Your Privacy Matters

Privacy Policy

Vall Impact Ventures Private Limited is committed to processing and protecting your personal information in strict accordance with our protection and regulation policy.

Note: Our Privacy Policy is subject to change at any time without notice. This Privacy Policy is published in compliance with the provisions of the Information Technology Act, 2000 and the Rules made thereunder. We urge you to read this Privacy Policy carefully before you use or opt to access any services of the Company.

1

General Definitions

All words and expressions used and not defined in this document but defined in the Act or the Rules shall have the meanings respectively assigned to them in the Act or the Rules. Reference to "you" or "your" in this Privacy Policy refers to any natural person (including the employees of the Company) who provide to the Company any Personal Information (PI) or Personal Data or any user(s) of the Company's platform whether or not, you avail the Services offered by the Company.

"Users/Service providers" mean and include persons providing their services by showcasing their talent on the platform in order to raise funds through the Company for various social impact organisations of their choice.

"App" to mean and include our Application for mobile phones and hand held devices.

"Services" to mean and include services listed on the Company's platform and App.

"We/us/our/ours" or any first-person reference throughout this Policy shall mean the Company.

"You/your" or any second-person reference throughout this Policy would mean you (the person using/visiting the Services).

"Act" shall mean the Information Technology Act, 2000 and Rules thereunder as amended from time to time.

"Information" shall mean and include Personal Information and Sensitive Personal Data and Information as may be collected by the Company.

"Personal Information (PI)" shall have the same meaning as under Rule 2 (i) of the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 as amended from time to time.

"Rules" shall mean the Information Technology (Reasonable security practices and procedures and sensitive personal data or information) Rules, 2011 as amended from time to time.

"Registered User" shall mean such user whose registration is accepted by the Company.

"Personal Data" shall mean and include collection and processing the Personal Data provided by You when You access and browse our Platform; create, donate or subscribe to any of the event/fundraiser; request further service, contact us for help, use our messaging services, or submit any enquiry, or otherwise enter information on the Platform before or during its use.

2

Who we are?

We own a platform and are in the business of engaging talented young adults to translate time and talent in works with non-profits to leverage different skills and raise funds for social impact organisations of their choice. The proceeds collected from the Users availing the services is then routed/directed from our bank account to the social impact organisation groups as selected by the service provider.

3

What roles do we play?

We collect and process Personal Data and act as facilitators for the Users to avail the services offered by the Service Providers, in order to raise funds for a social cause. The service Providers are young individuals who are registered with us and are offering their services for a fee. Such fee/funds are collected by us and routed to the social impact organisation groups as per the choice of the Service Providers.

4

Who all are our users/visitors?

The Users: visitors to our platform for handheld devices, User or buyers who avail services listed on our platform. Our users can be from anywhere, all around the country. It is to be noted that you might be able to visit the information and Services outside of India, but we do not offer any Services, to the users located in any country other than India.

5

Why should you read these Privacy Policies?

These Policies will apply to you if you are any of the following:

• A Service Provider whose talents are being showcased in order to raise funds • User to the Services availed • A visitor to our platform or any other Services

By accessing or using the Services or our Websites, you agree to the terms of this Privacy Policy.

6

The Personal Information we collect

We collect personal information (meaning anything that could identify you either by itself, or when combined with other information we are able to gain access to), as described below. When you register yourself as a Service Provider or become our Users, we collect information that your browser sends to us that is called log data, which may include information such as your computer's Internet Protocol ("IP") address, browser version, pages of our Services that you visit, the time and date of your visit, the time spent on those pages, and other statistics.

You can always choose not to provide us with your personal information, but it may mean that we are unable to provide you with the Services you have requested.

Information collected includes: • Name, date of birth, address, email ID, gender and phone number at registration • Information provided directly via email or any other mode of electronic communication • Information provided over telephone • Information provided in physical form • PI/PD collected for the purpose of employment and related services

7

Who will have access to all the personal data/information?

The marketing and sales team of the Company as well as other personnel appointed by or on behalf of the Company to access the information in order to offer you quality products/services but, based on a strict "need-to-know" basis, will have access to the personal data for the purposes of achieving the best deal for its members/users.

