Kriyam.ai Terms of Service

These Terms of Service (the "Terms") form a legally binding agreement between GEOGO Techsolutions Private Limited, a company incorporated under the Companies Act, 2013, CIN U72900KA2021PTC145826, having its registered office at 208, Jai Sai Sankalp, 5th Main, Malleshpalya, Bengaluru 560075, Karnataka, India ("GEOGO", "we", "us" or "our"), and the person or entity accessing or using the Kriyam.ai platform ("you", "your" or the "User").

These Terms are published in accordance with Rule 3(1)(a) of the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, and are an electronic record under the Information Technology Act, 2000. They are generated by a computer system and require no physical or digital signature.

PLEASE READ THESE TERMS CAREFULLY. CLAUSES 5 (AI LIMITATIONS), 15 (LIMITATION OF LIABILITY), 16 (INDEMNITY) AND 19 (DISPUTE RESOLUTION) SIGNIFICANTLY AFFECT YOUR RIGHTS.

1. Definitions and Interpretation

1.1 In these Terms, unless the context requires otherwise:

• "Account" means the account created by or for a User to access the Services.
• "Aggregated Data" means data derived from the operation of the Services, including usage statistics, performance metrics, error logs and model-quality signals, that is de-identified and aggregated so that it does not identify any User, Data Principal or Customer Content.
• "AI Output" or "Output" means any text, extracted data, field values, classifications, labels, summaries, translations, scores, redactions, annotations or other material generated by the Services in response to Customer Content or a User instruction.
• "Applicable Law" means all laws in force in India, including the IT Act, the IT Rules, the DPDP Act, the DPDP Rules, the Indian Contract Act, 1872, the Consumer Protection Act, 2019, and the Bharatiya Nyaya Sanhita, 2023, and any directions of a competent authority.
• "Authorised User" means an employee, consultant or agent of a Business Customer whom it permits to use the Services under its Account.
• "Business Customer" means a company, LLP, firm, society, trust, government body or other non-individual entity, or an individual acting for business or professional purposes, that subscribes to the Services, including an "Enterprise Customer" that has signed an Order Form.
• "Customer Content" means all documents, images, scans, files, data, prompts and instructions uploaded, submitted or transmitted to the Services by or for a User, including any Personal Data within them.
• "Data Fiduciary", "Data Principal", "Data Processor", "Personal Data", "Personal Data Breach" and "Consent Manager" have the meanings given in the DPDP Act.
• "DPA" means GEOGO's Data Processing Agreement, available at [URL], or the DPA executed with an Enterprise Customer.
• "DPDP Act" means the Digital Personal Data Protection Act, 2023, and "DPDP Rules" means the Digital Personal Data Protection Rules, 2025, each as amended.
• "Fees" means the charges payable for the Services under the Pricing Page or an Order Form.
• "Individual User" means a natural person who uses the Services for personal, non-commercial purposes.
• "IT Act" means the Information Technology Act, 2000, and "IT Rules" means the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021, each as amended (including by the Amendment Rules, 2026).
• "Order Form" means a signed ordering document between GEOGO and an Enterprise Customer that references these Terms.
• "Platform" or "Services" means the Kriyam.ai document AI platform, including its web application, APIs, SDKs, connectors, models, documentation and support, as made available by GEOGO from time to time.
• "Policies" means the Privacy Notice, AUP, SLA, DPA and Sub-processor List, each incorporated by reference.
• "Subscription Term" means the period for which a User has paid or agreed to pay for the Services.

1.2 Headings are for convenience only. "Including" means "including without limitation". The singular includes the plural. A reference to a statute includes its amendments and subordinate legislation.

1.3 Order of precedence. If there is a conflict, the following prevail in this order: (a) an Order Form; (b) the DPA; (c) these Terms; (d) the other Policies.

2. Acceptance of Terms

2.1 Clickwrap acceptance. You accept these Terms, and a binding contract is formed under Sections 3 to 10 of the Indian Contract Act, 1872 and Section 10A of the IT Act, when you do any of the following: (a) tick the box stating "I have read and agree to the Terms of Service and acknowledge the Privacy Notice" and click "Create Account" or "Sign Up"; (b) sign an Order Form that references these Terms; or (c) access or use the Services through an API key or integration.

2.2 Offer and consideration. GEOGO's provision of the Services is the offer, your affirmative act under clause 2.1 is the acceptance, and the Fees (or, for any free tier, your mutual promises under these Terms and the licence granted in clause 11.3) are the lawful consideration.

2.3 Record of acceptance. GEOGO will keep an electronic record of acceptance, including the version of the Terms, timestamp, IP address and Account identifier. That record is admissible as evidence under Section 63 of the Bharatiya Sakshya Adhiniyam, 2023.

2.4 Authority. If you accept on behalf of an organisation, you represent that you are authorised to bind it, and "you" refers to that organisation. If you lack authority, you must not accept these Terms or use the Services.

2.5 Separate privacy notice. Acceptance of these Terms is not consent to any processing of Personal Data. Where GEOGO relies on consent, it will seek it through a separate, itemised notice under clause 8, as the DPDP Act requires.

