Privacy Policy

Version 2.5 · Effective 15 Sep 2026

This Privacy Policy document ("Privacy Policy") is published in accordance with the provisions of Rule 4 (1) of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 which requires the publishing of a privacy policy for handling of or dealing in personal information including sensitive personal data or information.

By visiting the website, https://yenmo.in/ ("Website") or the Yenmo mobile and/or web application (the "App") (collectively, the "Platform") and availing the services provided by us ("Services") you agree to be bound by the terms and conditions of this Privacy Policy.

By mere access to the Platform or any part thereof, you signify your assent to this Privacy Policy and consent to the processing of your personally identifiable information (Personal Information, Sensitive Personal Data or Information) to Yenmo Technologies Private Limited ("we" or "our" or "us" or " Yenmo"). This Privacy Policy is incorporated into and subject to the Terms of Use of the Platform.

For the purpose of this Privacy Policy, the users of the Services may be customer/consumers/ buyers, or any other persons using Services or accessing our Platform ("user" or "you" or "your").

If you do not agree to this Policy or any part thereof, please do not use/ access/ download or install the Platform or any part thereof.

COLLECTION OF USER PERSONAL INFORMATION

When you use our Platform, we collect and store your information which is provided by you from time to time by explicitly seeking permissions from YOU to get the required information. Our primary goal in doing so is to provide you a safe, efficient, smooth and customized experience and Services. This allows us to provide services and features that meets your needs, and to customize our Platform to make your experience safer and easier and to improve the Services provided by us. More importantly, we collect personal information from you that we consider necessary for achieving the aforementioned purpose.

In general, you can browse the Website or App without telling us who you are or revealing any information about yourself. However, to create an account on the Platform, you must provide us with certain basic information required to provide customized services. The information we collect from you, includes:

a. Full name;

b. email;

c. gender;

d. photograph;

e. mailing address;

f. postal code;

g. phone number;

h. Income details;

i. Occupational details;

k. Permanent Account Number (PAN);

Wherever possible, we indicate the mandatory and the optional fields. You always have the option to not provide any information by choosing not to use a particular service or feature on the Platform. We also collect user account data which includes email address and user public profile information like name, photo, depending on the platform used by You to log-into the App. This information is required as a part of registration process to access our Service and it is also used to auto-populate relevant fields in the course of the interface of the App. We further collect other identifiable information such as your transactions history on the Platform when you set up a free account with us as further detailed below. While you can browse some sections of our Platform without being a registered member as mentioned above, certain activities (such as availing of loans from the third-party lenders on the Platform) require registration and for you to provide the above details. The Platform will clearly display the personal information it is collecting from you, and you have the option to not provide such personal information. However, this will limit the services provided to you on the Platform.

ADDITIONAL KYC DETAILS AND BANK INFORMATION

In addition to the personal information already detailed in this Privacy Policy, Yenmo Technologies Pvt. Ltd. may collect additional information as a part of its Know Your Customer (KYC) and customer verification processes, in accordance with applicable legal and regulatory requirements. These additional data elements include but are not limited to:

Mother’s Name and Father’s Name
Bank Account Details, such as:
- Bank name
- Account number
- IFSC code
- Branch address

This information is collected:

Only when required to comply with RBI guidelines, lending partner KYC mandates, or other applicable laws
For the purposes of identity verification, loan eligibility, mandate setup, bank account verification, and facilitation of credit
Through secure, encrypted channels, with access limited to authorized personnel only

We ensure that:

Sensitive financial information such as your bank account details is protected with end-to-end encryption
This data is not shared with any unauthorized third parties
This data is retained only for as long as necessary to comply with legal requirements, internal policies, and audit needs
Upon request and/or after service termination, this data is purged from our systems in accordance with the Retention Timelines set out in this Privacy Policy and our internal Data Retention, Storage & Purging Policy (YEN-POL-03)

You will always be informed about the purpose of collecting any such additional information and will have the option to consent or decline wherever legally permitted. Refusal to provide mandatory information may, however, affect your ability to avail services through the Platform.

Our App also collects mobile number for verification to check the active SIM status on the device, uniquely identify you and prevent frauds and unauthorised access.

