PRIVACY POLICY

Loan Mantra values your business and trust. We respect the privacy of your personal information and take our responsibility to safeguard it seriously. This privacy notice is provided on behalf of the Loan Mantra companies listed at the end of this notice and applies to our current and former customers. It describes how we handle the information we collect about you, including how we may share your personal information within Loan Mantra and your right to opt out of such sharing.

Protecting Your Personal Information

We use physical, electronic, and procedural safeguards to protect your personal information. Access to your personal information by our personnel is granted on a strict need-to-know basis, enabling them to perform their duties securely and efficiently. We require all personnel with access to your information to maintain its confidentiality and security.

If you are an external security researcher or user and believe you have identified a potential security issue or vulnerability, please contact our security team at security@loanmantra.com.

Personal Information We Collect

We collect personal information from various sources, including when you:

• Complete our applications and forms;
• Enter personal details on our websites;
• Respond to our emails; and
• Provide us information over the telephone.

We may also collect information about you from other sources. This information includes, but is not limited to your:

• Name, address, email address, telephone number, and other contact information;
• Income and financial information;
• Social Security number;
• Transaction history;
• Tax transcript forms (e.g., IRS);
• Consumer reports from customer reporting agencies; and
• Participant information from organizations that purchase products or services from us.

Using Your Information

We use your personal information for various business purposes, including:

• Providing and managing our services and transactions with you;
• Conducting business research and analysis;
• Marketing Loan Mantra products and services, and those of other companies that may be of interest to you; and
• Complying with legal requirements.

Sharing Your Information

We may share your personal information, including transaction details and experiences, among Loan Mantra companies and with third-party service providers who perform services for us or on our behalf. This sharing is done to facilitate our services to you and to manage your account.

Additionally, we may share your personal information with financial institutions if you consent to the transfer of your information to that institution in connection with our services being provided to you.

We may share your personal information among Loan Mantra companies to market products and services to you. We may also share customer report information among Loan Mantra companies, including but not limited to credit reports and information received from consumer reporting agencies or other third parties. You can limit this sharing by following the instructions provided in this notice.

We may also share your personal information as permitted or required by law, including, for example, to law enforcement officials and regulators, in response to subpoenas, and to prevent fraud.

Unless you provide specific consent, we do not share your personal information with non-Loan Mantra companies for their marketing purposes. However, we may inform you about products or services from other companies, and if you express interest, that company will provide further information to you.

Data Retention Policy

We retain your personal data only for as long as is necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, regulatory, tax, accounting, or reporting requirements.

To determine the appropriate retention period for personal data, we consider:

• The amount, nature, and sensitivity of the data (including financial applications, underwriting documentation, and credit information).
• The potential risk of harm from unauthorized use or disclosure of your data.
• The purposes for which we process your data and whether we can achieve those purposes through other means.
• Applicable financial, corporate, and regulatory retention requirements, statutory limits, and corporate record-keeping standards.

When your personal data is no longer required for legal, regulatory, or operational fulfillment, it will be securely deleted, permanently anonymized, or destroyed in accordance with our strict data destruction protocols.

Complete Rights of the Data Owner

Depending on your location and applicable state or federal data protection laws, you possess comprehensive rights regarding your personal and business data. These rights include:

• Right of Access: You have the right to request copies of the personal data we hold about you and request detailed insights into how it is being processed.
• Right to Rectification: You have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• Right to Erasure (“Right to be Forgotten”): You have the right to request that we erase your personal data under certain conditions, subject to overriding financial regulatory or legal record retention obligations.
• Right to Restrict Processing: You have the right to request that we restrict the processing of your data under specific circumstances (e.g., if you contest the accuracy of the data).
• Right to Data Portability: You have the right to request that we transfer the data we have collected to another organization, or directly to you, in a structured, commonly used, and machine-readable format.
• Right to Object: You have the right to object to our processing of your data, including processing for direct marketing or processing based on legitimate organizational interests.
• Right to Withdraw Consent: Where our processing is explicitly based on your consent, you have the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to the withdrawal.

Consent Management, Maintenance, and Log Sharing

We are committed to absolute transparency regarding how and when we obtain your consent. To ensure strict compliance and audit integrity, we maintain complete, time-stamped, and tamper-evident records of all user consents.

• Maintenance of Consent Records: Every instance where you grant, modify, or withdraw consent—including your agreement to this Privacy Policy, authorization for credit pulls, automated workflow triggers, or marketing preferences—is actively logged and maintained in a secure audit trail. These records include the exact date and time, IP address, the specific version of the notice presented at that moment, and the mechanism of consent (e.g., electronic signature, checkbox selection, or button click).
• Sharing of Consent Logs and Documents: In accordance with your right of access, you have the right to request a complete history of your personal consent logs. Upon receiving a verified identity request, we will share and provide these logs, along with copies of the specific agreements, forms, or notices you consented to, in a clear, structured, and accessible format.

Limiting Our Sharing / Opt-Out / Privacy Choice

You can instruct us not to share your personal information for marketing purposes among Loan Mantra companies, and to restrict the sharing of consumer report information among Loan Mantra companies, by opting out of such sharing.

To limit our sharing for these purposes:

• Email us at optout@loanmantra.com with the subject line “Opting Out”.

Questions

If you have any questions about how we protect, use, and share your information, about this privacy notice, or if you wish to exercise your rights as a data owner, contact us at info@loanmantra.com. To report a security issue or vulnerability, please contact security@loanmantra.com.

Please note that we may ask you to verify your identity before responding to your data rights or log sharing requests. We reserve the right to modify this notice at any time. This notice is also available anytime at www.loanmantra.com.

Covered Entities

This notice is being provided to customers and former customers of the Loan Mantra companies listed below:

Investment Companies and Other Investment Vehicles

• OnCo Inc
• Ion Capital LLC

Other Companies

• Hudson Capital Advisors LLC
• Hudson Consulting LLC
• Totally Blue LLC