Terms and Conditions of Use

1.1 The website is operated by Aanetic Private Limited (CIN: [to be inserted]), Industrial Estate, Varanasi, Uttar Pradesh 221106, India (“Aanetic”, “we”, “us”).

1.2 “You” means the person using the website and, where you use it for your employer or another organisation, that organisation as well. If you accept these terms for an organisation, you confirm that you are authorised to do so.

1.3 These terms cover the website only. When we provide consulting, audit, assessment, testing or certification-readiness services, or a subscription to one of our tools, that work is governed by a separate signed agreement such as a Master Services Agreement, Statement of Work, Order Form or subscription terms (a “Client Agreement”). If a Client Agreement conflicts with these terms, the Client Agreement prevails.

You must be at least 18 years old and able to enter into a binding contract under Indian law. The website is aimed at businesses and professionals, not consumers.

3.1 Our articles, guides, checklists, readiness scores, calculators, templates and other website content (“Content”) are written to help organisations understand regulations and frameworks such as the DPDP Act, GDPR, PCI DSS, SOC 2, ISO standards, and RBI, SEBI and IRDAI requirements. They are general in nature.

3.2 Content is not legal advice, audit opinion, attestation, or certification, and it is not a substitute for advice on your specific situation. Laws, rules and standards change, sometimes quickly, and Content may not reflect the latest position on the day you read it.

3.3 Any readiness score, timeline or cost figure shown on the website is an estimate based on what you tell us and on typical engagements. It is not a quote and not a promise of outcome.

3.4 Nothing on the website creates a client relationship, a lawyer-client relationship, or any duty of care beyond what these terms say. A client relationship starts only when a Client Agreement is signed.

4.1 Submitting an enquiry does not oblige either of us to do anything further.

4.2 Proposals and prices shared by us are valid for the period stated in them, or 30 days if no period is stated, and become binding only when included in a signed Client Agreement. Prices are exclusive of GST and other applicable taxes unless we say otherwise.

5.1 Where we help you prepare for a certification or attestation (for example ISO/IEC 27001 or SOC 2), the certificate or report is issued by an accredited certification body or a licensed CPA firm, not by Aanetic, unless we expressly say otherwise in the Client Agreement. We do not guarantee that any certificate, report or regulatory approval will be granted.

5.2 The outcome of any audit or assessment depends on the evidence you provide and the controls you actually operate. We will not alter findings to suit a preferred result.

5.3 Where professional independence rules apply, we may decline to provide both advisory and audit services to the same client.

6.1 Our compliance tools, including the Consent Manager, Cookie Consent, PII Scanner, Privacy Suite, DPIA, RoPA and TPRM software, are provided under their own subscription terms, which you will be asked to accept before use.

6.2 Some tools are KavachOne products that we resell. Your use of them is also subject to KavachOne's own end-user terms and privacy notice. We are responsible for our part of the arrangement as set out in the Client Agreement, and KavachOne is responsible for the product itself.

6.3 Free trials, demos and sandbox environments are provided “as is”, may be withdrawn at any time, and must not be loaded with real personal data unless the trial terms allow it.

When using the website you must not:

• break any law, including the Information Technology Act, 2000 and the DPDP Act;
• submit someone else's personal data without the right to do so, or give us false information;
• scan, probe, scrape, load-test or attempt to gain unauthorised access to the website, our systems or any account (see section 8 if you have found a security issue);
• upload malware or anything designed to disrupt, damage or intercept systems or data;
• copy, republish, sell or frame Content, or use it to train machine-learning models, without our written permission;
• remove or obscure our copyright notices, trademarks or watermarks;
• pretend to be Aanetic, or suggest an endorsement, partnership or certification from us that does not exist; or
• use our name, logo or client list in your marketing without written consent.

We may suspend or block access to anyone who breaks these rules, and report unlawful activity to the relevant authorities.

If you believe you have found a security weakness in our website or tools, please email info@aanetic.com with enough detail for us to reproduce it. Please do not access, change or delete data that is not yours, do not disrupt our services, and give us a reasonable time to fix the issue before telling anyone else. If you act in good faith and within these limits, we will not pursue legal action against you for your research, and we will thank you publicly if you want us to.

