PRIVACY POLICY Version: 1.0.0

Effective Date: 30 / 05 / 2025 Platform: FUNDJONE Operated by: SUPERVISSIONSET PRIVATE LIMITED Official Contact: support@fundjone.com

1. PREAMBLE

This Privacy Policy (“Policy”) is instituted pursuant to the provisions of the Information Technology Act, 2000, read in conjunction with the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and other prevailing laws as may be applicable within the territorial jurisdiction of Bharat (India).

This Policy constitutes a binding legal instrument governing the collection, usage, processing, disclosure, and retention of personal and sensitive data by SUPERVISSIONSET PRIVATE LIMITED (“Company”, “we”, “us”, or “our”) in the context of its digital platform FUNDJONE (“Platform”), which is designed to operate entirely via virtual and decentralized infrastructure, without dependency on physical establishment.

By accessing or interacting with the Platform, the User ("you", "your", or "Data Subject") consents to the practices articulated herein.

2. NATURE AND CLASSIFICATION OF DATA COLLECTED

In the course of platform operations, the Company may collect and process the following categories of Personally Identifiable Information (“PII”) and Non-Personally Identifiable Information (“Non-PII”), including but not limited to:

Data Category Description Identity Attributes Full Name, Government-issued ID (Aadhaar, PAN) Contact Coordinates Mobile Number, Email Address Locational Metadata Geo-coordinates, region-tagged device data Hierarchical Network Metadata Referral lineage (Upline/Downline) Crowdfunding Activity Data Participation metrics, income computations Analytics & Behavioral Data Cookies, session logs, page interactions Uploaded Content Photographs, scanned documents

Data Category Description Internal Communications Data Messages exchanged with platform administration

The Company unequivocally does not collect banking information such as UPI, card details, or net banking credentials.

3. LEGAL GROUNDS FOR PROCESSING

Data collection and processing are carried out less than one or more of the following legal bases:

Consent of the Data Subject under Rule 5(1) of the IT Rules;  Contractual necessity, including fulfilment of platform-based deliverables;  Legitimate business interest, aligned with internal risk mitigation, user verification,

and ecosystem functionality;  Statutory obligation, wherever disclosure to regulatory or enforcement authorities is

mandated.

4. PURPOSE SPECIFICATION PRINCIPLE

Data is collected and processed for purposes including but not limited to:

 Establishment and verification of User identity;  Facilitation of referral-based crowdfunding transactions;  Monitoring hierarchical sponsorship structures;  Authentication for subscription services and communications;  Detection and mitigation of fraudulent, illicit, or unauthorised activities;  Strategic analysis and performance optimization of the Platform;  Communication of promotional and informational content subject to consent.

5. COOKIE AND TRACKING POLICY

The Platform may deploy cookie-based and session-tracking technologies, restricted to internal analytical, functional, and diagnostic purposes. These technologies shall not be used for unauthorized profiling or unsolicited behavioural marketing.

User discretion is respected via browser-level opt-outs; however, disabling cookies may impair full platform functionality.

6. DATA STORAGE, RETENTION AND MODIFICATION

 Data is maintained on secure, encrypted, cloud-based servers located in Bharat or jurisdictions complying with adequate data protection standards.

 Retention of data shall persist for such duration as deemed reasonably necessary for legitimate business interests or regulatory obligations.

 Upon request or deactivation, data may be redacted or anonymized, subject to statutory archiving requirements.

7. DATA DISCLOSURE CLAUSE

The Company reserves the right to disclose personal data:

 To law enforcement agencies upon receipt of lawful requisitions;  To internal stakeholders and employees under confidentiality obligations;  To legal or tax advisors under fiduciary duties;  As part of any statutory audit, tribunal or regulatory requirement.

Data will not be sold, leased, bartered, or otherwise transferred to third parties for consideration.

8. SECURITY STANDARDS AND RISK SAFEGUARDS

The Company adopts reasonable and industry-accepted security practices including, but not limited to:

 Multi-level authentication protocols;  End-to-end encryption during transmission;  Secure storage with role-based access control;  Regular vulnerability assessments and audit logs.

9. MINORS’ DATA

Persons below 18 years of age are expressly prohibited from registering or engaging on the Platform. Any such data, if inadvertently collected, shall be subject to immediate erasure upon verification.

10. JURISDICTIONAL SCOPE

The services of FUNDJONE are currently rendered exclusively within the territory of Bharat. No cross-border data transfers are initiated. Any expansion shall be accompanied by appropriate jurisdictional compliance.

11. GRIEVANCE REDRESSAL MECHANISM

Pursuant to Rule 5(9) of the IT Rules, the following Grievance Officer is designated to address discrepancies, grievances or questions regarding data processing:

Grievance Officer Contact details for the designated Grievance Officer shall be provided upon request through the official user dashboard or via legal notice to the company. Resolution Timeframe: Within fifteen (15) working days of receipt

12. USER RIGHTS

Subject to applicable law, Users have the following rights:

Right to access and inspect their personal data;  Right to rectification of inaccuracies;  Right to erasure, subject to compliance obligations;  Right to object to processing under legitimate interest;  Right to withdraw consent, without affecting previous lawful processing.

Requests must be made in writing to grievanceofficer@fundjone.com, with appropriate identity verification.

13. INTERPRETATION AND MODIFICATION

This Policy shall be interpreted in consonance with the IT Act, applicable Rules, and data protection principles as evolved through regulatory and judicial precedents.

The Company reserves the unilateral right to amend this Policy periodically. Users will be notified of material changes via platform notifications or updates to this page. Continued usage post such updates shall be deemed consent.

14. CONTACT INFORMATION

All communications, notices or data subject requests may be addressed to:

SUPERVISSIONSET PRIVATE LIMITED Email: support@fundjone.com (Note: The Platform is operated digitally via cloud infrastructure, and does not maintain a physical office.)