We may collect personal information that you voluntarily provide to us or that we access with your consent when you use Velocity Insights (“Platform” or “Product”).

“Personal Information” refers to any information that identifies or can be used to identify an individual.

“Sensitive Personal Information” includes personal information that, due to its nature, requires greater protection, such as financial records, biometric data, or any detail that, if misused, could result in harm, discrimination, or serious intrusion into a person's privacy.

We may collect, store, use, disclose, transfer, and process your Personal Information and Sensitive Personal Information, including but not limited to:

(i) Contact Information: Full name, user ID, permanent and current address, email address, mobile number, city of residence, and PIN code.

(ii) Identification Information: PAN, Aadhaar, passport details, voter ID, date of birth, photograph, and other government-issued identity documentation (only where voluntarily provided or legally required).

(iii) Financial and Business Information: Income details, employment/business information, bank account number, transaction records, remittances, expense data, cash flow records, invoices, receipts, and other operational or financial data linked to your business.

(iv) Demographic Information: Age, gender, nationality, and such other demographic attributes voluntarily provided.

(v) Transactional Information: Amounts received or paid, mode of payment, frequency of transactions, customer/vendor details, product/service categories, and other transactional metadata.

(vi) Usage and Device Information: IP address, MAC address, domain server, interaction with the Platform, device type, application versions, configuration, operating system, features used, browser information, geolocation data, and analytics identifiers.

(vii) Marketing and Communication Records: Interaction history with customer service (emails, call recordings, chat logs), preferences regarding updates, offers, promotions, surveys, and related communications.

(viii) Phone/Device Data: With your express consent, we may access camera, microphone, location, and SMS data (limited to transaction or business alerts) for verification, onboarding, or fraud-prevention purposes. We do not access your contact list, personal photo gallery, or private messages.

(ix) Cookies and Analytics Tools: We use cookies and similar technologies to ensure functionality, security, and user experience improvements. These include session cookies (to maintain login), technical cookies (to store preferences), and analytics cookies (to measure and improve performance). Advertising or tracking cookies will only be used if you explicitly opt in.

(x) Voluntary Information: Any other information you choose to share while using the Platform, including uploaded business records, customer/vendor details, or supporting documentation.

We obtain your explicit consent wherever required, particularly before accessing any Sensitive Personal Information. If you link Velocity Insights with any third- party platform (e.g., accounting, ERP, or payments systems), you authorise us to access and process information from that platform in accordance with this Notice.

Please be cautious while accessing third-party links or tools via the Platform. Information you share with external sites will be governed by their respective privacy policies, not ours.

2.1 Data Retention

We retain the personal information collected through Velocity Insights only for as long as it is necessary to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required or permitted by law. The retention of your data is guided by the following principles:

• Service Continuity: Data will be retained for the duration of your use of Velocity Insights to ensure seamless service and accurate analytics.
• Improvement and Benchmarking Aggregated or anonymised data may be retained indefinitely to support statistical research, benchmarking, and service improvement.
• Legal and Regulatory Requirements: Certain records may be stored beyond your active use period to comply with applicable laws, respond to legal claims, or enforce our rights.
• Periodic Review: We will periodically review the data retained to ensure it remains necessary and proportionate for the purposes described.

2.2 User Rights

You have the following rights in relation to your personal data processed under this Privacy Notice:

• Right of Access: You may request a copy of the personal data we hold about you, along with details of how it is used.
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure (“Right to be Forgotten”): You may request the deletion of your personal data when it is no longer necessary for the purposes collected, subject to any legal or contractual obligations.
• Right to Restrict Processing: You may request restrictions on how we use your data in certain circumstances.
• Right to Data Portability: You may request a copy of your personal data in a structured, commonly used, and machine-readable format, and transmit it to another service provider where technically feasible.
• Right to Withdraw Consent: You may withdraw your consent at any time for data processing based on consent. Such withdrawal will not affect the lawfulness of processing based on consent before its withdrawal.
• Right to Object: You may object to our processing of your personal data in certain situations, such as processing for direct marketing.

2.3 Exercising your Rights

To exercise your rights, please contact us using the details provided in Part Five of this Privacy Notice. We will respond to all requests in accordance with applicable laws and within a reasonable timeframe.

