Private Beta Terms, Data Notice & Mutual Confidentiality

Agreement and acceptance

These Private Beta Terms, Data Notice and Mutual Confidentiality Terms (the “Terms”) govern access to the Prathm.AI website, applications, dashboards, APIs and related beta services (the “Services”). In these Terms, Operator means GS Periwal acting as founder and current operator of the pre-incorporation Prathm.AI project; Customer means the invited organization; and User means each authorized person accessing the Services.

By selecting an acceptance checkbox, creating or activating an account, or using the Services after receiving these Terms, the User and Customer confirm that they have read and accepted them. A person accepting for a Customer represents that they have authority to bind that Customer. If that authority is absent, the person must not accept or use the Services.

If an invitation, pilot confirmation, signed NDA or later data processing agreement conflicts with these Terms, the more specific written agreement controls for the subject it addresses.

1. Pre-incorporation status and transition

Customer acknowledges that Prathm.AI is not yet an incorporated company. Until a written novation or replacement agreement is accepted, these Terms are between Customer and the Operator. Incorporation alone does not automatically release or replace either party.

After incorporation, the Operator may ask Customer to accept replacement terms or a written novation naming the new Prathm.AI entity. Continued access may be conditioned on that acceptance. No statement in these Terms represents that incorporation has already occurred.

2. Eligibility, organizational authority and accounts

The Services are offered only to invited business users aged 18 or older, and not for personal or consumer use. Customer must identify an authorized administrator and ensure that each User is permitted to access Customer Data.

• Use unique credentials; do not share accounts or permit unauthorized access.
• Keep passwords confidential, use multi-factor authentication when offered, and promptly revoke departed or reassigned Users.
• Notify security@prathm.ai promptly of suspected compromise, mistaken access or unauthorized disclosure.
• Customer is responsible for activity performed through its accounts except to the extent caused by Operator’s breach of these Terms.

3. Private beta purpose and permitted use

The Services are an early-stage, invite-only beta provided solely to evaluate document intelligence, extraction, reconciliation, dashboards and related workflows. They are not a production system, legal record, accounting system, compliance system or guaranteed system of record.

• Do not use beta outputs to make payments, shipments, contractual commitments, regulatory filings, employment decisions or other consequential decisions without independent human verification.
• Do not use the Services for safety-critical, medical, legal, financial-advice or other regulated decision-making.
• Features, schemas, results and availability may change; test data may require correction, reprocessing or reset.
• No production integration, automated external action or customer-of-record change is permitted unless separately approved in writing.

4. Customer Data and processing permission

Customer retains ownership of documents, prompts, records and other content submitted by or for Customer (“Customer Data”). Customer grants Operator a limited, non-exclusive right to host, copy, transmit, extract, analyze, reconcile, display and secure Customer Data only as needed to provide, test, troubleshoot and protect the Services, comply with law, and perform the agreed beta evaluation.

Operator will not sell Customer Data or authorize it to be used to train generalized AI models without Customer’s express written opt-in. Operator may use aggregated operational metrics only where they do not identify Customer, a User, a document, a counterparty or confidential business information.

5. Customer authority and restricted data

Customer represents that it has lawful authority, permissions and notices required to submit and process Customer Data. The beta is intended for ordinary business documents such as purchase orders, order confirmations, invoices, shipping documents and technical packs.

• Do not upload passwords, API keys, private encryption keys or production credentials.
• Do not upload payment-card data, bank-login data, government identity documents, health data, children’s data or special-category personal data.
• Limit personal data to basic business-contact information unless a separate written Data Processing Agreement has been completed.
• Do not upload third-party documents where Customer lacks the right to disclose or process them.

6. Document processing and AI limitations

The Services may use OCR, machine learning, generative AI and deterministic application logic. Extracted fields, document classifications, links, reconciliations, summaries and answers may be incomplete, delayed, duplicated or incorrect. Customer must compare material outputs against the original documents.

Confidence scores, status labels and dashboard indicators are decision-support signals, not guarantees. Operator is not responsible for Customer actions taken without appropriate review of source documents and context.

7. Third-party providers and international processing

The Services may rely on providers such as Amazon Web Services and AWS Textract, Google Gemini, Anthropic and Vercel for hosting, storage, delivery, OCR or AI processing. Customer Data may therefore be processed outside Customer’s country and outside India or the UAE, subject to provider terms and applicable safeguards.