The administrative and/or technical staff who ensure the smooth running and operational support of our marketing tools and platform may also have access to these data in virtue of the roles they are assigned in the Company. All our trained personnel, staff and other employees are subject to confidentiality clauses.

8

Personal Data Disclosure

The Services also consist of third party software development toolkits (SDKs) which collect the personal information for the purpose of enhancing business of the Company, thereby providing quality Services to the users/subscribers.

The Company has contracts with the third parties for securing the personal data of the users/subscribers. Besides, in case of protecting the rights of the users, protecting the rights of the Company or in the course of any legal intervention or legal compliance, the Company shall be bound to disclose the Personal Data as and when required by the respective authorities.

9

What else do we collect apart from personal information?

We also collect the device information through which the user contacts us. The location information is used by us when the same is enabled from the user's end. All the technical details pertaining to your membership are under our supervision which includes the user's account information as well. We also collect data of the user pertaining to the transaction (Card number, Bank Name, Card Type, UPI details if applicable or other details relating to online mode of payment) and other details of technical nature.

10

Third party website links

Our Services may refer or attach links to other third party platforms of organizations which may or may not be affiliated with us. This Privacy Policy does not cover the privacy policies of the third-party platforms or the organizations.

While using the Platform, You may be required to make a payment for the services through a third-party payment gateway provider. You understand, agree and acknowledge that the Platform never receives Your PD provided to the third-party payment gateway. Your PD will be dealt by a third-party payment gateway provider in accordance with their respective privacy policies and other terms and conditions; and we shall not be liable, accountable or responsible for Your PD which You provide to the third-party payment gateway provider.

11

Data Security

We ensure to take all requisite and reasonable steps to protect your Personal Data or any other information as accessed by us for the purposes described under this Privacy Policy. We use multi-layered protection system to safeguard the Personal Data of the users in all possible ways. We ensure to keep an eye on the use of the Personal Data by third parties and protect the Personal Data of the users to the extent of our contracts with the third parties.

12

Cookies

Cookies are basically to keep a track of visitors and their activity on the platform. Registration is not required in order to use our platform merely as a visitor, in that case, we do not collect any personal information except to the limited extent through the use of cookies that are left on the visitor's browser, if agreed.

13

Is the Company using automated decision-making processes?

The automated decisions are defined as decisions on individuals which are taken only on basis of an automated processing of data and which produce legal effects on the individuals or affect them in a significant way. The Company does not take automated decisions as described above. The human resources at the Company collects the data online, processes it by using various data filter and accordingly, awards the requirements of the respective user.

14

How is the payment made by its User/Customers?

Payment through Payment Gateway (eg. UPI, Credit/Debit card, Internet Banking etc.)

Payment facilitation through Escrow Account: the Company in collaboration with the partner bank reduces the risk of fraudsters as the bank plays a role of a trusted third-party that collects, holds and only disburses funds when both the transacting parties to the business are satisfied. The Company, in these circumstances, verifies each angle of the transaction and then ultimately serves its user with best results.

15

How long will the user's data be stored?

We store the personal data only for the time the user wants to conduct business on our online portal and have completed all its business dealings fairly. Additionally, we will keep the records for the duration of the contract between the Subscriber/User and the Company in the event the contract is terminated will discharge/delete your records in our database along with complying with the laws applicable at the time being. However, you may request us to remove your data earlier. In that case, we will remove all data we have subject to our internal policy and except the data we will legally have to maintain with us.

16

What are the user's rights?

You can, at any time, contact the Company for managing your personal data that you have provided for the Services via our platform. You also have the right to contact the Company for the following requests:

a. Access, rectification or deletion of the user's personal data b. Limitation of, or objection to, the processing or transfer of your personal data c. Withdrawing your consent in what concerns the processing or transfer of your personal data based on consent d. Receiving your data for transmitting it to another controller ('Right to portability') e. Introduction of a complaint to the supervisory authority, if you feel that the Company has not acted in accordance with the legislation on data protection

Accordingly, the aggrieved person will receive a response within 30 days.

17

Amendments to our Privacy Policy

We reserve the right to change this Privacy Policy at any time, in order for us to comply with the requirements imposed by applicable privacy and data protection laws. Please visit this Privacy Policy each time prior to submitting your personal information to us. We further advise to bookmark and periodically review this page.

Questions about your privacy?

Reach out to us for clarifications