ConsentLo Terms of Service

1. Who may use ConsentLo

The Service is for organisations. If you accept these Terms for an organisation, you confirm that you have authority to bind it, and "Customer" means that organisation. You must be at least 18 years old to use the Service.

2. The Service

ConsentLo is software that helps organisations operate their obligations under the Digital Personal Data Protection Act, 2023 and the DPDP Rules, 2025: notices and consent, rights requests and grievances, breach handling, children's safeguards, data mapping, retention, records and evidence.

ConsentLo is a tool. It does not provide legal advice, and using it does not by itself make an organisation compliant. The Customer remains responsible for its own compliance decisions.

3. Accounts and workspaces

Each Customer receives an isolated workspace at its own ConsentLo address. The Customer is responsible for the users it invites, the roles it assigns, keeping sign-in credentials confidential, and all activity in its workspace. Tell ConsentLo promptly if you suspect unauthorised access. We recommend enabling two-step sign-in for every user.

4. Customer data and roles under the DPDP Act

Personal data that the Customer records in ConsentLo about its own Data Principals is "Customer Data". For Customer Data the Customer is the Data Fiduciary and ConsentLo is its Data Processor. ConsentLo processes Customer Data only to provide the Service, on the Customer's instructions, and under the data processing terms that form part of these Terms.

The Customer is responsible for the lawfulness of its processing, the content of the notices it publishes, the purposes it records, and determinations it makes in the Service (for example, whether an incident is a personal data breach). ConsentLo does not access Customer Data except to provide support the Customer requests, to keep the Service secure, or where the law requires.

5. Acceptable use

You must not:

• Use the Service to process personal data unlawfully or to evade the DPDP Act or any other law.
• Attempt to access another Customer's workspace or data, or probe, scan or test the Service's security without written permission from ConsentLo.
• Interfere with or overload the Service, or introduce malware.
• Copy, resell, reverse engineer or build a competing product from the Service, except as the law expressly allows.
• Misrepresent ConsentLo records or evidence, or use the Service to mislead the Data Protection Board or any Data Principal.

6. Plans, fees and taxes

Plans, limits (such as users and Data Principals) and fees are set out on the ConsentLo pricing page or in an order agreed with ConsentLo. Plans are assigned and changed by ConsentLo. Fees are exclusive of GST and other applicable taxes, which the Customer pays. Enterprise and government plans are agreed in writing.

ConsentLo may change its prices with at least 30 days' notice; changes apply from the next billing period. If fees remain unpaid after notice, ConsentLo may suspend the workspace until they are paid.

7. Availability and support

ConsentLo works to keep the Service available and secure, and may carry out planned maintenance, giving notice where practical. Support is provided through ConsentLo's contact channels during Indian business hours unless an order says otherwise.

8. Integrations and third-party services

The Customer may connect ConsentLo to its own systems through APIs, webhooks, single sign-on and the consent SDK. The Customer is responsible for those systems and for any third-party services it chooses to connect.

9. Indicative figures

Penalty exposure, compliance scores, risk ratings and similar figures in ConsentLo are indicative estimates based on the DPDP Act and Rules. They are not predictions of any decision of the Data Protection Board or any court.

10. Confidentiality

Each party will protect the other's confidential information with at least reasonable care, and use it only to perform under these Terms. This does not apply to information that is public, already known, independently developed or lawfully received from someone else.

11. Intellectual property

ConsentLo and its licensors own the Service, including the software, design, content and the ConsentLo name and logo. The Customer owns its Customer Data and grants ConsentLo the rights needed to host and process it to provide the Service. If you send us feedback, ConsentLo may use it without obligation to you.

12. Suspension and termination

The Customer may stop using the Service at any time. ConsentLo may suspend or terminate access if the Customer materially breaches these Terms and does not fix the breach within 15 days of notice, or immediately where needed to protect the Service, other Customers or Data Principals, or to comply with law.

After termination, the Customer may export its Customer Data for 30 days. ConsentLo then erases Customer Data, except records it must keep by law, which remain protected under these Terms.

13. Warranties and disclaimers

ConsentLo will provide the Service with reasonable skill and care. Apart from that, and to the extent the law allows, the Service is provided "as is" without other warranties, including fitness for a particular purpose or uninterrupted operation.

14. Limitation of liability

To the extent the law allows, neither party is liable for indirect, incidental, special or consequential loss, or for loss of profit, revenue or goodwill. ConsentLo's total liability arising out of these Terms in any 12-month period is limited to the fees the Customer paid ConsentLo for the Service in that period. These limits do not apply to liability that cannot be limited by law.

15. Indemnity

The Customer will defend and indemnify ConsentLo against third-party claims arising from Customer Data or from the Customer's use of the Service in breach of these Terms or the law.

16. Governing law and disputes

These Terms are governed by the laws of India. The parties will first try to resolve any dispute in good faith through senior representatives. Disputes not resolved within 30 days are subject to the jurisdiction of the competent courts in India.

17. Changes to these Terms

ConsentLo may update these Terms. We will post the new version on this page with a new effective date and give workspace administrators at least 30 days' notice of material changes. Continuing to use the Service after that date means you accept the updated Terms.

18. Contact ConsentLo

Questions about these Terms can be sent to ConsentLo through the contact form at consentlo.com/contact.