Privacy Policy.

This Privacy Policy describes Our policies and procedures on the collection, use, and disclosure of Your information when You use the Service, and tells You about Your privacy rights and how the law protects You.

The Website is publicly accessible and may be visited by individuals from any country. We are committed to respecting the privacy rights of all visitors regardless of their location, and We have structured this Policy to address the requirements of multiple jurisdictions including India, the European Union, the United Kingdom, and the United States.

We use Your Personal Data only to provide and improve the Service. By using the Service, You agree to the collection and use of information in accordance with this Privacy Policy.

1. Interpretation and Definitions

Interpretation

The words whose initial letter is capitalised have meanings defined under the following conditions. The following definitions shall have the same meaning regardless of whether they appear in singular or in plural.

Definitions

For the purposes of this Privacy Policy:

• Company (referred to as "We", "Us" or "Our") refers to Sathguru Catalyser Advisors Private Limited, Plot No. 54, Road No. 2, Sagar Society, Sri Nagar Colony, Kamalapuri Colony, Banjara Hills, Hyderabad, Telangana 500034, India.
• Cookies are small files placed on Your device by a website, containing details of Your browsing activity on that website.
• Country of Establishment refers to India, where the Company is incorporated and primarily operates.
• Device means any device that can access the Service, such as a computer, mobile phone, or digital tablet.
• Personal Data (or "Personal Information") is any information that relates to an identified or identifiable individual. This includes, where applicable under Your local law, data such as IP addresses and cookie identifiers.
• Pitch Deck Submission refers to the process by which a founder or company representative submits their company's pitch deck and associated details to Sathguru Catalysers for internal review and evaluation.
• Service refers to the Website.
• Service Provider means any natural or legal person who processes data on behalf of the Company to facilitate or support the Service.
• Usage Data refers to data collected automatically, either generated by use of the Service or from the Service infrastructure itself.
• Website refers to the Sathguru Catalysers website, accessible at https://sathgurucatalysers.fund/.
• You means the individual accessing or using the Service, or the company or other legal entity on whose behalf that individual is acting.

2. Data We Collect

2.1 Website Visitors — Cookie and Usage Data

For general visitors to Our Website, We limit data collection to cookie data and anonymised usage analytics. No account or registration is required to browse the Website. The data We collect in this context includes:

• Demographic data (e.g. approximate geographic region derived from IP address)
• Device data (e.g. device type, operating system, browser type and version)
• Usage data (e.g. pages visited, time spent on pages, referral source, session duration)
• Cookie identifiers and similar tracking technologies

Please note that under certain laws — including the EU General Data Protection Regulation (GDPR) and the UK GDPR — IP addresses and cookie identifiers may qualify as Personal Data. Where this applies, We process such data on the legal bases set out in Section 3.

We do not collect names, email addresses, or any directly identifying information from general Website visitors.

2.2 Pitch Deck Submissions

When a founder or company representative submits a pitch deck through Our Website, We collect the following information solely for the purpose of internal review and investment evaluation:

• Founder / contact person's full name
• Company name
• Founder name(s)
• Company website URL
• Contact phone number
• Pitch deck file (uploaded document)

This information is used strictly for internal purposes by the Sathguru Catalysers team. We do not share pitch deck submissions or the personal data contained therein with third parties, except where necessary for our investment evaluation process or where required by law.

2.3 Tracking Technologies and Cookies

We use Cookies and similar tracking technologies to track activity on Our Service and store certain information. Technologies may include beacons, tags, and scripts.

• Cookies or Browser Cookies. A cookie is a small file placed on Your device. You can instruct Your browser to refuse all Cookies or indicate when a Cookie is being sent. However, refusing Cookies may affect the functionality of some parts of the Service.
• Web Beacons. Certain sections of Our Service and Our emails may contain web beacons that allow the Company to count users who have visited those pages or opened an email.

Cookies can be "Persistent" or "Session" Cookies. Persistent Cookies remain on Your device when You go offline. Session Cookies are deleted as soon as You close Your browser.

