Log in
Sign up free
Effective Date: 18 July 2026 | Last Updated: 18 July 2026
Provider details
Sanshray IT Solutions LLP ("Aarthic", "we", "us", "our")
These Terms & Conditions ("Terms") constitute a legally binding agreement between Sanshray IT Solutions LLP ("Aarthic", "we", "us", or "our") and any individual, business, organisation, or other legal entity ("Customer", "User", "you", or "your") accessing or using the Aarthic website, mobile applications, web application, APIs, software, and related services (collectively, the "Services").
By creating an Account, accessing, or using the Services, you confirm that you have read, understood, and agreed to be bound by these Terms, together with our Privacy Policy and Refund & Cancellation Policy.
If you do not agree to these Terms, you must not access or use the Services.
These Terms apply to all users of the Services, including individual business owners, sole proprietorships, partnerships, limited liability partnerships, companies, organisations, employees authorised to use an Account, Administrators, Authorised Third Parties (including accountants), trial users, free plan users, and paid subscription users.
These Terms apply whenever you visit our website, create an Account, subscribe to a paid plan, use the web or mobile applications, access our APIs, contact customer support, participate in promotions, beta programs or surveys, or otherwise access or interact with the Services.
These Terms and the documents listed below form the entire agreement between you and Aarthic in relation to the Services. In the event of any inconsistency, the following order of precedence applies (highest first):
Where applicable law conflicts with any of the above, applicable law prevails to the extent of the inconsistency.
Account means the registered account created to access and use the Services.
Administrator means the person authorised to manage an Account on behalf of a business or organisation.
Authorised Third Party means any person who is not an employee of the Customer but to whom the Customer grants access to its Account or Business Data through the Services, including an accountant, bookkeeper, consultant or auditor.
Business Data means invoices, quotations, inventory records, accounting entries, GST information, reports, customer information, supplier information, employee information, files, documents, attachments, and other business information uploaded, created, or stored through the Services.
Customer means any individual, business, organisation, partnership, company, or legal entity using the Services.
Personal Data has the meaning given to it under the Digital Personal Data Protection Act, 2023.
Services means the Aarthic website, web application, mobile applications, APIs, software, cloud services, and all related products and services provided by Aarthic.
Subscription means any free, trial, monthly, annual, enterprise, promotional or custom plan offered by Aarthic.
User means any individual authorised to access or use the Services, including Authorised Third Parties.
To use the Services, you represent and warrant that you are at least 18 years of age; you have legal capacity to contract under the Indian Contract Act, 1872; all information provided by you is accurate, complete and current; and you are authorised to act on behalf of any business or organisation for which you create or use an Account.
Access to certain features requires an Account. You agree to provide accurate and complete information, keep it updated, maintain a valid email address and mobile number, and promptly notify us of material changes.
You are responsible for maintaining the confidentiality and security of your Account credentials, using a strong and unique password, preventing unauthorised access, and notifying us immediately of any suspected compromise. Unless expressly permitted by your Subscription plan, credentials must not be shared.
You are responsible for all activity occurring through your Account unless you promptly notify us of unauthorised use and cooperate with reasonable security measures.
To protect all users, we may require reasonable verification before resetting passwords, changing registered contact details, restoring access, or transferring administrative control. Insufficient verification may delay or prevent recovery.
The Services permit you to invite an Authorised Third Party, such as an accountant, to access your Account or specified parts of your Business Data. Where you do so:
An Authorised Third Party must access only the Business Data of businesses that have granted them active permission, and must not use that Business Data for any purpose other than performing services for that business.
You are solely responsible for maintaining accurate business records; ensuring the accuracy of invoices, quotations, inventory records, accounting entries, GST information and reports generated using the Services; reviewing all business information before relying on it; complying with all applicable taxation, GST, accounting, labour and other legal obligations; maintaining the confidentiality of Account credentials; ensuring authorised users comply with these Terms; and exporting or backing up important Business Data.
The Services are software tools intended to assist business operations and are not a substitute for professional legal, accounting, taxation or financial advice.
