The agreement

Terms of Service

These Terms of Service ("Terms") govern your access to and use of the DPDPA Workflow web application and related services (the "Service"), provided by DPDPA Workflow ("DPDPA Workflow", "we", "us", or "our"). The Service helps organisations run a structured gap assessment and manage a compliance programme under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and the Digital Personal Data Protection Rules, 2025.

Please read these Terms carefully. Section 8 (Not Legal Advice), Section 11 (Disclaimer of Warranties) and Section 12 (Limitation of Liability) are especially important and limit our liability to you.

By accessing or using the Service, or by clicking to accept these Terms, you agree to be bound by them. If you are entering into these Terms on behalf of an organisation, you represent that you are authorised to bind that organisation, and "you" refers to both you and that organisation. If you do not agree, you must not use the Service.

The Service is a business-to-business tool intended for organisations and the professionals who work for them. You must be at least 18 years old and capable of forming a binding contract to use the Service. The Service is not intended for, or directed at, children.

The Service uses Google OAuth sign-in. When you sign in, Google shares your name, email address and profile photograph with us so that we can create and authenticate your account. Your use of Google sign-in is also subject to Google's own terms and privacy policy.

You are responsible for:

• maintaining the security of the Google account used to access the Service;
• all activity that occurs under your account; and
• promptly notifying us at hello@deepdivelabs.tech of any unauthorised access or security concern.

We may suspend or terminate accounts that we reasonably believe are compromised, fraudulent, or used in breach of these Terms.

You agree not to, and not to permit anyone to:

• use the Service in violation of any applicable law or regulation;
• upload or process content you have no right to provide, or that infringes the rights of others;
• attempt to gain unauthorised access to the Service, other accounts, or our systems;
• probe, scan, or test the vulnerability of the Service except with our prior written consent;
• reverse engineer, decompile, or attempt to extract the source code of the Service, except to the extent this restriction is prohibited by law;
• introduce malware or interfere with the integrity or performance of the Service; or
• resell, sublicense, or commercially exploit the Service without our authorisation.

Your content. You retain all rights in the data and content you submit to the Service, including your compliance-assessment content ("Your Content"). You grant us a limited, non-exclusive licence to host, process, store, transmit and display Your Content solely to provide and improve the Service to you, and as otherwise permitted in our Privacy Policy.

Our handling of personal data. Our processing of personal data is described in our Privacy Policy, which forms part of these Terms. Where we process personal data on your behalf in connection with your use of the Service, we do so as described in that Policy and in any applicable data-processing terms.

Your responsibilities. You are responsible for the accuracy, quality and legality of Your Content and for having the necessary rights and consents to provide it to us.

The Service, including its software, design, content, templates, assessment frameworks, and trademarks (but excluding Your Content), is owned by DPDPA Workflow or our licensors and is protected by intellectual property laws. We grant you a limited, non-exclusive, non-transferable, revocable right to access and use the Service in accordance with these Terms. We reserve all rights not expressly granted.

If you give us suggestions or feedback about the Service, you grant us a perpetual, irrevocable, royalty-free licence to use it without restriction or obligation to you.

This is important. DPDPA Workflow is a software tool that helps you organise and document a compliance programme. It is not a law firm, and it does not provide legal advice. The content, templates, gap-assessment questions, scores, recommendations and outputs generated by the Service are provided for general informational and organisational purposes only.

• Using the Service does not create a lawyer-client relationship and is not a substitute for advice from qualified legal counsel licensed in India.
• The Service does not guarantee that your organisation is, or will become, compliant with the DPDP Act, the DPDP Rules, or any other law.
• You are solely responsible for your organisation's compliance decisions. You should consult qualified legal counsel before relying on any output of the Service for legal or regulatory purposes.

We aim to provide a reliable Service but do not guarantee that it will be uninterrupted, error-free, or available at all times. We may modify, suspend, or discontinue all or part of the Service, and we may perform scheduled or emergency maintenance, with or without notice. We are not liable for any unavailability of the Service.

The Service relies on third-party services (such as Google for authentication and our hosting and infrastructure providers). We are not responsible for the availability, accuracy, or practices of third-party services, and your use of them may be subject to their own terms.

To the maximum extent permitted by law, the Service is provided "as is" and "as available", without warranties of any kind, whether express, implied or statutory, including any implied warranties of merchantability, fitness for a particular purpose, accuracy, and non-infringement. We do not warrant that the Service will meet your requirements or that any output will be accurate, complete, current, or suitable for your particular circumstances.

To the maximum extent permitted by applicable law:

• We will not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenue, data, goodwill, or business, arising out of or relating to your use of (or inability to use) the Service, even if we have been advised of the possibility of such damages.
• Our total aggregate liability arising out of or relating to these Terms or the Service will not exceed the greater of (a) the total fees you paid to us for the Service in the twelve (12) months preceding the event giving rise to the claim, or (b) INR 10,000.

Nothing in these Terms limits liability that cannot be limited or excluded under applicable law.

You agree to indemnify, defend, and hold harmless DPDPA Workflow and its officers, employees, and agents from and against any claims, damages, liabilities, losses, and expenses (including reasonable legal fees) arising out of or related to: (a) Your Content; (b) your use of the Service; (c) your breach of these Terms; or (d) your violation of any law or the rights of any third party.

These Terms apply for as long as you use the Service. You may stop using the Service and delete your account at any time. We may suspend or terminate your access if you breach these Terms, if required by law, or if we discontinue the Service. On termination, your right to use the Service ends, and we will handle your personal data as described in our Privacy Policy (including erasure in line with Section 8(7) of the DPDP Act). Provisions that by their nature should survive termination (including Sections 5, 6, 8, 11, 12, 13 and 15) will survive.

These Terms are governed by the laws of India, without regard to conflict-of-laws principles. Subject to any non-waivable rights you have under applicable law, the courts at [Bengaluru / your registered seat], India will have exclusive jurisdiction over any dispute arising out of or relating to these Terms or the Service. Nothing in these Terms affects a Data Principal's statutory right to raise a grievance or complain to the Data Protection Board of India under the DPDP Act.

We may update these Terms from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, notify you within the Service or by email. Your continued use of the Service after the changes take effect constitutes your acceptance of the revised Terms.

Questions about these Terms can be sent to: DPDPA Workflow · Email: hello@deepdivelabs.tech