We do not sell or rent your personal information to third parties. However, to provide you with a seamless and reliable experience on Velocity Insights, we may share your data under the following circumstances:

1. Service Providers and Partners: We may engage trusted third-party service providers to assist us in delivering Velocity Insights, such as hosting providers, data analytics platforms, or IT security firms. These providers are bound by strict confidentiality and data protection obligations and may only use your data to perform their contracted functions.
2. Group Companies: We may share data with our affiliates or group companies where necessary to improve product functionality, develop new features, or for internal compliance, provided such sharing remains consistent with this Privacy Notice.
3. Legal and Regulatory Disclosures: We may disclose your data if required by applicable law, regulation, legal process, or governmental request. We will ensure that such disclosure is limited to what is legally necessary.
4. Business Transfers: In the event of a merger, acquisition, restructuring, or sale of assets, your data may be transferred as part of the business transaction. In such cases, we will ensure that the successor entity is bound by privacy commitments at least as protective as this Privacy Notice.
5. Aggregated and Anonymised Data: We may use and share anonymised and aggregated information (that cannot reasonably identify you) for research, analytics, product development, or to publish insights about market trends. Such data will not be linked back to you individually.

We retain your personal information only for as long as it is necessary to fulfil the purposes outlined in this Privacy Notice, unless a longer retention period is required by law.

1. Usage Data: Data generated from your interactions with Velocity Insights (such as logs, analytics, and activity patterns) will be retained until you withdraw your consent, after which such data will be deleted or anonymised, unless retention is required under applicable laws.
2. Account Data: Information associated with your account will be retained for as long as you maintain an active account with us. If you choose to deactivate your account, we will delete or anonymise your personal data within 180 (one hundred eighty) days, unless retention is required for compliance with legal or regulatory obligations.
3. Anonymised or Aggregated Data: Where data has been anonymised or aggregated, it may be retained for longer periods for research, statistical analysis, and product improvement, provided it cannot reasonably be linked back to you.
4. Legal, Regulatory, and Dispute Purposes: Certain records may be retained beyond the standard retention periods if required to comply with applicable laws, enforce our agreements, resolve disputes, or protect our legal rights.

We implement appropriate technical and organisational measures to safeguard your personal information against unauthorised access, loss, misuse, or disclosure. While we take reasonable steps to protect your data, no security system is entirely foolproof, and we cannot guarantee absolute security.

Velocity Insights may use automated tools, including algorithms and statistical models, to analyse Customer Data and derive insights, trends, and predictions. These tools assist in improving operational efficiency, identifying patterns, and delivering analytics dashboards that help Customers make data-driven decisions.

We clarify that:

• No Solely Automated Decisions with Legal or Significant Effects - Velocity Insights does not take decisions that have a direct legal effect or similarly significant impact on individuals solely based on automated processing of their personal data. Any insights generated are intended to support business understanding and decision-making by the Customer.
• Purpose of Profiling - Where profiling of datasets is undertaken, it is done exclusively for generating aggregate insights, performance indicators, or market intelligence. Such profiling is not aimed at evaluating personal aspects of any specific individual.
• Safeguards - In all cases, reasonable technical and organisational measures are implemented to ensure that automated data processing remains accurate, fair, and proportionate to the legitimate business purposes for which it is deployed.

Customers retain full discretion and responsibility for how they interpret and act upon the insights generated through the platform.

Velocity Insights may amend, update, or revise this Privacy Notice from time to time to reflect changes in legal requirements, regulatory guidance, or business practices. Whenever material changes are made, the updated Privacy Notice will be published on our website and, where required by law, Customers will be notified through appropriate means (such as email communication or in-platform notifications).

The revised Privacy Notice will take effect from the date of publication, unless a different effective date is specifically indicated. Continued access to or use of the Insights Services after the updated Privacy Notice has been published shall be deemed acceptance of the changes.

Customers are encouraged to review this Privacy Notice periodically to remain informed of how their data is being collected, used, and protected.

If you have any concerns or complaints related to data privacy, you may contact our designated Grievance Redressal Officer using the details below:
Grievance Redressal Officer

• Mr. Saurav Swaroop
• Email: saurav@velocity.in

If You have any grievance, then You may intimate the same to above e-mail address in the manner explained below:-
a. Sending a request in writing or through email signed with electronic signature identifying the grievance;
b. Your contact information like address, telephone number, email address, etc. where You can be contacted.