Where required by law — including for visitors from the EU/EEA and the United Kingdom — We use non-essential cookies only with Your prior consent. You may withdraw or change Your consent at any time through Your browser or device settings.

Cookie Types

• Necessary / Essential Cookies: Session Cookies essential to provide the services available through the Website.
• Analytics / Functionality Cookies: Persistent Cookies that allow Us to remember choices and analyse how visitors use the Website.

3. Legal Basis for Processing and How We Use Your Personal Data

The Company processes Personal Data on the following legal bases, which vary depending on the type of data and the jurisdiction of the data subject:

3.1 Legal Bases (EU/EEA and UK Visitors — GDPR / UK GDPR)

For individuals located in the EU/EEA or the United Kingdom, We process Personal Data under the following legal bases:

• Consent — for non-essential cookies and analytics.
• Legitimate interests — for essential cookies, security monitoring, and internal analytics.
• Performance of a contract — for processing pitch deck submission data.
• Legal obligation — where We are required to process or retain data by applicable law.

3.2 Legal Bases (Indian Visitors — DPDPA 2023)

For individuals located in India, We process Personal Data in accordance with the Digital Personal Data Protection Act, 2023.

3.3 All Visitors — Purposes of Processing

Regardless of jurisdiction, We use Personal Data for the following purposes:

• To operate and maintain the Website and monitor its usage.
• To process and evaluate Pitch Deck Submissions for internal investment consideration.
• To contact founders and company representatives regarding their submissions.
• To comply with applicable legal and regulatory obligations.
• For internal analytics, service improvement, and security monitoring.
• For business continuity purposes in the event of a merger, restructuring, or asset transfer.

Data Sharing

We may share Your Personal Data in the following limited situations:

• With Service Providers: third parties engaged to support our infrastructure, analytics, or communications.
• With professional advisors: auditors, legal counsel, and compliance consultants.
• For business transfers: in connection with a merger, acquisition, or sale of the Company.
• With regulators and public authorities: where required by law.
• With Your consent: for any other purpose with Your explicit agreement.

We do not sell Personal Data to third parties. We do not use any data collected through the Website for advertising or marketing purposes directed at third parties.

4. Retention of Your Personal Data

We retain Personal Data only for as long as necessary for the purposes set out in this Privacy Policy, or as required by applicable law:

• Cookie and Usage Data — up to 24 months from the date of collection.
• Pitch Deck Submissions — retained for the duration of the evaluation process and for up to 48 months thereafter.
• Support correspondence — up to 24 months from the date of closure.
• Server logs — up to 24 months for security monitoring and troubleshooting.

We may retain data beyond the above periods where required by law, to defend legal claims, or at Your explicit request. When retention periods expire, data is securely deleted or anonymised.

5. International Transfer of Your Personal Data

The Company is established in India. Your Personal Data may be processed at Our offices in Hyderabad and at the locations of any Service Providers We engage, which may be located in other countries. When data is transferred internationally, We ensure the following safeguards apply:

• Transfers from India — carried out in accordance with the Digital Personal Data Protection Act, 2023.
• Transfers involving EU/EEA data subjects — where Personal Data is transferred outside the European Economic Area, We rely on Standard Contractual Clauses or other lawful transfer mechanisms.
• Transfers involving UK data subjects — where Personal Data is transferred outside the UK, We rely on the UK International Data Transfer Agreement or UK Addendum to the EU SCCs.
• Transfers involving US data subjects — processed in accordance with applicable US federal and state privacy laws.

6. Your Privacy Rights

The rights available to You depend on the laws applicable in Your jurisdiction. We are committed to honouring all applicable rights.

6.1 EU and EEA Residents (GDPR)

If You are located in the EU or EEA, You have the following rights under the General Data Protection Regulation:

• Right of access — to obtain a copy of the Personal Data We hold about You.
• Right to rectification — to request correction of inaccurate or incomplete data.
• Right to erasure ("right to be forgotten") — to request deletion of Your Personal Data.
• Right to restriction of processing — to request that We limit how We use Your data.
• Right to data portability — to receive Your data in a structured, machine-readable format.
• Right to object — to object to processing based on legitimate interests.
• Right to withdraw consent — at any time where processing is based on consent.
• Right to lodge a complaint — with Your local supervisory authority.

