Terms of Service

1. Who these terms are between

1.1 These Terms of Service ("Terms") are an agreement between Bundals Private Limited, a company incorporated in India with CIN [CIN] and registered office at [REGISTERED ADDRESS] ("we", "us"), and the firm or business that creates an account ("Customer", "you"). CA Bundals is our trading name.

1.2 By ticking the box at sign-up, or by using the service, the person doing so confirms that they are authorised to bind the Customer, and the Customer accepts these Terms. If you do not accept them, do not use the service.

1.3 These Terms incorporate the Data Processing Agreement ("DPA"), the Acceptable Use Policy and the Refund & Cancellation Policy. If they conflict, the DPA governs personal data processing, and these Terms govern everything else.

2. Eligibility: business use only

2.1 The service is for businesses and professionals only — chartered accountants, company secretaries, cost accountants, tax practitioners, accounting and bookkeeping firms and similar practices — acting in the course of their profession or business. It is not offered to consumers for personal, family or household use.

2.2 You confirm that you are a legal entity, partnership, LLP or sole proprietor carrying on a business or profession in India (or elsewhere, where we agree), that the individual accepting these Terms is at least 18 years old and competent to contract under the Indian Contract Act, 1872, and that the information you give us at sign-up is true.

3. The service

3.1 CA Bundals is practice-management software offered as a hosted service. Depending on your plan and which apps you enable, it includes a compliance calendar, document requests and a document vault, no-login upload links for your clients, invoicing and payment links, a client portal with mobile OTP sign-in, WhatsApp and SMS messaging, an encrypted credentials vault, team and task tools, and modules for tax computation, GST reconciliation, CMA reports, financial statements, books of account, payroll, certificates and UDIN tracking, company secretarial work, and a connector for Tally.

3.2 The service does not file returns, forms or documents with any government portal on your behalf. You or your staff file them.

3.3 Some features are optional and switched on by you (for example, the AI drafting assistant for notice replies, sign-in with Google, the Tally connector, or connecting your own WhatsApp Business account). Their use is subject to these Terms and, where relevant, to clause 11.

3.4 We may improve, change or retire features. If we remove a feature that is material to a paid plan you have prepaid, we will give at least 30 days’ notice and, if you ask, a pro-rata refund of the prepaid fees for that plan from the date of removal.

4. Your professional responsibility

4.1 We do not give tax, legal, accounting, audit or financial advice. The service is a tool. You, as the professional, are solely responsible for your professional judgement, the advice you give, the work you sign, every filing you make, and compliance with the laws and professional standards that apply to you (including the Chartered Accountants Act, 1949, the ICAI Code of Ethics and similar rules for your profession).

4.2 Due dates, penalty and late-fee figures, interest, tax computations, reconciliations, reports, certificate drafts, financial statements, CMA projections and every other figure or date the software produces are computed by fixed rules from the data entered and from statutory schedules as we understood them at the time. Governments frequently extend dates, change rates and issue notifications at short notice. These outputs are aids to be verified against the current law, notifications and source records before you rely on them.

4.3 Drafts produced by the optional AI drafting assistant are starting points only. They may be incomplete or wrong, and must be reviewed and approved by a qualified person before use. The software never sends them anywhere by itself.

4.4 You are responsible for the accuracy and completeness of the data you and your clients enter or upload, and for keeping your client list, contact numbers and settings up to date.

5. Your account

5.1 You are responsible for everyone you invite to your account, the roles and access you give them, and the client contacts you give portal access to. Their actions in your account are treated as yours.

5.2 Keep passwords, OTPs and links confidential. Use the access controls the service provides. Tell us promptly at info@bundals.com if you suspect unauthorised access.

5.3 No-login links (for document upload and payment) work for anyone who has the link. You decide who to send them to. Do not post them publicly. You can revoke or re-issue them in the app.

6. Fees, billing and taxes

6.1 Pricing. Fees are charged per firm, according to the plan you choose and your billing cycle, at the prices shown on the pricing page or in your order when you subscribe. Each plan has limits (staff logins, clients, file storage and apps) described on the pricing page. A new account has a free trial of 14 days and may stay on the Free plan afterwards.

6.2 Billing cycles. Monthly plans are billed for one month and yearly plans once for 12 months, in advance. A change of plan applies from the time you make it.

6.3 Taxes. Prices exclude GST. We add GST at the applicable rate (currently 18%) and any other tax that applies. We will issue a GST-compliant tax invoice; please give us your correct GSTIN and billing details, as input tax credit depends on them. If you are required by law to deduct TDS from our fees, deduct it at the correct rate and give us the TDS certificate in time; otherwise the shortfall remains payable.

6.4 Payment. Payments are processed by Razorpay or another payment provider we name. Invoices are due on issue unless the invoice says otherwise. We do not store full card or UPI credentials.

6.4A Your clients’ payments to you. Payment links let your clients pay you for your professional fees. Online payments go directly into your own payment account (your firm’s Razorpay account, which you open and connect yourself under your own agreement with Razorpay); if you have not connected one, the link shows the UPI or bank details you enter and you record the payment yourself. We never receive, hold, pool or settle your clients’ money, and we are not a party to those payments; any refund or dispute about them is between you and your client.

6.5 Late payment. If an amount is unpaid 15 days after it is due, we will remind you. If it is still unpaid 15 days after that reminder, we may suspend access to paid features (and, after a further 30 days, the account) under clause 18 until it is paid. During suspension your data is kept and you can still ask us to export it.

6.6 Price changes. We may change prices with at least 30 days’ notice by email and in the app. A change does not apply to a period you have already paid for; it applies from your next billing period. If you do not agree, you may cancel before the change takes effect.

6.7 Refunds. Fees paid are final and are not refunded. A free trial and a Free plan are provided so that you can evaluate the service before paying. The only exceptions are the correction of payment errors under the No-Refund & Cancellation Policy, the cases in these Terms where we end or reduce a service you have prepaid, and where a refund is required by law.

6.8 Disputed charges. Tell us at info@bundals.com within 30 days of an invoice if you think it is wrong. We will investigate in good faith and correct genuine errors. Please contact us before raising a chargeback.

7. Free clients and trials

7.1 Free clients, trial periods and promotional offers (such as referral credits or a complimentary website) are provided at our discretion, on the conditions shown when offered. We may change or end a free offer for the future with 30 days’ notice, but not so as to take away something you have already paid for.

7.2 A complimentary website, where offered with a plan, is a perk tied to that plan. If the plan ends or is downgraded, we may stop hosting it after 30 days’ notice and will give you its content on request. You are responsible for the content you ask us to put on it and for complying with any ICAI guidelines on firm websites. Any domain name registered in your name remains yours.

8. Acceptable use

8.1 You must use the service lawfully and in line with the Acceptable Use Policy. In particular, you must not use it to send unsolicited or bulk promotional messages, to store data you have no lawful basis to hold, or to access government portals or third-party systems in breach of their terms.

8.2 We may remove content or restrict features to the extent reasonably necessary to stop a breach of the Acceptable Use Policy or to comply with law, and will tell you why unless the law prevents us.

9. Your data and your clients’ data

9.1 Ownership. As between you and us, you own all data that you, your staff and your clients enter or upload ("Customer Data"). You grant us a limited licence to host, copy, process, transmit and display Customer Data only as needed to provide, secure and support the service, to comply with law, and as described in the DPA.

9.2 Roles under the DPDP Act. For personal data of your clients, their directors, partners, employees and other individuals that you put into the service, you are the Data Fiduciary and we are your Data Processor under the Digital Personal Data Protection Act, 2023 ("DPDP Act"). We process that data only on your documented instructions, as set out in the DPA. For the personal data of your own users as our account holders (for example, their names, emails and sign-in records), we act as a Data Fiduciary, as described in our Privacy Policy.

9.3 Your obligations as Data Fiduciary. You are responsible for: having a lawful basis (consent or a legitimate use under the DPDP Act) for every piece of personal data you collect and put into the service; giving your clients and other individuals the notices the law requires; handling their requests to access, correct or erase data and their grievances (we will help as the DPA describes); obtaining verifiable consent from a parent or guardian before processing a child’s personal data where the law requires it; and making sure that any instructions you give us are lawful.