You agree to use the Services responsibly and only for lawful purposes. You must not: use the Services for any unlawful, fraudulent, deceptive or misleading activity; violate applicable laws; infringe third-party rights; upload malware or malicious software; interfere with the operation, integrity or security of the Services; attempt unauthorised access to our systems, servers, databases, APIs or other Accounts; circumvent authentication or security mechanisms; exploit vulnerabilities or conduct security testing without our prior written authorisation; use automated tools to scrape or harvest data without our prior written consent; distribute spam or harmful content; impersonate any person or organisation; misuse any API or exceed applicable usage limits; or reverse engineer, decompile, disassemble, copy, modify or create derivative works from the Services except where expressly permitted by applicable law.
If you believe you have discovered a security vulnerability in the Services, please report it to support@aarthic.com rather than exploiting it. We will not pursue action against good-faith security research reported responsibly and conducted without accessing other users' data.
Where the Services allow you to send promotional, transactional or marketing communications to your own customers (including by SMS, WhatsApp, email or push notification), you alone are the sender of those communications. You represent and warrant that:
You retain all ownership rights in your Business Data. Aarthic does not acquire ownership of your Business Data.
You grant Aarthic a limited, non-exclusive, revocable licence to host, store, process, transmit, back up and display your Business Data solely to: provide the Services; secure the Services; troubleshoot technical issues; perform backup and disaster recovery; and comply with applicable legal obligations.
Restrictions on use for improvement
Aarthic may use data derived from your use of the Services to improve the Services only in aggregated and de-identified form, from which neither you, your Account, nor any individual can reasonably be re-identified. Aarthic does not use your Business Data to train artificial intelligence or machine-learning models, and does not sell, rent, license or otherwise disclose your Business Data to any third party for that party's own purposes.
This licence terminates when your Business Data is permanently deleted from our systems, except where retention is required by applicable law.
Aarthic's rights in aggregated and derived data
Aarthic owns all right, title and interest in anonymised, aggregated, statistical and operational information derived from use of the Services — including performance metrics, usage statistics and benchmarks — provided that such information does not identify, and cannot reasonably be used to identify, any Customer, any individual, or any Customer's business. Aarthic may use such information for any lawful purpose, including operating, securing, analysing and improving the Services.
In respect of Personal Data contained within your Business Data — including personal data relating to your customers, suppliers and employees — you act as the Data Fiduciary and Aarthic acts as a Data Processor processing that Personal Data on your documented instructions.
In respect of Personal Data that Aarthic collects directly for its own purposes — including your Account registration details, billing information and technical usage data — Aarthic acts as the Data Fiduciary. Our processing in that capacity is described in the Privacy Policy.
As Data Fiduciary for your Business Data, you are responsible for establishing a lawful basis for the processing you instruct, for providing any notice required to the individuals concerned, and for responding to their requests, with our reasonable assistance as described in Schedule A.
The Data Processing Terms in Schedule A form part of these Terms and apply automatically to every Customer. No separate signature is required.
Subject to these Terms and your Subscription, Aarthic grants you a limited, non-exclusive, non-transferable, non-sublicensable and revocable licence to access and use the Services solely for your internal business purposes. This licence transfers no ownership. All rights not expressly granted are reserved.
Aarthic is a cloud-based Software-as-a-Service platform assisting businesses with day-to-day operations. Depending on your Subscription, the Services may include billing and invoicing, quotations, purchase management, inventory management, barcode and product management, customer and supplier management, expense management, accounting and bookkeeping, GST features, financial reports, business analytics, user and role management, mobile and web access, APIs and integrations, data export and backup, and other features introduced from time to time.
Feature availability depends on your selected Subscription plan. Aarthic may introduce, modify, improve, suspend or discontinue features to enhance the Services or to comply with legal, regulatory, technical or operational requirements. Where a change materially reduces the core functionality of a paid Subscription, Clause 40 (Changes to these Terms) applies.
The Services are delivered electronically. Access is provisioned to your registered email address and Account immediately upon successful activation of a Subscription, or as soon as reasonably practicable thereafter. No physical goods are shipped and no delivery charges apply.
