This Privacy Policy explains how we collect, use, and disclose your information when you use our mobile application (hereinafter referred to as the "SARVATRA LOANS " or "App"). SARVATRA LOANS, operated by DHANI BABU FINTECH PRIVATE LIMITED, has entered into a strategic partnership with Vaishali Securities Limited. This partnership integrates the expertise and resources of both parties to provide you with simplified, compliant, reliable, and user-centric loan solutions and related financial services. It aims to meet your diverse financial needs and enhance your borrowing experience. To deliver these services, we and our lending partners will collect various necessary data and information with your prior explicit consent. This Privacy Policy (hereinafter referred to as the "Policy") details the rules for the collection, retention, sharing, storage, and processing of such data and information by us and our lending partners. Creating an account on this App constitutes your consent to the processing, storage, use, and sharing of your provided data in accordance with this Policy.

The SARVATRA LOANS App provides users ("you" or "your") with information about our company, along with online content, tools, products, services, and financial offerings (collectively referred to as "Services"). This Policy explains how SARVATRA LOANS collects, uses, and discloses information, including personal data ("Personal Information") as defined under applicable laws. SARVATRA LOANS operates solely as a digital platform, while all lending-related decisions and disbursements are determined and executed by our registered Non-Banking Financial Company (NBFC) partner, Vaishali Securities Limited. We fully recognize the importance of protecting your Personal and Sensitive Personal Information, take reasonable measures to safeguard its confidentiality, and may share it with affiliates or third parties only in compliance with relevant legal requirements.

Table of Contents

1. What Personal Information We Collect

2. How We Use Personal Information

3. How We Disclose Personal Information

4. Other Important Information

5. Data Security

6. Data Storage

7. Your Privacy Rights

8. Intellectual Property

9. Consent and Withdrawal of Consent

10. Disclaimer

11. Complaint Resolution

12. Contact Us

1. What Personal Information We Collect

By registering for and using the SARVATRA LOANS App or our Services to apply for financial products, you accept this Policy and consent to our collection, use, and disclosure of your Personal Information as described herein.

1.1 Personal Information You Provide or Authorize Us to Collect

Depending on the type of financial product or service you apply for, we may request different types of Personal Information when you use the Services. Such information may be directly provided by you, obtained from identity verification and anti-fraud partners or public databases, collected from our affiliates and non-affiliated third-party partners, retrieved from external accounts you link, obtained from consumer reporting agencies , or obtained when you initiate a transaction (where there is a legitimate business need)—all in accordance with your instructions.

Personal Information you provide or authorize us to collect includes:

• Contact and Demographic Information: Name, date of birth, address, phone number, email address, Personal Account Number (PAN), or Aadhaar.

• Professional or Employment Information: Employer name, income amount, payroll cycle, direct deposit date, etc.

• Identity Verification and Authentication Information: Under specific circumstances, we may collect your photographic information. We cooperate with third parties to complete identity verification, and some of these partners may collect biometric information (such as facial features, referred to as "Biometric Data") from these photos.

• Additional Requested Data: Supplementary information required by lending partners for loan processing, including but not limited to bank statements, GST returns, salary slips, and income statements. This data must be submitted to lending partners through our platform.

• Feedback and Other Data: Information provided during call center interactions and feedback/comments submitted regarding the App or as part of our service improvement research.

1.2 Personal Information Collected Automatically

Each time you interact with our Services, SARVATRA LOANS may automatically receive and record information from your computer, browser, and/or mobile device, including:

• Usage Information: Details of how you use our Services, such as the type and category of content you view or use, features you access, actions you take, and the time, frequency, and duration of your activities in the App. We use this information for data analysis to better understand your usage and improve our Services.

1.3 App Permissions and Collected Device Information

To effectively provide Services and comply with laws and regulations, the SARVATRA LOANS App may request specific permissions on your device. The information accessed through these permissions is your Personal Information, including but not limited to:

Location: In addition to the location data collected if you enroll into our Driver Score feature, we may collect location data based on your IP address and the geolocation of your device. We collect this data to better tailor our services to you and to help provide service offerings available to you in your geographic area.

Device Information: Our application gathers and monitors a range of phone-related information, including hardware specifications, operating system details, serial numbers, user profiles, and mobile network data. This enables us to uniquely identify each device and safeguard against unauthorized access or actions on your behalf.

Camera: In the SARVATRA LOANS app, we might request your assistance to kickstart the onboarding process by guiding you through completing the KYC (Know Your Customer) procedure. This could involve providing necessary documents to verify your personal information, taking photos to create profiles, or uploading required documents for loan applications. Any camera data captured will be securely uploaded to our app server, https://api.sarvatraloans.asia, and will be treated with utmost confidentiality. Rest assured, your data will not be used for any other purposes. You have the flexibility to revoke or re-authorize camera permissions at your convenience. Should you have any inquiries, feel free to reach out to our dedicated customer support team.