As a part of our Video Know Your Customer (Video KYC) process, collection of your personal information has become mandatory to ensure the completion and authentication of your KYC. In this regard, permissions for microphone, camera will be mandatorily required.

COLLECTION OF DEVICE LOCATION AND DEVICE INFORMATION

We take a one time access for the information about the location of your device for onboarding requirements/ KYC purpose.

Information the App collects, and its usage, depends on how you manage your privacy controls on your device. When you install the App, we store the information we collect with unique identifiers tied to the device you are using. We collect information from the device when you download and install the App and explicitly seek permissions from You to get the required information from the device.

We collect information about your device to provide automatic updates and additional security so that your account is not used in other people’s devices. In addition, the information provides us valuable feedback on your identity as a device holder as well as your device behaviour, thereby allowing us to improve our services and provide an enhanced customized user experience to you.

CAMERA

We may require one-time camera access to scan and capture the required KYC documents and customer verification processes thereby allowing us to auto-fill relevant fields.

As a part of facilitation of the KYC journey, we require one-time access to your camera to enable you to initiate your KYC process. This permission allows us or our authorised agents to perform your Video KYC while also taking screenshots of your original Officially Verified Documents that you present during your Video KYC journey. Video KYC enables you to complete your KYC digitally, smoothly and efficiently. Your video shall be recorded and retained for regulatory purpose along with the screenshots of original Official Verified Documents.

MICROPHONE

We require one-time microphone access to enable a two-way communication between our authorised agent and you for the purpose of performing and completing your Video KYC. Your audio shall be recorded for regulatory purpose.

COLLECTION OF OTHER NON-PERSONAL INFORMATION

We automatically track certain information about you based upon your behaviour on our Platform. We use this information to do internal research on our users’ demographics, interests, and behaviour to better understand, protect and serve our users and improve our services. This information is compiled and analysed on an aggregated basis. We also collect your Internet Protocol (IP) address and the URL used by you to connect your computer to the internet, etc. This information may include the URL that you just came from (whether this URL is on our website or not), which URL you next go to (whether this URL is on our website or not), your computer browser information, and your IP address.

Cookies are small data files that a website stores on Your computer. We will use cookies on our website similar to other lending websites / apps and online marketplace websites / apps. Use of this information helps Us identify You in order to make our website more user friendly. Most browsers will permit You to decline cookies but if You choose to do this it might affect service on some parts of Our Website.

We retain information as necessary to resolve disputes, provide customer support and troubleshoot problems as permitted by law.

If you send us personal correspondence, such as emails or letters, or if other users or third parties send us correspondence about your activities or postings on the Website, we collect such information into a file specific to you.

USE AND DISCLOSURE OF YOUR PERSONAL AND OTHER INFORMATION

We understand the importance of your information and ensure that it is used for the intended purpose only. We access, store and use the information we collect from you in accordance with the applicable laws to provide our Services, to research and develop new ones subject to the limitations set out in this Privacy Policy.

We use the information to:

a. resolve disputes;

b. troubleshoot problems;

c. help promote a safe service;

d. analytical analysis;

e. marketing and promotional purposes including sending you promotional SMS, Email and WhatsApp;

f. measure consumer interest and satisfaction in our products and services;

g. inform you about online and offline offers, products, services, and updates;

h. customize your experience;

i. detect and protect us against suspicious or illegal activity, fraud and other criminal activity;

j. enforce our terms and conditions;

k. improvement of our services and as otherwise described to you at the time of collection

RETENTION TIMELINES

We retain your information only for as long as is necessary to serve the purpose for which it was collected, plus any statutory or contractual retention period, in accordance with our internal Data Retention, Storage & Purging Policy (YEN-POL-03). The following retention periods apply to the categories of customer data held by Yenmo as a Lending Service Provider:

Category of data	Retention period
Account and profile information (name, contact details, login and device identifiers)	While your account is active, and up to 24 months after account closure
KYC records and financial information (identity documents, PAN, bank account details, mutual fund holdings, loan and repayment records)	While your loan is active, and up to 24 months after loan closure
Consent and consent-revocation records	Minimum 5 years, as required by our Consent Management & Data Sharing Procedure (YEN-POL-04)
Support communications (emails, tickets, call and chat records)	Up to 24 months from the date of the communication
Analytics and usage data	Up to 24 months from collection
Incomplete or abandoned loan applications	Purged within 10 business days of your request, or otherwise in line with the account-information period above

Where a law, regulation, or the contract with our lending partner requires a longer retention period, the longer period applies. At the end of the applicable retention period, your data is purged from our core database and securely deleted in line with the Data Destruction Protocol set out below, after which no one at Yenmo has any further access to it.

