Consent

The consent disclosure

Version 1 · 9 October 2026 · Value Garage Private Limited · CIN U66190DL2025PTC453505
The same text as Partner Terms Schedule 1. Companion to the Privacy Policy.

Before a business sends you a FinLens link, it must show you this text in its own app, word for word, filling in only its name and the kinds of document it asks for. The link then takes you to Google's screen, and approving there is your permission.

the standard disclosure · version 1 · as a business shows it

Share your financial documents with [business name] through FinLens

[business name] uses FinLens, a service of Value Garage Private Limited, to collect financial documents from your Gmail with your permission. If you continue, Google will ask you to give FinLens read-only access to your Gmail. Approving there is your permission. If you say no, nothing is collected.

What FinLens collects. PDF attachments sent to you by the banks, card issuers, lenders, fund houses, insurers and other financial institutions FinLens has verified, of these kinds: [kinds of document]. The first check covers your whole Gmail history; later checks cover only new email. FinLens cannot send, change or delete your email, does not read your other email, and does not read what is inside the documents.

Who receives them. Only [business name]. With each document it receives the kind of document, the institution, the sender's email address at that institution and the date the email arrived. If [business name] gives FinLens your name, PAN, date of birth and mobile number, FinLens uses them only to open password-protected documents, and [business name] receives an unlocked copy of each one they open. FinLens does not keep those details after each check. [business name] may use the documents only for the service it has described to you in this app.

How long. Your permission lasts 12 months from the day you give it, unless it is ended sooner. During that time [business name] can ask FinLens to check again for new documents of the same kinds, at most once an hour. Each check covers only email that arrived since the last completed check. FinLens deletes its copy of each delivery within 3 hours, never stores your email, and keeps its access to your Gmail, encrypted, until your permission ends, then cancels it at Google.

How to withdraw. At any time: in this app, at myaccount.google.com/permissions, or by writing to FinLens's grievance officer at suraj@maximoney.in. Withdrawing stops further checks. It does not recall documents [business name] already has; ask it about those. FinLens's Privacy Policy: finlenstech.com/privacy

The business fills in the marked places: its registered name, and the kinds of document it asks for — from bank account statements, credit card statements, loan account statements, loan sanction letters, mutual fund, demat and broker statements, insurance policy documents, insurance premium notices, and other PDF documents from the same financial institutions.

If you have been shown this

You do not have to continue. Close it, or say no on Google's screen, and nothing is collected. If you say no at Google, a FinLens page lets you try again or return to the business.
If the text you were shown differs from this page — another recipient, other kinds of document, a longer term, or no way to withdraw — do not continue, and tell us at privacy@finlenstech.com.
The Privacy Policy covers what FinLens does with your data and your rights over it. Delete your data covers how to withdraw and have what is left deleted.

For partners: where it must appear

Partner Terms §5.1 makes showing this disclosure an obligation, and there is no FinLens page after Google's screen to make up for one not shown:

In your own app, before every link — every new session, not once per customer — in the feature that will use the documents, so that the feature your customer sees is the one the documents may be used for (Partner Terms §3.1).
Word for word. Fill in your registered name exactly as we provisioned it, and the kinds of document, in the words of the table in Schedule 1, for the document types that session asks for. Change nothing else, and put nothing on the screen that contradicts it.
In full, where the decision is made — on the screen from which your customer continues to Google, not behind a link or a collapsed section — with a way not to continue that is as easy as the way forward.
Backed by a real way out. "In this app" means the in-app withdrawal Partner Terms §5.2 requires, which must call DELETE /v1/sessions/:id/consent when your customer uses it.
Refreshes need no new disclosure, because they run inside the consent this one described. A new kind of document, or a new consent after one has ended, needs a new link, and so the disclosure again.

Value Garage Private Limited · CIN U66190DL2025PTC453505
Registered office: Flat no. 26, Vandana Apartment, East Delhi, Delhi, India — 110092