This Privacy Policy (the “Policy”) of QuantumX Global Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at Office No S7, 2nd Floor, Pinnacle Business Park, Mahakali caves Rd, Shanti Nagar, Andheri East Mumbai- 400093 (“WeCredit” or “Company” or “we” or “us” or “our”), is aimed at informing the users, members, unregistered visitors, and any person(s) (hereinafter collectively referred to as the “Users” or “You” or “Your” or “Yours”) using or accessing the website https://wecredit.co.in/ and its mobile/web applications (hereinafter, collectively referred to as the “Platform”).

This Policy is published in accordance with the provisions of Rule 3(1)(a) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal data or Information) Rules, 2011, framed under the Information Technology Act, 2000 (as amended from time to time). This Policy, read with our Terms of Use on the Platform (hereinafter the “Terms”)) constitutes a binding and legally enforceable contract between the Company and User.

By using the Platform or availing the Services, you agree to this Policy. Subject to applicable laws, the terms of this Policy (and any changes thereto) will become applicable to you on and from the date of your first use of the Platform.

IF YOU DO NOT AGREE TO THE TERMS OF THIS POLICY, PLEASE DO NOT ACCESS OUR PLATFORM OR AVAIL OUR SERVICES.

Further, by using this Platform, you also confirm that you are either the owner of or are duly authorized to use and share the information that the Platform may require, and that your using the Platform does not violate any applicable law or contract by which you may be bound, nor is otherwise prejudicial to any person. You agree to indemnify and keep indemnified the Company, its employees, directors, officers, agents, business associates, affiliates and agents from any loss, damage, expenses or other adverse consequence they suffer as a result of your usage of the Platform unless such loss, damages, expenses or other adverse consequence can be attributed to our act or omission.

You shall at all times, take adequate necessary precautions, at your end, to preserve the integrity and security of your data which shall include and not be limited to your personal information. All information disclosed by you shall be deemed to be disclosed willingly and without any coercion.

We place the highest importance on respecting and protecting your privacy. Our relationship with you is our most important asset. We want you to feel comfortable and confident when using our Platform and Services. The objective of this Policy is for you to better understand:

• The type of information we intend to collect from you.
• The purpose for which the information collected by us will be used.
• The use of such information by the parties with whom we will share your information.
• Our policy regarding cookies and identity theft instances.
• The data security practices of the third-party website links available on our Platform.
• The data retention policy and information security measures implemented by us.
• Our disclaimers in relation to Services and the Platform.
• Our policy regarding the changes and updates to this Policy.
• Our policy with respect to the withdrawal of your consent; and
• Legal rights and obligations in case of disputes and grievances.

The Policy extends to the following information:

• Information you provide us, or the information otherwise collected by us through your usage of our Platform and Services (see Terms).
• Information collected while you use the Platform and Services;
• Information collected from any other source; or
• Information generated while availing the Services including but not limited to any transactional information.

We aim for full transparency on how we gather, use, and share your information.

By agreeing and accepting the terms and conditions set out herein, you provide your express consent to WeCredit and our lending partners to access the credit bureaus and credit information report and credit score. You also hereby irrevocably and unconditionally consent to the usage of such credit information being provided by credit bureaus.

1. Information we collect

1.1. When you use our Platform or avail the Services, we seek or collect, amongst other information, your name, mother’s name, father’s name, date of birth, gender, Permanent Account Number (PAN), signature, marital status, nominee details, email id, phone number, educational or professional qualification, business name, business address, nature of business, Goods and Services Tax Identification Number (“GSTIN”), Tax Deduction and Collection Account Number (TAN), bank account details, Unified Payments Interface (UPI) ID, and copies of KYC documents, and/or any other information as required by the banks and non-banking financial companies that offer loans through our Platform (collectively, “Lending Partner(s)”), that helps our Lending Partners verify your identity, and enables us to facilitate the provision of the Services through our Platform. No liability pertaining to the authenticity/genuineness of the information disclosed will lie on the Company. Further, the Company will not be in any way responsible for verifying any information obtained from you.

1.2. We may retrieve your information and records available with third-party providers, including credit score and liabilities information or information from the KYC Registration Agency, GSTN and National Informatics Centre such as name, KYC details, KYC status, father’s name, occupation, address details and related documents. You hereby authorize the Company to download and retrieve any information from governmental and other statutory bodies including but not limited to Credit Score, GSTN, and NIC.

1.3. In case our Lending Partner requires you to provide your Aadhaar details in connection with your onboarding for the Services, you acknowledge and agree that the act of providing your Aadhaar details to us for this limited purpose is voluntary. We will request such information only if required by our Lending Partners, and will require Aadhaar details solely for this purpose.

