Terms and Conditions

Anvesana AI Due Diligence Platform

Effective: 15 June 2026

1. Definitions

In these Terms and Conditions ("Terms"), the following definitions apply:

2. Acceptance of Terms

2.1 By accessing the Platform, submitting an API Key, uploading any Document, or using any feature of the Service, you acknowledge that you have read, understood, and agree to be bound by these Terms.

2.2 If you are accepting these Terms on behalf of a company or other legal entity, you represent and warrant that you have the authority to bind such entity to these Terms. If you lack such authority, you must not use the Platform.

2.3 You must be at least 18 years old (or the age of legal majority in your jurisdiction) to use the Platform.

3. Service Description

3.1 The Platform provides AI-powered due diligence analysis for mergers, acquisitions, and corporate transactions. Specifically, the Platform:

3.2 The Platform is a decision-support tool. It does not replace professional legal, financial, accounting, or regulatory advice.

⚠ CRITICAL: The Platform's analyses, scores, and recommendations are generated by artificial intelligence and heuristic algorithms. They are not, and shall not be construed as, legal advice, financial advice, investment advice, tax advice, or any form of professional counsel. You must independently verify all findings with qualified professionals before making any transaction decisions.

4. Accounts & API Keys

4.1 Access to the Platform requires a valid API Key issued by the Provider. Each API Key is bound to a single Client identity and must not be shared, transferred, or disclosed to any third party.

4.2 You are solely responsible for:

4.3 The Provider reserves the right to revoke, suspend, or regenerate any API Key at any time without prior notice if a security compromise is suspected or these Terms are violated.

4.4 API Keys must never be included in URLs, committed to version control systems, transmitted over unencrypted channels, or logged in client-side code.

5. Acceptable Use

5.1 You agree not to use the Platform to:

5.2 Document uploads are limited to 50 MB per file. Permitted file types are: .txt, .md, .pdf, .docx, .csv.

6. Data Processing & Privacy

6.1 Data Controller / Data Fiduciary

The Client is the data controller (GDPR) or data fiduciary (DPDPA) of all Personal Data contained within uploaded Documents. The Provider acts as a data processor (GDPR) or data processor (DPDPA) and processes Personal Data only to the extent necessary to deliver the Service.

6.2 Data Collection

The Platform collects and processes the following data:

6.3 Purpose Limitation

Your data is processed solely for the following purposes:

6.4 Data Retention

Engagement Data is retained for the duration of the Client's active subscription. Upon termination, the Provider will delete or return all Engagement Data within 30 calendar days unless retention is required by applicable law or regulation.

6.5 Data Subject Rights

Where applicable under GDPR, DPDPA, CCPA, or equivalent legislation, data subjects have the right to:

To exercise these rights, contact the Provider at the address listed in Section 20.

6.6 International Data Transfers

If Engagement Data is transferred across international borders, the Provider will ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, or equivalent mechanisms recognised under applicable law.

6.7 Sub-processors

The Platform uses the following sub-processors:

7. Data Security

7.1 The Provider implements the following security measures to protect Engagement Data:

7.2 The Provider shall notify the Client of any confirmed data breach affecting the Client's Engagement Data without undue delay, and in any event within a timeframe that enables the Client to meet its own notification obligations under applicable law (including GDPR Article 33 and DPDPA Section 8). The notification will include, to the extent known: the nature of the breach, the categories and approximate number of data subjects affected, likely consequences, and measures taken or proposed to address the breach.

7.3 The Client acknowledges that no method of electronic transmission or storage is 100% secure, and the Provider cannot guarantee absolute security.

8. Intellectual Property

8.1 The Platform, including its source code, algorithms, scoring methodologies, risk category frameworks, UI/UX design, documentation, and all improvements thereto, are and remain the exclusive intellectual property of the Provider.

8.2 The Client retains all ownership rights in Documents uploaded to the Platform. Uploading a Document does not transfer any intellectual property rights to the Provider.

8.3 The Client is granted a limited, non-exclusive, non-transferable licence to use the Analysis output solely for the Client's internal due diligence purposes in connection with the specific transaction(s) for which the analysis was performed.

8.4 The Client shall not:

9. AI Disclaimer & Limitations

⚠ IMPORTANT — READ CAREFULLY: This section contains critical disclaimers about the nature and limitations of AI-generated analysis.

9.1 The Platform uses artificial intelligence (including large language models and keyword-based heuristic algorithms) to analyse document content and generate risk assessments. AI-generated output may contain errors, omissions, hallucinations, false positives, and false negatives.

9.2 Specifically, the Client acknowledges that:

9.3 The Platform's output does not constitute and shall never be relied upon as:

9.4 The Client is solely responsible for independently verifying all findings, recommendations, and risk assessments with appropriately qualified legal, financial, tax, and regulatory professionals before acting on or relying upon the Platform's output.

10. Limitation of Liability

10.1 TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE PROVIDER SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO:

10.2 THE PROVIDER'S TOTAL AGGREGATE LIABILITY FOR ALL CLAIMS ARISING FROM OR RELATED TO THESE TERMS OR THE SERVICE SHALL NOT EXCEED THE GREATER OF (A) THE TOTAL FEES PAID BY THE CLIENT IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM, OR (B) FIVE HUNDRED US DOLLARS (USD $500).

