PRIVACY POLICY

1. INTRODUCTION

Aggra Technologies Private Limited, operating the platform ‘Moneytor’ at www.moneytor.in (hereinafter referred to as ‘Moneytor’, ‘we’, ‘us’, or ‘our’), is committed to protecting the privacy and confidentiality of all information shared by its users, clients, and visitors.

This Privacy Policy (‘Policy’) explains how we collect, use, store, share, protect, and process your personal and financial information when you access or use the Moneytor platform, which provides AI-driven Non-Performing Asset (NPA) collection, management, and resolution services to banks, NBFCs, fintech lenders, and collection agencies.

By accessing or using moneytor.in, you acknowledge that you have read, understood, and agree to be bound by this Privacy Policy. If you do not agree, please discontinue use of our platform immediately.

2. DEFINITIONS

• For the purposes of this Privacy Policy, the following definitions shall apply:

‘Platform’ means the website www.moneytor.in and all associated services, tools, dashboards, APIs, and sub-systems operated by Aggra Technologies Private Limited.

‘User’ means any individual, organisation, bank, NBFC, fintech lender, collection agency, or authorised representative accessing or using the Platform.

‘Personal Information’ means any data that identifies or can be used to identify an individual, including name, phone number, email address, PAN, Aadhaar, bank details, and financial/credit information.

‘Sensitive Personal Data or Information (SPDI)’ means personal information as defined under Rule 3 of the IT (Reasonable Security Practices and Procedures and SPDI) Rules, 2011, including passwords, financial information, and biometric data.

‘Borrower Data’ means financial, credit, and loan-related data pertaining to loan defaulters/borrowers, received by Moneytor from its institutional lender clients via API feeds.

‘Lender Client’ means any bank, NBFC, fintech lender, or financial institution that has contracted with Moneytor to utilise its NPA management services.

‘Processing’ means any operation performed on personal information including collection, storage, use, sharing, transfer, or deletion.

‘Grievance Officer’ means the designated officer responsible for addressing privacy-related complaints under the IT Rules, 2011.

3. INFORMATION WE COLLECT

4. PURPOSE AND USE OF INFORMATION

• We collect and process your information solely for the following lawful purposes:

To provide, operate, and maintain the Moneytor NPA management platform and its services.

To authenticate and verify the identity of users, lender clients, and authorised personnel.

To facilitate AI-driven collections, loan restructuring, and debt resolution workflows.

To communicate with users regarding service updates, account activity, and operational notifications via email, SMS, and Rich Communication Services (RCS/RBM).

To comply with applicable regulatory, legal, and contractual obligations under Indian law.

To conduct analytics, monitor platform performance, and improve service quality.

To detect, prevent, and investigate fraudulent activity, security breaches, or violations of our Terms of Use.

To fulfil obligations under agreements with lender clients for NPA servicing and recovery.

5. LEGAL BASIS FOR PROCESSING

• Moneytor processes personal information under the following legal bases as applicable under Indian law:

Your consent, provided at the time of registration or onboarding.

Performance of a contract to which you or your organisation is a party.

Compliance with legal obligations under the Information Technology Act, 2000, Reserve Bank of India (RBI) guidelines, and other applicable Indian statutes.

Legitimate interests of Moneytor in operating its NPA management business, subject to your rights and interests.

6. SHARING AND DISCLOSURE OF INFORMATION

7. DATA STORAGE AND RETENTION

All personal and financial data collected by Moneytor is stored on servers located within the Republic of India, in compliance with applicable data localisation requirements.

We retain personal information for the period necessary to fulfil the purposes outlined in this Policy, or as required by applicable law, regulatory mandate, or contractual obligation — whichever is longer.

Upon expiry of the retention period, data is securely deleted or anonymised in accordance with industry best practices and applicable legal requirements.

8. DATA SECURITY

Moneytor implements appropriate technical and organisational security measures to protect personal information against unauthorised access, disclosure, alteration, loss, or destruction. These measures include:

Encryption of data in transit (TLS/SSL) and at rest.

Role-based access controls limiting data access to authorised personnel only.

Regular security audits and vulnerability assessments.

Secure API integrations with lender client systems.

Incident response procedures for data breaches.

Notwithstanding the above, no method of electronic transmission or storage is 100% secure. In the event of a data breach, Moneytor will notify affected parties as required under applicable law.

9. YOUR RIGHTS

• Subject to applicable Indian law, you have the following rights with respect to your personal information:

Right to Access: You may request a copy of the personal information we hold about you.

Right to Correction: You may request correction of inaccurate or incomplete information.

Right to Withdrawal of Consent: Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

Right to Grievance Redressal: You may raise a complaint with our Grievance Officer (see Section 12).

To exercise any of the above rights, please write to contact@moneytor.in with the subject line ‘Privacy Request’.

10. COMMUNICATION AND MESSAGING CONSENT

By registering on or using the Moneytor platform, you expressly consent to receive communications from Moneytor or its authorised service providers via:

• SMS (Short Message Service)
• Rich Communication Services (RCS) / Rich Business Messaging (RBM) via Gupshup
• Email
• Voice calls through our dialer systems
• WhatsApp and other digital messaging channels

All outbound communications comply with applicable TRAI DLT (Distributed Ledger Technology) regulations for commercial messaging in India. You may opt out of marketing communications at any time by writing to contact@moneytor.in; however, transactional and service communications cannot be opted out of during an active service relationship.

11. THIRD-PARTY LINKS AND SERVICES

The Platform may contain links to third-party websites or integrate with third-party services. Moneytor is not responsible for the privacy practices of such third parties. We encourage you to review the privacy policies of any third-party services you access.

12. GRIEVANCE OFFICER

In accordance with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and the IT (Reasonable Security Practices and Procedures and SPDI) Rules, 2011, Moneytor has designated a Grievance Officer for the resolution of privacy-related complaints:

Complaints received will be acknowledged within 48 hours and resolved within 30 days of receipt, in accordance with applicable law.

13. MINORS AND CHILDREN

Moneytor’s platform is intended exclusively for use by businesses and adults above 18 years of age. We do not knowingly collect personal information from individuals below 18 years of age. If we become aware that a minor has provided personal information, such information will be promptly deleted.

14. AMENDMENTS TO THIS POLICY

Moneytor reserves the right to update or modify this Privacy Policy at any time. Any changes will be posted on this page with an updated effective date. Continued use of the Platform following any such changes constitutes your acceptance of the revised Policy. We encourage users to review this Policy periodically.

15. GOVERNING LAW AND DISPUTE RESOLUTION

This Privacy Policy is governed by and construed in accordance with the laws of the Republic of India, including the Information Technology Act, 2000, and rules made thereunder. Any disputes arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of courts in Mumbai, Maharashtra.

16. CONTACT US

• For any questions, concerns, or requests regarding this Privacy Policy, please contact us at: