Terms of service
Last updated: 15 October 2026
These terms are an agreement between , trading as , of ("we", "us") and the clinic, salon, spa, studio or other business that signs up ("you") for (the "Service"). By ticking "I agree" at sign-up, or "I accept" in the app, the person doing so confirms they may bind the business.
Contents: 1 Service · 2 Trial · 3 Fees · 4 Your account · 5 Your data · 6 Acceptable use · 7 Availability & support · 8 Confidentiality · 9 Liability · 10 Ending · 11 Changes · 12 Law · Schedule A — Data-processing agreement
1. The Service
The Service is online software for appointments, client and patient records, billing, stock, staff and related work, provided as a subscription at your own web address (for example yourname.techhubdigital.com). What each plan includes is shown on our pricing page. We may improve the Service over time; we will not remove a main feature of your plan during a paid period without telling you first.
2. Free trial
New accounts get a free trial of 14 days with all features. When the trial ends the account is paused until you choose a plan. Your data is kept while it is paused (see clause 10).
3. Fees and payment
- Fees are as shown on our pricing page or agreed in writing, per location, plus GST where applicable. Monthly plans are paid a month in advance; yearly plans are paid a year in advance (yearly = 10 months' price for 12 months).
- You can pay by UPI from the app's Plan & billing page; a payment counts once we have confirmed it in our bank account. We issue a tax invoice (or a payment receipt, if we are not GST-registered) for every payment.
- If a period ends unpaid, the account stays usable for a short grace period (shown in the app), then locks to the renewal page only. Nothing is deleted.
- Fees already paid are not refundable, except where the law requires or we end the agreement without cause (clause 10.3).
- We will give at least 30 days' notice of a price change; it applies from your next period.
4. Your account
Give each person their own login with the access their work needs, keep passwords private, and remove logins of people who leave. You are responsible for what is done with your logins. Tell us at once at if you think a login has been misused.
5. Your data
- You own your data. Everything you or your clients put into the Service (client and patient records, appointments, bills, photos, consent forms, staff records) belongs to you. You can download it at any time.
- Your clients' and patients' personal data. For that data you are the data fiduciary under India's Digital Personal Data Protection Act, 2023 (the "DPDP Act") and its Rules, and we are your data processor. Schedule A sets out how we process it and forms part of these terms.
- Your own account data (the details of the business and of the people who sign up and pay) is handled under our Privacy policy, with us as data fiduciary.
- We do not sell your data, use it for advertising, or use your clients' records to train AI models. We may use counts and other anonymous, aggregated figures (for example, how many bills are made each day across all customers) to run and improve the Service.
6. Acceptable use
Use the Service lawfully and only for your own business. Do not: upload malware or try to break into the Service or another customer's account; resell the Service; send messages through it that the recipient has not agreed to; or store data you have no right to hold. Clinical, tax and accounting decisions remain yours — check figures with your doctor, accountant or tax adviser as needed.
7. Availability, backups and support
- We aim for the Service to be available 99.5% of each month, excluding maintenance we announce in advance. The app keeps working on a weak connection and catches up when it is back.
- We keep automatic restore points of your data (hourly while you work, daily, and weekly) and copy them off the server. Backups are a safety net, not a guarantee: keep your own downloads of important records too.
- Support is by phone, WhatsApp and email, during working hours. With your permission, our support team may open your account in a read-only view to help you; each such view is time-limited and recorded.
8. Confidentiality
Each of us keeps the other's non-public business information confidential and uses it only for this agreement, except where the law requires disclosure.
9. Liability
- Nothing in these terms limits liability that cannot be limited by law, including for fraud.
- Otherwise, to the extent the law allows, our total liability for all claims in any 12 months is limited to the fees you paid us in those 12 months, and neither of us is liable for indirect or consequential loss, loss of profit or loss of goodwill.
- You are responsible for having a lawful basis (including your clients' consent where needed) for the data you put into the Service and the messages you send through it.
10. Ending the agreement
- You can stop at any time by not renewing; the Service runs to the end of the paid period.
- We may suspend an account that is unpaid, or used in breach of clause 6, after notice where reasonable.
- We may end the agreement for any reason with 60 days' notice, refunding any unused prepaid fees.
- After the agreement ends, the account stays locked but intact for 90 days so you can renew or download your data. After that we delete your data as set out in Schedule A, clause 9.
11. Changes to these terms
We may update these terms. For a change that matters, we will tell you at least 30 days before it applies, and the app will ask your owner login to accept the new version. If you do not accept, you may stop using the Service and we will refund any unused prepaid fees.
