending payment reminders, overdue alerts, and account updates
- Reports and analytics: Generate loan portfolio reports, calculate delinquency rates, and provide statistics for the lender
- Legal compliance: Comply with legal and regulatory obligations applicable to the lending industry
- Service improvement: Analyze usage patterns to improve our products and services
We do not use your information for unsolicited marketing purposes or sell your data to third parties.
3. Information Sharing
Your information is shared only in the following ways:
- With your lender: We share your information with the lender associated with your loan for its management and administration
- Service providers: We use third-party services (such as WhatsApp for notifications) only with your consent and under strict privacy policies
- Legal compliance: We may disclose information when required by law, court order, or to protect our rights
We do not sell, rent, or share your information with third parties for marketing purposes.
4. Data Security
We implement technical and organizational security measures to protect your personal data:
- Encryption: We use SSL/TLS encryption for all data communications
- Access control: We restrict access to your data only to authorized personnel who need to know it
- Authentication: We use WhatsApp (OTP) or email authentication to verify your identity
- Monitoring: We continuously monitor our systems to detect and prevent unauthorized access
- Updates: We keep our systems updated with the latest security patches
Despite these measures, no internet transmission is 100% secure. We recommend that you protect your credentials and do not share them with anyone.
5. Data Retention and Deletion
We retain your personal data only as long as necessary to provide our services and comply with legal obligations:
- Active period: While you have active loans or your account is in use
- Legal requirements: As required by local data protection laws (Law No. 172-13 on Personal Data Protection in the Dominican Republic)
- Account closure: When you delete your account, your personal data is anonymized or deleted as appropriate
- Deletion requests: You can request the deletion of your personal data at any time from your account settings
Financial transaction data may be retained for longer periods to comply with accounting and regulatory obligations.
6. Your Data Rights
You have the following rights over your personal data:
- Access: Request access to your personal data we hold in our records
- Rectification: Request correction of inaccurate or incomplete data
- Deletion: Request deletion of your personal data when no longer necessary or when you revoke your consent
- Portability: Request a copy of your personal data in a structured, commonly used format
- Opposition: Object to the processing of your personal data for legitimate reasons
- Restriction: Request that we limit the processing of your personal data
- Revocation: Withdraw your consent for the processing of your personal data at any time
To exercise these rights, contact us using the contact information provided below.
7. Contact Information
If you have questions about this privacy policy or wish to exercise your data rights, contact us:
We will respond to your request within a reasonable timeframe, as established by data protection law.
8. Changes to This Policy
We may update this privacy policy periodically to reflect changes in our data practices, changes in applicable law, or for other operational reasons.
We will notify you of any significant changes via:
- Notification in the borrower portal
- Email to the address registered in your account
- Updating the "Last updated" date on this page
Continued use of the borrower portal after any changes constitutes acceptance of the updated policy.
This privacy policy was last updated in April 2026.
By using Malapaga, you accept the terms of this privacy policy.