Draft pending legal review
This document reflects how TrustShot is built and operated, and is being reviewed by counsel before general availability. Highlighted items are details still to be confirmed. Questions: contact@trustshot.in
1.The agreement
These Terms of Service (“Terms”) are an agreement between [Registered legal entity name] (“TrustShot”, “we”) and the organisation that signs up for TrustShot (“Customer”, “you”). The individual accepting them confirms that they are authorised to bind that organisation.
The Data Processing Addendum, Acceptable Use Policy and any order form or plan you buy form part of these Terms. If an order form signed by both parties conflicts with these Terms, the order form prevails. This is an electronic record under the Information Technology Act, 2000 and needs no physical signature.
2.Who can use TrustShot
TrustShot is a business service. You may sign up only on behalf of a business, government body or other organisation, using a work email address on that organisation’s own domain and a mobile number you control, both of which we verify. We do not offer accounts to individuals acting as consumers, and you must be at least 18.
3.The service
TrustShot lets you publish a Trust Center: a web page describing your security and compliance posture, with certifications, controls, sub-processors, policies and documents, some of which you can restrict to verified visitors. Features differ by plan, as described on our pricing page or your order form. We may improve and change the service, but will not materially reduce the functionality of a paid plan during its term.
4.Free trial
- Verification and approval. A trial starts only after you verify your work email and mobile number, accept these Terms and the Privacy Notice, and we approve the request. We may decline any request, for example when trial capacity is full or the organisation cannot be identified, and will tell you if we do.
- Length. A trial runs for 30 days from approval, followed by a 48-hour grace period in which you can buy a plan without losing anything.
- Data residency. Trial data is hosted in India.
- Deletion at the end of the trial. If you do not buy a plan by the end of the grace period, your Trust Center is taken offline and all of its content and account data is permanently deleted. It cannot be recovered. We will remind you before this happens.
- As is. Trials are provided free and without any service level, support commitment or warranty.
5.Accounts and security
You are responsible for the people you give access to your account and for keeping credentials confidential. Tell us promptly at contact@trustshot.in if you believe your account has been compromised. We may require multi-factor authentication for administrators.
6.Your content and your claims
You keep all rights in the content you publish or upload (“Customer Content”). You grant us a limited licence to host, copy, display and transmit it solely to provide the service to you and to visitors you allow.
You are responsible for what your Trust Center says. Certifications, audit reports, control descriptions and other statements are your representations to your customers. Publish only what is accurate and current, and only documents you have the right to share. TrustShot does not audit or verify your claims, and a TrustShot page is not a certification by us.
Where you collect personal data from visitors to your Trust Center, you are the Data Fiduciary for it and we process it on your behalf under the Data Processing Addendum.
7.Acceptable use
You will use TrustShot in line with the Acceptable Use Policy and applicable law. We may remove content or suspend access to the extent reasonably necessary to stop a breach of it, to comply with law or a lawful order, or to protect the service or others, and will tell you why unless we are prevented from doing so.
8.Fees and payment
- Paid plans are billed in Indian Rupees in advance for the subscription term, through our payment processor.
- Fees exclude GST and other applicable taxes, which we add to the invoice. Provide your GSTIN to receive a tax invoice that supports input tax credit.
- Fees are non-refundable except where these Terms or the law say otherwise, or where we terminate for convenience, in which case we refund the unused prepaid portion.
- If an invoice is unpaid 15 days after we notify you that it is overdue, we may suspend the paid features until it is paid.
- We may change prices for a renewal term by telling you at least 30 days before it starts.
9.Term, termination and your data
A paid subscription runs for the term you bought and renews for the same term unless either party gives notice before renewal. Either party may terminate if the other materially breaches these Terms and does not cure the breach within 30 days of notice.
On termination or expiry of a paid plan you may export your content for 30 days, after which we delete it within a further 60 days, except copies we must keep by law. Backups are overwritten on their normal cycle.
10.Confidentiality
Each party will protect the other’s non-public information with at least reasonable care, use it only for this agreement, and disclose it only to people who need to know it and are bound by similar duties, or where law requires (with notice where lawful). Restricted documents you upload are your confidential information.
11.Our intellectual property
TrustShot and its software, design and documentation belong to us and our licensors. You receive a non-exclusive, non-transferable right to use the service during your subscription. Feedback you give us may be used without obligation.
12.Warranties and disclaimers
We will provide the paid service with reasonable skill and care and in accordance with the security measures we describe. Except as stated in these Terms, the service is provided “as is”, and to the extent the law allows we disclaim implied warranties, including of merchantability and fitness for a particular purpose. We do not promise that any deal, audit or questionnaire outcome will follow from using TrustShot.
13.Limitation of liability
Neither party is liable for indirect, incidental, special or consequential loss, or for lost profits, revenue or goodwill. Each party’s total liability arising out of this agreement is limited to the fees paid or payable by you in the 12 months before the event giving rise to the claim, and, for a free trial, to ₹10,000.
These limits do not apply to your payment obligations, to either party’s indemnity obligations, to breach of confidentiality, or to liability that cannot be limited by law.
14.Indemnities
We will defend you against third-party claims that the service, as we provide it, infringes their intellectual property rights in India, and pay the resulting damages awarded. You will defend us against third-party claims arising from your Customer Content or from statements on your Trust Center, and pay the resulting damages awarded. The indemnified party must notify promptly, give reasonable cooperation, and let the other control the defence.
15.Hosting third-party content
In hosting Customer Content, TrustShot acts as an intermediary under section 79 of the Information Technology Act, 2000 and follows the due diligence required by the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021. Complaints about content on a Trust Center hosted by us can be made to our Grievance Officer as described on the Grievance Redressal page.
16.Governing law and disputes
These Terms are governed by the laws of India. The parties will first try to resolve any dispute through good-faith discussion between senior representatives for 30 days. Failing that, the dispute will be finally resolved by arbitration under the Arbitration and Conciliation Act, 1996 by a sole arbitrator appointed by mutual agreement. The seat and venue of arbitration is [City], the language is English, and, subject to arbitration, the courts at [City] have exclusive jurisdiction.
17.General
- Changes. We may update these Terms. Material changes apply to a paid subscription from its next renewal, and we will give at least 30 days’ notice by email.
- Notices. To us: contact@trustshot.in. To you: the account owner’s email.
- Force majeure. Neither party is liable for delay caused by events beyond its reasonable control.
- Assignment. Neither party may assign without consent, except to a successor of its business.
- Entire agreement. These Terms and the documents they reference are the entire agreement on their subject. If a provision is unenforceable, the rest remains in force.