2.6 Changes. GEOGO may amend these Terms. We will give at least 30 days' notice by email or in-product notice of any material change, and post the revised Terms with a new "Last updated" date. Changes required by Applicable Law may take effect immediately. If you continue to use the Services after the effective date, you accept the changes. If you do not agree, you may terminate under clause 17.6. Business Customers on a signed Order Form are bound by a material change only at their next renewal, unless Applicable Law requires otherwise.

3. Eligibility and Accounts

3.1 Age and capacity. You must be at least 18 years old and competent to contract under Section 11 of the Indian Contract Act, 1872. The Services are not directed at children within the meaning of the DPDP Act. GEOGO does not knowingly create Accounts for children, and will delete any such Account on discovery.

3.2 Registration. You must give accurate, current and complete information and keep it updated. GEOGO may verify your identity or business details [through email/OTP verification, GSTIN or CIN checks] before activating paid features.

3.3 Security of credentials. You are responsible for keeping your credentials, API keys and tokens confidential and for all activity under your Account. Notify GEOGO at security@geogo.in without delay if you suspect unauthorised use.

3.4 Authorised Users. A Business Customer is responsible for its Authorised Users' compliance with these Terms, and for granting and revoking their access. Breach by an Authorised User is breach by the Business Customer.

3.5 No transfer. Accounts are personal to the User and may not be sold, shared or transferred without GEOGO's written consent.

4. Description of Services

4.1 Scope. Kriyam.ai is a software-as-a-service platform that uses machine learning, large language models, computer vision and optical character recognition ("OCR") to ingest, digitise, extract data from, classify, summarise, compare, redact and analyse documents. Features available to you depend on your plan, as described on the Pricing Page or Order Form. e.g. Docwise document extraction, invoice processing, claims document review, document tampering check etc.

4.2 Third-party components. The Services may use models, infrastructure or APIs supplied by third parties ("Third-Party Providers"), listed in the Sub-processor List. GEOGO remains responsible to you for its sub-processors under clause 8 and the DPA.

4.3 Changes to the Services. GEOGO may update, improve, replace or discontinue features or models. GEOGO will not materially reduce the core functionality of a paid plan during a Subscription Term without [60] days' notice and, where the reduction is material, a pro-rata refund of prepaid Fees for the affected feature.

4.4 Beta features. Features labelled "Beta", "Preview" or "Experimental" are provided as-is, may be withdrawn at any time, are excluded from the SLA, and must not be used on production data unless GEOGO agrees in writing.

4.5 Nature of the Services. The Services are a technology tool. GEOGO does not provide legal, financial, accounting, tax, medical, credit, underwriting, investigative or other professional advice, and no Output is such advice.

5. AI Limitations and Output Disclaimers

5.1 Probabilistic technology. You acknowledge that the Services rely on probabilistic AI models. Output is generated statistically and may be inaccurate, incomplete, outdated, biased or inconsistent, including through:

• (a) hallucinations: content, values or text not present in the source document;
• (b) OCR errors: misread characters, digits, dates, amounts, names or identifiers, especially in handwritten, low-resolution, skewed, stamped, multilingual or Indic-script documents;
• (c) misclassification of document types, fields, entities or risk categories;
• (d) omissions of pages, tables, signatures, annotations or clauses; and
• (e) summaries or comparisons that misstate meaning, context or legal effect.

5.2 Mandatory human verification. You must independently review and verify all Output against the original source documents before relying on it. This duty is heightened, and you must apply qualified human review, before using Output for any decision that has legal, financial, regulatory, medical, employment, credit, insurance, fraud-determination or other significant effect on any person ("High-Impact Use"). This includes KYC/AML checks, loan or claim decisions, statutory filings, court submissions and medical records.

5.3 No automated decisions. You must not use Output as the sole basis for any decision producing legal or similarly significant effects on a Data Principal. You remain solely responsible for each decision you make and for compliance with any sectoral rules that apply to you, including directions of the RBI, IRDAI, SEBI or other regulators.

5.4 Confidence scores. Any confidence score, accuracy metric or benchmark GEOGO provides is indicative only, measured on sample data, and is not a warranty of accuracy for your documents.

5.5 Output may not be unique. Similar inputs may produce similar Output for other Users. GEOGO does not warrant that Output is original or free from third-party rights.

5.6 Synthetically generated information. Where the Services generate or materially alter audio, visual or audio-visual content (for example, document image reconstruction or enhancement) in a way that could appear authentic, GEOGO will apply the labels, notices and embedded metadata or identifiers required by Rule 3(3) of the IT Rules. You must not remove, obscure or suppress any such label or metadata. Routine processing that does not materially alter the substance of a document, such as de-skewing, cropping, compression or redaction, is treated as outside this requirement to the extent the IT Rules exclude it.

5.7 No reliance on Output as a genuine document. You must not present Output, or any document produced with the Services, as an original, certified or official document, or use it to create false documents or electronic records.

5.8 Acknowledgement. By using the Services, you confirm that you understand the limitations in this clause 5 and that GEOGO's Fees reflect the allocation of risk it sets out.