Operator may change providers where reasonably required. Material changes affecting the nature or location of processing will be communicated through the Services, email or an updated subprocessor notice where practicable.

8. Security and tenant separation

Operator will use commercially reasonable technical and organizational measures appropriate to an early-stage private beta, including access controls, encrypted network transmission, credential protection, logging and logical separation designed to reduce unauthorized access.

No internet service can be guaranteed completely secure. Customer must maintain copies of original documents and must not rely on the beta as its only repository. Any detailed security statement or questionnaire is informational only unless incorporated into a signed agreement.

9. Security incidents

Operator may investigate suspected security incidents. If Operator reasonably confirms unauthorized access to Customer Data and notice is required by applicable law or a signed agreement, Operator will notify Customer without undue delay and provide reasonably available information about the nature, likely impact and remediation steps.

Customer will provide accurate incident contacts and cooperate with reasonable containment, credential reset and investigation measures.

10. Beta data notice and privacy

Operator may process account identifiers, business-contact information, authentication and device data, Customer Data, prompts, usage events, support communications and audit records. Processing purposes are account administration, service delivery, extraction and reconciliation, security, troubleshooting, usage measurement and legal compliance.

Customer is responsible for its own privacy notices to employees, customers, suppliers and other individuals whose personal data appears in Customer Data. Users may request access, correction or deletion by contacting legal@prathm.ai, subject to applicable law and Customer instructions.

See also the Prathm.AI Privacy Policy.

11. Retention, export and deletion

Customer should retain all original documents. During the beta, Operator may retain Customer Data and extraction versions while the account is active and for reasonable audit, security and troubleshooting purposes.

Following a verified written deletion request or termination, Operator will use commercially reasonable efforts to remove Customer Data from active systems within 30 days and from routine backup cycles within 90 days, except where retention is required for law, security, dispute resolution or evidence of compliance. Operator may retain a minimal record of account acceptance, access, deletion requests and de-identified operational statistics.

12. Mutual confidentiality

“Confidential Information” means non-public business, technical, financial, product, security, customer, supplier or document information disclosed in connection with the beta that is marked confidential or should reasonably be understood as confidential. Customer Data is Customer Confidential Information. The Services, non-public architecture, pricing, roadmap and security information are Operator Confidential Information.

Each receiving party will use the other party’s Confidential Information only for the beta relationship, protect it with at least reasonable care, and disclose it only to personnel, professional advisers and service providers who need it and are bound by confidentiality duties.

Confidentiality does not cover information that the recipient can demonstrate was lawfully public, already known without restriction, independently developed without use of the information, or lawfully received from another source. Legally compelled disclosure is permitted after advance notice where lawful and reasonable cooperation to seek protection.

These obligations apply to relevant disclosures made up to 90 days before acceptance and continue for three years after the last disclosure. Trade secrets remain protected for as long as they qualify as trade secrets under applicable law. On request, each party will return or delete the other’s Confidential Information where reasonably practicable, subject to lawful retention and routine backups.

13. No publicity

Neither party may use the other party’s name, logo, customer relationship, testimonial, documents or beta results in publicity, marketing or a case study without prior written consent. Operator may identify Customer internally to personnel and providers who need the information to deliver the beta.

14. Acceptable use

Users must not violate law, infringe rights, probe or bypass security, access another tenant, introduce malicious code, scrape or overload the Services, reverse engineer except where the restriction is prohibited by law, misuse automated access, or use outputs to mislead or impersonate another person or organization.

15. Audit and usage records

Operator may keep records of account access, document processing, extraction versions, orders, reconciliation activity, errors, support activity and AI usage for security, traceability, troubleshooting, capacity planning and compliance. Access to such records remains subject to confidentiality and the beta data notice.

16. Intellectual property and feedback

Operator and its licensors retain all rights in the Services, software, interfaces, models, prompts, methods, taxonomies, designs, trademarks and underlying technology. Customer retains Customer Data. Subject to these Terms, Customer may use beta outputs internally for evaluation and its own business review.

