PRIVACY POLICY

At time.money, we prioritize the privacy and security of your personal information. This Privacy Policy explains how time.money, a platform owned and operated by Karat Capital Advisors Private Limited (referred to as “Karat Capital,” “we,” “our,” or “us”), processes the information collected about any individual who access, browse, or use our website, mobile applications, and other online services, as well as during interactions with our customer service channels (collectively referred to as “Users,” or “you,” or “your,”).

Karat Capital owns, operates, and manages the domain name https://time.money and its associated software applications designed for wireless devices, such as smartphones and tablets, as well as for desktop or laptop computers under the name time.money (collectively referred to as the “Platform” or “Application”).

The Platform provides Users with seamless access to a range of online financial advisory and investment services, including investment advisory, personalized financial planning, investment execution, and other related financial services (collectively referred to as the “Services”). These Services are governed by the Platform’s applicable Terms and Conditions, detailed at https://time.money/tnc

We are dedicated to safeguarding the personal information shared with us by Users and ensuring it is handled in compliance with stringent privacy standards and the relevant legal frameworks under Indian law.

We do not knowingly collect or solicit personal information from individuals under the age of 18. If you are under 18, please refrain from attempting to register for the Services or providing any personal information to us.

If we become aware that personal information has been collected from an individual under the age of 18, we will take immediate steps to delete such information. If you believe that a minor under 18 has provided personal information to us, please contact us at help@time.money for prompt resolution.

CONSENT

Users are deemed to have read, understood, and agreed to the terms outlined in this Privacy Policy. By providing their consent to this Privacy Policy, Users consent to the collection, use, and disclosure of their personal information as described herein.

We reserve the right to update or amend this Privacy Policy at any time. Users are encouraged to review this Privacy Policy periodically.

Continued use of the Services after any modifications to this Privacy Policy have been posted will signify the Users’ acknowledgment of such changes and their agreement to abide by the modified Privacy Policy.

Users have the right to opt out of the Platform and/or Services at any time. Additionally, Users may inquire about the personal data held by us by sending an email to help@time.money and may request the deletion of such information. Please note that upon such a request, Users will be required to delete their time.money account, and consequently, they will no longer be able to avail the Services provided by the Platform.

You hereby consent to us collecting, using, sharing, and disclosing your information as described in this Privacy Policy. If you do not agree with this Privacy Policy at any time, please do not use any of the services, use or access the Platform or give us any of your information.

ELIGIBILITY

To use the Platform or the Services and to accept this Agreement:

• You must be at least 18 years old or the age of majority in your jurisdiction.
• You must not be prohibited by any applicable law from using the Platform or the Services.
• Unauthorized users are strictly prohibited from accessing or attempting to access, directly or indirectly, the Platform or the Services. Any such unauthorized use shall constitute a violation of applicable laws and may result in legal action.
• Karat Capital reserves the right, at its sole discretion, to refuse access to or use of the Platform or Services to any person or entity, and to modify its eligibility criteria at any time without prior notice.

COLLECTION OF PERSONAL DATA

To enable Users to access the features, benefits, or use of the Services on our Platform, Users may be required to provide certain information that constitutes ‘personal information’ or ‘sensitive personal data or information.’ Such data collection is governed under Regulation 3 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Information) Rules, 2011, the Prevention of Money Laundering Act (PMLA), 2002, and other applicable data privacy laws.

We may collect the following categories of personal information or sensitive personal data or information from Users, including but not limited to:

• Personal Details: Name, Date of Birth, Gender, Nationality, Father’s Name, Mother’s Name, Marital Status, Photograph.

• Contact Information: Address, ZIP/Postal Code, Location, Phone Number, Email ID, Contacts, and Nominee Details.

• Banking Information: Bank and other related information, Name as per Passbook, IFSC Code, Loan and other Credit information, Mutual Funds and any assets financial, digital and physical etc.

• Identification Documents: PAN Card Number, Aadhaar Card Number (redacted), and KYC-related information (via video or other online/offline verification methods) as mandated by financial institutions, regulatory guidelines, or relevant authorities for the Services utilized (e.g., investments and transactions).

• Employment Details: Occupation, Income, Employer Details, and Designation as required for record retention under the Central KYC Records Registry (CKYCR) for compliance with the Prevention of Money Laundering (Maintenance of Records) Rules, 2005.

• Device Information: Access to your device camera, microphone, device storage, make and model, mobile network information, OS and software information, IMEI, device type, IP address, precise and/or coarse location, biometric access and unique device identifier for purposes such as onboarding, authentication, digital signature, KYC verification, fraud prevention, security, and compliance requirements.

