This privacy policy (“Privacy Policy”) sets out how Prana Venture Management LLP (“PVM”) and its affiliates (collectively, “Prana”, “we”, “us”, “our”) collect, use, store and protect personal data when you visit www.pranaventures.com (the “Website”) or otherwise interact with us through the Website. PVM is the data fiduciary for personal data collected through the Website. The terms “Prana” and “Prana Ventures” are used as ease-of-reference labels for the Prana group as a whole and do not refer to any one particular entity, fund or scheme.

This Privacy Policy is published in accordance with Rule 4 of the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and is intended to be consistent with the principles set out in the Digital Personal Data Protection Act, 2023.

Please read this Privacy Policy together with our Terms of Use. If you do not agree with this Privacy Policy, please do not use the Website.

1. What information we collect

We only collect information that you voluntarily provide. Specifically:

• Information you choose to share with us when you contact us by email at contact@pranaventures.in or through other communication channels published on the Website (for example, your name, email address, mobile number, and any business or proposal information you include).

• Limited technical information that may be logged by our hosting infrastructure when you visit the Website, such as IP address, browser type, device type, the pages you view, and the time and date of your visit. This information is used only to operate and secure the Website and is not used to build a profile of you.

We do not knowingly collect any sensitive personal data or information through the Website.

2. How we use your information

We use the information you submit to:

• respond to your enquiry, evaluate your pitch, and engage with you in connection with potential investment opportunities;

• communicate with you about Prana, our portfolio, and our events;

• operate, secure, and improve the Website; and

• comply with applicable law, including any directions, requests or orders from a court or governmental authority.

We do not sell your personal information.

3. When we share your information

We may share your information:

• with our affiliates, employees, advisors, fund administrators, limited partners, clients, auditors and service providers, on a need-to-know basis and subject to appropriate confidentiality obligations;

• with a successor entity in connection with a merger, restructuring, or sale of all or substantially all of our business or assets;

• with law-enforcement or governmental authorities, where we are required to do so by law or to protect our rights, property or the safety of others; and

• with your consent, in any other case.

4. Cookies and analytics

The Website does not currently use cookies, web beacons, pixels or third-party analytics tools (such as Google Analytics, Meta Pixel or Hotjar) to track or profile visitors. If we introduce any such technology in future, we will update this Privacy Policy and, where required, ask for your consent through an on-page banner before it is activated.

5. Data retention

We retain your information only for as long as is necessary for the purposes set out in this Privacy Policy, or for any longer period required under applicable law (including any retention obligation under tax, anti-money-laundering, or SEBI regulations applicable to the entities we advise). You may request deletion at any time by writing to us at the address below; we will action your request after carrying out such verifications and after retaining only such information as we are required to retain by law.

6. Your rights

Subject to applicable law, you have the right to:

• access the personal data we hold about you;

• ask us to correct or update inaccurate personal data;

• ask us to erase personal data that is no longer necessary, subject to our legal retention obligations;

• withdraw any consent you have given (this will not affect the lawfulness of processing carried out before withdrawal); and

• file a grievance with our Grievance Officer (see paragraph 10).

7. Security

We follow reasonable security practices and procedures consistent with applicable laws, to protect your information from unauthorised access, disclosure, alteration or destruction. No system is, however, completely secure, and we cannot guarantee the security of information transmitted to or from the Website.

8. Children’s privacy

The Website is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors through the Website.

9. Third-party websites

The Website may contain links to third-party websites, including those of our portfolio companies. We are not responsible for the privacy practices of those websites and encourage you to review their privacy policies.

10. Grievance Officer

If you have any complaint or grievance in relation to the processing of your personal data, please write to:

Grievance Officer, Prana Venture Management LLP

367, 4th Floor, 100 Feet Road, HAL 2nd Stage, Indiranagar, Bengaluru, Karnataka 560038, India

Email: legal@pranaventures.in

We will acknowledge your grievance and endeavour to redress it within one (1) month of receipt.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The current version will always be available on the Website. Please review this Privacy Policy periodically; your continued use of the Website after we publish a change constitutes your acceptance of the updated Privacy Policy.

12. Consent

By using the Website or by submitting any information to us through the Website, you confirm that you have read, understood and agreed to this Privacy Policy and consent to the collection, use and disclosure of your information as described in it.