PRIVACY POLICY

NEARPOINT INDUSTRIES PRIVATE LIMITED

Brand Name: NearPoint

Effective Date: 25 July 2026

Last Updated: 25 July 2026

1. Introduction

Welcome to NearPoint, a fintech platform owned and operated by NEARPOINT INDUSTRIES PRIVATE LIMITED ("Company", "NearPoint", "we", "our", or "us").

NearPoint is committed to protecting the privacy and security of every User, Customer, Merchant, Retail Partner, Distributor and Visitor who accesses our website, mobile application and digital platforms.

This Privacy Policy explains how we collect, use, store, process, disclose and protect your Personal Information whenever you use our Services.

By accessing or using our website, mobile application or any service offered by NearPoint, you acknowledge that you have read, understood and agreed to this Privacy Policy.

If you do not agree with this Privacy Policy, you should immediately discontinue the use of our Services.

2. Scope of this Privacy Policy

This Privacy Policy applies to all users of:

• NearPoint Website

• NearPoint Android Application

• NearPoint Mobile Services

• Merchant Portal

• Distributor Portal

• Retail Partner Portal

• APIs and Digital Platforms

• Customer Support Services

• Any other online or offline service operated by NEARPOINT INDUSTRIES PRIVATE LIMITED.

This Privacy Policy should be read together with our:

• Terms & Conditions

• Refund & Cancellation Policy

• AML/KYC Policy

• Grievance Redressal Policy

3. Information We Collect

Depending upon the Services used, we may collect the following categories of information.

A. Personal Information

We may collect:

• Full Name

• Father's Name

• Mother's Name

• Date of Birth

• Gender

• Mobile Number

• Email Address

• Residential Address

• Business Address

• PIN Code

• State

• District

• Photograph

• Signature

B. Identity Verification Information

For regulatory compliance and KYC verification, we may collect:

• Aadhaar Number (where legally permitted)

• PAN Number

• Voter ID

• Passport

• Driving Licence

• GST Details

• CIN Details

• Business Registration Documents

• Certificate of Incorporation

• Shop & Establishment Licence

• MSME/Udyam Certificate

• Bank Verification Documents

C. Banking & Financial Information

Where required for providing financial services, we may collect:

• Bank Account Number

• IFSC Code

• Account Holder Name

• Cancelled Cheque

• Bank Statement (where required)

• UPI ID

• Wallet Information

• Transaction Reference Numbers

• Settlement Details

Important: NearPoint does not store your debit card, credit card or internet banking credentials on its own servers. Such payment information is securely processed by authorised Payment Aggregators, Payment Gateways and Banking Partners.

D. Transaction Information

We may collect information relating to:

• AEPS Transactions

• DMT Transactions

• BBPS Transactions

• Recharge Transactions

• PAN Services

• Payout Transactions

• mATM Transactions

• Wallet Transactions

• Commission Details

• Settlement Records

• Refunds

• Chargebacks

• Complaint History

• Support Tickets

E. Device Information

When you access our Services, we may automatically collect:

• Device Model

• Operating System Version

• App Version

• Device Identifier

• Browser Type

• Language Preference

• IP Address

• Time Zone

• Device Logs

• Crash Reports

• Network Information

• Login Information

F. Location Information

With your permission, NearPoint may collect:

• GPS Location

• Approximate Location

• IP-based Location

Location information is collected only where necessary for:

• Fraud Prevention

• Security Monitoring

• Regulatory Compliance

• Merchant Verification

• Service Availability

G. Permissions Used by the Mobile Application

Depending on the services you choose to use, the NearPoint mobile application may request access to certain device permissions, including:

• Camera (for KYC verification, document upload and QR code scanning)

• Storage (for uploading and downloading documents)

• Location (for fraud prevention and merchant verification)

• Biometric Authentication (for secure login and AEPS services, where applicable)

• Notifications (for transaction alerts and service updates)

The application requests only those permissions that are necessary for providing the selected services. You may deny certain permissions; however, doing so may limit the availability or functionality of some features.

4. Information Collected Automatically

We may automatically collect certain technical information including:

• Login Date & Time

• Device Activity

• Browser Information

• Pages Visited

• Session Duration

• Click Behaviour

• Error Logs

• Performance Metrics

• Cookies

• Security Logs

Such information helps us improve security, detect fraud, analyse platform performance and enhance the overall user experience.

5. How We Use Your Information

NearPoint may use your Personal Information for the following purposes:

• To create and manage your account.

• To verify your identity and complete KYC requirements.

• To provide AEPS, DMT, BBPS, Recharge, PAN, Payout, mATM and other financial services.

• To process transactions and settlements.

• To detect, prevent and investigate fraud, suspicious activities and financial crimes.

• To comply with applicable laws, regulations and regulatory guidelines.

• To communicate with you regarding your account, transactions and service updates.

• To provide customer support and resolve complaints.

• To improve our products, website, mobile application and services.

• To conduct internal audits, analytics and business intelligence.

• To send important notices, security alerts and policy updates.

• To maintain records required under applicable law.