• Contact List and UPI Services: With your specific consent, we may access your contact list to enable payment-related services and UPI services. This access will not be extended to any digital lending activities.

• Financial and Transactional Data:
  We may collect financial and transactional information, such as:

  • Payment Details: Method, mode, and manner of payment, credit/debit card information (e.g., card type, expiration date, name on the card), billing address.

  • Transaction Details: Date of transaction, transaction amount, transaction history, and related payment processing details, including debit instructions and standing instructions, credit, banking and investment services you have opted for.

• Cookies: We may use cookies, or similar technologies to identify your browser application, authentication and enable notifications, among other functionalities.

USE OF PERSONAL INFORMATION

We use the personal information received from Users to provide our Services and enhance the overall User experience. Access to Users’ login credentials, registration information, and any other personal information is strictly restricted and is utilized in accordance with specific internal protocols.

This information is used to:

• To create, manage, and maintain your account on the Platform.
• To enable you to avail of our Services, ensure a seamless customer care experience, and develop new features.
• Develop new features or functionalities to improve the Services.
• To notify you about necessary information related to the Platform, Services, and your account.
• To enhance personalized and efficient User experience and for marketing and promotional purposes
• Organize and aggregate your financial information in one place on the Platform.
• Enable the Platform to provide analytics on your investments, liabilities, and expenses.
• Assist you in assessing your risk profile periodically.
• Create personalized investment plans.
• Support informed decision-making regarding your investments.
• To verify your identity and prevent unauthorized or illegal activity.
• To comply with applicable laws, rules, and regulations.
• Enhance the overall experience of Users by ensuring seamless and secure access to the Platform.

All use of personal information is conducted in alignment with the Privacy Policy and applicable legal and regulatory requirements.

PURPOSE AND LEGAL BASIS FOR PROCESSING PERSONAL DATA

For any data processing activity to be lawful, it must be based on a legitimate and lawful basis as per applicable data protection laws, including but not limited to the Information Technology Act, 2000, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and the Digital Personal Data Protection Act, 2023.

The legal bases upon which we process your personal data are as follows:

Categories of Personal Data	Purposes
Essential cookies	To ensure seamless use of the Platform, including smooth connection, user identification, system security, and stability analysis.
Identification, contact, and communication data (name, address, email, company, phone number, IP address)	Used to create and manage your account, provide customer support, and send important notifications.
Your feedback about our Service	Collected via surveys and ratings to enhance and improve our Services.
Transaction details (Investment amounts, Portfolio data, Payment details)	To provide financial services, execute transactions, and maintain investment records
KYC details (PAN, Aadhaar – masked, Bank Details, Nominee Information)	Used for identity verification, fraud prevention, and regulatory compliance
IP Address & Device Information	Used to detect fraud, prevent unauthorized access, and enhance security
Financial Details (Investment Patterns, Risk Profile, Income Source, Asset Allocation)	Used for personalized financial planning and investment recommendations
Communication details (Chat history, call recordings, emails)	Used for regulatory compliance, dispute resolution, and service improvement
Cookie tracking (IP Address, Device Type, Location)	Used to improve user experience and deliver relevant advertisements
Payment Information (Billing Details, Transaction History, Bank Account Linked for Investment)	Used to process payments for services and maintain transaction records
User preferences and behavior tracking	Used to improve platform offerings and personalize recommendations

ACCESS AND UPDATE YOUR PERSONAL INFORMATION

The personal information provided by the User belongs to the User. If the User wishes to access or update any previously provided information, they may do so by logging into the Platform using their login credentials and making the necessary changes. Certain changes may require the User to provide documentary evidence. As an added security measure and in compliance with regulatory requirements, we may require additional proof of identity prior to disclosing such information.

If the User wishes to withdraw their consent previously provided for sharing personal information, they may do so directly through the Platform.. In such cases, we reserve the right to discontinue providing the Services.

Users must keep their login credentials safe and secure to prevent unauthorized access to their accounts. If you believe the security of your account has been compromised, please change your password immediately and contact us at help@time.money for further assistance.

DISCLOSURE AND TRANSFER OF PERSONAL INFORMATION

• By agreeing to these Terms and Conditions, you explicitly give your consent for us to share your data with third-party applications and service providers, as necessary, to provide and enhance the services offered through our Platform.

• In our business and operational processes, we only share data on a partial and “need-to-know” basis with designated personnel, partners, or service providers.

• We may provide aggregate statistics about our customers, sales, traffic patterns, and related Platform information to reputable third-party vendors.

• All our employees are selected in compliance with strict security policies and are bound by confidentiality obligations. Employees found in breach of these obligations are subject to disciplinary action, including termination, civil liability, or criminal prosecution.