9.4 Aggregated data. We may create statistics about use of the service that do not identify you, your clients or any individual, and use them to operate and improve the service. We will not sell Customer Data, and will not use it to train general-purpose AI models.

9.5 Export. You can download your documents and export your data from the app at any time while your account is active, including during suspension.

10. Confidentiality

10.1 Each party will keep the other’s Confidential Information confidential, use it only to perform or benefit from these Terms, and share it only with its staff, advisers and service providers who need it and are bound by similar duties. "Confidential Information" includes Customer Data, non-public product, pricing and security information, and anything marked or reasonably understood as confidential.

10.2 This does not apply to information that is or becomes public without breach, was already lawfully known to the recipient, is independently developed, or is lawfully received from a third party. A party may disclose Confidential Information where required by law, a court or a regulator, and will (where lawful) give the other party prompt notice so it can seek protection.

10.3 These duties last for the term of these Terms and 3 years after, and for Customer Data and trade secrets for as long as they remain confidential.

11. Third-party services

11.1 Some features work with services run by others, including Meta (WhatsApp Business Platform), Razorpay (our subscription billing, and, through your own Razorpay account, your clients’ payments to you), our SMS provider (for example MSG91) for OTP and messages, Google (sign-in with Google), Tally Solutions (the Tally connector talks to your own Tally installation), an AI drafting provider (the optional AI drafting assistant), and our hosting and storage providers. A current list of sub-processors is in the DPA.

11.2 WhatsApp. WhatsApp messaging uses your own WhatsApp Business account, connected by you. You are the sender. You must accept and comply with Meta’s terms and the WhatsApp Business and Commerce policies, obtain opt-in from recipients, use approved templates, and pay Meta’s charges. Meta may restrict or block your account under its own rules; we are not responsible for that.

11.3 SMS. Transactional SMS in India are subject to TRAI’s TCCCPR 2018 and DLT registration. Messages must be transactional or service messages only.

11.4 Your use of a third-party service is governed by that provider’s terms. We are not responsible for the acts, omissions, availability or security of third-party services we do not control, but we remain responsible for our own sub-processors under the DPA.

12. Security

12.1 We maintain reasonable security practices and procedures appropriate to the nature of the data, as required by section 43A of the Information Technology Act, 2000 and the IT (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, and reasonable security safeguards as required by section 8(5) of the DPDP Act and the Digital Personal Data Protection Rules, 2025. These include encryption in transit (TLS), AES-256-GCM encryption of stored credentials and WhatsApp tokens with per-firm keys, role-based access controls, audit logs of sensitive actions, and regular backups. A fuller description is on the security page.

12.2 No system is completely secure. You are responsible for the security of your own devices, networks, passwords and the people you give access to.

13. Personal data breaches

13.1 If we become aware of a personal data breach affecting Customer Data, we will notify you without undue delay, and in any case within 48 hours of becoming aware of it, with the information we then have, and will update you as we learn more. The DPA sets out the details.

13.2 As Data Fiduciary, you are responsible for notifying the Data Protection Board of India and affected individuals where the DPDP Act requires it; we will give you the information and help you reasonably need to do so. We will report incidents to CERT-In within the time required by CERT-In’s directions where they apply to us.

14. Intellectual property

14.1 We (and our licensors) own the service, the software, its design, the statutory calendars and rule sets we compile, documentation and all improvements, including any made using your feedback. Nothing in these Terms transfers them to you.

14.2 Subject to these Terms and payment of fees, we grant you a non-exclusive, non-transferable, non-sublicensable right, for the term of your subscription, to use the service for your internal professional or business purposes, and to let your staff and your clients use it for that purpose.

14.3 You must not copy, resell, rent, or reverse engineer the service (except to the extent the law allows despite this restriction), or use it to build a competing product.

14.4 If you give us suggestions or feedback, we may use them freely without obligation to you.

15. Warranties and disclaimers

15.1 We will provide the service with reasonable skill and care, and substantially as described on our website and in the app.

