Company Policies and Guidelines

Our startup provides web hosting, web development, BI/MIS analytics and dashboards, and VPS reselling. To ensure legal compliance and protect both our company and our clients, we establish comprehensive formal policies. These policies serve as binding contracts (for customers) and internal rules (for employees), helping prevent abuse, limit liability, and define responsibilities. This manual covers customer-facing policies (Terms of Service, Privacy, Acceptable Use, etc.) as well as internal company policies (conduct, data security, etc.), all organized in a clear legal format.

Terms of Service (Customer Agreement)

Our Terms of Service (TOS) form a legal contract between the company and its clients. They outline the scope of services, payment terms, customer obligations, and legal protections. Key points include:

• Acceptance of Terms: Using our services (website, software, hosting, dashboards, etc.) implies acceptance of the TOS. Users must be at least 18 and have authority to bind their organization.
• Services Provided: We clearly describe the offered services (e.g. shared hosting plans, VPS, web development projects, analytics solutions) and any features or limits. (Service descriptions may be incorporated by reference to published plans.)
• Payment and Billing: Fees are due in advance (monthly or annually) in Indian Rupees (unless otherwise agreed). Billing cycles, payment methods, and due dates are specified. Late or missed payments may incur penalties or lead to service suspension. All accounts auto-renew unless cancelled in writing before renewal.
• Renewal and Cancellation: Clients may cancel services by providing notice (e.g. 30 days) before the next billing cycle. Terminations will take effect at the end of the current term. Any prepaid fees for unused service periods are handled per our refund policy below.
• Refund Policy: By default, we do not provide refunds for unused service periods (e.g. partial-month subscriptions). In special cases we may offer pro-rated refunds for the unused portion of a term. This no-refund policy (or our specific refund formula) is clearly stated to avoid disputes.
• Acceptable Use: Clients must use services only for lawful purposes and in compliance with our Acceptable Use Policy (below). Prohibited activities (e.g. hacking, spamming, infringement) may result in immediate termination.
• Intellectual Property: Clients retain ownership of their data and content. We grant each client a limited, non-exclusive license to use our software and services. The company retains all rights to its own software, tools, and trademarks. Unauthorized copying or reverse-engineering of our proprietary software is prohibited. Any custom code or work-for-hire (if commissioned) will be owned by the client, subject to agreed terms.
• Confidentiality: We will safeguard client confidential information; similarly, clients must keep our proprietary information confidential. A separate non-disclosure agreement can be executed if sensitive data is shared.
• Disclaimers and Warranty: Services are provided “as is” without warranty of any kind. We disclaim all implied warranties (merchantability, fitness, non-infringement, uninterrupted service, etc.). We make no guarantees beyond any written SLA (below).
• Limitation of Liability: To the maximum extent allowed by law, neither party will be liable for indirect, incidental, or consequential damages. Our total liability for any claim is limited to the fees paid by the client in the preceding 12 months. This limitation protects the startup from excessive claims.
• Indemnification: Clients agree to indemnify and hold us harmless from any third-party claims arising from the client’s use of services, breach of these terms, or violation of law. Conversely, we will defend the client against claims arising from our negligence.
• Termination: We may suspend or terminate service immediately for breaches of these terms (e.g. illegal use, non-payment, violation of AUP). Clients may also terminate by cancelling as per above. Upon termination, all outstanding balances become due.
• Governing Law and Jurisdiction: These Terms are governed by the laws of India. Any disputes will be resolved in the courts of India. For global operations, we will comply with applicable international laws (e.g. GDPR for EU customers or CCPA for US customers) and may specify arbitration or alternate dispute resolution as appropriate.
• Amendments: We reserve the right to update the TOS. Major changes will be communicated via email and posted on our website. Continuing to use the service after notice constitutes acceptance of the new terms.

Acceptable Use Policy (AUP)

Our Acceptable Use Policy defines prohibited activities on our network and platforms, helping prevent abuse and legal trouble. Clients must not use our hosting or services to:

• Engage in any illegal activity, including fraud, hacking, identity theft, or distribution of illegal content. All local and international laws apply. .
• Distribute malware, viruses, Trojan horses, or phishing schemes. (We use security tools and will remove harmful code if found.)
• Send spam or unsolicited bulk emails using our servers. (This includes using our SMTP or hosting for mass-mailing without permission.)
• Run illegal gambling, pyramid schemes, or promotions that violate regulations.
• Host pirated or counterfeit content that infringes copyrights, trademarks, or other intellectual property. This includes unauthorized distribution of software, images, or media. We comply with DMCA takedown procedures (or Indian equivalents) for infringement notices.
• Publish pornographic, hate, extremist, or defamatory material. (Content that “professes hatred for a particular race or group” is forbidden.)
• Perform network abuse: port scanning, brute-force attacks, denial-of-service attacks, or other attempts to disrupt networks.
• Use excessive system resources beyond normal limits (e.g. CPU, bandwidth) without prior arrangement.
• Violate the privacy of others (e.g. harvesting personal data or breaching data protection laws).