6. User Obligations

6.1 You shall use the Services only for lawful purposes and in accordance with these Terms, the AUP and Applicable Law.

6.2 Lawful basis for Customer Content. You represent and warrant, on each upload, that:

• (a) you own the Customer Content or have all rights, licences and permissions needed to upload it and have it processed by GEOGO;
• (b) where Customer Content contains Personal Data of any third party (including customers, employees, borrowers, patients or claimants), you have given every notice and obtained every consent, or rely on a valid legitimate use under Section 7 of the DPDP Act, that is needed for GEOGO to process that data as described in these Terms;
• (c) you have not obtained the Customer Content through any breach of law, contract or confidence; and
• (d) processing the Customer Content will not cause GEOGO to breach Applicable Law, including any sectoral data-localisation requirement that binds you.

6.3 Sector-regulated data. If you are a regulated entity, you are responsible for ensuring that your use of the Services complies with your regulator's outsourcing, data-localisation and IT-governance requirements. [Enterprise Order Forms for BFSI customers should attach a regulatory compliance schedule, e.g. RBI outsourcing and payment-data storage directions.]

6.4 Cooperation. You shall provide information GEOGO reasonably requests to verify compliance, respond to a grievance, or meet a lawful order of a government agency.

7. Prohibited Content and Conduct

7.1 Prohibited content. In accordance with Rule 3(1)(b) of the IT Rules, you shall not host, display, upload, modify, publish, transmit, store, update or share through the Services any information that:

• (a) belongs to another person and to which you have no right;
• (b) is obscene, pornographic, paedophilic, invasive of another's privacy (including bodily privacy), insulting or harassing on the basis of gender, racially or ethnically objectionable, relates to or encourages money laundering or gambling, or promotes enmity between groups on the grounds of religion or caste with intent to incite violence;
• (c) is harmful to children;
• (d) infringes any patent, trademark, copyright or other proprietary right;
• (e) deceives or misleads the addressee about the origin of the message, or knowingly and intentionally communicates misinformation or information that is patently false and untrue or misleading in nature;
• (f) impersonates another person;
• (g) threatens the unity, integrity, defence, security or sovereignty of India, friendly relations with foreign States, or public order, or incites the commission of any cognisable offence, or prevents investigation of any offence, or insults another nation;
• (h) contains software viruses, malware, ransomware, trojans, worms or any other computer code, file or program designed to interrupt, destroy or limit the functionality of any computer resource;
• (i) is patently false and untrue, and is written or published in any form with the intent to mislead or harass a person, entity or agency for financial gain or to cause injury to any person;
• (j) is synthetically generated information that the IT Rules prohibit, including child sexual abuse material, non-consensual intimate imagery, false documents or false electronic records, or deceptive impersonation of a real person or event; or
• (k) violates any law for the time being in force.

7.2 Unauthorised personal data. You shall not upload Personal Data of any third party without a lawful basis under clause 6.2(b), and shall not upload Personal Data of children, or sensitive identifiers such as full Aadhaar numbers, unless Applicable Law permits it and you have taken required safeguards.

7.3 Prohibited conduct. You shall not, and shall not permit any person to:

• (a) reverse-engineer, decompile, disassemble or attempt to derive the source code, model weights, parameters, prompts or training data of the Services, except to the extent Applicable Law expressly permits;
• (b) use the Services or Output to build, train, benchmark or improve a competing product or AI model;
• (c) scrape, crawl or extract data from the Platform by automated means other than the documented APIs;
• (d) probe, scan or test the vulnerability of the Services, or circumvent any authentication, rate limit or security measure, without GEOGO's written authorisation (responsible disclosure reports may be sent to [security@geogo.in]);
• (e) use prompt injection, jailbreaks or adversarial inputs to make the Services act outside their intended function;
• (f) resell, sublicense, time-share or provide the Services to third parties as a service bureau, except as an Order Form permits;
• (g) use the Services to forge, alter or fabricate documents, signatures, seals or stamps, or to commit fraud, identity theft or any offence under the IT Act or the Bharatiya Nyaya Sanhita, 2023; or
• (h) use the Services in breach of any applicable sanctions or export-control law.

7.4 GEOGO's rights. GEOGO does not pre-screen Customer Content and has no general obligation to monitor it. However, on actual knowledge, a court order or a notice from an appropriate Government agency under Section 79(3)(b) of the IT Act and Rule 3(1)(d) of the IT Rules, GEOGO will remove or disable access to unlawful content within the time the IT Rules prescribe (currently within 3 hours of a lawful order for the categories so specified), and may preserve that content and associated records for 180 days, or longer if required, for investigation.

7.5 Notice of consequences. GEOGO will inform Users at least once every year, and on any material change, that non-compliance with these Terms or the Policies may lead to immediate suspension or termination of access, removal of non-compliant content, or both, under clause 17.

8. Data Privacy and DPDP Act Compliance

8.1 Roles of the parties. GEOGO's role under the DPDP Act depends on whose purpose the processing serves:

8.2 Processor commitments (Business Customers). Where GEOGO is a Data Processor, it shall: (a) process Customer Content only to provide the Services and as instructed in writing; (b) keep Customer Content confidential and limit access to personnel bound by confidentiality; (c) engage sub-processors only under written terms at least as protective as the DPA, listed in the Sub-processor List with [30] days' notice of changes and a right to object; (d) assist the Business Customer to meet Data Principal requests and breach-notification duties; and (e) delete or return Customer Content on termination under clause 8.9. The Business Customer, as Data Fiduciary, remains responsible for notice, consent, the accuracy of the data and responding to its Data Principals.

