This document (Hereinafter referred to as "Privacy Policy") is an electronic record in terms of existing and applicable the Information Technology laws its allied rules, regulations, directions and guidelines, including the amended provisions thereto pertaining to electronic records in various allied statutes as amended pursuant to the Information Technology Act, 2000 ("IT Act"). This electronic record has been generated by a computer system and does not require any authentication.

This document is prepared and published by virtue of the legal requirement that require regulated entities/ intermediaries to publish the rules and regulations, privacy policy and terms for access or usage of their website/mobile app and in compliance with the below:

•   i.  Information Technology Act, 2000 and Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
•   ii.  Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021
•   iii.  Guidelines on Digital Lending issued by the Reserve Bank of India (RBI), dated Sep 02, 2022.
•   iv.  Other applicable acts, regulations and rules which requires the publishing of a privacy policy for handling of or dealing in personal information including sensitive personal data or information and all applicable laws, regulations, guidelines provided by applicable regulatory authorities including but not limited to the RBI.

PLEASE READ THIS POLICY CAREFULLY. BY CONTINUING TO USE THE SERVICES YOU AGREE TO THIS POLICY. IF YOU DO NOT AGREE TO THIS POLICY OR ANY PART THEREOF, PLEASE DO NOT USE/ ACCESS/ DOWNLOAD/ INSTALL THE APP OR ANY PART THEREOF

1. PRELIMINARY INFORMATION:

In the Site, www.conexo.in and / or any other associate website (hereinafter referred to as "Site" or "Website") is subject to the terms of a legal agreement between the user of the Website and OnEMI Technology Solutions Private Limited (Hereinafter referred to as the "Company"). The Company is incorporated under the provisions of the Companies Act, 2013, having its registered office at...

DEFINITIONS:

1. The term User, Client, or You or any other variant of the said pronoun shall refer to the user who is browsing this Site.
2. The term Company shall refer to the concerned company Andromeda Sales & Distribution Private Limited and/or its affiliates/subsidiary companies.
3. The term Site or Website refers to www.andromedaloans.com; oneandro.com; oneandro.in and shall include e other websites if any owned and monitored by the Company.
4. The term Information or Personal Information provided by the User shall include any personal information or data, sensitive personal data or any other information so supplied by the User, in accordance with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data) Rules, 2011, and the allied rules and regulations.

The following terms and conditions will be deemed to have been accepted by the User, on mere visitation / usage of the WebsiteWebsite and hence the User is required to read them carefully before using the services on the Website.

WHEREAS:

1. 1. Through the Website, the Company enables the Users of the Website to avail services pertaining to inter alia loans, mortgage, financing and financial instruments such as personal loans, home loans, unsecured business loans, and loans against property and other allied matters related to or connected therewith.
2. 2. In its efforts to ensure that its services as abovementioned are properly delivered to and utilized by its Users, the Website will automatically receive and collect certain anonymous information in standard usage logs through its webserver, including computer- identification information obtained from "Cookies," sent to the User's browser from either:

1. 1. Web-server Cookie stored on the User's hard drive.
2. 2. An IP address assigned to the User's computer.
3. 3. The domain server through which the user accesses the Website.
4. 4. The make and type of the computer being used by the User to access the Website.
5. 5. The type of the web-browser that the User uses to access the Website.

The Personal Information collected from the User while accessing the Website, as mentioned in the preceding paragraph, shall include:

1. 1. Name (including the first and last name) of the User.
2. 2. Email address of the User.
3. 3. Contact details (including the mobile phone number) of the User.
4. 4. Zip/Postal code of the User's location.
5. 5. The demographic profile of the User including inter alia the User's age, gender, occupation and address.
6. 6. Financial information including, but not limited to, the User's salary.
7. 7. The User's preference in so far as the loan services offered by the Website are concerned including inter alia preferences pertaining to housing loans, personal loans, loans against property, business loans and the like.

2. REASONABLE SECURITY PRACTICES AND PROCEDURES

The Company has in place, reasonable measures to protect and safeguard the information provided by the User on its interface in accordance with the Information Technology Act, 2000 and its allied Rules and Regulations. However, the User indemnifies the Company from any kind of liability in case of any loss of data / information belonging to the User, resulting from an event, which could not have been prevented by the exercise of prudence on the part of the Company.

3. THE COMPANY'S PRINCIPLES TO PROTECT PRIVACY

In order to protect your privacy, the Company has adopted the following principles:

4. YOUR CONSENT

By using this Website, you consent to the terms of the Company's Privacy Policy and terms of use of the Website and to the Company's processing of your Information for the purposes given above. There are times, however, when the Company may need to contact you via emails, or through phone calls or SMS, and offer you their services for the product that you have opted for, or for imparting product knowledge, or to inform you about promotional offers running on the Website and/or offers offered by the associated third parties, for which reasons, as well as web aggregation, Personal Information may be collected as detailed above.

It is made clear that the Company shall not be liable in any manner, for any defects or adverse consequences that may arise as a result of limited, incomplete, inaccurate or false Information provided by you.