2. How we use and share the information

2.1. In collecting your information under this Policy, we confirm the following:

• a) we do not access file and media, contact list, call logs, telephony functions, or any such mobile phone resources;
• b) we do not access the camera or other facilities, as KYC is not performed by us directly;
• c) we collect only minimal data as authorised by our Lending Partners, necessary to check eligibility and perform essential operations;
• d) we do not store or collect biometric data in any capacity; and
• e) all data is securely stored on servers located within India, fully compliant with statutory guidelines and regulatory instructions.

2.2. We do not sell or share your personal or financial information to anyone. However, notwithstanding anything contained in this Policy, you expressly acknowledge, consent and agree to the following terms on information use and further authorise us to access or use or share your information in the following manner set out below:

• a) to use your information to manage your account, to contact you and to operate, improve, and deliver our Platform and Services. We use your information to give you a customized, interactive experience as you use our Platform and avail the Services.
• b) to use your information for maintaining a record of such information and your transactions in a secure and confidential manner, and as required under the applicable laws.
• c) to share such information with our Lending Partners and third parties for collection of documents required for completing KYC and/or such other purposes necessary for providing you the relevant product/service that you wish to avail. Our current Lending Partners are:

• AU Bank
• AXIS Bank Ltd
• IndusInd Bank
• Aditya Birla Finance Limited
• Whizdm Innovations Private Limited
• Social Worth Technologies Private Limited
• Smartcoin Financials Private Limited
• Infocredit Services Pvt Ltd
• Hero Fincorp Ltd
• Protium Finance Limited
• Easy Platform Services Private Limited
• L&T Finance Holdings Limited
• Krazybee Services Private Limited
• India Infoline Private Limited

• d) to troubleshoot software bugs and operational issues, to conduct data analysis, testing and research and to monitor and analyse usage and activity trends. Information collected may also be used to share communications to you about our products & services, provide additional features through cookies and to detect and/or prevent any fraudulent/criminal/prohibited activity as per applicable laws.
• e) to use the data in an aggregated/compiled form to produce statistical/demographic analyses for market research, marketing, project planning, product development, strategy, analyse user behaviour, promotions, and other business purposes; to summarize information about your usage and combine it with that of others to learn about the use of the Platform and Services and further to help us develop new products and services. However, these will be used in ways that will not be able to identify you or link any specific information to an individual. Such aggregated information and results/analyses shall be our property and you will not be entitled to any compensation for the use thereof.
• f) to use third-party advertising companies to display advertisements. Such companies may use information about your visits to the Platform and Third-Party Platforms in order to provide advertisements about goods and services of interest to you.
• g) to retain/store your data and confidential information, of any nature (either wholly or partially), in the Company’s servers or cloud or otherwise in any other medium as may be transmitted/processed/passed through the Platform.

2.3. By using the Platform, and furnishing information in relation to the Services, You hereby agree that You are interested in acquiring knowledge of and availing various products, services, offers, or campaigns that WeCredit displays on its Platform including but not limited to pre-approved loan and credit card offers provided by our Lending Partners. You, while providing information, expressly consent to Us (including Our IVR, third-party marketing channels, and network of Lending Partners) contacting and communicating with you through SMS, call and/or e-mail and conduct follow-up calls in relation to the Services, i.e., for imparting credit product and Services knowledge, informing about promotional offers running on Platform and various other offers as provided by Our Lending Partners with respect to their products and services.

2.4. By consenting to the terms of our Privacy Policy, you acknowledge and agree that we may, after your explicit agreement to view eligible offers, automatically submit your provided information to the Lending Partners to pre-qualify you as an applicant. This process may result in you receiving solicitations or offers from Lending Partners for which you are pre-qualified. Please note that our role is solely as an intermediary and we do not influence or control the offers or solicitations you may receive from the Lending Partners.

2.5. Once you register on the Platform and sign in, you are not anonymous to us. In the event your account, at the time or during registration with us is created using your (a) cell phone number and password; (b) email address and password; or (c) google or other social media logins (if applicable), as the case maybe, you authorize us (and our business partners) to send texts and email alerts to you with your login details and any other service requirements, including promotional mails and SMS, even if you have registered yourself under DND or DNC or NCPR services. Your authorization shall be valid as long as your Account is not deactivated. Further, any acceptance by you from the mobile number(s) and Email ID(s) provided by you will be binding in nature. You confirm that laws concerning the unsolicited communication referred in “National Do Not Call Registry” (the “NDNC Registry”) will not be applicable for such communication received from Us.

