Terms of Use

About these Terms

These Terms of Use (“Terms”) are a binding agreement between Rhizomatic Artificial Intelligence Private Limited, a company incorporated in India with CIN U26209PN2026PTC254954 and its registered office at Warje, Pune, Maharashtra 411058, India (“Reposha”, “we”, “us”), and the business or person that creates a Reposha account (“User”, “you”). We offer Reposha under our brand PreceptsAI.

By creating an account, paying for a plan or using the Service, you accept these Terms, our Privacy Policy and our Refund Policy, which form part of these Terms. If you accept on behalf of a firm or company, you confirm that you are authorised to bind it.

Reposha is a business service. You must be at least 18 years old and use it for your trade, business or profession. It is not offered for personal or household use.

Words we use

• Service: reposha.com, app.reposha.com, upload.reposha.com, any custom upload domain you connect, and related features, emails and support.
• User: the paying customer account, such as a CA firm, consultant, advocate or other business.
• Owner: the person who created the User account and controls billing. Team members: the Owner and every Manager or Staff login under the User.
• Client: a person or business whose documents you collect through the Service. Clients do not have accounts.
• Client Content: documents, files, client names and contact details, notes and related records that you or your Clients put into the Service.
• Account Data: information about you and your Team members, such as names, emails, logins and billing details.
• Plan and Subscription Period: the plan you buy and the monthly or yearly period it covers.

What the Service is, and what it is not

Reposha is a secure client document collection and storage service. It lets you send Clients an upload link and access code, keep their documents in organised folders, control which Team members can open them, and see a record of access.

Reposha is not, and does not provide:

• identity, KYC, Aadhaar or e-KYC verification of any kind;
• legal, tax, accounting or compliance advice, or a certificate that you comply with any law;
• filing, submission or e-signature services, or practice management;
• a guarantee that any document is genuine, complete or accurate.

We do not review Client Content. You decide what to collect, how to use it, and how long to keep it.

Document Intelligence (when available) helps you search and ask questions of a Client’s documents and shows the source page. Its answers can be wrong or incomplete. You must check every answer against the source before relying on it. It never files, submits or sends anything on your behalf.

Your account and logins

• Give accurate information and keep it up to date, including billing details.
• The Owner creates Team member logins and is responsible for every action taken under the User account. Each person must have their own login. Sharing logins is not allowed, because the access record must show who did what.
• Keep passwords and login codes secret. Two-step verification is mandatory for the Owner. We strongly recommend it for every Team member.
• Tell us at once at support@reposha.com if you suspect someone has used your account without permission. Switch off that person’s login first.
• One email address can belong to only one User account.

Your responsibilities for Client data

For Client Content, you are the Data Fiduciary under the Digital Personal Data Protection Act, 2023 (“DPDP Act”) and its Rules, and we act as your Data Processor. You confirm and agree that:

• you have a lawful purpose for collecting each document, and you collect only what that purpose needs;
• you give Clients any notice the law requires, and you obtain consent or rely on another lawful ground before collecting their personal data;
• where you collect Aadhaar, PAN or other identity documents, you comply with the Aadhaar Act, 2016, its regulations, and any rules that apply to your profession or sector, including any masking or storage limits;
• where a Client is a child or a person with a disability who has a lawful guardian, you obtain verifiable consent of the parent or guardian as the DPDP Act requires;
• you respond to your Clients’ requests to access, correct or erase their data, and to their grievances, within the time the law requires. The Service gives you tools for this, including Client deletion requests;
• you decide how long to keep Client Content, and you erase it when its purpose is served, unless a law requires you to keep it;
• you are responsible for your Team members, their access to Client Content and what they do with it after they open or download it.

Collecting complete, unmasked identity documents is your decision as Data Fiduciary. These Terms place the legal responsibility for that decision with you. Our technical safeguards are described in section 10.

Acceptable use

You must not, and must not let anyone else:

• upload or collect content that is unlawful, infringes anyone’s rights, or that you have no right to hold;
• upload malware, or files designed to harm systems or people;
• use the Service to harass, defraud, impersonate or spam anyone, or to collect data by deception;
• store child sexual abuse material, content prohibited under the Information Technology Act, 2000 or its rules, or anything that threatens the unity, integrity, defence, security or sovereignty of India;
• try to access another User’s data, probe or bypass security, or test vulnerabilities without our written permission;
• copy, resell, sublicense or reverse-engineer the Service, or use it to build a competing service;
• overload the Service with automated traffic, or scrape it;
• use the Service for health records of patients or for regulated banking or lending operations without our written agreement.

We may remove access to content or suspend an account that breaks this section, and we will report unlawful content to authorities where the law requires.