Aarthic offers free, trial, monthly, annual, enterprise, promotional and custom Subscription plans. Each Subscription includes the features, usage limits, pricing and conditions displayed at the time of purchase, and may vary by number of users, number of businesses, storage, modules, integrations, API usage and other commercially reasonable criteria.
By subscribing, you agree to pay all applicable charges, provide accurate payment information, keep your payment method valid, and pay applicable taxes. Unless expressly stated otherwise, fees are charged in advance, are payable in Indian Rupees, and taxes including GST are charged separately.
Grace period before suspension
If a payment fails or is overdue, we will notify you and allow a grace period of at least seven (7) calendar days to remedy the failure before suspending or restricting your Subscription. During the grace period you retain access to your Business Data. This does not apply where suspension is required for fraud, security or legal reasons.
Payments are processed through authorised third-party payment service providers, including Razorpay. Aarthic does not store complete credit or debit card numbers, CVV, UPI PIN, internet banking passwords, or payment authentication credentials. Payment transactions are governed by the applicable terms and privacy policy of the payment provider.
Where applicable, paid Subscriptions renew automatically at the end of each Billing Cycle unless cancelled before the renewal date. By purchasing a recurring Subscription, you authorise Aarthic or its authorised payment provider to charge the applicable fee to your selected payment method under a standing instruction (e-mandate).
In accordance with Reserve Bank of India requirements for recurring transactions:
Renewal charges are at the pricing applicable at the time of renewal. Where pricing increases, we will give you at least thirty (30) days' notice before the revised pricing takes effect, and you may cancel before renewal if you do not accept it.
You may cancel at any time through your Account settings or by contacting customer support. Cancellation prevents future renewals, does not automatically generate a refund, and takes effect at the end of the current paid Billing Cycle. Refunds, where applicable, are governed by our Refund & Cancellation Policy.
Free plans are provided "as available"; trial periods expire automatically on the specified date; features and usage limits may differ from paid plans. We may modify, restrict, suspend or discontinue any free plan, promotional offer or trial, on reasonable notice where practicable.
Where a trial expires and is not converted to a paid Subscription, your Business Data will be retained for at least thirty (30) days to allow you to export it or subscribe, after which it may be deleted in accordance with our Privacy Policy.
Upon expiry or cancellation of a paid Subscription, Aarthic may restrict access to premium features, including the creation or modification of Business Data, API access, integrations, advanced or scheduled reporting, automated backups, bulk printing, and other features specific to the expired plan.
Expiry or cancellation does not delete your Business Data, which remains securely stored in accordance with our Privacy Policy and our data retention practices.
Your data remains retrievable
We will send a reminder to your registered email address before your paid Subscription expires, so that you may renew, or export your Business Data, before premium features are restricted.
Notwithstanding any restriction on premium features, you may export your Business Data in a commonly used machine-readable format for a period of at least seven (7) days following expiry or cancellation. Export during that period is not conditional on holding an active paid Subscription.
After that period, export functionality may be unavailable until an eligible Subscription is reactivated. Your Business Data is not deleted, continues to be retained in accordance with our Privacy Policy, and reactivation restores access to it.
Records required for statutory compliance
Where you require your Business Data in order to comply with a record-retention, audit, assessment, filing or other obligation under applicable law, you may submit a written request at any time, whether or not you hold an active Subscription. We will provide reasonable assistance in making that Business Data available to you, subject to verification of your identity and authority, applicable law, and any reasonable administrative charge notified to you in advance. We will not refuse such a request solely on the ground that your Subscription has lapsed.
Reactivation of an eligible Subscription restores access to the applicable features, subject to the terms of the selected plan.
Aarthic may make features available on a beta, preview, pilot, early-access or evaluation basis. Such features are provided "as is" and for evaluation only; may be incomplete, unstable or unsupported; may be modified, suspended or withdrawn at any time without notice and without liability; are excluded from any service-level commitment; and may be subject to additional terms notified at the time of access. You should not rely on a beta feature for a business-critical purpose.
