KHOJ — Grievance Redressal Mechanism PUBLIC DOCUMENT · DPDPA 2023 Section 13 Compliance Axiomaera Private Limited | CIN: U62011MH2026PTC467707 | DPIIT: DIPP248013 Registered Office: Shop 8, Upper Ground Floor, Amenity Bldg, Ashok Astoria, Gangapur, Nashik, Maharashtra 422222, India Version: 1.0 | Effective Date: May 10, 2026 | Document Owner: Office of the Managing Director, Axiomaera Private Limited

1. Your Right to Grievance Redressal

Under Section 13(1) of the Digital Personal Data Protection Act, 2023 ("DPDPA"), every Data Principal has the right to readily available means of grievance redressal provided by the Data Fiduciary in respect of any act or omission regarding the performance of its obligations or the exercise of her rights under the Act and the rules made thereunder. Axiomaera Private Limited ("Axiomaera") is committed to providing a fair, transparent, and timely mechanism for resolving your concerns.

2. Grievance Officer

3. What You Can File a Grievance About

1. Data access: You want to know what personal data Axiomaera holds about you and how it is processed (Section 11 DPDPA). 2. Data correction or erasure: You want your personal data corrected, completed, updated, or deleted (Section 12 DPDPA). 3. Consent withdrawal: You want to withdraw your consent and ensure all processing has ceased and data has been deleted. 4. Breach of privacy: You believe your personal data has been processed in a manner that violates the DPDPA or Axiomaera's Privacy Policy. 5. Data accuracy: You believe the information shown in your KHOJ Report is inaccurate or misattributed. 6. Service complaint: You have a complaint about the KHOJ service, including payment issues, technical failures, or quality of service. 7. Unauthorised use: You believe someone has used your email address or phone number to initiate a KHOJ scan without your authorisation. 8. Any other concern related to the processing of your personal data by Axiomaera.

4. How to File a Grievance

Step 1: Send an email to grievance@axiomaera.com with the following: Subject line: "Grievance — KHOJ — [Brief description]" Your registered email address or phone number (used for the KHOJ scan, for verification) Date of the scan (if applicable) Description of your grievance — what happened, what you expected, and what you want us to do Supporting documents (screenshots, payment receipts, etc.) — if applicable Step 2: You will receive an acknowledgement email confirming receipt of your grievance. Step 3: The Grievance Officer will investigate your concern and provide a resolution. Step 4: If you are not satisfied with the resolution, you may escalate (see Section 7 below).

5. Response Timelines

Third-Party Dependencies Resolution timelines for certain categories of grievances depend on the response or cooperation of external parties. In such cases: 1. Grievances related to data accuracy in breach reports — resolution depends on verification from breach intelligence providers (Have I Been Pwned, licensed credential intelligence providers). These providers operate independently and their response times are outside Axiomaera's control. 2. Grievances related to payment disputes — resolution depends on investigation by Razorpay Software Private Limited, our payment gateway. Chargeback and fraud investigations may require additional time as governed by RBI guidelines and card network rules. 3. Grievances involving data sourced from cross-border providers — resolution may require coordination with providers operating from different jurisdictions (Australia, United States) across different time zones and under different legal frameworks. 4. Grievances requiring legal review — where the matter involves potential legal proceedings, regulatory obligations, law enforcement coordination, or interpretation of applicable law, additional time may be required for legal counsel review. In all such cases, we will keep you informed of progress at regular intervals until resolution. The maximum resolution period shall not exceed 90 days from the date of receiving your grievance. If resolution is not achieved within 90 days, you will be informed of your right to escalate to the Data Protection Board of India or the Consumer Disputes Redressal Forum.

6. What Happens After You File

Acknowledgement (within 48 hours): You will receive an email with your grievance reference number (format: GRV-KHOJ-2026-XXXXX), the name of the person handling your grievance, and the expected timeline for resolution. Investigation: The Grievance Officer will review your complaint against our records, verify your identity to prevent unauthorised access to another person's data, investigate the technical and factual aspects of your concern, and consult with relevant team members if necessary. Resolution: The Grievance Officer will communicate the resolution to you via email, including findings of the investigation, corrective action taken (if any), explanation if no action is warranted, and your options if you disagree with the resolution. Record-keeping: A complete record of every grievance — including the complaint, investigation, communications, and resolution — is maintained for 3 years for compliance purposes.

7. Escalation

7.1 Internal Escalation If you are not satisfied with the Grievance Officer's resolution, you may escalate the matter to the Founder & Chief Architect, Mr. Harshwardhan Mukund Mohadikar, by writing to legal@axiomaera.com with the subject line "Escalation — [Your Grievance Reference Number]". The Founder & Chief Architect will review the matter in consultation with the Managing Director and provide a response within 30 days of escalation. 7.2 Data Protection Board of India If you remain unsatisfied after exhausting the internal grievance process, you have the right under Section 13(3) of the DPDPA to file a complaint with the Data Protection Board of India (DPBI), as and when constituted by the Central Government under Section 18 of the DPDPA. The DPBI has the authority to investigate complaints against Data Fiduciaries, issue directions and impose penalties, and award compensation to affected Data Principals. Axiomaera will cooperate fully with any investigation initiated by the DPBI. 7.3 Consumer Forum In addition to the DPBI, you retain your right to approach the relevant Consumer Disputes Redressal Forum under the Consumer Protection Act, 2019, for any service-related complaint.

8. Typical Resolution Timelines by Grievance Type

The timelines above are indicative. All grievances will be resolved within the statutory maximum of 90 days from the date of receipt, as prescribed under the DPDP Rules, 2025.

9. Our Commitment

1. Every grievance is treated seriously and with respect. 2. Grievances are resolved fairly, transparently, and within the stated timelines. 3. Corrective action is taken where our processes have failed. 4. We learn from grievances to improve our service and data protection practices. 5. We never retaliate against a user who files a grievance in good faith.

---

End of Grievance Redressal Mechanism.

This document is referenced by the KHOJ Privacy Policy (Section 2.9) and Terms of Service (Section 1.13).