Privacy Policy

Overview

Effective: August 21, 2026 · Last Updated: August 21, 2026 · Version 1.0 This Privacy Policy describes how Morse Ventures Private Limited ("Agon", "we", "us", or "our") collects, uses, stores, and shares information about you when you use our application and related services. Please read this policy carefully before using Agon.

Information We Collect

We collect information you provide to us, information generated through your use of Agon, and information from third-party services where applicable. Information you provide: - Name — collected at account registration, for profile identification. - Date of birth — collected at account registration, for age verification and matching. - Email address — collected at account registration, for account management and communications. - Profile photograph — collected at account setup, for identity verification via facial liveness detection. - Interests and preferences — collected during onboarding, for user matching and personalisation. Information generated through your use of Agon: - Live video and audio — transmitted in real time during calls. Not recorded or stored by Agon. - Conversation metadata — duration, frequency, timing, and prompts used. The content of conversations is not stored. - Behavioural data — in-app actions and interaction patterns used to personalise your experience. - Device information — device type, operating system version, unique device identifiers, and app version. - Log data — error reports, crash logs, and performance data collected automatically. - Approximate location — general location inferred from IP address. Precise GPS location is not collected. Sensitive personal data: Agon processes the following sensitive personal data for the purposes described. Biometric data: your profile photograph is processed through facial liveness detection technology (AWS Rekognition) to verify that you are a real, live human being at the time of account creation. The biometric comparison data generated during this process is deleted immediately upon completion of verification and is not retained by Agon or our verification provider. By creating an account on Agon, you provide explicit consent to the processing of your profile photograph for identity verification as described above, in accordance with the Digital Personal Data Protection Act, 2023.

How We Use Your Information

We use the information we collect for the following purposes and on the following legal bases: - Creating and managing your Agon account — Contract / Consent - Verifying your identity and age — Consent / Legal obligation - Matching you with other users — Consent - Transmitting live video and audio calls — Contract / Consent - Moderating live video content for safety — Legitimate interest / Legal obligation - Sending transactional notifications and emails — Contract / Consent - Improving and developing the Platform — Legitimate interest - Preventing fraud, abuse, and safety violations — Legitimate interest / Legal obligation - Responding to support requests and grievances — Legal obligation / Contract - Complying with applicable laws and legal processes — Legal obligation

How We Share Your Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We share your information only in the following circumstances. Service providers who process your data on our behalf, under data processing agreements: - Agora.io — live video and audio transmission. Shares real-time video and audio streams. - Amazon Web Services (Rekognition) — facial liveness detection and identity verification. Shares your profile photograph and live selfie; deleted after verification. - Sightengine — real-time video content moderation. Live video frames analysed in real time, not stored. - Supabase — database and backend infrastructure. Shares account and profile data. - Resend — transactional email delivery. Shares your name and email address. - Google (OAuth) — authentication via Google Sign-In. Shares name, email address, and Google account ID. - Google Cloud (Speech-to-Text) — voice content moderation on Live calls. Shares short audio clips from live calls, transcribed to check for policy violations; not stored long-term. - Firebase Cloud Messaging (Google) — push notifications on mobile. Shares your device token and notification content (title and body). - HyperVerge — age and identity verification. Shares your government-issued identity document and photograph. Legal requirements: we may disclose your personal information if required to do so by law, court order, governmental authority, or where we believe in good faith that disclosure is necessary to protect the safety of our users or the public, prevent fraud, or enforce our Terms of Service. Business transfers: in the event of a merger, acquisition, restructuring, or sale of all or a portion of our assets, your personal data may be transferred as part of that transaction. We will notify you of any such change and your rights in connection with it. Cross-border transfers: several of our service providers are located outside India. Where your personal data is transferred outside India, we ensure that appropriate safeguards are in place, including data processing agreements with the relevant providers.

Data Retention

We retain your personal data only for as long as necessary to provide you with our services, fulfil the purposes described in this policy, and comply with our legal obligations. - Account information — duration of account, plus 30 days following account deletion. - Profile photograph — duration of account; deleted upon account deletion. - Biometric verification data — deleted immediately upon completion of identity verification; not retained. - Live video and audio — not recorded or retained; transmitted in real time only. - Conversation metadata — 90 days from the date of the conversation. - Usage and behavioural data — 12 months from the date of collection. - Log and error data — 90 days from the date of collection. - Support communications — 3 years from the date of communication. - Legal compliance records — as required by applicable law, minimum 7 years. When you delete your account, we initiate deletion of your personal data within 30 days, except where retention is required by law or for legitimate business purposes such as fraud prevention.

Your Rights

Under the Digital Personal Data Protection Act, 2023 and other applicable Indian law, you have the following rights with respect to your personal data: - Right to Access — request a summary of your personal data that we process and how it has been used. - Right to Correction — request correction of any inaccurate or incomplete personal data we hold about you. - Right to Erasure — request deletion of your personal data. You may also delete your account directly from app settings. - Right to Withdraw Consent — withdraw consent to processing at any time. This may affect your ability to use certain features. - Right to Grievance Redressal — have your privacy concerns addressed by our Grievance Officer within 30 days. - Right to Nominate — nominate another individual to exercise your rights in the event of your death or incapacity. To exercise any of the above rights, please contact our Grievance Officer at privacy@joinagon.com. We will acknowledge your request within 72 hours and respond within 30 days.

Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, disclosure, alteration, loss, or destruction. These measures include encryption of data in transit and at rest, access controls restricting data access to authorised personnel only, regular security assessments, secure coding practices, and immediate deletion of biometric data following verification. Data breach notification: in the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify you and the relevant regulatory authority as required under applicable law.

Age Policy

Agon is intended exclusively for individuals who are 18 years of age or older. We do not knowingly collect personal data from individuals under the age of 18. We employ age verification mechanisms during the registration process, including date of birth collection and identity document verification, to confirm that users meet the minimum age requirement. Where we determine that a user is under 18 years of age, we will terminate the account and delete all associated personal data immediately. If you have reason to believe that a person under the age of 18 has created an account on Agon, please notify us immediately at privacy@joinagon.com.

Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or for other operational reasons. The date of the most recent update will always be indicated at the top of this page. Where changes are material, we will provide you with prominent notice through the application or by email no less than 30 days before the changes take effect. Your continued use of Agon following the effective date of any updated Privacy Policy constitutes your acceptance of those changes. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

Contact and Grievance Officer

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, or if you wish to exercise your rights under applicable law, please contact our Grievance Officer: Rayna Halley — Data Protection Officer & Grievance Officer, Morse Ventures Private Limited privacy@joinagon.com We acknowledge all privacy requests within 72 hours and respond within 30 days. Registered address: Morse Ventures Private Limited, No. 420, 4th A Cross, 4th Main, OMBR Layout, Kalyananagar, Bangalore North, Bangalore 560043, Karnataka, India. CIN: U62099KA2026PTC224918 © 2026 Morse Ventures Private Limited. All rights reserved.