Certain Services may generate automated calculations, recommendations, forecasts, classifications or analytical outputs, including outputs produced using automated or machine-learning techniques. Such outputs are informational only, may contain errors, and must be independently verified before you rely on them, particularly for taxation, GST, accounting, payroll or statutory purposes. Aarthic gives no warranty as to the accuracy, completeness or fitness for purpose of any such output, and you remain responsible for all decisions and filings made using them.
If you voluntarily provide suggestions, ideas, feature requests, recommendations or other feedback relating to the Services, you grant Aarthic a perpetual, irrevocable, worldwide, royalty-free and sublicensable right to use, reproduce, modify and incorporate that feedback into the Services without obligation, attribution or compensation. Feedback is not your Confidential Information, and you should not send feedback you consider confidential.
Where an Account on a free plan remains inactive, with no login, for a continuous period of 1 months, Aarthic may suspend or close it and delete the associated Business Data. Before doing so we will send at least seven (7) days' notice to your registered email address and provide an opportunity to log in, export your Business Data, or subscribe to a paid plan. This Clause does not apply to Accounts holding an active paid Subscription.
You are responsible for all taxes applicable to your Subscription, except taxes on Aarthic's income. Where required, GST and other applicable taxes may be added to your invoice. You remain solely responsible for the correctness of your own tax filings, GST returns, invoices, accounting records and statutory compliance.
Aarthic may release software updates, introduce new features, remove obsolete functionality, improve interfaces, enhance security, modify APIs and update system architecture. Updates may occur automatically where technically feasible. Obsolete features may be discontinued after reasonable notice where practical.
API access is subject to fair usage limits, authentication requirements, technical documentation, security requirements and Subscription limitations. You must not abuse API endpoints, bypass authentication, perform excessive automated requests, interfere with API availability, or use APIs unlawfully. We may modify API functionality, introduce version upgrades, or retire deprecated APIs with reasonable notice where practical.
The Services may integrate with third-party providers including payment gateways, SMS providers, email service providers, cloud hosting providers, notification services, operating system services and analytics providers. These operate independently under their own terms and privacy policies. Aarthic is not responsible for their availability, pricing, data practices, interruptions beyond our reasonable control, or their acts and omissions.
For the avoidance of doubt, Aarthic is not responsible or liable for any interruption, degradation, delay, data loss or failure caused by third-party infrastructure or services outside our reasonable control, including cloud hosting providers, data centres, payment gateways, banking and UPI networks, SMS and messaging providers, email delivery providers, domain and DNS services, telecommunications carriers, device operating system services, or government or regulatory systems and portals (including GST, e-invoicing and e-way bill systems).
We use commercially reasonable efforts to maintain availability, reliability and performance. The Services are not guaranteed to be uninterrupted, error-free or continuously available. Interruptions may occur due to scheduled or emergency maintenance, updates, infrastructure work, internet outages, cloud provider issues, cyber incidents or force majeure. Where reasonably practicable we will give advance notice of planned maintenance.
Support is provided by email, ticketing, documentation and other channels designated by Aarthic. Support availability and response times vary by Subscription plan.
Enterprise service levels
For Enterprise Plans, uptime and support response commitments, if any, are those set out in the applicable Order Form or Service Level Agreement signed by an authorised representative of Aarthic. In the absence of such a signed document, no service-level commitment is provided.
Unless expressly agreed in a separate written Service Level Agreement signed by an authorised representative of Aarthic, Aarthic does not guarantee any minimum uptime, availability, response time, resolution time, recovery time or recovery point, and gives no commitment as to the performance of the Services. No statement made in marketing material, documentation or correspondence constitutes a service-level commitment unless contained in such a signed agreement.
Where supported, you may export Business Data in available formats. Export availability may depend on Subscription plan, technical limitations, security considerations and legal obligations.
Aarthic maintains operational backups to support disaster recovery and business continuity. Backups are intended for operational recovery; you remain responsible for maintaining copies of critical business records. Restoration of specific information cannot be guaranteed in every circumstance.