In our efforts to continually improve our product and service offerings, we collect and analyze demographic and profile data about our users' activity on our Platform.

PURPOSE OF COLLECTING INFORMATION

The intended purpose of collecting information provided by you is to:

a. establish identity and verify the same;

b. to facilitate your KYC;

c. monitor, improve and administer our Platform;

d. provide our service i.e. perform credit profiling for the purpose of facilitating loans to You.

e. design and offer customized products and services offered by our third-party financial partners;

f. analyse how the Platform is used, diagnose service or technical problems and maintain security;

g. send communications notifications, information regarding the products or services requested by You or process queries and applications that You have made on the Platform;

h. manage Our relationship with You and inform You about other products or services We think You might find of some use;

i. conduct data analysis in order to improve the Services / Products provided to the User;

j. use the User information in order to comply with country laws and regulations;

k. conduct KYC for our third-party lending partners based on the information shared by the User;

l. use the User information in other ways permitted by law to enable You to take financial services from our lending partners.

We will use and retain the information for such periods as necessary to provide You the Services on the Platform and as may be required by applicable laws, to comply with our legal obligations, to resolve disputes, and enforce our agreements.

DISCLOSURE TO THIRD PARTIES

We will share Your information with only our registered third parties including our regulated financial partners for provision of Services on the Website/ App.

We will share Your information with third parties only in such manner as described below:

a. We disclose and share Your information with the financial service providers, banks or NBFCs and our third-party partners for facilitation of a loan or facility or line of credit or purchase of a product;

i. You hereby consent to the Lender or such other third parties appointed by the Lender to contact you for offering its products and services, marketing and such other purposes. You hereby expressly authorize/ consent to the Lender, its group companies and other companies within its group, its various service providers or agents, to contact You through e-mails, telephones, messages, SMS, WhatsApp or other applications or otherwise even if Your names appear in the Do Not Call or Do Not Disturb Register to inform You about the marketing schemes, promotional schemes, various financial and other products and/or offerings of other services, loyalty programs or any other aspect offered by them. You agree to the use of e-mails, messages, SMS, WhatsApp and/or other applications for communication or sharing of information or documents, agree to abide by the terms and conditions of such applications and agree to the risks associated with such applications or sharing of information through them. You agree that this consent shall continue to be valid even if the loan applied for has been rejected or closed.

ii. You hereby consent to the Lender to carry out the KYC and other requisite checks by such processes as may be permissible under law including authentication/ verification of documents or details submitted for KYC purpose, accessing, and procuring data from databases maintained by statutory or other authorities constituted by law, for the purpose of granting the Loan Facility.

iii. More particularly, You hereby consent to the Lender updating/furnishing Your KYC data on the Centralized KYC Registry (CKYCR) or such other database or repository as may be prescribed from time to time as also access, download and procure data therefrom and rely upon the same for the purpose of KYC checks and it shall be Your responsibility to ensure that the data is correct and updated and to immediately intimate in writing in case of any changes to the data. The Lender may also verify the data in such manner as it deems fit and seek additional information or perform enhanced due diligence.

iv. You hereby provide Your consent to the Lender to obtain and/ or submit Your information from/ to Credit Information Company and/or information utility and/or such institution set up under the provisions of law from time to time, as and when required. You also authorize the Lender to carry out multiple bureau checks wherever required.