8.3 Notice and consent (Individual Users and Account data). Where GEOGO is the Data Fiduciary, it will, before or at the time of seeking consent, give a notice under Section 5 of the DPDP Act and the DPDP Rules that is presented independently of these Terms, in clear and plain language, and that sets out: an itemised description of the Personal Data; the specified purpose of processing; the goods or services enabled by it; how to withdraw consent with the same ease with which it was given; how to exercise rights; and how to complain to the Data Protection Board of India. The notice will be available in English and, on request, in any language in the Eighth Schedule to the Constitution. Consent may also be given, managed and withdrawn through a registered Consent Manager once available.

8.4 AI model training.

• (a) Default: no training on Customer Content. GEOGO does not use Customer Content, Output or Personal Data contained in them to train, fine-tune or improve any AI model made available to other customers, unless you opt in under clause 8.4(b).
• (b) Opt-in. A Business Customer may opt in through an Order Form or the admin console. An Individual User may opt in only by a separate, specific, unticked-by-default consent. Opt-in data will be de-identified before use, processed only in India, and excluded from use for any other purpose.
• (c) Opt-out at any time. You may withdraw an opt-in at any time with the same ease. Withdrawal applies to future data; GEOGO will also stop using previously contributed data in future training runs within 30 days. Withdrawal does not affect the lawfulness of processing before withdrawal, and models already trained cannot be fully "un-trained".
• (d) Customer-dedicated models. Models fine-tuned exclusively for one Business Customer on its Customer Content are used only for that Business Customer.
• (e) Third-Party Providers. GEOGO's agreements with Third-Party Providers of models prohibit them from training on Customer Content.

8.5 Data localisation and cross-border transfer.

• (a) By default, GEOGO stores and processes Customer Content in data centres located in India AWS ap-south-1 Mumbai and USA region.
• (b) Certain processing, such as calls to a Third-Party Provider's model endpoint or global support tools, may occur outside India. Any such transfer is made only to countries or territories not restricted by the Central Government under Section 16 of the DPDP Act and in compliance with any requirements specified under the DPDP Rules, and subject to written contractual safeguards. The Sub-processor List identifies the location of each sub-processor.
• (c) A Business Customer subject to a sectoral localisation mandate may select "India-only processing" available on Enterprise plans, in which case GEOGO shall not transfer Customer Content outside India.

8.6 Security. GEOGO maintains reasonable security safeguards, including encryption of Customer Content in transit and at rest, access controls, logging and monitoring of access, backups and vulnerability management, consistent with Section 8(5) of the DPDP Act, the DPDP Rules, Section 43A of the IT Act and the SPDI Rules, 2011. GEOGO's information-security management system is certified to ISO/IEC 27001:2022 with scope of Provision of AI driven Digital Technology solution & services for Financial services & Manufacturing sector bearing Certificate No IN/ISMS/00017/11693 valid until 03/11/2028.

8.7 Personal Data Breach. On becoming aware of a Personal Data Breach affecting Personal Data for which it is the Data Fiduciary, GEOGO will intimate each affected Data Principal without delay and inform the Data Protection Board without delay, followed by a detailed report within 72 hours (or longer if the Board allows), as the DPDP Rules require. Where GEOGO is a Data Processor, it will notify the Business Customer without undue delay and in any event within 48 hours of becoming aware, with the information reasonably needed for the Business Customer's own notifications. GEOGO will also report cyber incidents to CERT-In within 6 hours as required by CERT-In's directions of 28 April 2022.

8.8 Data Principal rights. Where GEOGO is the Data Fiduciary, you may request: (a) a summary of your Personal Data being processed and the processing activities; (b) the identities of other Data Fiduciaries and Processors with whom it has been shared; (c) correction, completion, updating or erasure of your Personal Data; (d) nomination of another person to exercise your rights on death or incapacity; and (e) grievance redressal. Requests may be made at privacy@geogo.in / in-app form and will be answered within the period prescribed by the DPDP Rules. Data Principals of a Business Customer should contact that Business Customer; GEOGO will forward any such request it receives.

8.9 Retention and erasure.

Where GEOGO is the Data Fiduciary, it will erase Personal Data once the specified purpose is no longer served or consent is withdrawn, unless retention is required by law, and will notify the Data Principal at least 48 hours before erasure where the DPDP Rules require. You may delete individual documents at any time; deletion from backups follows the backup cycle.

8.10 Children. The Services are not intended for children. GEOGO does not knowingly process the Personal Data of a child except as uploaded by a Business Customer that has obtained verifiable parental consent or relies on an exemption under the DPDP Rules. GEOGO does not track, behaviourally monitor or target advertising at children.

8.11 Significant Data Fiduciary. If GEOGO is notified as a Significant Data Fiduciary, it will appoint a Data Protection Officer based in India and meet the additional obligations under Section 10 of the DPDP Act and the DPDP Rules, including annual data protection impact assessments and audits.

9. Grievance Redressal

9.1 Grievance Officer. In accordance with Rule 3(2) of the IT Rules, Section 8(10) of the DPDP Act and the DPDP Rules, and Rule 4(5) of the Consumer Protection (E-Commerce) Rules, 2020 (to the extent applicable), GEOGO has appointed a Grievance Officer resident in India, whose details are set out in Schedule 1 and published prominently on the Platform.

