This Privacy Policy document ("Privacy Policy") is published in accordance with Rule 4(1) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 which requires the publishing of a privacy policy for handling personal information including Sensitive Personal Data or Information.

By visiting our website (https://yenmo.in/) or using the Yenmo mobile/web application or Rewise by Yenmo (collectively, the "Platform") and availing our services ("Services"), you agree to be bound by this Privacy Policy. By mere access to the Platform, you consent to the processing of your Personal Information and Sensitive Personal Data or Information by Yenmo Technologies Private Limited ("Yenmo", "we", "us"). This Privacy Policy is incorporated into and subject to our Terms of Use.

If you do not agree to this Privacy Policy or any part thereof, please do not access, download, install, or use the Platform or any part thereof.

DEFINITIONS

• "Personal Information" means information that identifies you, such as name, email, phone number, address, PAN, income and occupational details.
• "Sensitive Personal Data or Information" has the meaning as defined under the IT Rules 2011 and includes financial and KYC data.
• "Rewise" refers to our new credit discovery and comparison service ("Rewise by Yenmo").

Note: The data collection, usage, and regulatory compliance provisions specific to Rewise (including Sections 5 and 10) apply only when you visit the Rewise website or use the standalone Rewise service. If you do not access Rewise separately, those sections do not apply.

CONSENT VALIDITY & REVOCATION

• Validity Period: All consents granted for fetching credit reports and asset data are valid for a maximum of 180 days from the date of authorization, in accordance with Experian and CICRA guidelines.
• Renewal: To continue using Rewise services beyond the 180-day period, you will be prompted to re-consent before any further data access.
• Revocation: You may withdraw consent at any time via your account settings or by contacting our Grievance Officer. Upon revocation, we will halt all new data fetches and delete fetched data within 10 business days, unless retention is required by law.

COLLECTION OF PERSONAL INFORMATION

We collect the following information when you register for an account or use the Platform:

You may browse certain sections without registering. However, to access loans or credit discovery features, registration and submission of the above information are required. Mandatory and optional fields are indicated on the Platform, and you may decline to provide optional information, which may limit certain features.

ADDITIONAL KYC DETAILS AND BANK INFORMATION

To comply with RBI guidelines, lending-partner KYC mandates, or other laws, we may collect additional data:

• Parent/Guardian names
• Bank account details (bank name, account number, IFSC, branch)
• Aadhaar or e-Aadhaar (masked, as per UIDAI directions)
• Video KYC recordings (microphone and camera access)

This information is collected via secure, encrypted channels and retained only as long as necessary to comply with legal requirements, internal policies, and audit needs. You may request data purging after service termination.

COLLECTION OF DEVICE, LOCATION AND USAGE INFORMATION

We collect device information, IP address, browser type, URLs, geolocation (one-time for KYC), and cookie data to:

• Provide automatic updates and security
• Prevent fraud and unauthorized access
• Improve and customize your experience
• Analyze aggregated usage patterns

CREDIT SCORE, LOAN DISCOVERY & ASSET ANALYSIS (REWISE BY YENMO)

Note: The provisions in this section apply only when you visit the standalone Rewise website or use the Rewise service. They do not apply if you only access the Yenmo main website or app.

With your explicit consent, Rewise by Yenmo fetches and analyzes:

• Credit reports and scores from Credit Information Companies (CIBIL, Experian, Equifax, CRIF Highmark)
• Outstanding loan details (balances, EMIs, overdue status)
• Other liabilities (credit cards, BNPL)
• Asset holdings (mutual funds via NSDL/CAA, bank statements via Account Aggregator framework, insurance policies, fixed deposits)

We use this data solely to:

• Assess your financial position
• Recommend personalized loan products (refinancing, balance transfers, mutual fund–backed loans)
• Display pre‑qualified offers from lenders

Rewise adheres to the Fair Credit Practices Code; we do not bias recommendations or share raw credit data without your consent. You may revoke permissions at any time via account settings.

USE AND DISCLOSURE OF INFORMATION

We use your information to:

We may disclose information to:

• Our regulated financial partners, banks, NBFCs, and third-party service providers for loan facilitation
• Credit Information Companies for report fetching
• RBI-licensed Account Aggregators and FIUs for secure data retrieval
• Technology partners for analytics and platform operations
• Law enforcement or regulatory authorities when required by law
• Successor entities in mergers, acquisitions, or restructuring

We NEVER sell your raw credit or asset data. Anonymized, aggregated data may be shared for research or to negotiate better offers.

COOKIES AND TRACKING TECHNOLOGIES

We use cookies and similar technologies to identify you, remember preferences, and analyze Platform usage. You may disable cookies at the device/browser level, but some features may be affected.

DATA RETENTION & PURGING

We retain data as necessary to provide Services and comply with legal obligations. Personal and KYC data are purged:

• Upon service termination or loan closure: by end of financial year or six months post-closure, whichever is later.
• Incomplete loan applications: within 10 business days of request.
• Revoked Consents: Data fetched under Rewise will be deleted within 10 business days of consent withdrawal.

SECURITY MEASURES

We implement reasonable physical, administrative, and technical safeguards, including:

• SSL encryption for data in transit
• End-to-end encryption for bank and KYC data
• Role-based access controls
• Regular security audits and reviews
• Data Integrity: We store unedited JSON responses from credit bureaus in read-only, version-controlled logs with hash validation to prevent tampering, ensuring compliance with CICRA Section 19 (accuracy and completeness).

In case of a data breach, we will notify you and relevant authorities promptly.

REGULATORY COMPLIANCE

Note: The regulatory obligations listed here with respect to credit reports, Account Aggregator framework, and related data permissions apply only to Rewise by Yenmo activities. They do not extend to usage of the Yenmo main Platform.

We comply with:

• Information Technology Act 2000 and IT Rules 2011
• Credit Information Companies (Regulation) Act, 2005 (CICRA) – including Section 19 (data accuracy) and Section 20 and Rule 28 (confidentiality and purpose limitation)
• RBI Digital Lending Guidelines (for Rewise operations)
• SEBI and FIU regulations for account aggregation

YOUR RIGHTS & CONTROLS

• Access, correct, or delete your Personal Information via account settings or by contacting our Grievance Officer
• Withdraw consent (certain features may be disabled)
• Control device-level permissions (camera, microphone, location)

LINKS TO THIRD-PARTY SITES

Our Platform may link to external websites. We are not responsible for their privacy practices. Please review their policies separately.

CHANGES TO THIS PRIVACY POLICY

We may modify this Privacy Policy at any time. We will post updates on the Platform with the effective date. Continued use constitutes acceptance of changes.

GRIEVANCE OFFICER

Name: Aryan Agarwal (CTO)

Address: Yenmo Technologies Private Limited, 3rd Floor, 241, 17th Cross Rd, Sector 6, HSR Layout, Bengaluru, Karnataka 560102

Phone: +91 9521382950

Email: aryan@yenmo.in

Hours: Mon – Sat (10:00 – 19:00)

Last updated: July 15, 2025