15.2 Except as expressly stated in these Terms, and to the extent permitted by law, the service is provided "as is" and "as available". We do not warrant that it will be uninterrupted or error-free, that every statutory date, rate, penalty or rule is current or complete, or that its outputs are fit for any particular filing or purpose. We do not guarantee delivery of any WhatsApp message, SMS or email, which depends on third parties and on the recipient.

15.3 We will try to give advance notice of planned maintenance, and to restore the service promptly after unplanned outages. Unless we sign a separate service-level agreement with you, no specific uptime is promised.

16. Limitation of liability

16.1 Excluded losses. Neither party is liable to the other for any indirect, incidental, special or consequential loss, or for loss of profits, revenue, business, goodwill, professional fees or anticipated savings, however caused, even if it was foreseeable.

16.2 Filings, deadlines and penalties. Because you are responsible for verifying outputs and for your filings (clause 4), we are not liable for missed or late filings or deadlines, interest, late fees, penalties, prosecutions, demands or notices issued by any authority, loss of or claims by your clients, or disciplinary proceedings, except to the extent directly caused by our breach of these Terms, gross negligence or wilful misconduct — and even then subject to clause 16.3.

16.3 Cap. Each party’s total aggregate liability arising out of or in connection with these Terms, in contract, tort (including negligence), breach of statutory duty or otherwise, is limited to the total fees paid and payable by you to us under these Terms in the 12 months before the event giving rise to the claim. For an account that has paid no fees, the cap is ₹10,000.

16.4 Not limited. Nothing in these Terms limits or excludes: your obligation to pay fees; liability under your indemnity in clause 17; liability for fraud, gross negligence or wilful misconduct; or any liability that cannot be limited or excluded under applicable law.

16.5 Each party must take reasonable steps to mitigate its loss. Any claim must be notified to the other party within 12 months of the claimant becoming aware of it.

17. Indemnity

17.1 You will defend and indemnify us, our officers and employees against third-party claims, and the resulting losses, damages, fines, penalties and reasonable legal costs, to the extent arising from: (a) Customer Data, or your collection or use of personal data without a lawful basis or required notice; (b) your breach of the Acceptable Use Policy or of Meta’s, TRAI’s or any messaging rules in messages you send; (c) your professional services, advice or filings to your clients; or (d) your breach of law.

17.2 We will defend and indemnify you against third-party claims that your authorised use of the service infringes that third party’s intellectual property rights in India, and pay the resulting damages and reasonable costs finally awarded or agreed in settlement. This does not apply to claims arising from Customer Data, third-party services, or use in breach of these Terms. If such a claim is made, we may modify the service, obtain a licence, or end the affected part and refund prepaid fees for it.

17.3 The party claiming an indemnity must promptly notify the other in writing, let it control the defence and settlement (no settlement admitting fault on the indemnified party’s behalf without its consent), and give reasonable help at the indemnifying party’s cost.

18. Suspension

18.1 We may suspend all or part of your access (a) for non-payment, as set out in clause 6.5; (b) if reasonably necessary to prevent a security threat, serious harm to the service or others, or a breach of the Acceptable Use Policy; or (c) if required by law or by an order of a court or competent authority.

18.2 Except in an emergency or where the law prevents it, we will give you notice and a reasonable chance to fix the problem first. We will limit any suspension to what is needed and lift it once the reason is resolved.

19. Term, termination and your data

19.1 These Terms apply from the day you accept them until your account is closed. Paid plans renew automatically for the same billing cycle unless you cancel before the renewal date.

19.2 By you. You may cancel at any time in the app or by writing to info@bundals.com. Cancellation takes effect at the end of the current prepaid period (yearly/quarterly) or at the end of the current month (monthly). Fees are not refunded, as the No-Refund & Cancellation Policy explains.

19.3 By us. We may terminate on 60 days’ notice for any reason (and will then refund any prepaid fees for the unused period), or on 30 days’ notice if you materially breach these Terms and do not cure the breach within that time, or immediately if you use the service for a serious unlawful purpose, or become insolvent.

19.4 Export window. For 30 days after termination, the account stays available in read-only mode so you can export your data and documents. At your request during that window we will provide a bulk export in a commonly used format.