9.2 How to complain. You may raise a complaint about any violation of these Terms, any content on or Output from the Services, the processing of your Personal Data, or the Services generally, by email, through the in-app grievance form, or by post to the registered office. Please include your name, contact details, Account identifier (if any), a description of the issue, relevant URLs, document IDs or screenshots, and the relief sought. GEOGO will issue a unique ticket number for every complaint.

9.3 Timelines. GEOGO will handle complaints within the following timelines, or any shorter period Applicable Law prescribes from time to time:

9.4 Outcome and reasons. GEOGO will communicate its decision and reasons to the complainant by email. Where content is removed or an Account is restricted on a complaint, GEOGO will, where reasonably practicable and lawful, inform the affected User and give them an opportunity to dispute the action.

9.5 Escalation. If you are not satisfied with the resolution:

• (a) on an IT Rules matter, you may appeal to the Grievance Appellate Committee constituted under Rule 3A of the IT Rules within 30 days of the Grievance Officer's decision;
• (b) on a Personal Data matter, after exhausting this mechanism, you may complain to the Data Protection Board of India under Section 13(3) of the DPDP Act; and
• (c) an Individual User who is a consumer may approach the National Consumer Helpline or a Consumer Commission under the Consumer Protection Act, 2019.

9.6 Reporting. Grievances are logged and reviewed by GEOGO's management at least quarterly.

10. Fees, Payment and Taxes

10.1 Fees. You shall pay the Fees in Indian Rupees (or the currency stated in an Order Form) as set out on the Pricing Page or Order Form.

10.2 Billing. Subscriptions are billed [monthly/annually] in advance; usage-based charges are billed in arrears. Invoices are payable within 30 days of the invoice date. Self-serve plans are charged automatically to the payment method on file, subject to RBI e-mandate rules for recurring payments.

10.3 Taxes. Fees exclude GST and other applicable taxes, which you shall pay in addition. If you are required to deduct tax at source, you shall provide a valid TDS certificate within the statutory period. Business Customers must provide a valid GSTIN to claim input tax credit.

10.4 Late payment. Overdue amounts bear interest at 1.5% per month or the maximum rate permitted by law, whichever is lower. GEOGO may suspend the Services under clause 17.2(c) if any undisputed amount remains unpaid [15] days after written notice.

10.5 Refunds. Except as stated in these Terms, an Order Form, or where Applicable Law (including the Consumer Protection Act, 2019) requires, Fees are non-refundable. Individual Users may cancel a paid plan within 7 days of first purchase for a full refund if they have processed fewer than 5 pages.

10.6 Price changes. GEOGO may change Fees on 30 days' notice, effective from the next renewal.

10.7 Free tier and trials. Free plans and trials are subject to usage limits, may be changed or withdrawn at any time, and are excluded from the SLA.

11. Intellectual Property Rights

11.1 Your Customer Content. As between you and GEOGO, you retain all right, title and interest, including all intellectual property rights, in your Customer Content. Nothing in these Terms transfers ownership of Customer Content to GEOGO.

11.2 Output. Subject to your compliance with these Terms and payment of Fees, GEOGO assigns to you all right, title and interest it may have in the Output generated from your Customer Content, to the extent such rights exist under Applicable Law. GEOGO makes no representation that copyright subsists in any Output. This assignment does not extend to GEOGO Technology embedded in the Output, such as templates, schemas or taxonomies, which are licensed to you under clause 11.6.

11.3 Licence to GEOGO. You grant GEOGO a non-exclusive, worldwide (subject to clause 8.5), royalty-free, limited licence for the Subscription Term and the retention periods in clause 8.9 to host, copy, transmit, process and display Customer Content solely to: (a) provide, maintain, secure and support the Services; (b) prevent fraud and abuse and comply with Applicable Law; and (c) where you have opted in under clause 8.4(b), improve GEOGO's models.

11.4 GEOGO Technology and Aggregated Data. GEOGO and its licensors own all right, title and interest in the Platform, the Services, the underlying AI and machine-learning models, weights, algorithms, prompts, software, APIs, documentation, trademarks (including "Kriyam" and "Kriyam.ai"), and all improvements and derivative works of any of them (together, "GEOGO Technology"), and in all Aggregated Data. GEOGO may use Aggregated Data to operate, analyse, secure, benchmark and improve the Services, provided that it does not identify you, any Authorised User, any Data Principal or the content of any Customer Content.

11.5 Feedback. If you give GEOGO suggestions or feedback, GEOGO may use them freely without obligation to you.

11.6 Licence to you. Subject to these Terms and payment of Fees, GEOGO grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable right during the Subscription Term to access and use the Services for your internal business purposes (or, for an Individual User, personal purposes). All rights not expressly granted are reserved.

11.7 Copyright complaints. If you believe content on the Services infringes your copyright, notify the Grievance Officer with the details required under clause 9.2. GEOGO will act under Section 79 of the IT Act and the IT Rules.

12. Confidentiality

12.1 Definition. "Confidential Information" means non-public information disclosed by one party ("Discloser") to the other ("Recipient") that is marked confidential or would reasonably be understood to be confidential. Customer Content is your Confidential Information. GEOGO Technology, non-public pricing and security documentation are GEOGO's Confidential Information.