AppList: In order to provide more accurate credit assessments and personalized services, we need to access information about the applications on your device. This will help us gain a comprehensive understanding of your spending habits, financial situation, and credit risk, enabling us to tailor credit products that best suit your needs. In order to ensure accurate credit assessment and considerate service, we need to obtain your application list information and fully understand your consumption habits, financial status and credit risks to customize the most suitable credit products. Only the application name and type are accessed and all data transmission is encrypted to ensure privacy and security.

The above information will only be accessed with your explicit consent and used exclusively for the aforementioned loan-related purposes.

1.4 Personal Information Collected from Other Sources

To operate the SARVATRA LOANS App and provide Services, we may collect your Personal Information from third parties. As mentioned earlier, this may include information from one or more consumer reporting agencies (in connection with your use of our Services or loan application).

2. How We Use Personal Information

We may use the collected Personal Information for the following purposes:

2.1 To Provide Products and Services

• Verify your identity, and open and maintain your account .

• Provide our platform partners with information related to their evaluation models and eligibility criteria (partners may offer personalized solutions based on this information).

• Maintain the operation of our Services.

2.2 To Ensure the Integrity and Security of Our Services

• Conduct identity verification in accordance with applicable laws and regulations.

• Detect and prevent security incidents, harmful activities, fraud, and illegal acts; pursue liability for such acts; and troubleshoot to identify and fix system errors.

• Verify or maintain Service quality, and improve, update, or optimize the Services.

2.3 For Data Analysis, Research, and Service Improvement

• Monitor and evaluate the use of our products and Services to better understand user needs.

• Conduct testing, research, and surveys to identify Service usage patterns and improvement directions.

• Perform data analysis (e.g., usage trend analysis) and financial analysis to inform pricing and other financial matters.

• Improve the content and functionality of the Services, and test and optimize the quality of our matching process.

• Auto-fill specific fields in our forms to enhance your efficiency.

2.4 For Service Quality Assurance and Training

• Monitor communications and interactions with you to ensure customer service quality, provide employee training, and respond to and resolve your inquiries.

2.5 To Communicate with You

• Contact you via email, push notifications, in-app messages, phone calls, or SMS (within the scope permitted by applicable laws and regulations) to provide:

◦ Updates on your application status or other transaction-related account information.

◦ Opportunities, reminders, and offers related to your needs from our platform partners' services or products (which we believe may be of interest to you).

◦ Content we believe may be relevant to you (e.g., articles, official reports, event registration information).

All marketing-related emails we send will include "unsubscribe" instructions, allowing you to opt out of future marketing communications.

2.6 To Comply with Applicable Laws, Regulations, or Legal Procedures

• Investigate disputes or claims related to our Services.

• Respond to requests from judicial authorities, government departments, or regulatory agencies.

• Comply with applicable laws and regulations.

3. How We Disclose Personal Information

We may disclose your Personal Information to the following categories of recipients for business or commercial purposes:

3.1 Lending Partners and Financial Institutions

We will disclose your Personal Information to our cooperative lending institutions, banks, and financial institutions to assist them in evaluating your loan application, processing loan matters, and providing related financial services. Such disclosure requires your explicit consent.

3.2 Service Providers

We may disclose Personal Information to third-party service providers that support our service delivery (e.g., identity verification providers, data storage providers, data analysis companies, consulting firms, lawyers, and auditors). These third parties are bound by confidentiality agreements and may only use your Personal Information to provide services to us.

3.3 Potential Parties in Business Transactions (and Their Agents and Advisors)

In the event of an actual or proposed sale of company assets, merger, acquisition, reorganization, financing, bankruptcy liquidation, business management, or service transfer, we may disclose your Personal Information to actual or potential buyers (and their agents and advisors). We will inform the recipient that they may only use your Personal Information in accordance with this Policy.

3.4 Law Enforcement Agencies, Regulatory Authorities, Government Departments, Courts, or Other Third Parties

We may disclose your Personal Information to competent law enforcement agencies, regulatory authorities, our insurance companies, external legal counsel, government departments, courts, or other third parties under the following circumstances: (i) to comply with applicable laws and regulations; (ii) to enforce, establish, or defend our legal rights; (iii) to protect the rights or vital interests of you or others; (iv) to detect, prevent, or address security issues, fraud, or technical problems.

3.5 Affiliates

We may share your Personal Information with our affiliates and group companies to support business operations, provide joint services, and for internal data analysis.