• We may transfer your personal information if Karat Capital is acquired by or merged with another entity, as permitted by applicable law and/or required under a scheme or arrangement of merger, acquisition, or restructuring. In such an event, we will notify you before your personal information is transferred or shared with the other entity and becomes subject to a different Privacy Policy.

We may share / disclose your data with competent legal, statutory, or regulatory authorities, or with partners/service providers (the “Recipients”), which refers to:

• Karat Capital’s Affiliates & Group Entities;

• IT service providers such as website administrators, website analytics service providers, and communication agencies;

• Our service providers, suppliers, sub-contractors, and partners. We may engage third-party vendors or service providers to assist in providing Services, such as marketing and advertising activities, audits, data analysis, sending SMS or emails, fraud prevention, operating payment gateway functionality, or account aggregation. Such third parties are contractually bound and required under law to maintain the confidentiality of the information we share with them;

• Our professional advisors, such as auditors, accountants, and legal advisors;

• To financial institutions for the purposes of verification, mitigating or preventing fraud, managing risk, or recovering funds in compliance with applicable laws and regulations.

• For investments or transactions facilitated through us, where we act as an intermediary. When you invest in mutual funds or other financial instruments, you also become a customer of the respective Asset Management Companies (AMCs) or Registrar and Transfer Agents (RTAs), whose service providers may access your personal and investment information. We do not control how these entities use your information.

• We may share personal information when mandated by law or requested by government agencies for purposes such as identity verification, prevention, detection, investigation, prosecution, or punishment of offenses, including cyber incidents. Sensitive personal information or personal information may also be disclosed as required by legal orders under applicable law.

• We may transfer personal information to another corporate body or person when necessary for fulfilling a lawful contract between us and the User, or with the User’s consent.

• We may use certain anonymized or aggregated information for the purpose of improving our Services, including but not limited to the training, testing, and enhancement of artificial intelligence and machine learning models.

• Any other third party supporting the activities of Karat Capital.

The Recipients may, under their own responsibility, disclose the personal data to their agents and/or delegates (the “Sub-Recipients”), who shall process the personal data solely for assisting the Recipients in providing their services to Karat Capital and/or fulfilling their own legal obligations.

The Recipients and Sub-Recipients may, as the case may be, process the personal data either as:

• Processors – when processing the personal data on behalf and upon instructions of Karat Capital and/or the Recipients; or

• Independent Controllers – when processing the personal data for their own purposes, such as fulfilling their own legal and regulatory obligations.

THIRD-PARTY SERVICE PROFESSIONALS AND PROVIDERS

We engage, retain, or may, as per the requirements and business needs of the Company, employ or contract with third-party service professionals/providers to work on our behalf or with us under agreements containing confidentiality obligations and in accordance with applicable law, in relation to the services provided by us on the Platform. These third parties may assist in various functions, including but not limited to communication regarding offers, feedback collection, payment processing, customer support, advertising, fraud detection, account aggregation, database management, web analytics, platform maintenance, delivery/logistics, and evaluation services. In such cases, your information may be shared with these third-party companies and/or individuals.

We may provide links to other websites of interest on the Platform. However, we do not provide any warranty, assurance, or endorsement regarding the accuracy, completeness, usefulness, quality, authenticity, merchantability, suitability, or appropriateness of the content on such websites. We are not responsible for any liability, obligations, or consequences arising from your use of these third-party websites. This Policy does not apply when you access such websites or links.

These third-party websites may use technology to send advertisements that appear on the Platform directly to Users. We do not have access to or control over the cookies or other features that such third-party websites may use, and the information practices of these websites are not covered by this Privacy Policy. Therefore, we shall not be held responsible for the protection and privacy of any information that you provide while visiting such websites. Users should contact these third-party websites directly for more information about their privacy practices.

Any opinions, advice, statements, services, offers, or other information or content expressed or made available by third parties, including information providers or other Users, are solely those of the respective author(s) or distributor(s) and not of us.

PROTECTION, STORAGE, AND PURGING OF INFORMATION

When any User accesses their account information, we offer the use of a secure server. The secure server software (SSL) encrypts all information you input before it is sent to us. Furthermore, all User data we collect is protected against unauthorized access.

While we implement appropriate firewalls and protections, our systems are not entirely hack-proof. Data pilferage due to unauthorized hacking, virus attacks, or technical issues is possible, and we assume no liability or responsibility for such events.

You agree that all intellectual property, including but not limited to copyright, trademarks, personal information, content, photographs, images, experience sharing, feedback, and opinions voluntarily shared by you with us or uploaded on the Platform, does not infringe upon the rights of third parties.