12.2 Obligations. The Recipient shall use Confidential Information only to perform under these Terms, protect it with at least reasonable care, and disclose it only to its personnel, advisers and sub-processors who need to know and are bound by duties of confidentiality no less protective.

12.3 Exceptions. Confidentiality does not apply to information that is or becomes public without breach, was lawfully known to the Recipient beforehand, is independently developed, or is lawfully received from a third party without restriction.

12.4 Compelled disclosure. The Recipient may disclose Confidential Information if required by law, court order or a Government agency, provided it gives prompt notice (where lawful) and discloses only what is required.

12.5 Duration. These obligations survive for [3] years after termination, and indefinitely for Customer Content and trade secrets.

13. Service Levels and Availability

13.1 Target availability. For paid plans that include the SLA, GEOGO will use commercially reasonable efforts to make the Platform available [99.5]% of the time in each calendar month, measured as set out in the SLA, excluding Scheduled Maintenance and Excluded Events. [Enterprise tier may offer 99.9%; set processing-time targets, support hours (IST) and severity response times in the SLA.]

13.2 Service credits. If GEOGO misses the availability target, your sole and exclusive remedy is the service credit set out in the SLA, capped at [10/25]% of the monthly Fees for the affected Service. Credits must be claimed within [30] days of the month end and are applied against future invoices; they have no cash value.

13.3 Scheduled Maintenance. GEOGO will give at least [48] hours' notice of planned maintenance, scheduled where practicable between [22:00 and 06:00 IST].

13.4 Excluded Events. The SLA does not apply to unavailability caused by: your systems, networks, integrations or misuse; Beta features; free plans or trials; suspension under clause 17; Third-Party Provider outages outside GEOGO's reasonable control; or a Force Majeure Event.

13.5 No guarantee of uninterrupted service. EXCEPT AS EXPRESSLY STATED IN THE SLA, GEOGO DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, TIMELY, SECURE, ERROR-FREE OR FREE OF HARMFUL COMPONENTS, OR THAT ANY DEFECT WILL BE CORRECTED. You are responsible for keeping your own copies of source documents; the Services are not a document-archival or records-management system of record unless an Order Form says so.

14. Warranties and Disclaimers

14.1 Mutual warranties. Each party warrants that it is validly existing and has authority to enter into these Terms.

14.2 GEOGO warranty. GEOGO warrants that the paid Services will perform materially in accordance with the documentation during the Subscription Term. If they do not, and you notify GEOGO within 15 days, GEOGO will use reasonable efforts to correct the non-conformity or, failing that, either party may terminate the affected Service and you will receive a pro-rata refund of prepaid Fees for the remaining term. This is your sole remedy for breach of this warranty. This warranty does not cover the accuracy of any particular Output, which is governed by clause 5.

14.3 Disclaimer. EXCEPT AS EXPRESSLY STATED IN THESE TERMS AND TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICES AND ALL OUTPUT ARE PROVIDED "AS IS" AND "AS AVAILABLE". GEOGO DISCLAIMS ALL OTHER WARRANTIES AND CONDITIONS, EXPRESS, IMPLIED OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, COMPLETENESS, TITLE AND NON-INFRINGEMENT.

14.4 Consumer rights preserved. Nothing in this clause 14 excludes any right of an Individual User under the Consumer Protection Act, 2019 that cannot lawfully be excluded.

15. Limitation of Liability

15.1 Exclusion of indirect loss. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, NEITHER PARTY SHALL BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, GOODWILL, BUSINESS OPPORTUNITY OR ANTICIPATED SAVINGS, OR FOR LOSS ARISING FROM RELIANCE ON OUTPUT WITHOUT THE VERIFICATION REQUIRED BY CLAUSE 5, HOWEVER CAUSED, EVEN IF ADVISED OF THEIR POSSIBILITY. This reflects the principle in Section 73 of the Indian Contract Act, 1872 that remote and indirect loss is not recoverable.

15.2 Aggregate cap. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, GEOGO'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THESE TERMS AND THE SERVICES, WHETHER IN CONTRACT, TORT (INCLUDING NEGLIGENCE), STATUTE OR OTHERWISE, SHALL NOT EXCEED THE TOTAL FEES ACTUALLY PAID BY YOU TO GEOGO FOR THE SERVICES GIVING RISE TO THE CLAIM IN THE [3/6/12] MONTHS IMMEDIATELY PRECEDING THE EVENT FIRST GIVING RISE TO LIABILITY. For Users on a free plan, the cap is INR 5,000.

15.3 Exceptions. The exclusions and cap in clauses 15.1 and 15.2 do not apply to: (a) your obligation to pay Fees; (b) your indemnity under clause 16.1; (c) either party's liability for fraud, wilful misconduct or gross negligence; (d) liability for death or personal injury caused by negligence; or (e) any liability that cannot be limited under Applicable Law.

15.4 Allocation of risk. You agree that these limitations are a reasonable allocation of risk, reflected in the Fees, and form an essential basis of the bargain.

15.5 Notice of claims. You shall notify GEOGO in writing of any claim promptly, and in any event within [90] days of becoming aware of it, so that GEOGO can investigate and mitigate. This clause does not shorten any limitation period under the Limitation Act, 1963 and is subject to Section 28 of the Indian Contract Act, 1872.

