Privacy Policy

Pentragrid Holdings Inc. ("Pentragrid", "we", "us", or "our") is committed to protecting the privacy and personal data of all individuals who interact with us, including prospective and existing investors, institutional partners, and website visitors.

This Privacy Policy explains how we collect, use, store, share, and protect your personal data in accordance with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable data protection laws.

Data Controller: Pentragrid Holdings Inc., Global Headquarters, Gurgaon, India. For data protection enquiries, contact: privacy@pentragrid.com

We collect the following categories of personal data:

• Identity Data: Full name, job title, company name, professional designation, and accreditation status.

• Contact Data: Email address, telephone number, postal address, and country of residence.

• Financial & Investment Data: Investment preferences, ticket size ranges, portfolio interests, and accreditation documentation.

• Communication Data: Records of correspondence, meeting notes, investor inquiry submissions, and responses to our communications.

• Technical Data: IP address, browser type, device identifiers, pages visited, and time spent on our website, collected via cookies and analytics tools (Google Analytics).

• Usage Data: Information about how you use our website, download our materials, and interact with our investor portal.

We use your personal data for the following purposes:

• Investor Relations: To respond to investment inquiries, share investment decks, and communicate with qualified investors.

• Due Diligence & Compliance: To verify investor accreditation and meet regulatory obligations.

• Communications: To send you relevant updates about our investment rounds and corporate developments where you have opted in.

• Website Analytics: To understand how visitors use our website and improve user experience using Google Analytics.

• Legal & Regulatory: To comply with court orders, regulatory requests, or legal obligations.

• Authentication & Security: To secure your account and prevent fraud using Supabase authentication.

• Payment Processing: To process payments and transactions using Stripe.

Our website uses cookies and similar tracking technologies to enhance your experience and gather analytics data. We use the following categories of cookies:

• Strictly Necessary: Required for the website to function (authentication, security). Cannot be disabled.

• Analytics: Help us understand how visitors interact with our site using Google Analytics. Only set with your consent.

• Functional: Remember your preferences and settings.

You can manage cookie preferences through our cookie consent banner or your browser settings. For a complete list of cookies we use, please see our Cookie Policy at /cookies.

California Consumer Privacy Act (CCPA) Rights: If you are a California resident, you have the right to know what personal information is collected about you, to delete personal information under certain circumstances, and to opt-out of the "sale" or "sharing" of your personal information.

Pentragrid Holdings does not sell your personal information to third parties for monetary consideration. However, we may share your information with service providers and partners for business purposes as described in this policy.

To exercise your CCPA rights, including the right to opt-out of any information sharing, please contact us at privacy@pentragrid.com with the subject line "CCPA Request". We will respond within 45 days.

You have the right to appeal our decision if we deny your request. To submit an appeal, please contact us with the subject line "CCPA Appeal".

Depending on your jurisdiction, you have the following rights regarding your personal data:

GDPR Rights (EU/UK residents):

• Right of Access: Request a copy of the personal data we hold about you.

• Right to Rectification: Request correction of inaccurate or incomplete data.

• Right to Erasure: Request deletion of your data where there is no compelling reason for continued processing.

• Right to Restrict Processing: Request that we limit how we use your data.

• Right to Data Portability: Receive your data in a structured, machine-readable format.

• Right to Object: Object to processing based on legitimate interests, including direct marketing.

• Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time.

CCPA Rights (California residents):

• Right to Know: Request what personal information is collected, used, shared, or sold.

• Right to Delete: Request deletion of personal information collected from you.

• Right to Opt-Out: Opt-out of the sale or sharing of your personal information.

• Right to Correct: Request correction of inaccurate personal information.

• Right to Limit Use: Limit our use and disclosure of your sensitive personal information.

To exercise any of these rights, contact us at privacy@pentragrid.com. We will respond within 30 days (GDPR) or 45 days (CCPA). You also have the right to lodge a complaint with your local data protection authority.

We retain personal data only as long as necessary for the purposes described in this policy:

• Investor inquiry data: 7 years from last contact, in line with financial record-keeping requirements.

• KYC/AML documentation: As required by applicable financial regulations (typically 5–10 years).

• Website analytics data: 26 months from collection (Google Analytics default).

• Marketing consent records: Until consent is withdrawn plus 3 years.

• Cookie consent records (pentragrid_consent_v1): Until cleared by user.

After the applicable retention period, data is securely deleted or anonymised.

For any questions, requests, or concerns regarding this Privacy Policy or our data practices, please contact:

Data Protection Officer (DPO): privacy@pentragrid.com

Postal Address: Pentragrid Holdings Inc., Global Headquarters, Gurgaon, Haryana, India

This Privacy Policy was last updated on 13 August 2026. We may update this policy periodically to reflect changes in our practices or applicable law. Material changes will be communicated via email to registered contacts or prominently on our website.