Plans, fees and payment

• Prices are in Indian Rupees and are shown on our pricing page. We are not registered for GST at present, so no GST is added. When we register, GST will be added at the applicable rate and shown on your invoice.
• Plans are paid in advance, monthly or yearly. Monthly plans renew automatically through the payment method or mandate you set up. Yearly plans are paid once a year. We remind you before a yearly renewal.
• Each Plan has limits on active Clients, included logins and storage. A Client folder counts as active while it holds documents or an open request. Extra logins are charged as shown on the pricing page.
• We process payments through an RBI-authorised payment partner. We do not store your card or bank account numbers.
• We may change prices with at least 30 days’ notice. A change applies from your next renewal. Founding Member prices stay locked for as long as the subscription continues without a break.
• Invoices are emailed to the Owner and are available in Billing.

Refunds

Refunds, including our 14-day refund guarantee on your first payment and the Founding Member promise, are governed by our Refund Policy.

Cancellation, non-payment and account closure

This policy protects your Clients’ data from staying with us forever, and gives you a fair window to take it with you. Please read it carefully.

• Paying before the erase date restores the account in full.
• Erased files are removed from live storage at once and from our backups within 35 days. We cannot recover them after that.
• A Client placed on legal hold is not erased while the hold is on. You must lift it, or tell us in writing why it must stay.
• We keep invoices and payment records for as long as tax and company law require, generally 8 years. They do not contain Client documents.

Data processing terms

This section is our data processing agreement with you. It applies whenever we process personal data in Client Content on your behalf.

10.1 Instructions

We process Client Content only to provide the Service, on your documented instructions. These Terms and your use of the Service settings are your instructions. We will tell you if we believe an instruction breaks the law.

10.2 Confidentiality

Only our authorised staff who need access to run or support the Service may access Client Content, and only as far as needed. They are bound by confidentiality. Our admin tools show account details, not Client names or files.

10.3 Security safeguards

We maintain reasonable security safeguards, including: storage in India; encryption in transit and at rest; private storage with no public file links; role-based access and assigned Clients; mandatory two-step verification for Owners; session limits; a record of every view, download, upload and delete, kept for at least one year; nightly encrypted backups with a copy in a second Indian city; and access to files only through short-lived links. Details are on our Security page.

10.4 Sub-processors

You authorise us to use sub-processors of the types described in our Privacy Policy. We bind each of them to safeguards no weaker than these. We share the current list with you on request, in confidence. We will give you at least 30 days’ notice by email before adding or replacing a sub-processor that stores Client Content. If you object on reasonable grounds and we cannot resolve it, you may cancel and receive a pro-rata refund of prepaid fees for the unused period.

10.5 Location

Client Content is stored in India. We do not transfer Client Content outside India, except where you or your Team members access it from abroad.

10.6 Help with your duties

We give you tools to find, export, correct and erase Client Content and to answer Client deletion requests. If a Client contacts us directly, we pass the request to you and do not answer it ourselves, unless the law requires otherwise. If a Client deletion request is not answered by you within 30 days, we may remind you and escalate it.

10.7 Retention limit and exports

You choose how long Client Content is kept after a Client’s last request closes: 6 months, 1 year or 3 years. We do not keep Client Content for longer than 3 years in any case, and we erase it automatically when the period ends. We remind you 30 days before. You may download any single Client’s files at any time. A full export of the whole account can be requested once a calendar month, plus one final full export when you close your account.

10.8 Personal data breach

If we become aware of a breach affecting Client Content, we will tell the Owner without undue delay, and we aim to do so within 24 hours. We will share what we know, the steps we are taking, and the information you need to meet your own duty to inform the Data Protection Board of India and affected Clients.

10.9 End of service

When your account closes, you may export Client Content during the windows in section 9. We then erase it as set out there, unless the law requires us to keep it.

10.10 Records and audits

On reasonable written request, and not more than once a year unless there is a breach, we will give you information needed to show that we meet this section. Any on-site audit must be agreed in advance, at your cost, and must protect other Users’ data.

10.11 No training, no sale

We never sell Client Content, never use it for advertising, and never use it to train any artificial intelligence model. We never send Client Content to outside AI services. Document Intelligence, when available, runs on our own systems in India.

Our use of Account Data

For Account Data and website data, we act as Data Fiduciary. Our Privacy Policy explains what we collect, why, and your rights.

Ownership

• You and your Clients own Client Content. We claim no rights in it.
• You give us a limited, non-exclusive licence to host, copy, process and display Client Content only to provide the Service to you and as these Terms allow.
• We own the Service, its software, design and the Reposha and PreceptsAI names and marks. These Terms give you a right to use the Service, not ownership of it.
• If you send us suggestions, we may use them without owing you anything.

Availability and support

• We aim for 99.5% availability each month, not counting planned maintenance and events outside our reasonable control. This is a target, not a guarantee, and it does not carry service credits.
• We give notice of planned maintenance where we can, and try to schedule it outside Indian working hours.
• Support is by email at support@reposha.com. We usually reply within one working day. We do not offer phone support.
• Features marked “preview” or “beta” are offered as they are, may change, and may be withdrawn.
• Please keep your own copies of documents you must retain by law, especially where the law asks you to keep records for longer than 3 years. The Service is not a long-term archive and is not a substitute for your own record-keeping duties.

Suspension and termination by us

We may suspend or limit access, with notice where practical, if:

• you break these Terms, especially sections 5 and 6;
• payment is overdue, as set out in section 9;
• we must do so to protect the Service, other Users or any person, or to comply with law or a lawful order.

We may end these Terms for serious or repeated breach. If we end them without cause, we will give 30 days’ notice, refund prepaid fees for the unused period, and give you time to export.

Disclaimers

Except as these Terms expressly say, the Service is provided “as is” and “as available”. To the extent the law allows, we disclaim all implied warranties, including fitness for a particular purpose and merchantability. We do not promise that the Service will be error-free or uninterrupted, or that using it makes you compliant with any law.

Limits on our liability

• Our total liability for all claims arising from or related to the Service or these Terms, in any 12-month period, is limited to the fees you paid us for the Service in the 12 months before the event that gave rise to the claim.
• We are not liable for indirect, incidental, special or consequential loss, or for loss of profit, revenue, goodwill or business opportunity.
• We are not liable for loss caused by: your instructions or settings; Client Content or its accuracy; documents downloaded by your Team members; login details you or your Team shared or lost; your failure to meet your duties in section 5; erasure that followed the timelines in section 9; or events outside our reasonable control.
• Nothing in these Terms limits liability that cannot be limited by law, including for fraud, or for our wilful breach of section 10.11.

Your indemnity

You will indemnify and hold us harmless against claims, penalties, losses and reasonable costs, including legal fees, arising from: Client Content you collect or hold; your breach of section 5 or 6; your or your Team members’ misuse of the Service; or your breach of any law, including the DPDP Act and the Aadhaar Act. We will tell you promptly about any such claim and let you control the defence, with our reasonable help at your cost.

Confidentiality

Each of us will keep the other’s non-public business information confidential, use it only for these Terms, and protect it with reasonable care. This does not apply to information that is public, already known, independently developed, or that must be disclosed by law, in which case the disclosing party will give notice where allowed.

Changes to the Service and these Terms

We improve the Service over time and may change or remove features. We will not materially reduce the core security safeguards in section 10 during a paid period. We may update these Terms. For material changes, we will email the Owner at least 30 days before they apply. If you do not agree, you may cancel before the change applies and receive a pro-rata refund of prepaid fees for the unused period.

Governing law and disputes

• These Terms are governed by the laws of India.
• If a dispute arises, please write to us first. We will both try in good faith to resolve it within 30 days.
• If it is not resolved, it will be finally settled by arbitration by a sole arbitrator appointed by mutual agreement, under the Arbitration and Conciliation Act, 1996. The seat and venue will be Pune, Maharashtra, and the language English.
• Subject to arbitration, the courts at Pune, Maharashtra have exclusive jurisdiction. Either party may seek urgent interim relief from those courts.

Grievance Officer and contact

In line with the Information Technology Act, 2000 and its rules, the DPDP Act, and the Consumer Protection (E-Commerce) Rules, 2020, you may raise any complaint about the Service or these Terms with our Grievance Officer:

• Grievance Officer: Premanshu
• Email: support@reposha.com (subject: Grievance)
• Escalation: founder@precepts.ai
• Address: Rhizomatic Artificial Intelligence Private Limited, Warje, Pune, Maharashtra 411058, India

We acknowledge complaints within 48 hours and aim to resolve them within 15 days.

General

• These Terms, with the Privacy Policy and Refund Policy, are the whole agreement between us about the Service.
• You may not transfer these Terms without our written consent. We may transfer them to a successor business.
• If a part of these Terms is unenforceable, the rest stays in force.
• Not enforcing a right is not a waiver of it.
• Neither of us is liable for delay caused by events beyond reasonable control, such as natural disasters, epidemics, war, government action, or failures of power, internet or upstream providers.
• We send notices to the Owner’s email. You send notices to support@reposha.com.
• Sections that by their nature should survive, including 5, 9, 10, 16, 17, 18 and 20, survive the end of these Terms.