GABIFY PRIVACY POLICY

Effective Date: 5/10/2026

Issued By: SAHCHI HEARING AND SPEECH SOLUTIONS PRIVATE LIMITED ("Gabify", "Company", "we", "us", or "our")

1. INTRODUCTION

This Privacy Policy explains how Gabify collects, uses, stores, discloses, and protects personal and sensitive personal data through:

• The Gabify corporate website
• Outreach, marketing, and enterprise onboarding
• Communication with registered users and potential customers
• Support, operations, and account management activities

This Privacy Policy does not apply to the Neurolens application, which is covered under Section 14 due to its handling of AI, audio/video, and clinical data.

BY ACCESSING OR USING GABIFY SERVICES, YOU CONFIRM THAT YOU HAVE READ, UNDERSTOOD, AND IRREVOCABLY AGREED TO BE BOUND BY THE TERMS OF THIS PRIVACY POLICY. If you do not agree with any part of this Policy, you must immediately discontinue use of Gabify's website and services. Continued use at any time after changes are posted under Section 18 constitutes conclusive acceptance of the revised Policy.

2. DATA WE COLLECT

Gabify collects the following categories of data:

2.1 Personal Information

• Name
• Email address
• Phone number
• Profession & role
• Organization name
• Location
• Communication preferences

2.2 Organization & Account Data

• Institution type (clinic, school, NGO, etc.)
• Subscription or onboarding information
• Contractual documentation
• Business communication records

2.3 Technical Data

• IP address
• Device identifiers
• Browser type & version
• Usage logs
• Time spent on website
• Clickstream data

2.4 Cookies & Tracking Data

• Essential cookies
• Analytics cookies
• Preference cookies

Gabify does not knowingly collect child or patient data through the main website. You represent and warrant that any data you submit to Gabify is accurate, that you are legally authorised to provide it, and that you are not a minor as defined under applicable law. Gabify disclaims all liability arising from inaccurate, misleading, or unauthorised data submitted by users or third parties on a user's behalf.

3. HOW WE USE THE DATA

We use collected information for:

3.1 Service Delivery & Customer Support

• Providing information about Gabify products
• Facilitating demos and onboarding
• Responding to inquiries
• Sending service updates

3.2 Marketing & Communication

• Email newsletters
• Product updates
• Event invitations
• Digital advertisements (if consented)

3.3 Analytics & Improvements

• Optimizing website user experience
• Understanding visitor demographics
• Improving product strategy

3.4 Legal & Security

• Compliance with applicable law
• Fraud prevention
• Security monitoring
• Establishing, exercising, or defending Gabify's legal rights

4. LEGAL BASIS FOR PROCESSING

Our processing is based on:

• Consent (newsletter signups, contact forms)
• Performance of a contract (enterprise onboarding)
• Legitimate interests (website analytics, security, fraud prevention)
• Legal obligation (audit logs, government compliance)

5. DATA SHARING & DISCLOSURE

We may share data with:

• Managed hosting providers
• Customer support systems
• Email service providers
• Legal authorities (if required)
• Internal Gabify entities
• Professional advisors (auditors, lawyers, insurers) under confidentiality obligations
• A successor entity in connection with a merger, acquisition, financing, or sale of assets

We never sell or trade personal data. Gabify is not responsible for the acts, omissions, or data practices of independent third parties once data is lawfully shared in accordance with this Policy; each such third party is separately responsible for its own compliance with applicable data protection law.

6. INTERNATIONAL DATA TRANSFERS

If data is stored or processed using international cloud providers, Gabify ensures:

• Contractual safeguards
• Encryption
• DPDP and GDPR-aligned protection

7. DATA RETENTION

• Website logs: 12 months
• Communication records: 24–36 months
• Contractual data: As legally required, and thereafter for the applicable limitation period to defend or pursue legal claims

8. USER RIGHTS

Users may request:

• Access
• Correction
• Deletion
• Withdrawal of consent
• Data portability

Requests can be sent to: info@gabify.life. Gabify may verify your identity before acting on a request and may decline a request where permitted or required by applicable law, including where the request is manifestly unfounded, excessive, or would infringe the rights of another person. Withdrawal of consent or deletion of data required for an active contract may result in Gabify being unable to continue providing the affected service, and Gabify shall bear no liability for such discontinuation.