All possible precautionary measures have been taken to safeguard the information provided by Users on our Platform.

You may disable or delete your account at any time by submitting a request to us at help@time.money. Upon verification of your request, we will no longer share your data with any partners. However, we will retain your personal information for as long as the purpose for its usage exists, after which it will be disposed of, except as required for record retention under applicable laws, including guidelines under the Prevention of Money Laundering Act (PMLA), 2002 and applicable SEBI guidelines.

As mandated under the PMLA guidelines and SEBI regulations, we will store your transaction logs and identity documents for a period of up to five (5) years from the date of account deletion. In the event of any pending legal or regulatory proceedings, or upon receiving legal or regulatory directions, we may be required to retain your personal information for a longer period as mandated by law.

COLLECTION AND USE OF NON-PERSONAL DATA

Non-personal data refers to data that cannot be used to identify an individual. We may collect information regarding User activities on our Platform. This aggregated information may be used by us for research, analysis, improving and monitoring our Services, and for various promotional schemes and offers.

Such non-personal data may also be shared in an aggregated, non-personal form with third parties to enhance User experience, offerings, or Services. The Platform uses cookies, and while using the Platform, you will be prompted to accept all cookies. Additionally, to enhance the User experience, certain necessary information may be stored in your browser’s storage..

COOKIES POLICY

A cookie itself does not contain personal information and only enables us to relate your use of the Platform and your behavior on the Platform to information you have specifically and knowingly provided. A cookie cannot read data off your hard disk or access cookie files created by other websites.

We may place both permanent and temporary cookies on your browser. A permanent cookie will remain on your browser until its expiry date unless deleted earlier. Most cookies, however, are “session cookies,” meaning they are automatically deleted from your system at the end of your session. You may refuse cookies by turning them off in your browser or set your browser to warn you before accepting any cookies. While you are free to decline our cookies if your browser permits, we use certain cookies to authenticate Users on each page after they log in to the Platform or access any Services.

You can choose to accept or decline cookies. Most web and mobile browsers automatically accept cookies, but you can modify your browser settings to decline cookies if you prefer. However, declining cookies may prevent you from fully utilizing certain features of the Platform or accessing some of its functionalities.

The data collected by cookies may be used by us or third parties to process and analyze information to help improve or facilitate our Services, including but not limited to - fraud detection and prevention; web analytics; monitoring, and evaluation services.

DISCLAIMER OF INFORMATION

We do not control or endorse the content, messages, or information placed on the Platform by any User or third party. Accordingly, we expressly disclaim any liability for such information and for your interactions or engagements with other Users, third-party providers, and the products or services they offer. You agree to waive any claims against us related to such matters. To the extent such a waiver may be deemed ineffective, you agree to release any claims against us concerning the same.

You are responsible for ensuring the accuracy, truthfulness, correctness, and completeness of the information you submit or provide to us on the Platform. You agree to hold harmless and indemnify us from and against all claims arising out of or related to any wrongful information you post or provide to us on the Platform.

CHANGES IN PRIVACY POLICY

We reserve the right to modify this Privacy Policy at any time. Please note that this Policy and any changes made to it will become effective from the date of posting on the Platform. Any changes will be effective immediately upon posting the revised Privacy Policy.

While we will make reasonable efforts to notify you of updates to this Privacy Policy, we recommend that you review the Policy periodically to stay informed of any changes. If you are not comfortable with any changes to the Privacy Policy, you may choose to discontinue the use of the Platform / Application.

GOVERNING LAW AND JURISDICTION

This Privacy Policy and any disputes arising from or relating to the use of the Platform or the processing of personal information shall be governed by and construed in accordance with the laws of India. The courts of Bangalore, Karnataka shall have exclusive jurisdiction to hear and decide any disputes arising out of or in connection with this Privacy Policy.

QUESTIONS OR COMPLAINTS

If you have any questions or complaints about the processing of your personal information, please write to us at help@time.money

CONTACT INFORMATION

Address: #3499, 2nd Floor, 14th Main, HAL 2nd Stage, Indiranagar, Bengaluru 560 038

Email: help@time.money

GRIEVANCE OFFICER

In accordance with the provisions of the Information Technology Act, 2000, and rules made thereunder, the name and contact details of the Grievance Officer are provided below:

Attn: Chida AJ
Designation: Grievance Officer
Email: compliance@time.money
Time: Monday-Friday (10:30 AM - 7:30 PM)
Address: #3499, 2nd Floor, 14th Main, HAL 2nd Stage, Indiranagar, Bengaluru 560 038