v. You hereby consent to voluntarily submit to the Lender at Your own discretion, the physical copy of Aadhaar card/ physical e-Aadhaar/ offline electronic Aadhaar xml as issued by the Unique Identification Authority of India (“UIDAI”) after masking the Aadhaar number for the purpose of establishing Your identity/ address proof in line with the Directions/ guidelines issued by the Regulatory and Statutory bodies from time to time. You further give Your consent to the Lender for verification of Your Aadhaar to establish the genuineness in such manner as permitted by UIDAI or under any law from time to time. The consent and purpose of collecting Aadhaar has been explained to You and the same is understood by You. The Lender has informed You that Your Aadhaar submitted to the Lender shall not be used for any other purpose other than as per the requirements of law.

b. We share Your information with our third-party partners in order to conduct data analysis in order to serve You better and provide Services on our Platform;

c. We may disclose Your information, without prior notice, if we are under a duty to do so in order to comply with any legal obligation or an order from the government and/or a statutory authority, or in order to enforce or apply Our terms of use or assign such information in the course of corporate divestitures, mergers, or to protect the rights, property, or safety of Us, Our users, or others. This includes exchanging information with other companies and organizations for the purposes of fraud protection and credit risk reduction.

d. We will disclose the data / information provided by a User with other technology partners to track how the User interact with the Platform on Our behalf.

e. We and our affiliates may share Your information with another business entity should we (or our assets) merge with, or be acquired by that business entity, or re-organization, amalgamation, restructuring of business for continuity of business. Should such a transaction occur than any business entity (or the new combined entity) receiving any such information from Us shall be bound by this Policy with respect to your information.

f. We will disclose the information to our third-party technology and credit partners to perform credit checks and credit analysis like Credit Bureaus or third party data source providers;

g. We will share Your information under a confidentiality agreement with the third parties and restrict use of the said Information by third parties only for the purposes detailed herein. We warrant that there will be no unauthorised disclosure of your information shared with third parties.

h. By using the Platform, you hereby grant your consent to the Company to share/disclose your Personal Information (i) To the concerned third parties in connection with the Services; and (ii) With the governmental authorities, quasi-governmental authorities, judicial authorities and quasi-judicial authorities, in accordance with applicable laws of India.

i. We shall disclose your KYC journey or any data with respect to the same to the relevant regulatory authorities as a part of our statutory audit process. Please note that your Aadhaar number shall never be disclosed.

Specific Third Parties and Their Permissions

In case we use or disclose your information for any purpose not specified above, we will take your explicit consent.

LINK TO THIRD-PARTY SDK

The App has a link to a registered third-party SDKs which collects data on our behalf and data is stored to a secured server to perform a credit risk assessment. We ensure that our third-party service provider takes extensive security measures in order to protect your personal information against loss, misuse or alteration of the data.

Our third-party service provider employs separation of environments and segregation of duties and have strict role-based access control on a documented, authorized, need-to-use basis. The stored data is protected and stored by application-level encryption. They enforce key management services to limit access to data.

Furthermore, our registered third-party service providers provide hosting security – they use industry-leading anti-virus, anti-malware, intrusion prevention systems, intrusion detection systems, file integrity monitoring, and application control solutions

CHANGES IN THIS PRIVACY POLICY

We reserve the right to change, modify, add, or remove portions of this Privacy Policy at any time for any reason. In case, any changes are made in the Privacy Policy, we shall update the same on the Platform. Once posted, those changes are effective immediately, unless stated otherwise. We encourage you to periodically review this page for the latest information on our privacy practices. Continued access or use of the Services constitute Your acceptance of the changes and the amended Privacy Policy.

ACCESSING YOUR INFORMATION / CONTACTING US

At any point of time Users can choose to edit/modify or delete/withdraw any Personal Information shared for use of the Platform. Please note that deleting or withdrawing information may affect the Services we provide to you. In case of modification of Personal Information, Users will be required to furnish supporting documents relating to change in Personal Information for the purpose of verification by the Company. Any withdrawal of information or consent shall not in any manner affect the information shared with the Lenders for the purpose of providing finance facilities to the user. You agree and undertake that such consent or subsequent withdrawal thereof by You, shall in no way limit or affect the rights of the Lender(s) which the Lender(s) may separately have against You.

You may also revoke your consent for processing of your personal data at any time by writing to us at support@yenmo.in. Once we receive and verify your request, we will stop processing your data (except where retention is required by law or regulation).