2.6. You acknowledge, agree, and authorize us to collect, store, process your information, and further transfer or share information (including personal information) with authorities and regulatory bodies like the Reserve Bank of India, Securities & Exchange Board of India, Central Registry of Securitisation Asset Reconstruction and Security Interest of India (“CERSAI”), banks, KYC Registration Agencies, Asset Management Companies, Registrar and Transfer Agents, Income Tax Department and such other statutory or regulatory authorities.

2.7. In the event of Services provided to you by our third-party service providers through the Platform, the said third-party service providers shall be bound by the same privacy provisions/restrictions as provided herein to the extent they process your information.

2.8. We may, share/transfer/assign all of your information including in the event of a merger, sale, re-organization, amalgamation, joint ventures, assignment, restructuring of business, or transfer or disposition of all or any portion of our business.

3. Cookie Policy, Log Data and Usage Information

3.1. “Cookies” are small text files that are stored on your computer or other device when you visit certain online pages that record your preferences and actions. Like many other platforms and websites, we use cookies for a variety of purposes, including identifying you and your preferences, tracking your use of our Platform, and facilitating your use of the Platform. Most web browsers automatically accept cookies, but, if you prefer, you can usually modify your browser setting to decline cookies. However, please note that refusing a cookie may limit your access and/or use of Platform and Services.

3.2. When you visit our Platform or avail of the Services, we collect certain information about your interaction with our Platform including the pages that you view, your internet protocol address, the links you select or actions you take, browser type, the unique identifier of your device and device information such as operating system, operating system version, crashes, hardware settings, location-based information, date and time of your request and referral URL, and cookies that may uniquely identify your browser and mobile application and the previously visited webpage.

3.3. We want to inform you that whenever you use our Platform or avail the Services, we collect data from your device called Log Data. This Log Data may include information such as your device’s Internet Protocol (“IP”) address, device name, operating system version, configuration of the app when utilizing the Service, the time and date of your use of the Service, and other statistics.

4. Identity Theft / Phishing

4.1. There may be instances when you receive a seemingly legitimate-looking e-mail asking your personal information from you such as your credit card details, bank account details, one-time passwords, contact information, etc. The Company will never ask for such information from you via e-mail.

4.2. Such activities are usually carried on by unauthorized individuals and are illegal in nature. They are called phishing or identity theft. In case of any suspicion of such activity or on receiving such an e-mail you are certain it was not sent by us. We advise you to not respond to such mail and to take whatever action you see fit. You may inform us of such instances by writing to us at care@wecredit.co.in.

5. Links to Other Sites

Our Platform provides links to other websites and third-party platforms (“Third-Party Platforms”). Such Third-Party Platforms may collect information about you in case you decide to visit the same. We are not responsible for the privacy practices or the content of those linked websites and Third-Party Platforms. We recommend you review the privacy policies of such Third-Party Platforms. In case you choose to log-in through your Google account, we will access information from your Google accounts once they give us permission to do so whilst using the Google-related functionality (as the case may be) of the Platform. Once permission is granted, the Platform accesses a user’s account details, mobile number, email address, contact list, and location (as applicable). The respective privacy policies of Google will also be applicable.

6. Data Retention by Us

6.1. We will retain your information only for as long as is necessary for the purposes set out in this Policy. We will retain and use your information to the extent necessary to comply with our legal obligations and enable our Lending Partners to comply with their legal obligations (for example, if we are required to retain your data to comply with applicable laws), resolve disputes, and enforce our legal agreements and policies.

6.2. We encourage you to review the information and inform about any discrepancies and information found to be inaccurate shall be corrected or amended. Please reach out to us at care@wecredit.co.in in case you would like to review the information collected by us.

7. Information Security

We work to protect your information from loss, misuse, or unauthorized alteration by using industry-recognized security safeguards, coupled with carefully developed security procedures and practices. We maintain electronic and procedural safeguards of all information. We use both internal and external resources to review our security procedures.

8. Disclaimer

8.1. You shall be solely responsible to ensure that you maintain back-up copies of such information and in the event of any malfunctioning or failing of the Platform for any reason whatsoever (including on account of maintenance), you may be required to resubmit such information.

8.2. Although, we take appropriate steps to maintain the security of information we collect from you, we assume no responsibility of whatsoever nature as to make good the losses and damages you may incur, due to privacy and/or security breach of your information or for any actions/omissions committed by any third party(ies). We shall not be liable for any loss or damage sustained by reason of disclosure (inadvertent or otherwise) of any information and/or omission or inaccuracy with respect to any information so disclosed and used whether or not in pursuance of a legal process or otherwise.