6.2 United Kingdom Residents (UK GDPR)

If You are located in the United Kingdom, You have equivalent rights under the UK GDPR and the Data Protection Act 2018. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at www.ico.org.uk.

6.3 Indian Residents (DPDPA 2023)

If You are located in India, You have the following rights under the Digital Personal Data Protection Act, 2023:

• Right to access information about Your Personal Data being processed.
• Right to correction and erasure of inaccurate or outdated Personal Data.
• Right to grievance redressal — to raise concerns with Our Data Protection Officer.
• Right to nominate another individual to exercise rights on Your behalf in the event of death or incapacity.

6.4 California Residents (CCPA / CPRA)

If You are a California resident, You have the following rights under the California Consumer Privacy Act (CCPA):

• Right to know what Personal Data We collect, use, disclose, and sell.
• Right to delete Personal Data We have collected from You.
• Right to opt out of the sale or sharing of Personal Data. Note: We do not sell Personal Data.
• Right to correct inaccurate Personal Data.
• Right to limit use and disclosure of sensitive Personal Data.
• Right to non-discrimination for exercising Your privacy rights.

6.5 How to Exercise Your Rights

To exercise any of the rights described above, please contact Our Data Protection Officer at dpoprivacy@sathguru.com. We will respond to all legitimate requests within the timeframe required by applicable law (typically 30-60 days).

7. Disclosure of Your Personal Data

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, Your Personal Data may be transferred. We will provide notice before Your Personal Data becomes subject to a different Privacy Policy.

Law Enforcement

The Company may be required to disclose Your Personal Data in response to valid requests by public authorities, including courts, government agencies, or regulatory bodies.

Other Legal Requirements

The Company may disclose Your Personal Data in the good faith belief that such action is necessary to:

• Comply with a legal or regulatory obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of Users or the public
• Protect against legal liability

8. Security of Your Personal Data

The security of Your Personal Data is important to Us. We implement commercially reasonable technical and organisational measures to protect Personal Data against unauthorised access, alteration, disclosure, or destruction.

No method of transmission over the Internet or electronic storage is 100% secure. While We strive to protect Your Personal Data, We cannot guarantee absolute security. In the event of a Personal Data breach that is likely to result in a high risk to Your rights, We will notify You in accordance with applicable law.

9. Children's Privacy

Our Service does not address anyone under the age of 18. We do not knowingly collect Personal Data from anyone under the age of 18. If We become aware of such collection, We will take immediate steps to remove that information from Our systems. If You are a parent or guardian and believe Your child has provided Us with Personal Data, please contact Us.

10. Links to Other Websites

Our Service may contain links to third-party websites not operated by Us. We have no control over and assume no responsibility for the content or privacy practices of any third-party sites. We strongly advise You to review the Privacy Policy of every site You visit.

11. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. We will notify You of material changes by posting the updated policy on this page and, where appropriate, by email or prominent notice on Our Service. The "Last updated" date at the top of this Policy will be revised accordingly.

For visitors from the EU/EEA or UK, where changes affect the legal basis for processing or materially affect Your rights, We will seek fresh consent where required.

You are advised to review this Privacy Policy periodically. Changes are effective when posted on this page.

12. Data Protection Officer

We have appointed a Data Protection Officer (DPO) to oversee Our compliance with applicable data protection laws and with this Privacy Policy. The DPO is the first point of contact for all privacy-related enquiries, rights requests, and complaints.

Please contact the DPO for any questions about this Privacy Policy or how We handle Your Personal Data:

• Data Protection Officer email: dpoprivacy@sathguru.com
• General enquiries: fund@sathgurucatalysers.fund
• Website: https://sathgurucatalysers.fund/

Registered address: Sathguru Catalysers, Plot No. 54, Road No. 2, Sagar Society, Sri Nagar Colony, Kamalapuri Colony, Banjara Hills, Hyderabad, Telangana 500034, India.