16. Indemnity

16.1 Your indemnity. You shall defend, indemnify and hold harmless GEOGO, its affiliates and their directors, officers, employees and agents (the "GEOGO Indemnitees") from and against all losses, damages, penalties, fines (including penalties imposed by the Data Protection Board or any regulator), costs and expenses (including reasonable legal fees) arising out of or relating to any third-party claim, regulatory proceeding or investigation concerning:

• (a) Customer Content, including any claim that it infringes intellectual property rights, was uploaded without a lawful basis, or contains unlawful, defamatory, obscene or prohibited material;
• (b) your breach of clause 6, clause 7 or the AUP;
• (c) your failure, as Data Fiduciary, to give notice, obtain consent, honour Data Principal rights or otherwise comply with the DPDP Act in relation to Personal Data you uploaded;
• (d) any decision made, or action taken, by you or your Authorised Users in reliance on Output; or
• (e) your violation of Applicable Law or the rights of any third party.

This indemnity is given under Sections 124 and 125 of the Indian Contract Act, 1872 and extends to losses arising from third-party claims as described above.

16.2 GEOGO's IP indemnity (paid plans). GEOGO shall defend you against any third-party claim that the Services (excluding Customer Content, Output and Third-Party Provider components) infringe that party's Indian copyright or registered trademark, and pay damages finally awarded or agreed in settlement. If such a claim is made or likely, GEOGO may procure a right for you to continue use, modify the Services to be non-infringing, or terminate the affected Service and refund prepaid unused Fees. GEOGO has no obligation for claims arising from your modification, combination with non-GEOGO items, or use in breach of these Terms. This clause states GEOGO's entire liability for infringement.

16.3 Procedure. The indemnified party shall give prompt written notice of the claim, allow the indemnifying party sole control of the defence and settlement (provided no settlement imposes liability or admission on the indemnified party without consent), and provide reasonable cooperation at the indemnifying party's cost.

17. Suspension and Termination

17.1 Term. These Terms apply from your first acceptance until terminated. Paid subscriptions renew automatically for successive periods equal to the initial term unless either party gives notice of non-renewal at least [30] days before the end of the current term (or cancels in the self-serve console).

17.2 Immediate suspension. GEOGO may suspend all or part of your access to the Services immediately, with notice where lawful and practicable, if:

• (a) you breach clause 6 or clause 7, or GEOGO reasonably believes your use violates Applicable Law;
• (b) GEOGO receives an order of a court or appropriate Government agency, or a notice under Section 69A or Section 79(3)(b) of the IT Act, requiring it;
• (c) any undisputed Fees are overdue as described in clause 10.4;
• (d) your use poses a security risk to the Services, GEOGO or other Users, or may subject GEOGO to liability; or
• (e) your Account shows signs of compromise, fraud or abuse.

GEOGO will limit suspension to the extent and duration reasonably necessary and will restore access promptly once the cause is resolved.

17.3 Termination by GEOGO for cause. GEOGO may terminate these Terms or your Account with immediate effect by written notice if: (a) you commit a material breach that is incapable of remedy, or that you fail to remedy within [15] days of notice; (b) you breach Indian law using the Services, including the IT Act, the DPDP Act or the Bharatiya Nyaya Sanhita, 2023; (c) you repeatedly violate clause 7; or (d) you become insolvent, have a resolution professional or liquidator appointed under the Insolvency and Bankruptcy Code, 2016, or cease business.

17.4 Termination by you for cause. You may terminate if GEOGO commits a material breach and fails to remedy it within 30 days of written notice, and you will receive a pro-rata refund of prepaid Fees for the unexpired term.

17.5 Termination for convenience by GEOGO. GEOGO may discontinue the Services or a plan on 90 days' written notice and refund prepaid Fees for the unexpired term.

17.6 Termination for convenience by you. You may close your Account at any time. Unless an Order Form provides otherwise or Applicable Law requires a refund, Fees for the current term are not refundable and committed Fees under an Order Form remain payable.

17.7 Effect of termination. On termination: (a) all licences end and you must stop using the Services; (b) you may export your Customer Content and Output for [30] days through the self-serve tools or on request ("Export Window"), unless termination was under clause 17.2(b) or a law prevents it; (c) after the Export Window, GEOGO will delete Customer Content from active systems within [30] days and from backups within the backup cycle, except where retention is required by Applicable Law or a lawful order, and will certify deletion to a Business Customer on written request; and (d) all amounts due become immediately payable.

17.8 Survival. Clauses 1, 5, 8.9, 11, 12, 14 to 16, 17.7, 17.8 and 18 to 21, and any other provision that by its nature should survive, survive termination.

18. Governing Law

18.1 These Terms and any dispute or claim (including non-contractual disputes) arising out of or in connection with them are governed by and construed in accordance with the laws of the Republic of India, without regard to conflict-of-laws principles.

19. Dispute Resolution

19.1 Amicable resolution. The parties shall first attempt in good faith to resolve any dispute through the grievance mechanism in clause 9 (for Individual Users) or through negotiation between senior representatives (for Business Customers) for [30] days from written notice of the dispute.