19.5 Deletion. After the export window, we will delete Customer Data from our live systems within 30 days, and from backups as they roll over (backups are kept for no more than 90 days), unless the law requires us to keep it longer. We may keep billing records, tax invoices and records we must keep under law (for example, under GST and income-tax law, generally 8 years) and minimal logs needed to handle disputes or prove compliance. You are responsible for keeping your own copies of records you are required to retain, such as books of account and their edit logs.

19.6 Clauses that by their nature should survive termination (including 4, 6 (for unpaid fees), 9, 10, 14, 16, 17, 19.4–19.5, 21 and 22) survive.

20. Force majeure

20.1 Neither party is liable for delay or failure caused by events beyond its reasonable control, such as natural disasters, epidemics, war, riots, government action, failure of the internet, power or telecommunications networks, outages of third-party platforms, or large-scale cyber attacks that reasonable safeguards could not prevent. This does not excuse payment obligations for services already provided. The affected party will notify the other and take reasonable steps to resume. If the event lasts more than 30 days, either party may terminate the affected service, and we will refund prepaid fees for the unused period.

21. Governing law and disputes

21.1 These Terms are governed by the laws of India.

21.2 The parties will first try to resolve any dispute by good-faith discussion between senior representatives for 30 days after written notice of the dispute.

21.3 If it is not resolved, the dispute will be finally resolved by arbitration under the Arbitration and Conciliation Act, 1996, by a sole arbitrator appointed by mutual agreement (or, failing agreement within 30 days, as provided by that Act). The seat and venue of arbitration is [CITY]. The language is English. The parties may agree to conduct proceedings online or on documents only.

21.4 Subject to clause 21.3, the courts at [CITY] have exclusive jurisdiction, including for interim relief under section 9 of that Act. Nothing prevents either party from seeking urgent interim relief from a competent court.

21.5 Nothing in this clause limits any right an individual may have to complain to the Data Protection Board of India or another statutory authority.

22. General

22.1 Notices. We will send notices to the email address of the account owner and may also show them in the app. You must send legal notices to Bundals Private Limited, [REGISTERED ADDRESS], with a copy by email to info@bundals.com. Email notices are effective when sent, unless we receive a delivery failure.

22.2 Changes to these Terms. We may update these Terms. For material changes that adversely affect you, we will give at least 30 days’ notice by email and in the app before they take effect. Changes required by law may take effect sooner. If you do not agree, you may cancel before the change takes effect and receive a pro-rata refund of prepaid fees for the unused period. Continuing to use the service after the effective date means you accept the change.

22.3 Assignment. You may not assign these Terms without our written consent, not to be unreasonably withheld. We may assign them to an affiliate or to a successor of our business on notice to you, provided the assignee takes on our obligations, including under the DPA.

22.4 Entire agreement. These Terms (with the documents they incorporate and any signed order form) are the entire agreement on their subject and replace earlier discussions. Terms on your purchase orders do not apply.

22.5 Severability and waiver. If a provision is found unenforceable, it will be read down to the minimum extent needed, and the rest continues in force. Not enforcing a right is not a waiver of it.

22.6 Relationship. The parties are independent contractors. Nothing creates a partnership, agency or employment relationship.

22.7 Electronic record. These Terms are an electronic record under the Information Technology Act, 2000 and do not require a physical or digital signature.

23. Grievance officer and contact

In line with the Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 and the DPDP Act, you can raise any complaint about the service or these Terms with our Grievance Officer: [GRIEVANCE OFFICER NAME], Bundals Private Limited, [REGISTERED ADDRESS]. Email: info@bundals.com. We acknowledge complaints within 24 hours and aim to resolve them within 15 days of receipt (and within any shorter time the law requires).

General support: info@bundals.com. Billing: info@bundals.com. Security reports: info@bundals.com. Registered office: Bundals Private Limited, [REGISTERED ADDRESS]. CIN: [CIN]. GSTIN: [COMPANY GSTIN].

Other legal pages: Terms of Service · Privacy Policy · Data Processing Agreement · Refund & Cancellation · Acceptable Use · Notice to clients of firms