Terms of Use

# Terms of Use

Effective date: 2026-07-26

These Terms of Use ("Terms") govern access to and use of the DFM Finance Control Centre application (the "Service") provided by [Company Legal Name] ("Company", "we", "us", or "our").

This document is a commercial readiness draft and must be reviewed by qualified legal counsel before public launch or customer signature.

## 1. Business Use Only

The Service is intended for authorized business users of customer organizations. It is not intended for consumer, public, personal, or child-directed use.

## 2. Accounts and Access

Users must access the Service only through authorized accounts. Customers and administrators are responsible for:

- Creating and managing authorized users.
- Assigning correct permissions.
- Removing access when users leave or no longer need access.
- Keeping passwords and credentials confidential.
- Reviewing user activity where appropriate.

Users must not share accounts or attempt to bypass access controls.

## 3. Customer Data

Customers and users are responsible for the accuracy, legality, and completeness of all uploaded source data, mappings, assumptions, and configuration inputs.

Users must not upload data they are not authorized to process. Users must not upload unrelated sensitive personal data, passwords, secrets, malware, or unlawful material.

## 4. Outputs and No Professional Advice

The Service generates working-paper outputs, dashboards, MIS views, and exports from user-provided data, configured mappings, and application logic.

The Service does not provide legal, tax, audit, accounting, valuation, or financial advice. Outputs are support tools only. Users must independently verify outputs before relying on them for audit, statutory, tax, reporting, management, or commercial decisions.

## 5. Acceptable Use

Users must not:

- Attempt unauthorized access to another user, client, tenant, batch, document, export, or support issue.
- Upload malicious files, exploit files, zip bombs, path traversal archives, or unsafe content.
- Interfere with Service availability, security, or performance.
- Reverse engineer, copy, sublicense, resell, or distribute the Service except as permitted by a written agreement.
- Use the Service in violation of applicable law or third-party rights.

## 6. Admin and Developer Functions

Admin and developer functions are privileged. They may include user management, client control, mappings, fixed columns, developer controls, support issue review, and operational configuration.

Only authorized personnel may use these functions. Misuse may lead to suspension, investigation, deletion of access, or legal action.

## 7. AI and External Services

Hosted AI or external API features must not be enabled unless the customer or authorized operator approves the provider, data-sharing scope, retention policy, and commercial terms.

Local RAG or local LLM functions may be used where configured, subject to the Privacy Policy and Data Processing Terms.

## 8. Intellectual Property

The Service, application code, workflow design, templates, documentation, and related intellectual property are owned by the Company or its licensors, except for customer data and third-party open-source components.

Customer data remains owned by the customer or its applicable owner. Third-party components remain governed by their own licenses.

## 9. Third-Party Software

The Service uses open-source libraries. Third-party notices are provided in `THIRD_PARTY_NOTICES.md` or the applicable release documentation.

## 10. Availability and Changes

The Service may be updated, modified, suspended, or interrupted for maintenance, security, operational, or business reasons. We may change features, workflows, and documentation over time.

## 11. Confidentiality

Users may access confidential customer or business information through the Service. Users must protect confidential information and use it only for authorized business purposes.

## 12. Disclaimer

To the maximum extent permitted by law, the Service is provided "as is" and "as available" unless a written agreement states otherwise. We disclaim implied warranties of merchantability, fitness for a particular purpose, non-infringement, and uninterrupted or error-free operation.

## 13. Limitation of Liability

To the maximum extent permitted by law, the Company is not liable for indirect, incidental, consequential, special, punitive, loss-of-profit, loss-of-data, business interruption, or reliance damages. Any liability cap should be defined in the applicable signed customer agreement.

## 14. Suspension and Termination

We may suspend or terminate access for security risk, non-payment, legal requirement, misuse, unauthorized access, or breach of these Terms or the applicable agreement.

## 15. Governing Law

Governing law, venue, dispute resolution, payment terms, service levels, and liability caps must be specified in the signed customer agreement.

## 16. India-Specific Terms

Where the customer, deployment, users, or processing activities are located in India, the following additional terms should be read with the signed customer agreement:

- The Service is a business software tool for finance automation, audit support, and MIS reporting. It does not replace professional judgment by a chartered accountant, auditor, tax advisor, lawyer, company secretary, or other licensed professional.
- The customer is responsible for ensuring that uploaded records, invoices, GST data, accounting records, payroll/employee data, supplier data, customer data, and audit records may lawfully be processed through the Service.
- The customer is responsible for verifying outputs before using them for statutory audit, internal audit, tax, GST, Companies Act, income-tax, management reporting, banking, investor, or regulatory purposes.
- Where Indian data protection law applies, the customer generally acts as Data Fiduciary for personal data included in uploaded business records, and the Company acts as Data Processor or service provider unless a signed agreement states otherwise.
- Users must not upload Aadhaar numbers, PAN details, bank credentials, GST portal credentials, passwords, payment card data, or unrelated sensitive personal data unless the customer has a lawful basis and a written agreement expressly permits such processing.
- The Service should be operated with reasonable security practices and procedures appropriate to the sensitivity of the data and the deployment model.
- Any India governing law, court jurisdiction, arbitration seat, stamp duty, tax, GST treatment, invoicing, and payment terms must be finalized in the signed customer agreement.

## 17. Contact

[Company Legal Name]

[Company Address]

Legal contact: [legal contact email]