The Services, including all software, source code, object code, APIs, databases, user interfaces, documentation, designs, trademarks, trade names, logos, graphics, text and compilations, are owned by Sanshray IT Solutions LLP or its licensors and protected under applicable intellectual property laws. Except for the limited licence expressly granted, no ownership rights are transferred, no licence is granted by implication, and all rights not expressly granted are reserved.
We may suspend, restrict or terminate your access, in whole or in part, where reasonably necessary, including if: you violate these Terms or any applicable policy; payment is overdue beyond the grace period in Clause 15; fraudulent, unlawful or abusive activity is suspected; your use threatens the security, integrity or availability of the Services; required by applicable law, court order or government authority; or continuation would expose Aarthic or other users to material risk.
Except where immediate action is required to protect the Services, comply with legal obligations or address security concerns, we will give you notice and a reasonable opportunity of not less than seven (7) days to remedy the issue before suspension or termination.
Upon suspension or termination your right to access the Services ceases to the extent specified, and you remain responsible for outstanding fees and obligations incurred before termination. Termination does not affect rights or obligations accrued before termination.
Where reasonably practicable, and unless prohibited by law or by the requirements of an ongoing investigation, we will notify you of the reason for a suspension, tell you what is required to resolve it, and restore access promptly once the issue is resolved.
We may suspend or restrict the Services where undisputed fees remain unpaid after the grace period and notice described in Clause 15. Where you dispute an invoice in good faith and notify us in writing before the due date, we will not suspend the Services in respect of the disputed amount while the dispute is being resolved, provided undisputed amounts are paid when due.
Following termination or cancellation for any reason other than fraud, unlawful activity, or a security risk requiring immediate action, Aarthic will retain your Business Data in a retrievable form and provide you with read-only access sufficient to export it for a period of at least thirty (30) days from the effective date of termination.
You are responsible for exporting your Business Data within that window. After the window expires, your Business Data may be permanently deleted.
Certain information may be retained beyond that period where required by applicable law or for legitimate purposes including taxation, accounting, fraud prevention, dispute resolution, audit and enforcement of legal rights. Retained information is processed only for the purposes for which retention is permitted, and is then securely deleted or anonymised in accordance with our Privacy Policy.
Nothing in this Clause requires Aarthic to retain Business Data where you have expressly requested its deletion.
Each party will protect the other's confidential information using reasonable care. Confidential information includes information identified as confidential or that would reasonably be understood to be confidential. It excludes information that is publicly available without breach, was lawfully known before disclosure, is independently developed without reference to it, or is lawfully obtained from a third party without confidentiality obligations. Confidential information may be disclosed where required by law, court order or lawful government request.
The Services are provided on an "as is" and "as available" basis. To the maximum extent permitted by applicable law, Aarthic disclaims all warranties, express, implied, statutory or otherwise, including merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation.
We do not warrant that the Services will be uninterrupted or error-free, that all defects will be corrected immediately, or that the Services will meet every customer's specific requirements. You remain responsible for reviewing and verifying invoices, reports, GST calculations, accounting records and other outputs before relying on them.
Nothing in this Clause excludes any warranty that cannot lawfully be excluded.
To the maximum extent permitted by applicable law, Aarthic, its partners, directors, officers, employees, affiliates and licensors are not liable for any indirect, incidental, consequential, special, exemplary or punitive damages, including loss of profits, revenue, business opportunities, goodwill, data, anticipated savings, or business interruption, arising out of or relating to the use of, or inability to use, the Services.
Subject to the following paragraph, Aarthic's total aggregate liability arising from any claim relating to the Services shall not exceed the total Subscription fees actually paid by you to Aarthic during the twelve (12) months immediately preceding the event giving rise to the claim.
Exceptions to the cap
The limitation in the preceding paragraph does not apply to, and Aarthic's aggregate liability for the following shall instead not exceed three (3) times the Subscription fees paid by you during the twelve (12) months preceding the claim:
Nothing in these Terms limits or excludes liability for fraud, wilful misconduct, gross negligence, death or personal injury caused by negligence, or any other liability that cannot lawfully be limited or excluded under applicable law.