6. Legal Basis for Processing

We process your information on one or more of the following legal grounds:

• Your consent.

• Performance of a contract with you.

• Compliance with legal and regulatory obligations.

• Legitimate business interests.

• Fraud prevention and security purposes.

7. Sharing of Personal Information

NearPoint does not sell your Personal Information.

However, we may share your information where necessary with:

• Banking Partners

• Payment Aggregators

• Payment Gateways

• NPCI Participants

• UIDAI-authorised entities (where applicable)

• Insurance Partners

• Government Authorities

• Regulatory Authorities

• Law Enforcement Agencies

• Technology Service Providers

• Cloud Infrastructure Providers

• KYC Verification Agencies

• Credit Assessment Agencies (where applicable)

• Auditors and Professional Advisors

Such sharing shall only be for lawful, regulatory, operational or contractual purposes.

8. Banking Partners & Payment Service Providers

Certain services available on the NearPoint Platform are facilitated through authorised banks, regulated financial institutions, payment gateways, payment aggregators and other licensed entities.

To enable these services, we may securely share limited information with such partners strictly on a need-to-know basis.

NearPoint is not responsible for the independent privacy practices of third-party banking partners or payment service providers. Users are encouraged to review their respective privacy policies before using such services.

9. Regulatory Compliance

NearPoint may collect, process, retain and disclose information where required under applicable laws including but not limited to:

• Digital Personal Data Protection Act, 2023 (where applicable)

• Prevention of Money Laundering Act (PMLA)

• RBI Directions and Guidelines

• NPCI Circulars

• UIDAI Guidelines

• Income Tax Act

• Information Technology Act, 2000

• Any other applicable law, regulation or governmental direction.

Where legally required, we may disclose information to competent authorities without prior notice to the User.

10. Fraud Prevention & Risk Monitoring

To protect users, merchants and the financial ecosystem, NearPoint may monitor transactions and user activity for:

• Fraud Detection

• Identity Theft

• Suspicious Transactions

• Money Laundering

• Terrorist Financing

• Chargeback Abuse

• Fake KYC

• Account Takeover

• Regulatory Violations

We may temporarily suspend transactions or accounts where suspicious activity is detected until verification is completed.

11. Cookies & Tracking Technologies

NearPoint uses cookies and similar technologies to:

• Remember user preferences.

• Improve website performance.

• Analyse website traffic.

• Enhance user experience.

• Maintain secure login sessions.

• Detect fraudulent activities.

• Measure the effectiveness of our services.

Users may disable cookies through their browser settings; however, certain features of the Services may not function properly.

12. Analytics

We may use analytics tools to understand:

• User behaviour.

• Feature usage.

• Application performance.

• Error reporting.

• Device compatibility.

• Service improvements.

Analytics information is used in an aggregated manner wherever reasonably possible.

13. Marketing Communications

With your consent or where permitted by law, NearPoint may send:

• Service Updates

• Promotional Offers

• Product Announcements

• Transaction Alerts

• Educational Content

• Security Notifications

You may opt out of receiving promotional communications at any time. However, transactional and security-related communications may continue where necessary for the operation of your account.

14. Third-Party Websites

Our website or application may contain links to third-party websites or services.

NearPoint does not control or endorse the privacy practices, content or security of such third-party websites. Users are advised to review the respective privacy policies of those websites before sharing any personal information.

The Company shall not be responsible for any loss, damage or claim arising from the use of third-party websites or services.

15. Data Security

NEARPOINT INDUSTRIES PRIVATE LIMITED is committed to protecting the confidentiality, integrity and availability of your Personal Information.

We implement reasonable technical, administrative and organisational safeguards, including but not limited to:

• Secure servers and hosting infrastructure.

• SSL/TLS encryption for data transmission.

• Access controls and authentication mechanisms.

• Firewalls and intrusion detection systems.

• Data backup and disaster recovery procedures.

• Continuous security monitoring.

• Internal security policies and employee access controls.

• Periodic security assessments and audits.

While we strive to protect your information, no method of electronic transmission or storage is completely secure. Therefore, we cannot guarantee absolute security.

16. Data Retention

NearPoint retains Personal Information only for as long as necessary to:

• Provide our Services.

• Complete transactions.

• Resolve disputes and complaints.

• Prevent fraud.

• Comply with legal, regulatory and contractual obligations.

• Meet accounting and audit requirements.

After the applicable retention period expires, Personal Information may be securely deleted, anonymised or archived in accordance with applicable laws.

17. Your Privacy Rights

Subject to applicable laws, you may have the right to:

• Access your Personal Information.

• Request correction or update of inaccurate information.

• Request deletion of Personal Information where legally permissible.

• Withdraw consent where processing is based on consent.

• Object to certain types of data processing where applicable.

• Request information regarding how your Personal Information is processed.

Certain requests may not be fulfilled where the Company is legally required to retain information for regulatory, compliance or fraud prevention purposes.

18. Account Closure

If you request closure of your NearPoint account:

• Certain information may continue to be retained for legal, regulatory, audit, taxation, fraud prevention and dispute resolution purposes.

