Privacy Policy
Effective Date: July 10, 2026
App Name: Vesahod
Company Name: V GMC LENDING CORPORATION
Company Registration No.: CS201825486
Certificate of Authority No.: 2839
Company Address: Gima Bldg., Pichon Street, Barangay 1-A (Pob.)Davao, Davao City, Davao Del Sur, 8000 Philippines
Email: anneshyrishgarcia@vgmclending.com
We aim to provide loan services in accordance with applicable laws, regulations, and our internal compliance requirements. As a regulated financial institution, protecting the interests of users is our top priority. Our loan services are designed to be secure, efficient, and user - friendly, and all internal processes comply with relevant laws and regulations. We are committed to safeguarding the confidentiality and security of your personal and financial data and continuously improving our services to meet the evolving needs of users.
Information We Collect
To provide our loan services, verify user identity, evaluate loan applications, prevent fraud, and comply with legal obligations, we may collect and process only the following categories of information that are necessary for these purposes:
Phone Number Information
We collect your mobile phone number to create and secure your account, support registration and login verification, and send essential service-related communications.
Approximate Location Information
With your permission, we may collect approximate location information only while you actively use the App to confirm service availability and help detect suspicious account activity. We do not collect precise location or background location information, and we do not use location information to determine loan eligibility, loan amount, pricing, or repayment terms. You may withdraw this permission at any time through your device settings.
Loan Application Information
We may collect information you voluntarily provide during the loan application process, including your name, date of birth, address, employment information, identification details, loan application details, and other information necessary for identity verification, credit assessment, loan processing, repayment management, fraud prevention, and legal compliance.
Identity Verification Information
For KYC and identity-verification purposes, we may process government-issued ID documents, selfie images, facial-verification results, and related authentication information submitted by you. This information is used only for identity verification, fraud prevention, loan application review, and legal compliance.
SMS permission
We request access to financially relevant SMS content for credit risk assessment purposes, including bank alerts, loan confirmations and repayment reminders. Your message privacy is our priority. We only access SMS related to financial transactions and services, and cannot view other private messages. Your SMS data will not be disclosed to third parties without your explicit consent, except where required by law.
App Usage and App List Permissions
To deliver safe and efficient services, we collect and analyse app names (such as Maya and Facebook) as well as their installation durations. This information enables us to provide loan offers suited to your usage patterns, mitigate fraud risks by flagging devices with high-risk applications, and maintain compliance with financial regulatory requirements. We do not monitor your in-app activities including posts, chats or browsing records, nor do we retain any non-essential data.
Camera Permission
We may request access to your camera only when you actively choose to capture ID documents, selfie images, or other required supporting documents for identity verification or loan processing.
User-Selected Image Submission
You may choose to submit specific images or documents through a system image picker or file-selection function. We process only the files that you actively select and submit. We do not request broad access to your photo gallery, media library, videos, external storage, or unrelated files on your device.
Device and Security Information
We may collect basic device and security information, such as device model, operating system version, network status, app version, and technical logs, to maintain service stability, detect security risks, prevent fraud, and troubleshoot technical issues.
Loan and Service Records
We may process loan application records, approval results, disbursement records, repayment records, customer-service records, and related transaction information necessary to provide and manage our loan services.
Emergency Contact Information
During the loan application process, if necessary, You can manually provide the names, mobile phone numbers and relationships of at least two emergency contacts. We will not request or use the READ_CONTACTS permission, nor will we access, import or synchronize your device contact list.
Before providing an emergency contact’s information, you must confirm that you have informed that person that you are providing their information for loan-application verification and fraud-prevention purposes. Emergency contacts are not guarantors, are not responsible for any loan obligation, and will not be contacted for debt collection, payment reminders, marketing, advertising, or credit-scoring purposes.
Children’s Privacy Protection
Our services are only available to individuals aged 18 and above. We will not deliberately collect personal information from individuals under the age of 18. If we discover that a minor has submitted personal information, we will immediately delete such information and suspend or terminate the relevant account. If parents or guardians notice that their children have shared personal information with us, they can contact us through the provided contact information and we will take appropriate measures to delete the personal information of the minor.
Purposes for Collecting and Using Personal Information
We collect and use personal information only as necessary to:
• Create, maintain, and secure user accounts;
• Verify identity and complete KYC, authentication, and fraud-prevention checks;
• Receive, assess, and process loan applications in accordance with applicable laws and internal eligibility requirements;
• Present loan terms, process loan agreements, manage disbursements, repayments, and account records;
• Provide customer support and send essential service-related notifications;
• Protect the security, integrity, and stability of the App, detect suspicious activity, and investigate potential fraud;
• Process user-selected identity documents and images for identity verification and loan processing;
• Use approximate location information, with user permission, to confirm service availability and help protect against suspicious account activity;
• Use manually submitted emergency-contact information solely for application verification and fraud-prevention purposes;
• Meet legal, regulatory, audit, record-retention, and dispute-resolution obligations.