You agree to indemnify and hold harmless Sanshray IT Solutions LLP, its partners, directors, officers, employees, affiliates, licensors and service providers from any claims, losses, liabilities, damages, costs or expenses (including reasonable legal fees) arising from: your use of the Services; your violation of these Terms; your violation of applicable laws; infringement of third-party rights; communications you send through the Services under Clause 9; or Business Data or content uploaded by you that is unlawful or infringes the rights of others.
Aarthic's intellectual property indemnity
Aarthic will defend you against any third-party claim alleging that your permitted use of the Services infringes that third party's Indian intellectual property rights, and will pay damages finally awarded against you or agreed in settlement, provided you promptly notify us, allow us to control the defence, and provide reasonable cooperation. This indemnity does not apply to claims arising from your Business Data, your modification of the Services, or use of the Services in combination with anything not supplied by Aarthic. Our liability under this indemnity is subject to the cap in Clause 34.
You agree to use the Services in compliance with all applicable laws and regulations, and you are solely responsible for complying with all legal obligations applicable to your business, including taxation, GST, accounting and labour requirements. Aarthic provides software tools only and does not provide legal, tax, accounting or financial advice.
To protect the Services and our users, we may implement reasonable security measures, including monitoring for suspicious login activity, unusual account behaviour, fraudulent payment activity, API misuse and attempted compromise. Where reasonably necessary we may temporarily suspend access while investigating a suspected security incident or fraudulent activity, and will restore access promptly if the suspicion is not substantiated.
Aarthic is not liable for delay or failure to perform where it results from events beyond our reasonable control, including natural disasters, pandemics, epidemics, war, terrorism, civil unrest, labour disputes, government actions, internet or telecommunications outages, cloud service interruptions, cyberattacks and power failures. Performance of the affected obligations is suspended for the duration of the event.
If a force majeure event materially prevents provision of the Services for a continuous period exceeding thirty (30) days, either party may terminate the affected Subscription on written notice, and Aarthic will refund the pro-rata portion of any prepaid fees referable to the period during which the Services were wholly unavailable to you. No refund is payable in respect of any period during which you continued to access or use the Services, or in respect of any partial or degraded availability that did not prevent your material use of the Services.
By creating an Account or using the Services, you consent to receive electronic communications from Aarthic, including invoices, payment confirmations, subscription notices, pre-debit notifications, security alerts, maintenance notifications, legal notices and policy updates. Electronic communications satisfy any legal requirement that such communications be in writing.
We may update these Terms to reflect changes in applicable law, the Services, pricing, business practices or security requirements. The updated version will be published with a revised "Last Updated" date.
For changes that do not materially affect your rights or obligations, publication is sufficient notice.
For changes that materially affect your rights or obligations — including changes to fees, to the limitation of liability, to dispute resolution, or that materially reduce the functionality of a paid Subscription — we will give you at least thirty (30) days' notice by email to your registered address or through the Services before the change takes effect. If you do not accept the change, you may terminate your Subscription before the effective date and we will refund the unused pro-rata portion of any prepaid fees. Continued use after the effective date, having received notice, constitutes acceptance.
Nothing in this Clause permits Aarthic to vary these Terms in a manner that is unfair under applicable consumer protection law.
These Terms are governed by and interpreted in accordance with the laws of India.
Before initiating formal proceedings, both parties will make reasonable efforts to resolve any dispute through good-faith discussions. A party must first give written notice of the dispute to the other and allow thirty (30) days for resolution.
Arbitration
If the dispute is not resolved within that period, it shall be referred to and finally resolved by arbitration under the Arbitration and Conciliation Act, 1996, by a sole arbitrator appointed by agreement of the parties or, failing agreement, in accordance with that Act. The seat and venue of arbitration shall be Patan, Gujarat, India, and the language shall be English. The arbitral award shall be final and binding.
Subject to the arbitration provision above, the courts at Patan, Gujarat, India shall have exclusive jurisdiction.
Consumer rights preserved
Nothing in this Clause restricts or excludes any right you may have to bring a complaint before a Consumer Commission under the Consumer Protection Act, 2019, including the right to file where you ordinarily reside or work, nor any other non-waivable statutory right.