9.1 The website and all Content, including text, graphics, logos, templates, frameworks, methodologies, software and the selection and arrangement of material, belong to Aanetic or our licensors and are protected by the Copyright Act, 1957, the Trade Marks Act, 1999 and other laws.

9.2 You may view and print Content for your own internal business use, and share links to it. Any other use needs our written permission.

9.3 “Aanetic” and our logo are our trademarks. Other names and logos on the website, including those of standards bodies, regulators and partners, belong to their owners and are used only to identify them. Their appearance does not mean they endorse us.

9.4 If you send us feedback or suggestions, we may use them without any obligation to you. This does not apply to your confidential information shared under a Client Agreement or NDA.

The website links to external sites, such as regulators, standards bodies, KavachOne, and our social media pages. We do not control those sites and are not responsible for their content or privacy practices. A link is not an endorsement.

Our Privacy Policy explains how we handle personal data collected through the website, including your rights under the DPDP Act and, where applicable, the GDPR. It forms part of these terms.

We work to keep the website available and accurate, but we do not promise that it will be uninterrupted, error-free or free of harmful components, or that Content is complete or current. We may change, suspend or withdraw any part of the website without notice.

To the extent the law allows, the website and Content are provided “as is” and “as available”, and we exclude all warranties, express or implied, including warranties of accuracy, merchantability, fitness for a particular purpose and non-infringement. You are responsible for deciding whether Content is suitable for your purposes.

14.1 Nothing in these terms limits liability that cannot be limited under Indian law, such as liability for fraud.

14.2 Subject to 14.1, we are not liable for any indirect, incidental, special or consequential loss, or for loss of profit, revenue, business, goodwill or data, arising from your use of, or inability to use, the website or Content, even if we were told such loss was possible.

14.3 Subject to 14.1, our total liability to you for all claims arising from your use of the website is limited to INR 10,000 (Indian Rupees ten thousand).

14.4 Liability for services or tools provided under a Client Agreement is governed only by that Client Agreement.

You agree to compensate Aanetic, its directors, employees and partners for any loss, liability, claim or reasonable cost (including legal fees) arising from your breach of these terms or your misuse of the website.

We are not responsible for any delay or failure caused by events beyond our reasonable control, including natural disasters, pandemics, war, civil unrest, government action, failure of utilities or telecommunications networks, or cyber attacks that reasonable safeguards could not have prevented.

17.1 These terms are governed by the laws of India.

17.2 If a dispute arises, we will first try to resolve it informally. Either party may start this by writing to the other, and we will each make a good-faith effort to settle it within 30 days.

17.3 If the dispute is not settled, it will be referred to final and binding arbitration by a sole arbitrator under the Arbitration and Conciliation Act, 1996. The seat and venue of arbitration will be Varanasi, Uttar Pradesh, and the proceedings will be in English. The arbitrator will be appointed by mutual agreement, failing which in accordance with that Act.

17.4 Subject to 17.3, the courts at Varanasi, Uttar Pradesh have exclusive jurisdiction. Either party may seek urgent interim relief from any competent court.

17.5 Nothing in this section affects your right to approach the Data Protection Board of India about your personal data.

18.1 Changes. We may update these terms from time to time. The date at the top shows the latest version. Continuing to use the website after a change means you accept it. If a change materially affects you, we will try to give notice on the website first.

18.2 Severability. If any part of these terms is found to be unenforceable, the rest remains in force, and the affected part will be read so as to give effect to its intent as far as the law allows.

18.3 No waiver. If we do not enforce a right immediately, we have not given it up.

18.4 Assignment. You may not transfer your rights under these terms. We may transfer ours to a group company or a successor to our business.

18.5 Entire agreement. These terms, together with the Privacy Policy, are the whole agreement between us about the website. Client Agreements cover our services and tools separately.

For questions about these terms, or to raise a complaint about the website or its content, contact:

We will acknowledge complaints within 24 hours and aim to resolve them within 15 days. Privacy complaints are handled under section 15 of our Privacy Policy.