8.3. When payment information is being transmitted on or through the Platform, it will be protected by encryption technology of third-party payment services providers, including payment gateways. You agree, acknowledge, and consent to such sharing of your information with such third-party service providers to process payments and manage your payment-related information. The Company does not guarantee that the transmissions of your payment-related information or other information will always be secure.

8.4. Visitors to this Platform and every third party is hereby informed that the owners of this Website/portal, are the intermediaries of the banks, financial institutions, and mutual funds/AMCs, whose products are dealt with in this Website/portal. It is made abundantly clear that QuantumX Global Private Limited, its parent company, its directors, shareholders, officers and employees and WeCredit team are in no way responsible or liable for anyone for his/her investment or credit buy decision(s) (availing any kind of loans or taking credit card through us), and every prospect/loan seeker/investor/policy-holder shall be solely responsible for the consequences of his/her decision(s).

9. Changes to the Platform and this Policy

9.1. All information provided on the Platform is subject to the discretion of the same and is likely to change without any notice. However, any changes in public utility will be communicated through updates on our Platform.

9.2. Please note that this Policy may change from time to time. The “Last Updated” date at the top of the Policy indicates when the most recent modifications were made to the Policy. We reserve the right to modify or amend the terms of our Policy from time to time. We will endeavor to post any changes to this Policy on our webpage and, if the changes are significant, to provide a more prominent notice. While we will make reasonable efforts to keep you posted on any updates to this Policy, to make sure that you are aware of any changes, we recommend that you review this Policy periodically. In the event we modify this Policy, your continued use of the Platform and Services will signify your acceptance of the modified Policy, and will be adequate proof that you have expressly agreed to the terms of this Policy which shall apply from the date of your first use of the Platform.

10. Withdrawal of Consent by You

10.1. You may choose to withdraw your consent provided hereunder at any point in time. Such withdrawal of consent must be sent in writing to care@wecredit.co.in. In case you later withdraw your consent, we request you not to access the Platform and/or use the Services and also reserve the right to not provide you any Services through the Platform.

10.2. Basis Your request, we may purge the information provided by You if there is no legal requirement to retain such information.

10.3. However, we reserve the right to retain information to the extent required for below-mentioned purposes:

• a) Compliance with applicable laws;
• b) Enforcing our legal rights; or
• c) Providing any information required by regulatory authorities investing any fraud or illegal activities.
• d) In addition to the above, if Your application for provision of loan or credit card facilities was sent to our Lending Partner or any third-parties for processing or if You have availed any loan or credit card facilities from our Lending Partner, the Lending Partner shall have the right to continue processing Your information to contact You regarding the same.

11. Grievance Redressal Officer

In accordance with the provisions of applicable laws, the name and contact details of the Grievance Officer are provided below:

Name: Abhay Padoor

Address: Office No S7, 2nd floor Pinnacle Business Park, Mahakali caves Rd, Shanti Nagar, Andheri East Mumbai 400093

Cell: +91 9240249293

Email ID: care@wecredit.co.in

If You wish to make a complaint regarding any violation of the provisions of this Policy, You may send a complaint to the Grievance Officer, who shall redress the complaint in accordance with the provisions of the applicable laws.

The Grievance Officer can be contacted between 10:30 a.m. to 6:00 p.m. from Monday to Friday except on public holidays.

We shall respond to Your request(s) or grievance within twenty four hours from the time of receipt. event that we are unable to acknowledge or provide a response within the stipulated timeframe for any reason, we shall duly notify you accordingly.

12. How to Contact Us

If You have questions or concerns about this Policy, please contact us at the following email address: care@wecredit.co.in.

13. Statement on Loan Listing and Matching Logic

In accordance with the Reserve Bank of India – Digital Lending Directions, 2025, this section outlines the listing and matching logic followed by WeCredit for presenting loan offers from multiple Regulated Entities (“REs”) on our Platform.

Overview

In compliance with the RBI’s Digital Lending Directions, 2025, our Platform follows a transparent, fair, and non-discriminatory process for evaluating and submitting loan applications to multiple Regulated Entities. We do not prioritise or rank lenders in any biased manner.

Below is the list of variables being used in our listing logic on the basis of which offers are ranked:

• Loan amount range
• Tenure range
• Interest rate / IRR
• Minimum credit score required
• Minimum income required
• Supported geography / PIN codes
• Customer types allowed (salaried, self-employed, etc.)
• Documents required
• Approval speed / Turnaround Time (TAT)
• Processing fee range
• Age requirement
• Conversion ratio (Application to Disbursed)

Declaration

We affirm that our listing and matching logic adheres to the RBI’s intent of transparency, borrower awareness, and non-discriminatory access to credit.