Violation of the AUP will result in immediate suspension of service and possible termination. Users are given notice of abuse reports and may be required to rectify issues. This policy helps ensure a safe, lawful hosting environment.

Privacy and Data Protection Policy

We respect user privacy and comply with data protection laws. Our Privacy Policy (posted on our website) explains how we collect, use, and protect personal information. Key elements include:

• Data Collection: We collect client and user data necessary for service delivery – for example, contact information, billing details, technical logs, and usage analytics. We may also collect website analytics or transaction records.
• Purpose Limitation: Personal data is used only for specified purposes such as account management, service improvement, and legal compliance. We do not collect unnecessary data.
• Consent: We obtain explicit consent before collecting personal data. Clients agree to our privacy practices upon account creation. For EU or Indian users, we comply with GDPR/DPDP rules on consent and data subject rights.
• Data Sharing: We do not sell personal data. Data may be shared with third-party service providers (e.g. payment processors, email services) under strict confidentiality. We ensure such providers adhere to privacy obligations. Any cross-border data transfers follow legal requirements and use appropriate safeguards.
• Data Retention: We retain personal data only as long as needed. Billing records may be kept (e.g. 7 years) for tax purposes. Users can request deletion or correction of their data; we have procedures to honor such requests (data subject rights).
• Security Measures: We implement strong safeguards for stored data, including encryption (SSL/TLS for data in transit; encryption at rest when feasible) and secure servers. Access to personal data is restricted to authorized personnel.
• Cookies and Tracking: On our websites/apps, we disclose any use of cookies or tracking (e.g. Google Analytics) and provide opt-out options if required by law.
• Breach Notification: In the event of a data breach, we will promptly notify affected individuals and authorities as mandated by law (e.g. under India’s IT Act and DPDP rules).
• Transparency: Our Privacy Policy is written in clear language and kept up-to-date with actual practices. We review it regularly and update it when services change.

By following these principles, we ensure compliance with India’s Digital Personal Data Protection Act (2023) and similar regulations, protecting users’ rights to control their data.

Service Level Agreement (SLA)

Our Service Level Agreement sets expectations for reliability and support. For example:

• Uptime Guarantee: We strive for 99.9% uptime on our hosting and VPS services (measured monthly). Planned maintenance windows will be announced in advance. Downtime beyond the guaranteed level entitles the customer to service credits per the SLA.
• Support Response: We provide technical support via email or ticket system. Critical issues receive a response within 4 hours during business days; non-critical issues within 24 hours.
• Remedies: If we fail to meet the SLA terms (e.g. downtime exceeds guarantee), affected customers will receive service credits or prorated service time. These remedies are the sole exclusive remedies available.
• Exclusions: The SLA excludes force majeure events and issues outside our control (customer’s network, external attacks, etc.).

An SLA aligns customer expectations and gives a basis for compensation if service levels drop. We make our SLA transparent so clients understand the support commitment.

Billing, Payment, and Refund Policy

We adopt clear financial terms to prevent future disputes. Key points:

• Currency and Taxes: All prices are in Indian Rupees (INR) unless stated otherwise. Applicable GST or other taxes are added at checkout.
• Payment Terms: Invoices are payable within 30 days of issue. Recurring services are billed automatically at each renewal. Acceptable payment methods (bank transfer, credit card, etc.) are specified.
• Late Payments: Late fees or service suspension may apply to overdue accounts. We reserve the right to suspend or disable accounts with unpaid balances until payment is received.
• Refunds/Cancellations: As noted above, we generally do not refund unused service periods. In the rare case of service cancellation within a trial period, a prorated refund may be offered. All refund conditions are stated up front (e.g. “no refund after 7 days”). This avoids ambiguity.
• Price Changes: We may adjust pricing with advance notice. Existing customers are notified at least one billing cycle in advance before any rate increase.

These policies ensure clients know their financial obligations and avoid billing disputes. We emphasize that payments secure access and resources, making refunds unsustainable except under our limited terms.