10.3 THE PLATFORM IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, COMPLETENESS, NON-INFRINGEMENT, OR UNINTERRUPTED SERVICE.

10.4 Nothing in these Terms shall exclude or limit liability for death or personal injury caused by negligence, fraud or fraudulent misrepresentation, or any other liability that cannot be excluded or limited by applicable law.

11. Indemnification

11.1 The Client shall indemnify, defend, and hold harmless the Provider, its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising from or related to:

11.2 The Provider shall indemnify, defend, and hold harmless the Client from and against third-party claims, liabilities, damages, losses, costs, and expenses (including reasonable legal fees) arising directly from: (a) a data breach caused by the Provider's failure to maintain the security measures described in Section 7; (b) the Provider's infringement of a third party's intellectual property rights in the Platform itself (excluding any Client-uploaded content); or (c) the Provider's gross negligence or wilful misconduct. The Provider's indemnification obligations under this clause are subject to the aggregate liability cap set out in Section 10.2.

12. Subscription & Payment

12.1 Access to the Platform may require a paid subscription. Subscription fees, billing cycles, and payment terms are as set forth at the time of purchase.

12.2 Payments are processed by Stripe Inc. The Provider never stores credit card numbers, CVVs, or banking credentials. All payment data handling is subject to PCI DSS compliance via Stripe's certified infrastructure.

12.3 If payment fails, the Client's subscription enters a "past due" state. During this period, access to new document uploads may be suspended, but existing reports and analyses remain accessible.

12.4 The Provider reserves the right to modify subscription pricing with 30 days' prior notice. Price changes take effect at the start of the next billing cycle following the notice period.

12.5 Refund requests must be submitted within 14 days of the relevant billing date. Refunds are issued at the Provider's sole discretion. Nothing in this clause limits any statutory refund or withdrawal rights that cannot be waived under applicable consumer protection law in the Client's jurisdiction, including the EU Consumer Rights Directive (2011/83/EU) and the Indian Consumer Protection Act 2019.

13. Termination

13.1 Either party may terminate these Terms at any time by providing 30 days' written notice to the other party.

13.2 The Provider may immediately terminate or suspend access if:

13.3 Upon termination:

14. Confidentiality

14.1 Both parties agree to maintain strict confidentiality of all information disclosed in connection with these Terms and the Service, including but not limited to:

14.2 The confidentiality obligations in this section do not apply to information that: (a) is or becomes publicly known through no act or omission of the receiving party; (b) was already in the receiving party's lawful possession before disclosure by the disclosing party; (c) is independently developed by the receiving party without reference to or use of the confidential information; or (d) is required to be disclosed to investors, auditors, regulators, or legal advisers in the ordinary course of business, provided the receiving party discloses only the minimum necessary and gives prompt written notice to the disclosing party where permitted by law.

14.3 Subject to clause 14.2, confidential information may only be disclosed:

14.4 The confidentiality obligations in this section survive termination of these Terms for a period of 5 years.

15. Export Controls & Sanctions

15.1 The Client shall not use the Platform in violation of any applicable export control laws or economic sanctions, including those administered by:

15.2 The Client represents that it is not (a) located in a comprehensively sanctioned country or territory, (b) designated on any restricted party list, or (c) owned or controlled by any restricted party.

16. Governing Law & Dispute Resolution

16.1 These Terms shall be governed by and construed in accordance with the laws of India, without regard to its conflict of laws principles.

16.2 Any dispute, controversy, or claim arising out of or relating to these Terms shall be resolved by binding arbitration administered under the rules of the Mumbai Centre for International Arbitration (MCIA). The seat of arbitration shall be Mumbai, Maharashtra, India. The language of arbitration shall be English.

16.3 Notwithstanding the foregoing, either party may seek injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property rights or confidential information.

16.4 For Clients who are natural persons acting outside their trade or profession in a Member State of the European Union, the courts of the Member State in which the Client is domiciled shall have mandatory jurisdiction and no arbitration clause in these Terms shall deprive them of that right. For all other Clients subject to mandatory consumer protection laws in their jurisdiction, nothing in these Terms shall deprive them of the protections afforded by such laws.

17. Changes to Terms

17.1 The Provider reserves the right to modify these Terms at any time. Material changes will be communicated with at least 30 days' notice via email to the Client's registered contact or via a notice on the Platform.

17.2 Continued use of the Platform after the effective date of modified Terms constitutes acceptance of the modified Terms.

17.3 If the Client does not agree to modified Terms, the Client must stop using the Platform before the effective date and may request termination under Section 13.

18. Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable by a court of competent jurisdiction, such provision shall be modified to the minimum extent necessary to make it valid and enforceable, or if modification is not possible, shall be severed from these Terms. The remaining provisions shall continue in full force and effect.

19. Entire Agreement

These Terms, together with any Order Forms, Data Processing Agreements, or other documents expressly incorporated by reference, constitute the entire agreement between the parties regarding the Platform and supersede all prior or contemporaneous agreements, representations, and understandings, whether written or oral.

20. Contact Information

For questions, data subject requests, or legal notices:

Anvesana AI Due Diligence Platform
Email: [email protected]
Privacy Contact: [email protected]

Registered entity name and address to be updated upon incorporation. Until that time, all contractual and legal notices should be directed to the email addresses above.