• Transaction records cannot always be deleted where retention is required under applicable law.

• Account closure does not automatically erase all historical records that the Company is legally obligated to maintain.

19. Children's Privacy

NearPoint Services are intended only for persons who are legally competent to enter into binding contracts under applicable law.

Our Services are not intended for individuals below 18 years of age.

We do not knowingly collect Personal Information from children. If we become aware that such information has been collected without appropriate authorisation, we will take reasonable steps to delete or restrict such information, subject to applicable legal requirements.

20. International Data Transfers

Your Personal Information may be processed, stored or accessed through cloud infrastructure or technology service providers located in India or, where legally permissible, in other jurisdictions.

Where cross-border processing occurs, NearPoint will take reasonable steps to ensure that appropriate safeguards are implemented in accordance with applicable laws.

21. Confidentiality

All Personal Information collected by NearPoint shall be treated as confidential.

Access to Personal Information is restricted to authorised employees, service providers and business partners who require such access for legitimate business, operational, legal or regulatory purposes and who are bound by appropriate confidentiality obligations.

22. Limitation of Liability

NearPoint shall not be responsible for any loss, damage or unauthorised disclosure of Personal Information resulting from:

• User negligence.

• Incorrect information provided by the User.

• Unauthorised access caused by the User's failure to protect login credentials.

• Internet failures or telecommunications issues.

• Cyber attacks or security incidents beyond the Company's reasonable control.

• Actions or omissions of third-party service providers, banking partners or payment gateways.

• Governmental or regulatory actions.

Nothing in this Privacy Policy limits any rights that cannot be excluded under applicable law.

23. Third-Party Services

NearPoint may integrate with third-party platforms and service providers to deliver various financial and technology services.

Such integrations may include:

• Banking Partners

• Payment Aggregators

• Payment Gateways

• NPCI Participants

• UIDAI-authorised Service Providers

• GST-related Services

• PAN Service Providers

• Insurance Partners

• Technology Vendors

• Cloud Service Providers

• SMS and Email Service Providers

These third parties may have independent privacy policies, and NearPoint encourages Users to review those policies before using third-party services.

24. Privacy Officer

If you have any questions, concerns or requests regarding this Privacy Policy or the processing of your Personal Information, you may contact our Privacy Officer using the details provided below.

25. Grievance Redressal

In accordance with applicable laws, NearPoint has established a Grievance Redressal mechanism for addressing complaints relating to privacy, personal data and the use of our Services.

Users may submit complaints regarding:

• Collection or processing of Personal Information

• Unauthorized access to an account

• Data correction or update requests

• Privacy concerns

• Security incidents

• Complaints regarding misuse of personal information

The Company will make reasonable efforts to acknowledge and resolve complaints within a reasonable time, subject to applicable laws and the complexity of the matter.

26. Changes to this Privacy Policy

NearPoint reserves the right to modify, amend or update this Privacy Policy at any time to reflect:

• Changes in applicable laws or regulations.

• New products or services.

• Improvements to our technology or security measures.

• Changes in our business operations.

The updated Privacy Policy shall become effective from the date published on our website or mobile application. Continued use of our Services after such publication constitutes acceptance of the revised Privacy Policy.

27. Governing Law

This Privacy Policy shall be governed by and construed in accordance with the laws of India.

Any dispute arising out of or relating to this Privacy Policy shall be subject to the provisions relating to dispute resolution and jurisdiction contained in the Company's Terms & Conditions and applicable laws.

28. Contact Information

For any privacy-related queries, complaints or requests, please contact:

NEARPOINT INDUSTRIES PRIVATE LIMITED

Brand Name: NearPoint

Website:https://www.nearpoint.in

Customer Care Email: care@nearpoint.in

Privacy Email: privacy@nearpoint.in

Support Number: 033-69028702

29. Acceptance of this Privacy Policy

By accessing or using the NearPoint website, mobile application or any of our Services, you confirm that:

• You have read and understood this Privacy Policy.

• You consent to the collection, use, storage and processing of your information as described herein, where such consent is required by applicable law.

• You agree to comply with this Privacy Policy and the Company's Terms & Conditions.

• You acknowledge that certain information may be processed or disclosed where required by applicable law, regulatory authorities or competent governmental agencies.

If you do not agree with this Privacy Policy, you should immediately discontinue the use of the Services.

30. Entire Policy

This Privacy Policy constitutes the complete Privacy Policy of NEARPOINT INDUSTRIES PRIVATE LIMITED relating to the collection, use, storage, processing and disclosure of Personal Information through the NearPoint platform.

This Privacy Policy shall be read together with the Company's:

• Terms & Conditions

• Refund & Cancellation Policy

• AML/KYC Policy

• Grievance Redressal Policy

• Disclaimer (where applicable)

In the event of any inconsistency between this Privacy Policy and applicable law, the applicable law shall prevail to the extent of such inconsistency.

© 2026 NEARPOINT INDUSTRIES PRIVATE LIMITED. All Rights Reserved.