Account & Data Deletion Procedure

You may delete your data at any time by:

Going to the Profile section of the app.
Selecting Delete Account.
Confirming deletion.

Once confirmed, all personal data will be permanently deleted from our systems (except where we must retain certain data to comply with law/regulation).

You may also email support@yenmo.in to request full account and data deletion.

YOUR PRIVACY CONTROLS

You have certain choices regarding the information we collect and how it is used:

a. Device-level settings: Your device may have controls that determine what information we collect. For example, you can modify permissions on your Android device for access to Camera or Audio permissions.

b. Delete the App from your device

c. You can also request to remove content from our servers based on applicable law or by writing to our Grievance Officer. Any such removal or withdrawal of consent shall not in any manner affect the information shared with the Lenders for the purpose of providing finance facilities to the user. You agree and undertake that such provision of information or subsequent withdrawal thereof by You, shall in no way limit or affect the rights of the Lender(s) which the Lender(s) may separately have against You.

SECURITY PRECAUTIONS

The Platform intends to protect your information and to maintain its accuracy as confirmed by you. We implement reasonable physical, administrative and technical safeguards to help us protect your information from unauthorized access, use and disclosure. For example, we encrypt all information when we transmit over the internet. We also require that our registered third-party service providers protect such information from unauthorized access, use and disclosure.

Our Platform has stringent security measures in place to protect the loss, misuse and alteration of information under control. We endeavour to safeguard and ensure the security of the information provided by you. We use Secure Sockets Layers (SSL) based encryption, for the transmission of the information, which is currently the required level of encryption in India as per applicable law.

We blend security at multiple steps within our products with the state of the art technology to ensure our systems maintain strong security measures and the overall data and privacy security design allow us to defend our systems ranging from low hanging issue up to sophisticated attacks.

We store your data while your account is active and your loan is outstanding. Once your loan is closed, your personal and other data is retained only for the periods set out in the Retention Timelines section of this Privacy Policy, after which it is purged from our core database and securely deleted. For incomplete loan applications, Yenmo will purge your data from the system within 10 business days of your request.

SECURITY INCIDENT RESPONSE AND NOTIFICATION

Yenmo maintains a documented Incident Management Policy (YEN-POL-11) that governs how security incidents affecting your information are identified, contained, eradicated, recovered from and reviewed. Under that policy:

a. Identification and escalation: any suspected security incident must be reported internally immediately upon discovery. Incidents are classified by severity, and any high-severity incident involving customer data is escalated immediately to our senior management, legal team, lending partner and the relevant regulators, with a coordinated external communication;

b. Containment and remediation: affected access is disabled and impacted systems are isolated as the first response step, after which the cause is removed, credentials and tokens are reset, systems are restored and monitored for recurrence;

c. Regulatory reporting: reportable cyber security incidents are notified to the Indian Computer Emergency Response Team (CERT-In) within 6 hours of Yenmo noticing the incident, in accordance with the CERT-In Directions dated 28 April 2022;

d. Lending partner reporting: incidents affecting the data or services of our lending partner (including Bajaj Finance Limited) are notified to the partner within the timelines agreed in our contract with them;

e. Notification to you: where a security incident results in a breach of your personal data, we will notify you and the Data Protection Board of India as required under the Digital Personal Data Protection Act, 2023. Our notification to you will describe the nature of the breach, the information affected, the likely consequences, the steps we have taken to remedy the breach and the steps you can take to protect yourself; and

f. Post-incident review: every incident is followed by a root-cause analysis, and corrective actions are tracked to closure so that the controls protecting your information are strengthened.

We aim to protect from unauthorized access, alteration, disclosure or destruction of information we hold, including:

a. We use encryption to keep your data private while in transit;

b. We offer security feature like an OTP verification to help you protect your account;

c. We review our information collection, storage, and processing practices, including physical security measures, to prevent unauthorized access to our systems;

d. We restrict access to personal information to our employees, contractors, and agents who need that information in order to process it. Anyone with this access is subject to strict contractual confidentiality obligations and may be disciplined or terminated if they fail to meet these obligations;

e. Compliance & Cooperation with Regulations and applicable laws;

f. We regularly review this Privacy Policy and make sure that we process your information in ways that comply with it.

g. Data transfers;

h. We ensure that Aadhaar number is not disclosed in any manner.