Severability: if any provision is held invalid, illegal or unenforceable, it shall be enforced to the maximum extent permitted by law and the remaining provisions shall remain valid and enforceable.
Waiver: failure to enforce any provision is not a waiver of it or of any other right. Any waiver must be in writing and signed by an authorised representative of Aarthic.
Assignment: you may not assign or transfer your rights or obligations without our prior written consent. Aarthic may assign these Terms in connection with a merger, acquisition, corporate restructuring, sale of assets or other lawful reorganisation, provided such assignment does not reduce your rights.
Publicity: neither party may use the other party's name, trademarks or logos in any public announcement, customer list, case study, website or promotional material without that party's prior written consent, which may be withheld at its discretion. Consent once given may be withdrawn on reasonable written notice, after which the relevant use will be discontinued within a reasonable period.
Survival: Clauses 10 (Customer Data Ownership and Licence), 11 (Data Protection and Processing Roles), 23 (Feedback), 29 (Intellectual Property), 31 (Data After Termination), 32 (Confidentiality), 33 (Disclaimer of Warranties), 34 (Limitation of Liability), 35 (Indemnification), 41 (Governing Law and Dispute Resolution), payment obligations, Schedule A, and any provision that by its nature is intended to survive, shall survive termination.
Sanshray IT Solutions LLP — Navdurga Society Patan, Gujarat, India
Email: support@aarthic.com | Telephone: +91 7016272752
A1. Roles. For Personal Data contained in Business Data, the Customer is the Data Fiduciary and Aarthic is the Data Processor.
A2. Scope and purpose. Aarthic processes such Personal Data only to provide, secure, support and maintain the Services, and only on the Customer's documented instructions (which include the Customer's use of the Services and these Terms), except where processing is required by applicable law.
A3. Categories. The Personal Data processed may include names, contact details, addresses, GST identifiers, transaction records of the Customer's customers and suppliers, and, where the Customer uses payroll features, employee identifiers including UAN, ESI number, salary and attendance records. The individuals concerned are the Customer's customers, suppliers and employees.
A4. Security. Aarthic will implement and maintain reasonable technical and organisational security measures appropriate to the risk, including encryption of data in transit, hashing of authentication credentials, role-based access control, least-privilege access, tenant isolation between customer accounts, audit logging of access and changes, monitoring and secure development practices.
A5. Confidentiality. Aarthic will ensure that personnel authorised to process Personal Data are bound by appropriate confidentiality obligations.
A6. Sub-processors. The Customer authorises Aarthic to engage sub-processors (including cloud hosting, payment, communication and monitoring providers) to process Personal Data, provided Aarthic imposes on each sub-processor data protection obligations no less protective than those in this Schedule and remains responsible for their performance. A current list of sub-processor categories is available on request, and we will give reasonable notice of any new sub-processor that materially affects the processing.
A7. Assistance. Taking into account the nature of the processing, Aarthic will provide reasonable assistance to the Customer in responding to requests from individuals exercising their rights, and in meeting the Customer's obligations relating to security, breach notification and consultation with authorities.
A8. Personal data breach. Aarthic will notify the Customer without undue delay and, in any event, generally within seventy-two (72) hours after confirming a personal data breach affecting Personal Data processed on the Customer's behalf, and will provide information reasonably available to assist the Customer in meeting its own notification obligations under the DPDP Act.
A9. Deletion and return. On termination, Aarthic will make Business Data available for export in accordance with Clause 31 and will thereafter delete or anonymise Personal Data processed on the Customer's behalf, except where retention is required by applicable law.
A10. Records and audit. Aarthic will maintain records of its processing sufficient to demonstrate compliance with this Schedule and will, on reasonable written notice and no more than once in any twelve-month period, provide the Customer with information reasonably necessary to verify compliance. Aarthic may satisfy this obligation by providing a summary of its security controls or a third-party assessment where available.
A11. Customer obligations. The Customer warrants that it has a lawful basis for the processing it instructs, has provided any notice required to the individuals concerned, and will not instruct Aarthic to process Personal Data in breach of applicable law.