5. SHARING AND STORAGE OF USERS PERSONAL DATA

Any Personal Data that the Company has access to shall never be shared without user consent and without disclosing the purpose behind the same. In various processes /submission of applications /availment of product / service offerings, Company may even seek user explicit consent to use / share user's Personal Data. In company's business and operational processes, Company only shares the data on a partial and "need-to-know" basis to designated personnel or partners or service providers/third parties. The details of our partners/ service providers/third parties with whom we may share user's Personal Data on a partial and "need-to-know" basis can be viewed at www.conexo.in.

The Company receives and stores information or document you enter or upload on our Website /Mobile Application, in line with the product or service opted by you and as required by us or our business partners, including your personal information which will be need-based like first name, last name, email address, date of birth, residence city etc.. You can choose not to provide certain information but then you might not be able to take advantage of many of our services and features.

We neither collect nor store your biometric information. We may also have one time access to your camera, microphone, location or any other facility necessary for the purpose of onboarding or KYC requirements of us or our Partner with your explicit consent, in accordance with the Digital Lending guidelines issued by RBI and as amended from time to time. We might receive information about you from other sources and add it to our account information.

The Company may process, store and retain user's Personal Data on Company's servers where the data centres are located, and/or on the servers of third parties having contractual relationships with us. All Personal Data/information will be collected and stored at servers located in India. Company will retain user's data for the period that you continue to be it's customer and for such period as required to comply with any obligation under any law for the time being in force.

Company will share user's data with competent / legal / statutory / regulatory agencies / authorities or partners / service providers acting on our behalf (as the case may be) in following cases:

1. 1. For enabling the provision of the products / services availed by user, strictly on a "need to know" basis and subject to applicable laws.
2. 2. Where it is directed or required by legal / regulatory / statutory / governmental authorities / judiciary under any applicable laws / regulations or judicial pronouncement though a legally obligated request.
3. 3. Where it is required by financial institutions to verify, mitigate or prevent fraud or to manage risk or recover funds in accordance with applicable laws / regulations.

When user avail our products/services, Company may collect and store information about user to process his requests and automatically complete forms for future transactions, including (but not limited to) user's phone number, address, email. Such sharing shall be in accordance with user's instructions and subject to appropriate confidentiality and security requirements.

6. THE COMPANY'S DISCLOSURE OF YOUR INFORMATION

The Company will not use or rent your financial information for any purpose other than to complete a transaction with you. The Company shall however, collect sensitive personal data or Information for the following purposes:

• For a lawful purpose connected with a function or activity of the body corporate or any person on its behalf in relation or arising in connection with the services/products provided by the Company; and
• For the collection of the sensitive personal data or information which is considered necessary for that purpose.

The Company requires your information inter alia for the purpose of:

• • Getting in touch with you, whenever necessary.
• • Providing you with the products and services that you have specifically requested for.
• • Preserving social history, as governed by existing law and policy.
• • Intra business interactions among various subsidiaries/affiliates of the Company.
• • Investigating violations of the Website's/ Mobile Application's terms of use or to defend against legal claims.
• • Assist us or our business partners in facilitating and delivering services to you, process payments and your applications, communicate with you about products, services and promotional offers;
• • Sending you information about special promotions or offers. We might also tell you about new features or products/services. These might be our own offers or products/services, or third-party offers or lending partners products or products/services with whom Andromeda has a tie-up;
• • For generating your CIBIL report upon your consent;
• • File storage permissions on Android/iOS and Website for uploading customer documents are obtained for the purpose of processing customer applications by our Partners.

The Company shall use the Information so collected internally to inter alia:

• • Direct its efforts towards product development and improvement.
• • Contact you as a survey respondent.
• • Send you promotional materials from our contest sponsors and/or advertisers.

The Company shall comply with all the reasonable security practices and procedures for keeping the information of the User secure.

Without prejudice to the stipulations contained hereinabove, given the Company's legal responsibilities to legal authorities and regulators, there may be situations when the Company needs to share your information with legal authorities or processes or need to protect the Company's rights or comply with terms and conditions in this regard.

Without prejudice to the stipulations contained hereinabove, given, the Company shall also be entitled to disclose your information which you may have either expressly or impliedly authorized the Company to disclose to third parties. Your information will be shared with third parties when:

• • The Company needs to share your information to provide you with the product or service that you have requested through third parties; or
• • The Company has your consent to share the Information;
• • The Company needs to share your information with certain service partners in order to respond to your queries / comments or to resolve service issues and to serve you better.

Without prejudice to the generality of the foregoing, a Power of Attorney, authorizing the Company to disclose your information to third parties, shall tantamount to express authorization and consent by you.

7. COOKIES:

The cookies installed by the Company shall be exclusively for the purpose of retrieving Information from you which pertain to be useful for the purpose of improving the online experience of the Client. A cookie is a piece of data stored on the user's computer tied to information about the user. Cookies shall have limited scope, either for the purpose of person enrolment/registration for imparting services, or for the provision of information pertaining to loans, mortgage, financing and financial instruments such as personal loans, home loans, unsecured business loans, and loans against property and other allied matters related to or connected therewith.

We use cookies for on our Website in order to personalize our service to you. By using our Website, user/s agree that these types of cookies can be placed on his/her device. User/s is free to disable/delete these cookies by changing his/her web browser settings. User/s can control the use of cookies at the individual browser level. If you reject cookies, you may still use our site, but your ability to use some features or areas of our Website may be limited. You may refuse to accept cookies by activating the setting on your browser which allows you to refuse the setting of cookies. Unless you have adjusted your browser setting so that it will refuse cookies, our system will issue cookies when you log on to the Website.

8. CHANGES IN PRIVACY POLICY

Please note that this Privacy Policy may change from time to time. The Company reserve its right to change, modify or update this Privacy Policy at any time without notice. The Company shall not reduce your rights under this Policy without your explicit consent and expects most such changes to be minor. Regardless, the Company will post any Policy changes on this page and, if the changes are significant, we will provide a more prominent notice. Each version of this Policy will be identified at the bottom of the page by its effective date. If you have any questions or concerns about this Policy, please feel free to contact us any time at the contact details provided on this Website.

9. QUESTIONS OR SUGGESTIONS

If you have any questions about the Company's Privacy Policy disclosure of your Information or data privacy, please e-mail us at care@conexo.in

10. LOG FILES

Like most standard websites/mobile applications, the Company uses log files. This information may include, inter alia, internet protocol (IP) addresses, browser type, internet service provider (ISP), referring/exit pages, platform type, date/time stamp, and number of clicks to analyze trends, administer the site, track user's movement in the aggregate, and gather broad demographic information for aggregate use. The Company combines this automatically collected log information with other information which may be collected about you. This is done by the Company to improve the services offered by the Company to you, and to improve marketing, analytics or site functionality.

11. THIRD PARTY LINKS/OFFERS

The Company uses third-party advertising companies to serve ads to you when you visit the Website. These companies may use information about your usage preferences (but not your name, address, email address, or telephone number) about your visits to this and other websites in order to provide advertisements about goods and services of interest to you.

However, it is made clear that your interaction with any third party accessed through the Website is at your own risk, and the Company will have no liability with respect to the acts, omissions, errors, representations, warranties, breaches or negligence of any such third parties or for any personal injuries, death, property damage, or other damages or expenses resulting from your interactions with the third parties.

The Company reiterates that it is not responsible for the privacy practices of third-party websites, which the Company does not own, manage or control. We encourage you to carefully read the privacy policy of any website you visit.

12. OPTION TO GRANT AND DENY THE CONSENT CONCERNING USER PERSONAL DATA

The User may at any point in time choose to deny/revoke consent for use of his Personal Data or restrict disclosure to third parties, data retention or revoke consent already granted to collect personal data. However, in case user choose to opt for any such revocation/restriction, company may not be able to offer/serve user with various products/services that need company to have user consent for using/storing/sharing user's Personal Data in accordance with this Policy and in such case company may have to withdraw/stop any such products/services being availed by the user. The user may by sending a mail to care@conexo.in may revoke his consent to use his personal data being used by lending partners or other associates or third parties for their selling or promotion of their products.

13. DELETION OF USER PERSONAL DATA

The User may choose to delete his account at any point of time by making such choice by emailing us on care@conexo.in c With this, the Company will no longer provide user data for external processing, cross-selling, and promotional offers of its lending partners.

However, in all cases company retain user's Personal Data as long as the purpose for its usage exists, after which the same is disposed off by company except for any record retention required as per applicable law. The provisions of various laws require user transaction logs to be stored for longer periods post the deletion of an account. Further, in the event of the pendency of any legal / regulatory proceeding or receipt of any legal and / or regulatory direction to that effect, Company may be required by the law of the land to retain user Personal Data for longer periods.

14. NODAL GRIEVANCE REDRESSAL

The User may contact Company on any aspect of this policy or grievances relating to any digital lending-related complaints, by writing to our Nodal Grievance Officer as per the details provided below:

15. MISCELLANEOUS

The Users may review the Information, to ensure that any Information provided by the User found to be inaccurate or deficient may be corrected or amended, as feasible.

The Company shall not be responsible for the authenticity of the information supplied by the provider of information to the Company or to such other person acting on behalf of the Company.

The User consents that the Company may transfer the Information to any other body corporate or a person in India, or located in any other country, that ensures the same level of data protection that is adhered to by the Company, in accordance with the Information Technology Act, 2000 and its applicable Rules and Regulations.

The Company will retain and use your Information as necessary to comply with our legal obligations, resolve disputes and enforce the agreements entered into for providing the services offered by the Company, and more particularly described in the T&Cs and terms of Use of the Website.

IN CASE OF ANY QUERIES/GRIEVANCES WITH RESPECT TO SERVICES, CONCERNS, OR SUGGESTIONS REGARDING OUR PRIVACY POLICY, PLEASE REACH US AT care@conexo.in.