Terms of Service

These Terms of Service ("Terms") govern your access to and use of the Niyantra platform, including the web application, API, PII detection service, and browser extension (collectively, the "Service"), provided by Niyantra Technologies Private Limited ("Niyantra," "we," "us," or "our"), a company incorporated under the laws of India.

By accessing or using the Service, you agree to be bound by these Terms. If you are using the Service on behalf of an organization, you represent and warrant that you have the authority to bind that organization to these Terms.

1. Service Description

Niyantra is a Sovereign AI Control Plane that provides enterprise-grade tools for:

• PII Detection and Prevention: Real-time scanning and blocking of personally identifiable information across AI platforms, using a hybrid ML and regex detection engine supporting 100+ PII types including Indian-specific identifiers (Aadhaar, PAN, UPI, ABHA) and HIPAA PHI.
• Compliance Monitoring: Pre-configured policy packs for DPDPA, HIPAA, SOC 2, and GDPR compliance with audit logging and analytics.
• Smart Routing: Automatic routing of AI requests to the most cost-effective model while respecting security constraints.
• Document Redaction: Visual PDF redaction that preserves layout while removing PII.
• Shadow AI Detection: Detection and control of unauthorized AI tool usage across the organization.
• Browser Extension: Chrome and Firefox extension for real-time PII protection on AI platforms including ChatGPT, Claude, Gemini, Perplexity, and Grok.

The specific features available to you depend on your subscription tier and the configuration set by your organization administrator.

2. Account and Access

2.1 Account Registration

To use the Service, you must create an account or be provisioned access by your organization administrator. You agree to provide accurate and complete information during registration and to keep your account credentials secure.

2.2 Organization Accounts

The Service operates on a multi-tenant architecture. Each organization ("Tenant") has a designated super administrator who is responsible for managing users, API keys, policies, and compliance settings within their tenant.

2.3 API Keys

API keys provide programmatic access to the Service and must be treated as confidential credentials. You are responsible for all activity that occurs under your API keys. You must immediately notify us if you suspect unauthorized use of your API key. API keys can be revoked and regenerated through the dashboard.

2.4 SSO Authentication

Enterprise customers may authenticate through Google SSO or other supported identity providers. Your use of SSO is additionally subject to the terms of your identity provider.

3. Usage Limits and Restrictions

3.1 Fair Use

Usage of the Service is subject to the limits associated with your subscription tier. These may include limits on:

• Number of API requests per month
• Number of users per tenant
• Number of documents processed for redaction
• Data retention period
• Number of active policy packs

3.2 Prohibited Uses

You agree not to:

• Use the Service for any unlawful purpose or in violation of applicable laws
• Attempt to circumvent, disable, or interfere with the PII detection or security features of the Service
• Reverse engineer, decompile, or disassemble any part of the Service
• Use the Service to process data in a manner that violates the privacy rights of third parties
• Share or resell access to the Service without our prior written consent
• Attempt to access other tenants' data or resources
• Use automated tools to scrape, crawl, or extract data from the Service beyond the provided APIs
• Intentionally submit content designed to evade PII detection for malicious purposes

4. Data Ownership

4.1 Your Data

You retain all rights, title, and interest in and to your data ("Customer Data"). Customer Data includes all text, documents, files, and other content that you submit to the Service. We do not claim ownership of your Customer Data.

4.2 License to Process

By using the Service, you grant us a limited, non-exclusive license to process your Customer Data solely for the purpose of providing and improving the Service. This includes scanning for PII, generating compliance reports, and producing aggregated analytics.

4.3 Aggregated Data

We may create aggregated, de-identified data derived from Customer Data for the purpose of improving the Service, conducting research, and publishing benchmarks. Such aggregated data will not identify you or your organization.

4.4 Niyantra Intellectual Property

The Service, including its software, algorithms, ML models, user interface, and documentation, is owned by Niyantra and protected by intellectual property laws. These Terms do not grant you any rights to our intellectual property except for the limited right to use the Service as described herein.

5. Service Levels and Availability

5.1 Availability Target

We target 99.9% uptime for the Service, measured on a monthly basis, excluding scheduled maintenance windows. Scheduled maintenance will be communicated at least 48 hours in advance.

5.2 Performance

We target a median API response time of less than 200 milliseconds for PII detection requests under normal operating conditions. Actual performance may vary depending on request complexity, document size, and system load.

