1. Acceptance of Terms

These Terms and Conditions ("Terms") govern access to and use of the Intauryx platform, including all related services, applications, and functionality provided through the platform (the "Service"), operated by CFURST Solutions Pvt Ltd ("Intauryx", "Company", "we", "us", "our").

These Terms are accompanied by, and should be read together with, our Privacy Policy, which explains how we and your Organisation collect, use, share, and protect personal data processed through the Service. By accessing or using the Service, you agree to be bound by these Terms and acknowledge that you have read and understood the Privacy Policy. If you do not agree to these Terms, you must not access or use the Service.

2. Eligibility and Account Access

Access to the Service may require an account created directly or through an invitation issued by an organisation administrator.

By using the Service, you represent that:

• You are authorised to access the Service on behalf of your organisation.

• The information you provide during registration is accurate and complete.

• You will maintain the confidentiality of your account credentials.

• You are responsible for all activities that occur under your account.

• You are 18 years of age or older.

The Service is intended for professional use by adults. By accepting these Terms, each Organisation undertakes that it will not permit any individual below the age of 18 to access or use the Service under its account. If we are informed that an individual below 18 has an account, we will take the steps required to delete that account and the personal data collected from that individual. See the Privacy Policy, Section 11 (Processing of Children's Personal Data), for further detail.

3. Use of the Service

The Service is designed to support organisational workflow management, including project collaboration, document management, communication, and task tracking.

You agree to use the Service only for lawful purposes and in accordance with these Terms. Users must not:

• Attempt to gain unauthorised access to the Service or related systems.

• Upload or distribute malicious software or harmful content.

• Interfere with or disrupt the functionality or security of the Service.

• Use the Service for unsolicited communications or unlawful activities.

• Upload personal data of any third party (e.g. a client's data) to the Service unless your organisation has a lawful basis to process that data and has provided any notices required by applicable law to the data subject.

4. AI Features and Disclaimer

The Service includes features powered by artificial intelligence ("AI Features"), such as:

• An AI-powered chatbot (text and voice) that can query firm data, draft notices, legal documents, and client emails, provide regulatory or procedural guidance, and, at a User's request and only after the User confirms, create or update Entities and upload documents to Entities;

• Analysing or generating summaries from documents uploaded to the chatbot;

• Where and when made available, automatic summarisation of long emails and comments within an Entity; and

• AI-assisted drafting of, and replies to, emails in Entity comments, which you may edit and send.

AI Features are provided to assist Users and do not constitute legal, tax, financial, or other professional advice. AI-generated content may be incomplete, out of date, or inaccurate, and must be reviewed and verified by a suitably qualified professional before it is relied upon, acted upon, filed, or shared with a client.

Users remain solely responsible for reviewing AI-generated content before use, and for ensuring that anything sent, filed, or relied upon is accurate, appropriate, and compliant with applicable professional and regulatory standards. We do not warrant the accuracy, completeness, or fitness for purpose of AI-generated content, and, to the maximum extent permitted by law, are not liable for any loss arising from reliance on an AI Feature without independent professional verification. This includes reviewing any AI-drafted email reply before it is sent to a client or other external party.

Content submitted to the Service may be processed by AI Features, including by third-party AI providers acting as sub-processors under our Data Processing Addendum, as described in the Privacy Policy, Section 13 (AI and Automated Processing). We do not use content submitted through the Service to train AI models for the benefit of any party other than the Organisation to which the content belongs, except as otherwise disclosed in the Privacy Policy.

5. Email Features

The Service allows an Organisation to connect organisational mailboxes, to convert incoming emails into Email Action Items and comments on Entities, and to send comments as emails ("Email Features"). In these Terms, "Entity" means any record in the Service from a Client down to a Task, that is, a Client, Project, Assignment or Task, and "Work Item" means an Assignment or Task.