12. Law and disputes
These terms are governed by the laws of India. Each of us will first try to settle a dispute by talking; if that fails within 30 days, the courts at where we are registered have exclusive jurisdiction.
Schedule A — Data-processing agreement (DPDP Act, 2023)
This schedule applies to the personal data of your clients, patients, guardians, staff and other people that you or they enter into the Service ("Personal Data"). Words such as data fiduciary, data processor, data principal and personal data breach have the meanings given in the DPDP Act.
1. Roles
You are the data fiduciary for the Personal Data and decide why and how it is processed. We are your data processor and process it only on your behalf.
2. Instructions
We process Personal Data only to provide the Service as these terms describe, as you configure and use it, and as you otherwise ask us in writing — or where Indian law requires (in which case we tell you first, unless the law forbids it). If we think an instruction breaks the law, we will tell you.
3. What is processed
| People | Your clients and patients (including children, through their guardians), their guardians and nominees, your staff, and people who book online or use your patient portal. |
|---|---|
| Data | Identity and contact details; appointments, bills, payments, packages and memberships; health and treatment information, prescriptions, consent forms and photos you choose to record; staff attendance and payroll details; consent records and activity logs. |
| Purpose | Running your business through the Service: booking, records, billing, reminders you send, reports, backups and support. |
| Duration | For as long as this agreement lasts, then as set out in clause 9. |
4. Our people
Only our staff who need access to provide or support the Service may access Personal Data. They are bound by confidentiality and trained on handling it. Support access to your account is read-only, time-limited and recorded.
5. Security
We keep reasonable security safeguards, including:
- encrypted connections (HTTPS) and encryption of stored integration keys;
- each business's data kept separate; individual logins with role-based access; passwords stored hashed; limits on repeated failed sign-ins;
- activity logs of access and changes, kept for at least one year;
- automatic backups with restore points, kept on separate storage;
- keeping software up to date and testing changes before release.
6. Sub-processors
You agree that we may use the following sub-processors. Each is bound by obligations at least as protective as this schedule. We will tell you at least 30 days before adding or replacing one, and you may object; if we cannot address a reasonable objection, you may end the agreement and receive a refund of unused prepaid fees.
| Sub-processor | What for | Where |
|---|---|---|
| Hostinger (VPS) | Hosting the Service and storing backups | India |
| Cloudflare | Secure connection and protection from attacks (data passes through, not stored) | Global network |
| Meta (WhatsApp Business Platform) | Only if you connect WhatsApp: delivering messages you send | As per Meta |
| Hostinger (email) | Service emails (sign-in codes, notices) | As per Hostinger |
Personal Data is stored in India. We will not move it to a country the Government of India has restricted.
7. Helping you with your duties
The Service gives you tools to meet your duties as data fiduciary: a privacy notice and consent record for each person, separate consent for reminders and offers, guardian consent for children, a patient portal where people can see and change their consent, download their data and send requests, a requests list with 90-day due dates, a copy-of-data export, and erasure that respects records you must keep by law. Where these tools are not enough, we will reasonably help you respond to a data principal's request or a question from the Data Protection Board.
8. Personal data breaches
If we become aware of a personal data breach affecting your Personal Data, we will tell you without undue delay and in any case within 24 hours, with what we know: what happened, when, what data and how many people may be affected, what we have done and what you should do. We will update you as we learn more and help you with your intimation to the Data Protection Board (including the detailed report due within 72 hours) and to the people affected. We keep a register of breaches.
9. Return and deletion
You can download your data at any time while the account is open. After the agreement ends and the 90-day period in clause 10.4 of the terms passes, we delete the Personal Data from the live Service; copies in backups expire within a further 90 days. We may keep what the law requires us to keep (for example, the invoices we issued you), and the activity logs we must keep for one year.
10. Records and audits
We keep records of our processing and, on reasonable notice (no more than once a year, unless after a breach or at a regulator's request), will answer your written questions about our safeguards and share summaries of relevant reports. On-site audits are by agreement, at your cost, and subject to confidentiality.
11. Your responsibilities
You will give people your privacy notice and get any consent the law requires before entering their data or messaging them, keep your notice and grievance contact up to date in Setup → Privacy, answer their requests within the time the law sets, and keep treatment and tax records for as long as the law requires.
12. Contact
Privacy and grievance officer: , the Grievance Officer, TechHub Digital, , .