Consent Policy

This Consent Policy applies to all users of the AuthenticateIndia platform, including website, mobile application, dashboards, APIs, onboarding systems, verification tools, video KYC processes, merchant systems, agent channels, and related services operated by Authenticate India Innovations Pvt Ltd (“AuthenticateIndia”, “Company”, “we”, “our”, “us”).

AuthenticateIndia is committed to lawful, transparent, privacy-respecting, and consent-driven processing of information. This Policy explains how consent is obtained, recorded, used, managed, and relied upon while using the Platform.

By registering, onboarding, submitting data, or using the Platform, you acknowledge and agree to this Consent Policy.

Purpose of This Policy

The purpose of this Policy is to ensure that:

• Users understand what they are consenting to
• Information is processed only for legitimate purposes
• Verification requests are supported by lawful authority where required
• Consent records are securely maintained for audit and compliance
• Users retain appropriate control over voluntary actions

What Consent Means

“Consent” means a clear, informed, voluntary, and affirmative authorization provided by a user or authorized representative permitting AuthenticateIndia to process information for specified purposes.

Consent may be captured through:

• Checkbox acceptance
• OTP verification
• Digital acknowledgement
• E-sign confirmation
• Video KYC affirmation
• Button click approval
• Written authorization
• API-based consent workflow
• Recorded verbal confirmation where legally permissible

When Consent May Be Required

Consent may be obtained during one or more of the following processes:

A. Registration / Onboarding

• Account creation
• OTP verification
• Profile setup
• Video KYC
• Merchant / business onboarding

B. Verification Requests

• Identity verification
• Document validation workflows
• Authorized data retrieval requests
• Business verification workflows

C. Communications

• Alerts and service messages
• Support callbacks
• Optional marketing communications (where applicable)

D. Special Cases

• Sensitive information processing where required by law
• Enterprise-mandated workflows
• Additional risk-based reviews

Consent During Registration

As part of registration, users may be required to consent to:

• Terms of Use
• Privacy Policy
• Security practices
• Identity onboarding steps
• Storage of onboarding records
• Audit trail maintenance
• Communication regarding account and transactions

Registration may not proceed without required mandatory consents.

OTP-Based Consent

Where OTP is used:

• Entry of the OTP may be treated as confirmation of control over the mobile number.
• OTP verification may also serve as acknowledgment of specific actions disclosed at that time.

Users must never share OTPs with unauthorized persons.

Video KYC Consent

Where Video KYC is conducted, participation may constitute consent to:

• Identity confirmation process
• Recording and storage of session data where applicable
• Use of submitted visuals for onboarding review
• Fraud prevention checks

Users should participate only if they are the rightful individual or authorized representative.

Consent for Third-Party Information

Users must not submit personal data of another person unless they have lawful authority and required consent.

Where a user requests verification or onboarding involving another individual or entity, the user represents that:

• Required permissions have been obtained
• Submission is lawful
• Purpose is legitimate

AuthenticateIndia may request proof of authority where necessary.

Business / Organization Consent

Where an organization account is created, the person completing registration confirms that they are duly authorized to:

• Register the organization
• Accept platform policies
• Submit organization details
• Authorize relevant workflows
• Bind the organization to applicable commercial terms

Scope of Consent

Consent granted to AuthenticateIndia may include permission to:

• Collect submitted information
• Verify identity or onboarding details
• Process transactions
• Maintain logs and records
• Conduct fraud prevention checks
• Deliver services
• Contact users for service matters
• Retain evidence for audit, dispute, or legal compliance

Consent is limited to disclosed and legitimate purposes.

Recording of Consent

For compliance, security, and evidentiary purposes, AuthenticateIndia may securely store consent evidence such as:

• Timestamp, IP address
• Device/browser metadata
• Checkbox logs
• OTP verification logs
• Signed records
• Video KYC acknowledgments
• Transaction references

Certain consent records may be stored in controlled or non-editable formats to preserve integrity.

Withdrawal of Consent

Where consent is the legal basis for processing, users may request withdrawal of consent by contacting support.

However, withdrawal may be subject to:

• Existing contractual obligations
• Completed transactions
• Mandatory retention obligations
• Fraud prevention needs
• Legal defense requirements
• Technical limitations regarding past completed actions

Withdrawal may result in suspension or closure of some services.

Refusal to Provide Consent

If required consent is not provided, AuthenticateIndia may be unable to:

• Create an account
• Complete onboarding
• Process verification requests
• Provide regulated or risk-sensitive services
• Maintain access to the Platform

Misuse of Consent Processes

Users shall not:

• Use another person's mobile number
• Use forged authority letters
• Impersonate any person
• Provide false organization authorization
• Circumvent consent steps
• Mislead users into giving consent

AuthenticateIndia may suspend accounts and report unlawful activity where appropriate.

Enterprise / API Customers

Enterprise clients using APIs or bulk services must ensure that all end-user consents, notices, and lawful permissions required under applicable law are obtained by them before data submission.

AuthenticateIndia may rely on such customer representations.

Minors / Restricted Persons

The Platform is not intended for persons lacking legal capacity to independently consent unless a lawful guardian or authorized representative acts where permitted by law.

Security of Consent Records

AuthenticateIndia applies reasonable safeguards to protect consent records, including:

• Encryption
• Restricted access
• Logging
• Retention controls
• Backup procedures

Changes to This Policy

We may revise this Consent Policy periodically.

Updated versions become effective upon publication on the Platform or notice to users.

Contact for Consent Requests

Authenticate India Innovations Pvt Ltd
B-4, Miraj Business centre, Opp.Cinemall, Nr.Natubhai Circle,
Vadodara-390007, Gujarat, india
team@aiipl.org
+91-8238413839
www.aiipl.org
Subject Line: Consent Request / Withdrawal

Acceptance

By registering, verifying mobile number, completing onboarding, participating in Video KYC, clicking acceptance buttons, submitting information, or using the Platform, you acknowledge and consent as described in this Policy.