DATA DESTRUCTION PROTOCOL

We follow a documented data destruction protocol, governed by our internal Data Retention, Storage & Purging Policy, under which your personal information is permanently destroyed once the applicable retention period (as set out in the Retention Timelines above) ends, the purpose for which it was collected has been served, or a valid deletion request has been processed.

Yenmo follows the below protocols for data destruction and media sanitization:

NIST SP 800-88 ("Guidelines for Media Sanitization")
DoD 5220.22-M ("National Industrial Security Program Operating Manual")

In particular:

a. Secure deletion: data is permanently deleted from our production databases and applications using secure deletion and data-wiping methods consistent with NIST SP 800-88 and DoD 5220.22-M, including file overwriting and clearing of temporary files and caches;

b. Cloud storage: our systems and data are hosted on Amazon Web Services in the ap-south-1 (Mumbai) region and your data, including backups, remains within India. Data held in encrypted cloud storage is rendered unrecoverable on deletion, including through destruction of the associated encryption keys where applicable;

c. Backups: backup copies containing deleted data are encrypted and are aged out and overwritten automatically in accordance with our backup schedules;

d. Devices and media: before any equipment (laptops, mobile devices, servers, network equipment or external storage) that has stored or processed customer data is decommissioned, all such data is erased using data-wiping software conforming to NIST SP 800-88 and DoD 5220.22-M, and storage media that has held highly sensitive data is physically destroyed by authorized personnel;

e. Verification: destruction is verified, including data-recovery testing, to confirm that no recoverable data remains;

f. Records: every deletion and destruction event is documented and the records are retained securely for audit; and

g. Lending partner data: data shared with us by our lending partners is purged in a timely manner once the servicing purpose is met or as the partner's contract requires, and such purge actions are documented.

We or our affiliates maintain your information on servers located in India. Data protection laws vary among countries, with some providing more protection than others. We also comply with certain legal frameworks relating to the transfer of data as mentioned and required under the Information Technology Act, 2000 and rules made thereunder.

When we receive formal written complaints, we respond by contacting the person who made the complaint. We work with the appropriate regulatory authorities, including local data protection authorities, to resolve any complaints regarding the transfer of your data that we cannot resolve with you directly.

LINKS TO OTHER SITES

Our Platform links to other websites that may collect information about you. We are not responsible for the privacy practices or the content of those linked websites. With this Policy we are only addressing the disclosure and use of data collected by Us. If You visit any websites through the links on the Website, please ensure You go through the privacy policies of each of those websites. Their data collection practices, and their policies might be different from this Policy and We do not have control over any of their policies neither do we have any liability in this regard.

YOUR CONSENT

By using the Platform and by providing your information, you consent to the collection, sharing, disclosure and usage of the information that you disclose on the Platform in accordance with this Privacy Policy.

If we decide to change our Privacy Policy, we will post those changes on this page so to make you aware of the information we collect, how we use it, and under what circumstances we share and disclose it.

GRIEVANCE OFFICER

In accordance with the Digital lending guidelines and Information Technology Act 2000 and rules made there under, the name and contact details of the Grievance Officer are provided below for your reference:

Name: Aryan Agarwal

Designation: CTO

Address: Yenmo Technologies Private Limited,

3rd Floor, 241, 17th Cross Rd, Sector 6, HSR Layout, Bengaluru, Karnataka 560102

Phone - 9521382950

Email: aryan@yenmo.in

Time: Mon - Sat (10:00 - 19:00)

For grievances related to Bajaj Finance Limited (Registered & Corporate Office: Bajaj Finance Limited, 4th Floor, Bajaj Finserv House, Off Pune – Ahmednagar Road, Viman Nagar, Pune – 411014; Phone: +91 86980 10101; Email: wecare@bajajfinserv.in), you can find the contact details of their grievance redressal officers at https://www.bajajfinserv.in/grievance-redressal

LOAN AGAINST MUTUAL FUNDS

Contact

Email: support@yenmo.in

Location: Bengaluru, India

Contact no: +91-9972109450