If Customer voluntarily provides suggestions or feedback, Operator may use them without restriction or payment, provided Operator does not disclose Customer Confidential Information or identify Customer without consent. No right to either party’s trademarks is granted.

17. Availability, support and changes

The beta is provided without a service-level agreement. Operator may change, suspend, limit or discontinue features for testing, maintenance, security, legal or operational reasons. Operator will use reasonable efforts to communicate material planned interruptions but does not guarantee uninterrupted or error-free availability.

18. Fees

The beta is free unless an invitation, order form or pilot confirmation states otherwise. Neither party is authorized to incur costs for the other. Any paid subscription, usage charge, tax, refund or renewal term must be set out separately in writing before it applies.

19. Suspension and termination

Either party may end the beta on written notice. Operator may suspend access immediately where reasonably necessary to contain a security risk, prevent unlawful or abusive use, protect another customer, respond to non-payment under a separate agreement or comply with law.

On termination, Customer must stop using the Services. Sections concerning confidentiality, data handling, intellectual property, disclaimers, liability, disputes and provisions that by nature should survive will continue.

20. Disclaimers

To the maximum extent permitted by law, the beta Services are provided ‘as is’ and ‘as available’. Operator disclaims implied warranties of merchantability, fitness for a particular purpose, non-infringement and uninterrupted operation. Operator does not warrant that AI or OCR output will be accurate, complete or suitable for Customer’s requirements.

Nothing in these Terms limits obligations or rights that cannot lawfully be excluded. Customer acknowledges that this private beta is an evaluation and that original records and independent human verification remain necessary.

21. Limitation of liability

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, exemplary, punitive or consequential loss, or for lost profits, revenue, opportunity, goodwill or data, arising from the beta.

Each party’s total aggregate liability arising from or relating to the beta will not exceed the greater of (a) fees paid by Customer to Operator for the Services during the six months before the event giving rise to the claim, or (b) USD 500. This cap does not apply to fraud, willful misconduct or liability that cannot legally be limited. The allocation of risk in this section is an essential basis of the private beta.

22. Customer indemnity

To the extent permitted by law, Customer will defend and indemnify Operator and its personnel against third-party claims arising from Customer’s unlawful use of the Services, Customer Data submitted without necessary rights or notices, or Customer’s material violation of the acceptable-use restrictions. Operator must provide prompt notice and reasonable cooperation, and Customer may not settle a claim in a way that admits Operator fault or imposes non-monetary obligations without consent.

23. Governing law and disputes

These Terms are governed by the federal laws of the United Arab Emirates and the laws applicable in the Emirate of Dubai, without regard to conflict-of-law principles. The courts of Dubai have exclusive jurisdiction, unless the parties agree otherwise in writing. Before filing proceedings, authorized representatives will attempt in good faith for 30 days to resolve the dispute, except where urgent protective relief is reasonably required.

24. General terms

Neither party is liable for delay caused by events beyond its reasonable control, except payment obligations. Neither party may assign these Terms without the other’s consent, except that Customer agrees Operator may propose assignment or novation to the incorporated Prathm.AI entity, which will take effect only as permitted by law and documented through notice and required acceptance.

These Terms and any controlling written pilot document are the entire agreement on the beta subject and replace prior discussions on that subject. Failure to enforce a provision is not a waiver. If a provision is unenforceable, it will be limited to the minimum extent necessary and the remaining provisions continue. Headings are for convenience only.

25. Notices and updates

Legal or security notices to Operator must be sent to legal@prathm.ai or security@prathm.ai. Operator may send notices to the Customer administrator’s registered email. Material updates will be notified through email or the Services. Updates will apply prospectively from the stated effective date; continued use after notice constitutes acceptance only to the extent permitted by law.

Electronic acceptance record

By selecting ‘I Agree’, ‘Create Account’ or equivalent, I confirm that:

• I have read and understood Version 0.2 of these Terms.
• I am authorized to accept for the invited Customer, or I am accepting only for myself as an authorized User.
• I understand that Prathm.AI is a pre-incorporation, invite-only beta and not a production system.
• I will independently verify material AI, OCR and reconciliation outputs against source documents.
• I will not upload restricted data or information Customer is not entitled to process.
• I accept the mutual confidentiality and beta data-processing terms above.

Minimum acceptance audit trail