9. SECURITY MEASURES & LIMITATIONS

• Encryption in transit
• Role-based access
• Firewalls & DDoS protection
• Periodic audits
• Employee confidentiality agreements

While Gabify implements industry-standard administrative, technical, and physical safeguards, no method of transmission over the internet or electronic storage is completely secure, and Gabify cannot and does not guarantee absolute security. To the maximum extent permitted by law, Gabify disclaims liability for unauthorised access, hacking, data loss, or data breaches that occur despite these reasonable safeguards, save for breach-notification and other obligations that are mandatory and non-excludable under the Digital Personal Data Protection Act, 2023 and other applicable law.

10. DISCLAIMERS & LIMITATION OF LIABILITY

10.1 "As Is" Basis

The Gabify website and related services are provided on an "as is" and "as available" basis, without warranties of any kind, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, accuracy, or non-infringement, to the fullest extent permitted by applicable law.

10.2 Limitation of Liability

To the maximum extent permitted by applicable law, Gabify, its directors, officers, employees, affiliates, and agents shall not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or business opportunity, arising out of or relating to this Policy or the use of, or inability to use, Gabify's website or services, even if Gabify has been advised of the possibility of such damages.

Subject to applicable law, Gabify's aggregate liability arising out of or relating to this Policy, however arising, shall not exceed the total fees actually paid by you to Gabify in the twelve (12) months preceding the event giving rise to the claim, or ₹5,000, whichever is lower.

10.3 Non-Excludable Rights Preserved

Nothing in this Section limits or excludes Gabify's liability for gross negligence, wilful misconduct, fraud, death or personal injury caused by negligence, or any other liability that cannot lawfully be limited or excluded under applicable law, including the Digital Personal Data Protection Act, 2023.

11. INDEMNIFICATION

You agree to indemnify, defend, and hold harmless Gabify, its directors, officers, employees, and affiliates from and against any claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising out of or connected with: (a) your breach of this Policy; (b) your misuse of the website or services; (c) inaccurate, misleading, or unlawful data submitted by you or on your behalf; or (d) your violation of any applicable law or third-party right.

12. THIRD-PARTY LINKS & SERVICES

Gabify's website may contain links to third-party websites or integrate third-party services. Gabify does not control and is not responsible for the privacy practices, content, or conduct of any third party. Access to any third-party site or service is at your own risk and subject to that third party's own terms and privacy policy.

13. FORCE MAJEURE

Gabify shall not be liable for any delay or failure in performance, or in protecting or processing data, resulting from causes beyond its reasonable control, including acts of God, natural disaster, war, terrorism, civil unrest, labour disputes, internet or telecommunications failures, power outages, cyberattacks beyond reasonable security measures, or acts of government or regulatory authorities.

14. THE NEUROLENS APPLICATION (AI, AUDIO/VIDEO & CLINICAL DATA)

As noted in Section 1, this Privacy Policy does not govern the Neurolens application. Use of Neurolens, including its collection and processing of AI-derived data, audio/video recordings, and clinical or health-related data, is governed exclusively by the separate Neurolens Application Privacy Policy, which takes precedence over this Policy for all matters relating to the Neurolens application. Nothing in this Policy shall be read to extend Gabify's obligations or liability regarding the website to the Neurolens application, or vice versa.

15. GRIEVANCE OFFICER

In accordance with the Digital Personal Data Protection Act, 2023 and applicable Indian law, the Grievance Officer for Gabify can be reached as follows:

Email: care@gabify.life

Response Time: 24 - 48 hours

16. GOVERNING LAW & DISPUTE RESOLUTION

This Policy is governed by and construed in accordance with the laws of India, without regard to conflict-of-law principles. Subject to any mandatory consumer-protection or regulatory forum, any dispute arising out of or in connection with this Policy shall be subject to the exclusive jurisdiction of the courts at New Delhi , India, and the parties may first seek to resolve the dispute through good-faith negotiation or arbitration under the Arbitration and Conciliation Act, 1996, if the parties so agree in writing.

17. SEVERABILITY & ENTIRE AGREEMENT

If any provision of this Policy is held invalid, illegal, or unenforceable by a court or authority of competent jurisdiction, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall continue in full force and effect. This Policy, together with any applicable Terms of Service, constitutes the entire agreement between you and Gabify regarding its subject matter.

18. CHANGES TO THIS POLICY

Gabify may modify this Policy at any time in its sole discretion. Material changes will be indicated by updating the "Last Revised" date above, and, where required by law, by additional notice. Continued use of Gabify's website or services after changes are posted constitutes your acceptance of the updated Policy. You are responsible for reviewing this Policy periodically.

19. CONTACT INFORMATION

For questions: info@gabify.life