1. Acceptance of Terms
By accessing or using PrivyStack ("the Platform", "we", "us"), you agree to be bound by these Terms of Service and our Privacy Policy. If you are using the Platform on behalf of a company or other legal entity, you represent that you have authority to bind that entity.
2. Description of Service
PrivyStack provides consent-management, data-principal rights (DSAR), privacy-policy, website-scanning, and audit capabilities designed to assist businesses in complying with the Digital Personal Data Protection (DPDP) Act, 2023 and related rules. The Platform is a tool and does not constitute legal advice. You remain solely responsible for your compliance obligations.
3. Accounts and Eligibility
You must be at least 18 years old to create an account. You are responsible for maintaining the confidentiality of your login credentials and for all activity under your account. You agree to provide accurate registration information and to keep it up to date.
4. Subscription Plans, Billing and Payments
Paid plans are billed in advance on a monthly or yearly basis through our payment partner, Razorpay. Subscription fees are non-transferable and non-assignable. You authorize us (or Razorpay on our behalf) to charge the payment method on file. Taxes, where applicable, will be added to invoices. Failure to pay may result in suspension of access; paid data will be retained for at least 30 days after suspension before deletion.
5. Refund and Cancellation Policy
You may cancel your subscription at any time from your billing settings. If you are not satisfied, you may request a full refund within 7 days of your first payment ("7-day money-back guarantee"), subject to the Platform not having been materially misused. Refunds are processed through the original payment method within 5–7 working days. Annual plans cancelled mid-cycle are not refunded on a pro-rata basis beyond the 7-day window. Details are set out in our Refund Policy.
6. Acceptable Use
You agree not to: (a) use the Platform to collect consent in violation of the DPDP Act or any applicable law; (b) attempt to gain unauthorised access to the Platform, its databases, or other customers' data; (c) scan, probe, or test the vulnerability of the Platform; (d) resell or sublicense the Platform except through the SDK for your own end users' consent collection; (e) transmit malware or engage in data-scraping that burdens our infrastructure; or (f) use the Platform to infringe the rights of any third party.
7. Your Data and DPDP Compliance
You own the data you upload to the Platform. As between us, you are the Data Fiduciary and we act as your service provider/processor under the DPDP Act. We process personal data only to provide the Platform, in accordance with your instructions and our Privacy Policy. Our consent artefacts, audit logs, and receipts are designed to be used as evidence of consent; you remain responsible for obtaining valid consent in the manner required by law.
8. Intellectual Property
The Platform, including its software, design, trademarks, SDK, and documentation, is owned by us or our licensors. You receive a limited, non-exclusive, non-transferable licence to use the Platform for your internal business purposes during your subscription. You may not copy, modify, or create derivative works of the Platform except as expressly permitted for the SDK in accordance with its documentation.
9. Confidentiality and Security
We implement reasonable technical and organisational measures to protect your data, including encryption in transit, role-based access control, and append-only audit logging. You agree to notify us promptly if you become aware of any unauthorised use of your account or a data breach affecting data stored on the Platform.
10. Availability and Support
We aim for high availability but do not guarantee uninterrupted access. We may perform scheduled maintenance, typically with prior notice. Support is provided via support@privystack.in during business hours (IST).
11. Limitation of Liability
To the maximum extent permitted by law, our aggregate liability for any claim arising out of or related to the Platform shall not exceed the amounts paid by you in the 3 months preceding the claim. We shall not be liable for indirect, incidental, special, or consequential damages, or for any loss of profits, revenue, data, or goodwill. The Platform is provided "as is" and "as available" without warranties of any kind.
12. Indemnification
You agree to indemnify and hold us harmless from claims arising out of (a) your use of the Platform, (b) your violation of these Terms, or (c) your violation of the DPDP Act or other applicable law in connection with your use of the Platform.
13. Termination
You may terminate your account at any time. We may suspend or terminate your access for breach of these Terms, unlawful activity, or non-payment, with notice where practicable. Upon termination, we will provide you with an export of your data for 30 days, after which data will be deleted in accordance with our data-retention schedule.
14. Changes to These Terms
We may update these Terms from time to time. Material changes will be notified by email and/or in-app notice at least 14 days in advance. Continued use of the Platform after the effective date constitutes acceptance of the revised Terms.
15. Governing Law and Dispute Resolution
These Terms are governed by the laws of India. Disputes shall be subject to the exclusive jurisdiction of the courts of [City, State], India. The parties will first attempt to resolve disputes through good-faith negotiation, then through arbitration in accordance with the Arbitration and Conciliation Act, 1996, seated at [City, State].
16. Grievance Officer
Under Section 13 of the DPDP Act, 2023, any data principal may raise grievances with our designated Grievance Officer at support@privystack.in. We will acknowledge grievances within 48 hours and resolve them within 30 days.