All disclosure categories exclude information about the participation and consent of SMS senders—such information will not be shared with non-affiliated third parties.

4. Other Important Information

4.1 Online Children's Privacy

The SARVATRA LOANS Services are not intended for minors or to attract minors. We will not intentionally collect Personal Information from minors. If you are under 18 years of age, do not submit any Personal Information through the Services. We encourage parents and legal guardians to monitor minors' Internet use and instruct them not to provide Personal Information through the Services without permission. If you believe a minor has provided Personal Information to us, please contact us at contact@dhanibabufintech.com, and we will delete such information from our database.

4.2 Updates to This Privacy Policy

We may update this Policy from time to time to reflect business changes and adapt to privacy law updates. If required by applicable law, we will obtain your consent for any material changes. Please review this Policy regularly, especially before submitting Personal Information. The latest update date is indicated at the top. Your continued use of the Services after changes to this Policy constitutes your consent to the revised terms.

5. Data Security

We take measures to ensure your Personal Information is processed securely and in compliance with this Policy. Based on the sensitivity of the information, we adopt commercially reasonable administrative, technical, and physical protection measures to prevent unauthorized use, disclosure, or access. We will regularly adjust these control measures to respond to changing requirements and technological developments.

6. Data Storage

We retain your information only for as long as necessary to fulfill the purposes for which it was collected. Upon expiration of that period, your information will be automatically deleted. If you wish to have your data removed from our records, you may contact us in writing, and we will fulfill your request subject to applicable legal requirements regarding data retention.

7. Your Privacy Rights

Under applicable Indian laws, you may have the following rights:

• Right to Know: Request details of specific Personal Information we have collected, including the category of information, collection purpose, sharing parties, data source, and whether the information has been sold or shared in the past 12 months. Such requests may be submitted up to twice a year.

• Right to Erasure: Request the deletion of your Personal Information. We will make every effort to fulfill such requests but may retain some information for business or legal purposes.

• Right to Correction: Correct inaccurate Personal Information we hold about you. We may provide self-service correction tools.

• Right to Withdraw Consent: Withdraw previously given consent for the collection and sharing of your Personal Information.

• Right to Restrict the Use/Disclosure of Sensitive Personal Information: Restrict our use of your Sensitive Personal Information in accordance with applicable laws. We will only use/disclose such data within legally permitted limits.

7.1 Appeals

We will make every effort to fulfill your request. However, we reserve the right to deny a request in accordance with applicable laws — for example, if your identity cannot be verified, if we have reasonable grounds to believe the request is fraudulent, or if we are required to retain certain information to comply with statutory retention obligations.

You have the right to raise concerns about our decision regarding your request. You are welcome to contact us at contact@dhanibabufintech.com, and we will respond within 24 hours.

8. Intellectual Property

The SARVATRA LOANS App retains all rights (including copyrights, trademarks, patents, and other intellectual property rights) to all information provided through the App (including all text, graphics, and logos).

9. Consent and Withdrawal of Consent

a) Your access and use of this App, as well as your signing of a loan agreement with a lending institution, constitutes your written consent to our collection, use, and disclosure of your information in accordance with this Policy.

b) Termination of services between you and a lending institution (pursuant to the Loan Agreement) or between you and this App (pursuant to the Terms of Use) constitutes your withdrawal of consent to this Policy. After termination, except as required by law for information retention, we will no longer use or disclose your information.

c) You have the right to withdraw your consent by sending a written notice to contact@dhanibabufintech.com.

10. Disclaimer

We will not collect Personal Information about individuals unless the individual voluntarily and proactively provides it through this App. After you voluntarily disclose your Personal Information, we may, within legally permitted limits, further verify, collect, or obtain information about you through public and commercial channels and integrate it with other information you have provided. If you have linked third-party social network services, we may also obtain information about you from such services. We will always adopt reasonable security practices and procedures (including managerial, operational, physical, and technical measures) to protect your data and Personal Information—this is critical to SARVATRA LOANS.

We solemnly commit to protecting the personal and financial information you send to us. Unless we obtain your consent at the time of collection, we will not sell or transfer individual users' Personal Information to non-affiliated third parties.

11. Complaint Resolution

If you have any complaints about the terms of this Policy, contact our designated Complaint Resolution Officer. This Officer commits to addressing your issue within a reasonable time frame. The name and contact information of this Officer are available in the App.

12. Contact Us

If you have any questions about this Privacy Policy or our privacy practices, contact us through the following channels:

• Email: contact@dhanibabufintech.com

• For complaints regarding lending partner services: support@vaishalisecuritiesltd.com