Intellectual Property and Confidentiality

We respect intellectual property rights and confidentiality:

• Customer Data: Clients own all their content, data, and materials stored or generated on our platforms. We will not claim ownership of client data.
• Company IP: We retain ownership of all company intellectual property, including software, platform code, templates, and documentation. Clients receive only limited licenses to use our proprietary tools for the term of service.
• Copyright/Trademark: Both parties agree not to infringe upon each other’s trademarks, copyrights, or trade secrets. The AUP prohibits hosting infringing content. We comply with the DMCA (or India’s equivalent) by promptly responding to valid infringement notices.
• Confidential Information: Any non-public information shared between the company and client (e.g. business plans, source code, financials) is confidential. It may only be used to perform contractual obligations and not disclosed to third parties.
• Publication/Endorsement: Clients may not use our trademarks or logos without permission (and vice versa). Testimonials or case studies require mutual agreement.

These clauses protect both parties’ IP and sensitive information. They clarify that our services do not transfer ownership of intellectual property except as explicitly agreed.

Security Measures

Protecting data and systems is paramount. We enforce strong information security controls, including:

• Encryption: We use industry-standard encryption for data in transit (TLS/SSL) and, where practical, for data at rest. All customer data stored on our servers is protected by encryption and secure access controls.
• Access Control: Administrative access to servers and databases is limited to authorized personnel only. We employ strong passwords, two-factor authentication, and role-based permissions.
• Backups: Regular backups of client data and system configurations are performed to prevent data loss. Backups are stored securely, with periodic restoration tests.
• Network Security: Firewalls, intrusion detection/prevention systems, and monitoring tools guard against attacks. We regularly update and patch all software and operating systems to address vulnerabilities.
• Monitoring and Audits: We conduct periodic security audits and vulnerability scans to identify and fix weaknesses. This includes code reviews and penetration testing as needed.
• Incident Response Plan: We maintain a documented incident response plan. In the event of a security breach or significant outage, this plan guides our containment, assessment, and recovery efforts. Impacted clients and authorities will be notified promptly.
• Employee Training: All staff are trained on security best practices and data protection principles. Regular awareness programs ensure everyone understands their role in maintaining security.

By following these practices (encryption, audits, incident planning), we align with recommended security standards and reduce the risk of data breaches.

Governing Law and Dispute Resolution

This policy manual and any customer agreements are governed by the laws of India. Clients agree that any disputes will be handled in Indian courts. We may also specify an exclusive jurisdiction (e.g. courts in a particular city). Alternative dispute resolution (arbitration or mediation) clauses can be added for efficiency. We include standard clauses on severability (invalid provisions do not void the rest of the policy) and force majeure (excusing performance for events beyond control, like natural disasters). All legal notices (e.g. termination, claim notices) must be in writing and delivered as specified. These clauses provide clarity on how legal conflicts will be resolved.

Internal Policies and Employee Conduct

Beyond customer terms, we maintain internal policies for our two founders (and any future employees) to ensure smooth operations and compliance:

• Code of Conduct: Founders and staff are expected to act ethically, honestly, and professionally. Harassment, discrimination, or retaliation of any kind is prohibited. We comply with applicable labor laws regarding workplace conduct.
• Confidentiality: All employees and contractors must sign confidentiality agreements protecting client data and proprietary information. This includes source code, business plans, and personal data.
• Data Protection Training: Staff handling personal data receive training on our Privacy and Security policies. They understand data subject rights and breach procedures.
• Work Hours and Leave: Founders agree on working hours and schedule. If and when we hire, we will define employment terms (probation, leave entitlement, benefits) in line with Indian labor regulations.
• Expense and Asset Policy: Company funds and assets (servers, software licenses) must be used only for legitimate business purposes. Reimbursement of expenses is subject to approval.
• Vendor and Partner Agreements: We ensure any third-party vendors (e.g. cloud providers) sign Data Processing Agreements to maintain privacy standards. Vendors are vetted for compliance with relevant regulations.

These internal policies promote a professional culture and ensure that even as a small startup, we follow good governance. We periodically review and update them as the team grows.

Policy Enforcement and Review

All personnel and clients are expected to adhere to these policies. Violations may result in corrective action: for clients, suspension or termination of service; for employees, disciplinary measures up to termination. We have processes for reporting policy violations (e.g. a dedicated email or ticket for complaints).

These policies take effect immediately and will be reviewed at least annually or whenever laws or business practices change. We maintain version control (date-stamping each update) and publicly post the current customer policies on our website. Any material changes trigger internal checklists and client notifications to ensure continued compliance.

Conclusion and Legal Considerations

This comprehensive set of policies is designed to minimize future legal risk and clearly communicate our commitments and rules. We emphasize using precise and truthful language (avoiding absolutes) and tailoring content to our actual practices. While templates and examples guide our drafting, we will consult a qualified attorney to adapt these policies to our specific operations. Properly implemented, these policies provide a solid legal foundation for our startup’s growth.

Sources: Our policies draw on best practices and legal guidelines for online services, ensuring they are grounded in current laws and industry standards.