Privacy Policy

Effective Date: 18 June 2026

SlashCollect Private Limited (“SlashCollect”, “we”, “our”, or “us”) respects your privacy and is committed to protecting the personal information entrusted to us. This Privacy Policy explains how we collect, use, store, disclose, and protect information when you access or use the SlashCollect website, software, APIs, dashboards, payment collection platform, and related services (collectively, the “Services”). By using our Services, you acknowledge the practices described in this Privacy Policy.

1. Information We Collect

Depending on how you interact with SlashCollect, we may collect the following categories of information: A. Personal Information This may include: • Full name. • Email address. • Phone number. • Organization, company, or institution details. • Address and other contact information. • Account and login information. • Information provided when contacting our support or sales teams. B. Payment-Related Information When payments are initiated or processed through the platform, we may process information necessary to facilitate and reconcile transactions, such as: • Transaction ID or payment reference number. • Payment amount. • Payment date and time. • Payment status. • Payment method. • Bank or payment-provider reference details. • Recurring payment or mandate-related information where applicable. Payment credentials such as card numbers, CVV, UPI PINs, passwords, or banking credentials are generally processed directly by the relevant regulated payment processor, bank, or payment service provider and are not intended to be stored by SlashCollect. C. Technical and Usage Information When you access our website or platform, we may automatically collect information such as: • IP address. • Browser type and version. • Device type and operating system. • Website pages visited. • Date and time of access. • Referring URLs. • Platform usage and interaction information. • Diagnostic and log information.

2. How We Use Your Information

We may use the information we collect to: • Provide, operate, and maintain the Services. • Create and manage user accounts. • Facilitate payment collection and payment-related workflows. • Create and manage payment plans and schedules. • Process and reconcile transactions. • Send payment reminders, confirmations, alerts, and service notifications. • Provide customer and technical support. • Communicate with businesses, institutions, customers, students, parents, and other authorized users. • Detect, prevent, and investigate fraud, misuse, or security incidents. • Monitor and improve the performance and functionality of our Services. • Develop and improve our products and technology. • Comply with applicable laws, regulations, legal processes, and regulatory requirements. • Protect our rights, property, users, and Services.

3. Information Provided by Businesses and Institutions

SlashCollect may provide its Services to businesses, educational institutions, and other organizations. In such cases, the organization may provide us with information about its customers, students, parents, employees, or other individuals for the purpose of providing the Services. Where we process information on behalf of an organization, that organization may determine the purpose and manner in which the information is collected and used. Individuals who have questions about information provided to SlashCollect by an institution or business may also contact the relevant organization directly.

4. Sharing of Information

We do not sell or rent personal information to third parties. We may share information with trusted third parties where reasonably necessary to provide and operate the Services, including: • Banks and payment service providers. • Payment gateways and payment processors. • UPI and other payment infrastructure providers. • Cloud hosting and technology providers. • Communication and notification providers. • Security, fraud prevention, and analytics providers. • Professional advisors and service providers. • Government, regulatory, law enforcement, or judicial authorities where required by law. Third parties receiving information are expected to process it in accordance with applicable contractual, legal, and security requirements.

5. Payment Information

SlashCollect facilitates payment collection through third-party payment and banking partners. Depending on the payment method used, payment information may be processed directly by the relevant payment provider. SlashCollect may receive transaction and payment status information necessary to: • Confirm transactions. • Track payment status. • Reconcile collections. • Generate reports. • Provide support. • Manage payment schedules. • Handle payment disputes and refunds. We do not request or intentionally store sensitive authentication credentials such as UPI PINs, internet banking passwords, or card CVVs.

6. Cookies and Similar Technologies

Our website and Services may use cookies, pixels, local storage, and similar technologies. These technologies may be used to: • Keep the website and platform functioning. • Remember preferences. • Understand how users interact with our Services. • Improve website performance. • Analyze traffic and usage. • Detect security issues and fraudulent activity. You may be able to control cookies through your browser settings. Disabling certain cookies may affect the functionality of parts of our website or Services.

7. Data Security

We take reasonable technical and organizational measures designed to protect personal information against unauthorized access, alteration, disclosure, misuse, or destruction. Security measures may include access controls, authentication mechanisms, encryption where appropriate, monitoring, and other technical safeguards. However, no method of transmission over the internet or electronic storage system can be guaranteed to be completely secure.

8. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Privacy Policy, including to: • Provide the Services. • Maintain transaction and business records. • Meet contractual obligations. • Resolve disputes. • Prevent fraud and abuse. • Comply with applicable legal, accounting, tax, and regulatory requirements. • Enforce our agreements. When information is no longer required, we may securely delete, anonymize, or otherwise dispose of it in accordance with applicable requirements.

9. Data Transfers

To provide our Services, certain information may be processed or stored using service providers or infrastructure located in India or other jurisdictions. Where information is transferred or processed across jurisdictions, we will take reasonable steps to ensure that such processing is carried out in accordance with applicable legal and contractual requirements.

10. Your Rights

Subject to applicable law, you may have the right to: • Request access to personal information we hold about you. • Request correction of inaccurate or incomplete information. • Request deletion of personal information where legally permissible. • Request information about how your personal information is processed. • Withdraw consent where processing is based on consent, subject to applicable limitations. • Raise concerns or complaints regarding the processing of your personal information. Certain information may need to be retained where required by law, regulation, legitimate business requirements, or payment-network obligations. To protect your information, we may need to verify your identity before processing certain requests.

11. Communications

We may send communications necessary to provide the Services, including: • Payment confirmations. • Payment reminders. • Transaction updates. • Account notifications. • Security alerts. • Service and maintenance announcements. • Support communications. Where permitted by applicable law, we may also send product, marketing, or promotional communications. You may opt out of non-essential marketing communications by following the unsubscribe instructions provided in the relevant communication or by contacting us. Essential service and transactional communications may continue even if you opt out of marketing communications.

12. Children’s and Student Information

SlashCollect may process information relating to students where an educational institution uses the platform to manage fee or payment collections. Where such information relates to children or minors, we rely on the relevant educational institution, parent, guardian, or other authorized party to provide information and obtain any consent or authorization required under applicable law. We do not knowingly use children’s personal information for unrelated purposes or targeted advertising.

13. Third-Party Links and Services

Our website or Services may contain links to third-party websites, applications, or services. We are not responsible for the privacy practices, security, or content of third-party websites or services. We encourage users to review the privacy policies of third parties before providing them with personal information.

14. Business Transfers

If SlashCollect undergoes a merger, acquisition, restructuring, financing, sale of assets, or similar corporate transaction, personal information may be transferred as part of that transaction, subject to applicable law and appropriate safeguards.

15. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our Services, technology, business practices, or applicable legal and regulatory requirements. When we make material changes, we may update the effective date displayed at the top of this Policy and provide additional notice where required. Your continued use of the Services after the updated Privacy Policy becomes effective constitutes acknowledgment of the updated Policy, to the extent permitted by applicable law.

16. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or the handling of your personal information, please contact us at:

notifications@slashcollect.com

SlashCollect Private Limited