Last Updated: June 25, 2025

These Terms of Service (“Terms”) form a legally binding agreement between you (“Client” or “you”) and ezee.ai Technologies Pvt. Ltd. (“ezee.ai”, “we”, “us”, or “our”) governing your use of all ezee.ai applications, services, products, APIs, and associated assets (collectively, the “Platform”). These Terms must be read together with our Data Processing Agreement (DPA), Service Level Agreement (SLA), and Privacy Policy, all of which are incorporated by reference.

1. Acceptance of Terms

By signing a Master Service Agreement (MSA), submitting a purchase order, clicking “Accept”, or by accessing and using the Platform, you:

• Acknowledge that you have read, understood, and agree to be bound by these Terms;

• Warrant that you have authority to bind your institution to these Terms;

• Agree to use the Platform solely in accordance with all applicable banking, financial, privacy, and data security regulations.

2. Permitted Use

The Platform is licensed solely for use by:

• Licensed banks, NBFCs, fintech firms, regulated financial entities, and their authorized personnel;

• Government bodies or development finance institutions under statutory mandates;

• Enterprise clients engaged in lawful financial operations.

You may not:

• Use the Platform in jurisdictions where such use is unlawful;

• Permit access to unauthorized users, contractors, or sub-processors without prior written consent.

3. Compliance with Laws & Regulatory Obligations

You are solely responsible for ensuring your use of the Platform complies with:

• Jurisdiction-specific regulations (e.g., RBI, SEBI, APRA, MAS, DFSA, ZATCA, OCC, FSCA);

• Data residency laws, cross-border transfer rules, KYC/AML mandates, and credit bureau regulations;

• Any relevant open banking, account aggregator, or consumer protection frameworks.

We provide a configurable platform, but do not assume liability for regulatory breaches due to incorrect configurations, workflows, or data handling by your organization.

4. Security, Infrastructure & Data Sovereignty

We maintain enterprise-grade infrastructure adhering to:

• ISO/IEC 27001, SOC 2 Type II, GDPR, HIPAA, PCI-DSS, NIST, and regional standards;

• End-to-end encryption in transit and at rest using AES-256/SHA-2 standards;

• Dedicated environments, multi-tenant segmentation, zero-trust architecture, and regular vulnerability audits.

Unless explicitly agreed otherwise in your MSA:

• All client data is stored within region-specific cloud zones;

• We follow least privilege principles, role-based access, and immutable audit trails;

• All access to PII, financial data, or sensitive fields is logged and auditable.

5. Data Processing, Privacy & Subprocessors

All data processing is governed by our Data Processing Agreement (DPA). Key principles:

• We act as data processor, and you remain the data controller;

• We do not access client data unless explicitly authorized for support or compliance;

• We engage only pre-vetted subprocessors, subject to the same confidentiality and regulatory standards.

Cross-border transfers (if any) are subject to:

• Standard Contractual Clauses (SCC),

• Binding Corporate Rules (BCR),

• Regional adequacy approvals, as required by applicable data laws (e.g., GDPR, PDPA, CCPA).

6. Service Levels & Availability

We commit to:

• 99.9% uptime monthly, excluding scheduled maintenance (with 72-hour prior notice);

• Real-time status dashboards, incident logs, and RTO/RPO guarantees for enterprise clients;

• 24/7 monitoring, high-availability zones, and auto-failover support for mission-critical modules.

Support response timelines are defined in the SLA tier committed under your enterprise contract.

7. Confidentiality & Non-Disclosure

Each party shall:

• Treat all non-public technical, commercial, operational, and user information as strictly confidential;

• Prevent disclosure to any third party without written consent (excluding government-mandated disclosures);

• Continue confidentiality obligations for five (5) years post-termination or as defined in the MSA.

8. Audit & Regulatory Requests

Upon justified request by your regulator, auditor, or internal risk team:

• ezee.ai shall provide access to logs, policies, subprocessors, and compliance documentation;

• If required, allow a remote audit or third-party audit of our platform environment (under NDA);

• Notify you immediately of any regulatory inquiries, breach notifications, or government access requests relating to your data.

9. Restrictions

You shall not:

• Attempt to reverse-engineer, replicate, or compete with the Platform;

• Use the Platform for credit products or workflows outside the permitted scope in your contract;

• Process data in violation of financial secrecy laws, sanctions, embargoes, or blacklisted entities;

• Circumvent audit logs or compliance guardrails.

Violation may result in immediate suspension, legal action, and contract termination.

10. Intellectual Property

• All IP, source code, algorithms, documentation, and visual assets are the exclusive property of ezee.ai;

• No rights, licenses, or interests are transferred to you except those expressly granted;

• Custom configurations built using our tools remain your organization’s IP, not the base platform.

11. Indemnification

You agree to indemnify, defend, and hold harmless ezee.ai from any:

• Third-party claims,

• Regulatory penalties,

• Damages arising from your misuse, non-compliance, or breach of these Terms.

This includes misconfigurations, use for unlawful lending, fraud, data breaches caused by your environment, or failure to comply with local regulations.

12. Limitation of Liability

To the fullest extent permitted by law:

• ezee.ai’s liability for all claims under these Terms shall not exceed the fees paid in the preceding 12 months;

• ezee.ai shall not be liable for indirect, special, punitive, incidental, or consequential damages;

• In no event shall we be liable for compliance breaches or regulatory fines attributable to your configurations or operational processes.

13. Termination & Suspension

We may suspend or terminate your access if:

• You materially breach these Terms or applicable laws;

• Your license expires or remains unpaid;

• Required by a court order, regulator, or law enforcement authority.

Upon termination:

• Data export, transfer, and deletion will follow your MSA or DPA terms;

• Post-termination access to logs, audit data, and reports shall be governed by retention policies agreed in your contract.

14. Governing Law & Dispute Resolution

• These Terms are governed by the laws of India unless your MSA states otherwise;

• Any dispute shall be subject to confidential arbitration in Chennai, India (or mutually agreed jurisdiction);

• Regulatory relief or urgent injunctive relief may be sought in courts with proper jurisdiction.

15. Amendments

ezee.ai reserves the right to modify these Terms with 30 days’ notice. Continued usage after modifications implies acceptance. Major changes will be notified via email and/or your admin portal.

16. Contact Information

Legal & Compliance Department
ezee.ai Technologies Pvt. Ltd.
Chennai, India – Head Office
51 Narasinga Colony, Maduvinkirai, Guindy
CHENNAI – 600032
Email: legal@ezee.ai