5.1 Connecting a Mailbox

• Mailboxes are connected by the Organisation Administrator, using OAuth 2.0 where the email provider supports it. Where it does not, the Organisation may connect a mailbox using an application-specific password generated by the mailbox user in the email provider's security settings and entered by the Organisation Administrator or, where the email provider permits it, the mailbox's regular account password. Our support team can provide documentation and assistance on generating an application-specific password;

• By connecting a mailbox, the Organisation Administrator confirms that the Organisation is authorised to connect it, and instructs us to read, label and send emails on the Organisation's behalf, within the permissions and credentials provided;

• We store mailbox credentials in encrypted form and use them only to provide the Email Features, as described in the Privacy Policy. An application-specific or account password may give access to the mailbox more broadly than an OAuth 2.0 permission would. The Organisation is responsible for keeping such credentials confidential, for revoking them when they are no longer needed, and for reconnecting the mailbox when credentials are changed, revoked or expire.

5.2 What the Service Imports and Sends

• We import only emails received from email addresses stored at Client level in the Service, or listed on the whitelist maintained for that mailbox's email address by the Organisation Administrator and the relevant User. The Organisation is responsible for keeping these addresses and whitelists accurate;

• Emails sent directly from a mailbox outside the Service are not tracked. Only emails sent through the Service are recorded;

• The Service does not send any email from an Organisation's mailbox on its own. An email is sent only when a User sends a comment or reply through the Service. System emails, such as account notifications, are sent from info@intauryx.com;

• If a notice of non-delivery is received, the email that was not delivered and the reason given are displayed as a comment on the relevant Entity, for the User to take any further action required.

5.3 Sending Emails

• Users act on behalf of the Organisation when sending emails through the Service, and are responsible for the content, attachments and recipients, and for the Client Visible and External Participant settings chosen, including by responding to the warning shown before a client-visible comment is sent;

• Emails sent through the Service cannot be recalled by us, and deleting content in the Service does not remove copies already delivered to recipients or held in the Organisation's mailbox;

• You must not use the Email Features to impersonate another person, to send spam, phishing or other unsolicited bulk or unlawful messages, or to forward third-party confidential information without authority, and must obtain any permissions or consents needed to process third-party personal data.

5.4 Attachments and Scanning

• Attachment size limits apply;

• Uploaded documents may be automatically scanned for viruses and malware. If a document is found to be infected, it will be quarantined, the User will be informed, and the document will be deleted once the User confirms. We do not guarantee that scanning will detect all malware, and Users should take care in opening attachments.

5.5 Third-Party Providers, Suspension and Disconnection

• Email delivery and receipt depend on third-party mail providers and networks, which may impose rate limits, revoke permissions or change their security requirements. We do not guarantee that any email will be delivered, received, or processed in a timely manner;

• We may suspend email synchronisation and require a mailbox to be reconnected where authentication fails, credentials become invalid, permissions are revoked, a security error is detected, or this is needed to address a security threat or a breach of these Terms;

• The Organisation Administrator may disconnect a mailbox at any time, after which we stop accessing it. Emails and records already imported remain in the Organisation's account in accordance with the Privacy Policy and the Data Processing Addendum. OAuth authorisations, application-specific passwords and account passwords can also be revoked or changed through the email provider.

5.6 Data and AI

Emails and attachments handled through the Email Features form part of the Organisation's data (Section 7) and are processed in accordance with the Privacy Policy and the Data Processing Addendum. AI-assisted email drafting and replies are AI Features (Section 4), and must be reviewed before being sent.

5.7 Service Limitations and Liability

• We will take reasonable measures to maintain the reliability and security of the Email Features, but we do not guarantee uninterrupted access, error-free synchronisation, or the successful transmission or delivery of all messages;

• To the maximum extent permitted by law, CFURST Solutions Pvt Ltd shall not be liable for indirect, incidental, special or consequential losses arising from third-party email provider outages, authentication failures, delivery delays, incorrect recipient information, or misuse of connected mailboxes or credentials by anyone other than us;

• Nothing in this Section excludes liability that cannot lawfully be excluded, and the general limitation of liability in Section 12 also applies.

6. Data Protection

For the purposes of the DPDP Act, the Organisation that administers a Service account acts as the Data Fiduciary in respect of the personal data of its own clients and personnel that it processes using the Service. CFURST Solutions Pvt Ltd acts as a Data Processor in that context, processing such data solely on the Organisation's documented instructions, and as an independent Data Fiduciary in respect of account and platform-usage data collected directly from Users for its own purposes.