5.3 SLA for Enterprise Customers

Enterprise customers with a paid subscription may be eligible for a Service Level Agreement (SLA) with defined uptime commitments and remedies. The specific SLA terms are set forth in your enterprise agreement and may include:

• Monthly uptime guarantees with service credits for downtime
• Priority incident response times
• Dedicated support channels
• Custom data retention policies

5.4 No Warranty of Absolute Detection

While we strive for high accuracy in PII detection, no automated system is perfect. We do not warrant that the Service will detect all instances of PII or prevent all data leakage. You are responsible for implementing additional security measures as appropriate for your organization's risk profile.

6. Limitation of Liability

6.1 Disclaimer of Warranties

THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

6.2 Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL NIYANTRA, ITS DIRECTORS, EMPLOYEES, OR AFFILIATES BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, DATA, OR GOODWILL, ARISING OUT OF OR IN CONNECTION WITH YOUR USE OF THE SERVICE, REGARDLESS OF THE THEORY OF LIABILITY.

6.3 Cap on Liability

Our total aggregate liability to you for all claims arising out of or relating to these Terms or the Service shall not exceed the greater of (a) the amount you paid to Niyantra in the twelve (12) months preceding the claim, or (b) one hundred thousand Indian Rupees (INR 1,00,000).

6.4 Third-Party Services

Niyantra integrates with third-party LLM providers (OpenAI, Anthropic, Google) and identity providers. We are not responsible for the availability, accuracy, or conduct of these third-party services. Any data you transmit to third-party providers through the Service is subject to their respective terms and privacy policies.

7. Indemnification

You agree to indemnify and hold harmless Niyantra and its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in connection with:

• Your use of the Service in violation of these Terms
• Your violation of any applicable law or regulation
• Your infringement of any third-party rights
• Customer Data submitted by you to the Service

8. Termination

8.1 Termination by You

You may terminate your use of the Service at any time by contacting your organization administrator or by emailing admin@guardflow.tech. Organization administrators may deactivate user accounts and API keys through the dashboard.

8.2 Termination by Us

We may suspend or terminate your access to the Service, in whole or in part, at any time and for any reason, including:

• Violation of these Terms or any applicable policies
• Non-payment of subscription fees
• Suspected unauthorized or fraudulent use
• Request by law enforcement or government authority
• Discontinuation of the Service (with at least 90 days notice)

8.3 Effect of Termination

Upon termination:

• Your access to the Service will be revoked immediately
• All API keys associated with your account will be deactivated
• You may request an export of your Customer Data within 30 days of termination
• After 30 days, we will delete your Customer Data in accordance with our data retention policies, except where retention is required by law

9. Confidentiality

Each party agrees to protect the confidential information of the other party using the same degree of care it uses to protect its own confidential information, but in no event less than reasonable care. Confidential information includes:

• Customer Data and compliance reports
• API keys and authentication tokens
• Pricing and commercial terms
• Technical specifications and product roadmaps

10. Governing Law and Dispute Resolution

10.1 Governing Law

These Terms shall be governed by and construed in accordance with the laws of India, without regard to its conflict of law provisions.

10.2 Jurisdiction

Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts located in Bengaluru, Karnataka, India.

10.3 Arbitration

For enterprise customers, disputes may be resolved through binding arbitration under the Arbitration and Conciliation Act, 1996, as amended. The seat of arbitration shall be Bengaluru, India. The language of arbitration shall be English.

11. General Provisions

11.1 Entire Agreement

These Terms, together with any applicable enterprise agreement and our Privacy Policy, constitute the entire agreement between you and Niyantra regarding the Service and supersede all prior or contemporaneous communications and proposals.

11.2 Severability

If any provision of these Terms is found to be unenforceable or invalid, that provision shall be limited or eliminated to the minimum extent necessary, and the remaining provisions shall continue in full force and effect.

11.3 Waiver

The failure of Niyantra to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision.

11.4 Assignment

You may not assign or transfer these Terms or your rights under them without our prior written consent. We may assign these Terms in connection with a merger, acquisition, or sale of assets.

11.5 Notices

We may provide notices to you via email, through the dashboard, or by posting on the Service. Notices to us should be sent to admin@guardflow.tech.

12. Changes to These Terms

We reserve the right to modify these Terms at any time. Material changes will be communicated at least 30 days prior to becoming effective. For enterprise customers with existing agreements, changes will take effect at the next renewal period unless otherwise agreed.

Your continued use of the Service after the effective date of revised Terms constitutes your acceptance of the updated Terms.

13. Contact Information

For questions about these Terms, please contact us: