Terms of Service & Advisory Engagement Scope

01 Nature of Technical Privacy Services

Kavach Privacy operates as a specialized Cybersecurity & Privacy Engineering Partner for Indian startups, B2B SaaS platforms, FinTechs, and public enterprises. Our commercial services include:

• Read-Replica Database Schema Scans: Inspecting database architectures for unmasked Aadhaar, PAN, and personal data columns without live production write access.
• Telemetry & Log Scrubbing: Authoring pull requests and regex middleware to prevent plain-text PII streaming to Datadog, Sentry, CloudWatch, or third-party webhooks.
• Consent Infrastructure: Designing universal consent lifecycle engines, SHA-256 consent receipt ledgers, and event-driven cascade erasure webhooks.
• Vendor Risk Dossiers: Co-authoring enterprise bank procurement dossiers to satisfy Section 8 compliance reviews for Tier-1 Indian financial institutions.

02 Statutory Disclaimer: Engineering Advisory vs. Formal Legal Representation

Engagement with Kavach Privacy does not create an attorney-client privilege. Where statutory certification, judicial filings, or formal legal opinions are required before MeitY or the High Courts of India, our work product is delivered to and vetted by our partner corporate data privacy advocates or your own corporate legal counsel.

03 Self-Assessment Tool & Penalty Exposure Estimates

Our interactive diagnostic tool located at assessment.html is provided as a free educational and benchmarking utility:

• Indicative Projections: The Projected Maximum Exposure (PME in ₹ Crore) values displayed on the assessment scorecard are mathematical estimates derived from the statutory ceiling caps in Schedule 1 of the DPDPA 2023 multiplied by selected operational scale and data sensitivity tiers.
• Adjudication Solely by DPBI: Actual penalties under Section 33 of the Act are determined solely by the Data Protection Board of India (DPBI) following formal inquiry, taking into account statutory mitigating factors, remedial actions taken, and the financial impact on affected Data Principals.
• No Guarantee of Immunity: Completing the assessment or achieving a high diagnostic score does not grant statutory immunity from regulatory enforcement notices or audits.

04 Confidentiality, VPC Security & Non-Disclosure

We treat all client architectural blueprints, database schemas, API specs, and business models with the highest standard of enterprise confidentiality:

05 Intellectual Property Rights

• Platform & Proprietary Materials: All software, website design, text, diagnostic scoring algorithms, graphics, and trademarks on kavachprivacy.in are the intellectual property of Kavach Privacy Technologies and protected under the Indian Copyright Act, 1957.
• Client Deliverables & Custom Code: All custom remediation code, pull requests, automated Jira backlogs, and tailored Vendor Risk Dossiers authored specifically for your company under an executed client statement of work become the exclusive property of the client upon settlement of agreed sprint fees.

06 Commercial Sprints & Payment Terms

Commercial terms for our sprint packages (including the Readiness Diagnostic Sprint, the Full Enterprise Remediation Sprint, and custom PSU/Enterprise multi-phase engagements) are tailored to architectural complexity and executed via formal Statement of Work (SOW):

• All prices are quoted in Indian Rupees (INR) and are subject to applicable Goods and Services Tax (GST).
• Invoices are payable within 15 calendar days from the date of issuance unless specified otherwise in the governing SOW.
• Sprint fees cover engineering hours, diagnostic script executions, PR authoring, and delivery of the verified audit dossier.

07 Limitation of Liability

To the maximum extent permitted by Indian law, Kavach Privacy and its directors, engineers, and partners shall not be liable for any indirect, incidental, special, consequential, or punitive damages—including lost profits, lost data, business interruption, or statutory penalties imposed by the Data Protection Board of India or any regulatory tribunal resulting from:

• Client's failure to merge, deploy, or maintain delivered technical remediation pull requests in production;
• Undisclosed database clusters, shadow microservices, or rogue third-party processors not provided during the audit discovery phase;
• Client actions or modifications taken contrary to our written technical recommendations.

In all events, Kavach Privacy's aggregate financial liability arising under or relating to any commercial advisory engagement shall be strictly capped at the total professional fees paid by the client to Kavach Privacy under the relevant SOW during the preceding three (3) months.

08 Governing Law, Dispute Resolution & Jurisdiction

These Terms and any commercial dispute arising out of or in connection with our services shall be governed exclusively by and construed in accordance with the substantive laws of the Republic of India, without regard to conflict of law principles.

The parties agree that any legal action, dispute, suit, or proceeding arising under or in connection with these Terms shall be subject to the exclusive jurisdiction of the competent Civil Courts located in Chennai, Tamil Nadu, India.

09 Contact & Formal Communications

For any legal notices, contractual queries, or questions regarding these Terms, please reach out directly:

• Corporate Inquiries: support@kavachprivacy.in
• Statutory DPDPA Inquiries: grievance@kavachprivacy.in
• Direct WhatsApp:
• Direct WhatsApp: LinkedIn +91 97913 88549
• Operational Address: Kavach Privacy Squad, Chennai, Tamil Nadu, PIN 600001, India