Full detail on the following, as it relates to you as an individual User, is set out in our Privacy Policy, which forms part of your agreement with us:

• What personal data we collect and why (Privacy Policy, Sections 4–5);

• How we obtain and how you may withdraw consent (Privacy Policy, Section 6);

• How and with whom personal data may be shared, including cross-border transfers (Privacy Policy, Sections 7–8);

• How long data is retained and how it is secured, including our breach-notification obligations (Privacy Policy, Sections 9–10);

• How AI Features process personal data, including any third-party AI providers involved (Privacy Policy, Section 13);

• Your rights as a Data Principal — access, correction, erasure, grievance redressal, nomination, and consent withdrawal — and how to exercise them (Privacy Policy, Section 14); and

• How to reach our Grievance Officer (Privacy Policy, Section 15).

Where your Organisation is the Data Fiduciary for Organisational Data you work with on the Service, the detailed terms governing our processing of that data on the Organisation's behalf — including sub-processors, audit rights, and data return/deletion on termination — are set out in a separate Data Processing Addendum, entered into by your Organisation's Administrator at the time of Organisation onboarding, and available to Organisation Admins at any time from Org Settings.

In the event of any inconsistency between this Section and the Privacy Policy or Data Processing Addendum on a data-protection matter, the Privacy Policy or Data Processing Addendum (as applicable) shall prevail.

7. Organisational Ownership of Data

Content and information created or uploaded within the Service, including client information, project data, documents, communications (including emails and attachments handled through the Email Features), and work items, belong to the Organisation that manages the account, save that individual Users retain the rights described in the Privacy Policy in respect of their own personal data.

Users acknowledge that their Organisation's administrators may access, manage, or remove such data as part of the Organisation's administration of the Service, and that the Organisation is responsible, as Data Fiduciary, for ensuring such access complies with the DPDP Act. Access to emails and Email Action Items is governed by the roles and settings configured by the Organisation.

8. Confidential Information

Users may have access to confidential organisational information through the Service.

Users agree to maintain the confidentiality of such information and to access it only as permitted by their assigned role within the platform.

Unauthorised disclosure, distribution, or misuse of confidential information is prohibited.

9. Intellectual Property

The Service and all related software, features, and content, including AI Features, are our property, or that of our licensors, and are protected by applicable intellectual property laws.

Users are granted a limited, non-exclusive, non-transferable right to access and use the Service solely for authorised organisational purposes.

No part of the Service may be copied, modified, distributed, or reverse engineered without prior written permission.

10. Service Availability

We strive to maintain reliable availability of the Service. However, access may be temporarily interrupted due to maintenance, system updates, or technical issues.

We do not guarantee uninterrupted or error-free operation of the Service, including AI Features and the Email Features, and we do not guarantee the delivery or receipt of any email.

11. Suspension or Termination

Access to the Service may be suspended or terminated if:

• A user violates these Terms;

• Unauthorised or harmful activity is detected; or

• An organisation administrator revokes user access.

Upon termination, access to the Service may be restricted or discontinued, and personal data will be handled in accordance with the Privacy Policy.

12. Limitation of Liability

To the maximum extent permitted by law, we shall not be liable for indirect, incidental, special, or consequential damages arising from the use or inability to use the Service, including from reliance on AI Features (see Section 4) or from the delivery, non-delivery or content of emails sent through the Email Features (see Section 5).

This includes, but is not limited to, loss of data, business interruption, or loss of profits.

Nothing in these Terms excludes or limits any liability that cannot lawfully be excluded or limited.

13. Modifications to the Terms

We reserve the right to update or modify these Terms at any time. Where changes materially affect the processing of your personal data, we will seek fresh consent or provide notice as required under the DPDP Act. Continued use of the Service following such updates constitutes acceptance of the revised Terms.

14. Governing Law

These Terms shall be governed by and interpreted in accordance with applicable laws in the jurisdiction where the Company operates, including the Digital Personal Data Protection Act, 2023.

15. Contact Us

If you have any questions about these Terms and Conditions, please contact us at:

Email: support@intauryx.com

For questions about how your personal data is processed, please contact our Grievance Officer as set out in the Privacy Policy, Section 15. If you are an Organisation Administrator with questions about our Data Processing Addendum, use the contact details in that document.