Privacy Policy

Yugai Solution Private Limited, operating under the enterprise brand YugAI, respects privacy and is committed to responsible handling of personal data. This Privacy Policy is intended to explain how personal data is handled when individuals interact with YugAI’s public website and, where specifically adopted, YugAI digital portals, applications and services.

Where a specific YugAI service, business brand, partner journey, provider workflow or regulated financial service has additional privacy terms, those service-specific terms should be read together with this Policy.

Depending on the service or relationship, YugAI may process categories of information such as:

Information may be collected directly from users through forms, registrations, account activity, KYC or service requests; through transactions and support interactions; through authorized YugAI partners or service providers where the relevant workflow permits; and through technical systems used to operate and secure YugAI digital services.

Subject to the applicable service and legal basis, information may be used to provide and manage registrations, accounts, applications, transactions, orders, customer support, communications, verification, security, fraud/risk controls, reporting, compliance and service improvement.

Where consent is the appropriate basis, YugAI should provide clear information about the purpose of processing and record the relevant consent. Privacy consent, terms acceptance, cookie preferences and optional marketing consent should be managed distinctly where applicable.

Certain YugAI journeys may require KYC, payment, banking, wallet, order, invoice, receipt or transaction-related information. Such data should be collected and processed only to the extent necessary for the applicable service, verification, settlement, accounting, support, legal or regulatory requirement.

YugAI may need to share relevant information with authorized service providers, YugAI partners, banks, NBFCs, insurers, payment or technology providers, professional service providers, government/regulatory authorities or other entities where necessary for the requested service, legal obligation, security, dispute handling or authorized business operation.

Information should be shared on a need-to-know and purpose-limited basis, subject to applicable contractual, security and legal controls.

Personal data should be retained only for as long as required for the relevant service, business, contractual, accounting, security, dispute, audit, legal or regulatory purpose, after which it should be securely deleted, anonymized or otherwise handled in accordance with approved retention rules.

YugAI’s security architecture is intended to use layered safeguards such as identity and access controls, secure sessions, authentication controls, role/permission management, login and device monitoring, activity logging and security controls appropriate to the relevant system.

The YugAI website may use essential cookies and, where enabled, analytics, preference or similar technologies. Non-essential technologies should be governed by the applicable cookie preference and consent approach.

If YugAI or an approved service provider processes or stores personal data outside India, such processing should occur only where permitted and in accordance with applicable legal, contractual and security requirements.

Subject to applicable law and the nature of the processing, individuals may have rights relating to access, correction, updating, erasure, consent withdrawal and grievance redressal. Some rights may be limited where retention or processing is required by law, contract, security or regulatory obligations.

Where a YugAI service is intended for or may involve children, the relevant service must apply the specific consent, verification and protection requirements required by applicable law and the service design.

YugAI may update this Privacy Policy to reflect changes in services, technology, operations or legal requirements. The current version should display its effective date and last-updated date. Material changes should be communicated through an appropriate channel where required.

Privacy questions, data-rights requests and grievances should be routed through the approved YugAI grievance mechanism.