We do not collect or use personal information for purposes that are unrelated to the services described in this Privacy Policy.
Legal Bases for Processing
We process personal information only when permitted by applicable law, including where processing is necessary to provide loan services requested by you, verify identity, prevent fraud, comply with legal or regulatory obligations, protect our legitimate interests, or where you have provided consent. Where required by law, we obtain your explicit consent before processing sensitive personal information, including facial-verification information.
Information Protection Measures
We implement reasonable and appropriate organizational, physical, and technical safeguards to protect the personal data we process. These measures include role-based access controls, confidentiality obligations for authorized personnel, secure data transmission, system monitoring, vulnerability management, incident-response procedures, and secure data retention and disposal practices.
Access to personal data is limited to authorized personnel and service providers who need the information to perform their duties and who are subject to appropriate confidentiality and data-protection obligations. We periodically review and update our safeguards based on the nature of the data, the risks involved, and applicable legal requirements.
While no internet-based system can be completely secure, we take reasonable steps to investigate and address suspected security incidents and will provide notifications where required by applicable law.
Third-Party Disclosure
• Dyna.AI (Facial Recognition and Identity Verification) This service verifies user identity and detects suspicious or fraudulent activities. It may process user-submitted selfies and facial biometric data for identity checks. Such data is collected only with user consent, transmitted via encrypted channels, and exclusively used for identity verification, security review and fraud prevention.
• Alibaba Cloud SDK (Image Upload Service) This SDK enables secure upload of user-authorized images including ID documents and selfies for identity authentication. Only images manually selected and submitted by users will be uploaded; no other photos or files stored on the device will be accessed. The uploaded content is used for real-name verification and feedback, and will not be used for any other secondary purposes.
•AppsFlyer tracks app installs, user engagement and ad performance to optimize services and marketing activities, so we can provide more suitable offers to users. It collects anonymous device advertising IDs and in-app events such as app openings and loan application starts. All data is transmitted through secure HTTPS links for analysis and experience improvement, and will not be merged with personally identifiable information for irrelevant uses.
•Firebase provides app performance monitoring, user behavior analysis and ad optimization to keep the application stable. It gathers general usage data, device information and performance metrics, without capturing sensitive financial data or personal identifiers like name, phone number or bank account details. Data transfers are encrypted and processed only for internal app optimization. Data retention follows our data protection policy and will not be shared with third parties for unrelated purposes.
Your Rights as a Data Subject
You retain the following rights regarding your personal data:
Access Right: You can request a copy of your personal data that we have stored.
Correction Right: You can correct any errors in the data.
Deletion Right: Under the law, you can request the deletion of your data.
Objection Right: You can object to specific data processing activities.
Data Portability Right: You can request a copy of the data in a structured, machine-readable format.
To exercise any of these rights, please contact us at:
anneshyrishgarcia@vgmclending.com
We will reasonably verify your identity before handling your request. Certain requests may be subject to limitations where applicable law mandates or allows ongoing processing or retention of your data.
Contact Us
Should you have any inquiries, concerns or requests relating to this Privacy Policy, or if you intend to exercise your rights as a data subject, you may reach us via the contact channels listed below.
Email: anneshyrishgarcia@vgmclending.com
Account Deletion and Data Retention
You may submit a request to delete your Vesahod account via either of the methods below:
1.Within the Application
Launch the Vesahod app and navigate to: Me > Delete Account
2. Via Email
Submit your account deletion request to anneshyrishgarcia@vgmclending.com.
Kindly include your registered mobile number or other information reasonably necessary to verify your Vesahod account.
Submission of an account cancellation request shall not terminate, reduce, suspend or waive any loans, repayment obligations, applicable charges or other payable sums stipulated under the loan agreement.
You may request deletion of your Vesahod account at any time. We will delete or anonymize personal data that is no longer necessary, except for the minimum information required to manage active loans, prevent fraud, resolve disputes, or comply with legal and regulatory obligations. Required loan, transaction, and KYC records will be retained for five (5) years from account closure or transaction completion, or longer where required by law or an ongoing investigation. After the retention period, such data will be securely deleted or anonymized. Account deletion does not cancel any outstanding loan or repayment obligation.