19.2 Arbitration. Any dispute not resolved under clause 19.1 shall be finally resolved by arbitration under the Arbitration and Conciliation Act, 1996:

• (a) Seat and venue: [Bengaluru, Karnataka, India]. The seat determines supervisory jurisdiction.
• (b) Tribunal: a sole arbitrator appointed by mutual agreement within [30] days of a notice invoking arbitration, failing which appointment shall be made [under the rules of the Arbitration and Conciliation Centre – Bengaluru (Domestic and International) / by the High Court of Karnataka under Section 11]. Neither party may unilaterally appoint the arbitrator.
• (c) Rules: [the rules of the chosen institution / the Act alone for ad hoc arbitration].
• (d) Language: English.
• (e) Costs: each party bears its own costs unless the tribunal decides otherwise.
• (f) Confidentiality: the proceedings and award are confidential, subject to Section 42A of the Act.
• (g) Fast track: for claims below INR 50 lakh, the parties agree to the fast-track procedure under Section 29B of the Act.

19.3 Courts. Subject to clause 19.2, the courts at Bengaluru, Karnataka shall have exclusive jurisdiction over all matters arising out of these Terms, including applications under Sections 9, 11, 27, 34 and 37 of the Arbitration and Conciliation Act, 1996. Either party may seek urgent interim relief, including injunctions to protect intellectual property or Confidential Information, from those courts at any time.

19.4 Consumer carve-out. Nothing in this clause 19 deprives an Individual User who is a "consumer" under the Consumer Protection Act, 2019 of the right to file a complaint before the appropriate District, State or National Consumer Disputes Redressal Commission. Such a consumer may, at their option, elect arbitration under clause 19.2.

19.5 Regulatory forums. Nothing in this clause 19 limits any person's right to approach the Data Protection Board of India, the Grievance Appellate Committee or any other statutory authority.

20. Force Majeure

20.1 Neither party is liable for failure or delay in performance (other than payment obligations) caused by events beyond its reasonable control, including acts of God, flood, earthquake, pandemic or epidemic, war, terrorism, civil unrest, government action or order, internet or telecommunication failures not caused by that party, failures of Third-Party Providers or hosting providers, or cyber-attacks despite reasonable safeguards (a "Force Majeure Event"). The affected party shall notify the other promptly and use reasonable efforts to mitigate. If a Force Majeure Event continues for more than [60] days, either party may terminate the affected Services on written notice, and GEOGO will refund prepaid Fees for the unexpired period.

21. General Provisions

21.1 Entire agreement. These Terms, the Policies and any Order Form constitute the entire agreement between the parties on their subject matter and supersede all prior understandings. Any purchase-order terms of a Business Customer are of no effect.

21.2 Assignment. You may not assign or transfer these Terms without GEOGO's prior written consent. GEOGO may assign these Terms to an affiliate or to a successor in a merger, amalgamation, acquisition or sale of substantially all of its relevant assets, on notice to you.

21.3 Severability. If any provision is held invalid or unenforceable, it shall be enforced to the maximum extent permissible and the remainder shall continue in full force.

21.4 Waiver. No failure or delay in exercising a right is a waiver of it.

21.5 Relationship. The parties are independent contractors. Nothing creates a partnership, joint venture, agency or employment relationship.

21.6 Notices. Notices to GEOGO must be sent to info@geogo.in with a copy by registered post or courier to the registered office. Notices to you may be sent to the email address on your Account or through in-product notifications. Email notices are deemed received on the next business day.

21.7 Publicity. GEOGO may name a Business Customer as a customer and use its logo in customer lists unless the Business Customer opts out in writing.

21.8 Anti-bribery and compliance. Each party shall comply with the Prevention of Corruption Act, 1988 and applicable anti-bribery laws in connection with these Terms.

21.9 Third-party rights. No person other than the parties has any right to enforce these Terms, except the GEOGO Indemnitees under clause 16.1.

21.10 Language. These Terms are drafted in English. Any translation is for convenience; the English version prevails to the extent permitted by Applicable Law.

21.11 Electronic execution. These Terms and any Order Form may be executed electronically, including by electronic signature under Section 3A of the IT Act, and in counterparts.

Schedule 1 — Grievance Officer and Contact Details

Schedule 2 — Key Terms of the Data Processing Agreement (Business Customers)

The full DPA governs where GEOGO acts as Data Processor. Its key terms are:

• Subject matter and duration: processing of Customer Content to provide the Services for the Subscription Term and the retention periods in clause 8.9.
• Categories of Data Principals: the Business Customer's customers, employees, applicants, policyholders, borrowers, vendors and other persons whose data appears in uploaded documents.
• Categories of Personal Data: identity and contact data, government identifiers, financial and account data, transaction data, signatures and photographs, and any other data within documents.
• Instructions: these Terms, the Order Form and the Customer's configuration of the Services are its complete documented instructions.
• Sub-processors: listed in the Sub-processor List with location; 30 days' advance notice of changes with a right to object.
• Security: measures in Annex A of the DPA, aligned with ISO/IEC 27001:2022.
• Audit: GEOGO provides its ISO certificate and summary audit reports annually; on-site audits for Enterprise Customers on [30] days' notice, at the Customer's cost, no more than once a year, unless a regulator requires otherwise.
• Breach notice: to the Customer within 24 hours of awareness (clause 8.7).
• Deletion: on termination, under clause 17.7, with certificate on request.