Kujur Consulting Private Limited (KCPL), Ranchi, shall act as the Data Processor for the purpose of encapsulating files uploaded by the Client within "Document Wrappers." All data is hosted on Tier-III Indian Infrastructure in accordance with the DPDP Act 2023 and GDPR standards.

KCPL and its subsidiary alliances will not be responsible for the accidental upload of sensitive documents via unencrypted channels. The Client is fully responsible for the scrutiny of every upload based on the nature of document sensitivity and confidentiality. Unencrypted channels are intended strictly for non-sensitive materials (e.g., notices, publications).

KCPL and its subsidiary alliances are not responsible for the content of uploaded files. It is the sole responsibility of authorized E-SafeDoc™ users to ensure that uploaded content meets all applicable legal requirements and complies with the laws of the country where E-SafeDoc™ is being used.

The Client acknowledges the Zero-Knowledge Architecture of the encrypted documents. The Client and its designated users accept sole responsibility for the management of Encryption Keys. The Client understands that the Service Provider (KCPL) has no technical provision to recover lost keys and that the loss of such keys results in permanent, irretrievable data loss.

The Client authorizes the creation of an Immutable Audit Trail (Chronicle) for all actions performed within the account to ensure institutional integrity, forensic transparency, and regulatory compliance.

The Client acknowledges and agrees that Audit Trail Records exceeding a two (2) year threshold are subject to a Mandatory Purge from the active database. The Client accepts the onus of retaining the system-generated Encrypted Cloud ZIP and CSV downloads for their long-term forensic requirements. Once the Double-Lock Consent is executed, the Purge is irreversible.

To ensure maximum institutional integrity and the prevention of session hijacking, E-SafeDoc™ operates on a strictly Stateless Architecture. For every sensitive operation (such as the Final Purge), the system generates a high-entropy, 64-character security token ($tid) which is composite-bound to the Client IP Address at the time of the request.

The Client acknowledges that the recording of the IP Address is performed solely as a technical security interlock to facilitate "Stateless Digging." This mechanism ensures that a security parameter "buried" in the JSON vault can only be "retrieved" by the originating network node.

The Client accepts responsibility for maintaining a stable network environment. Kujur Consulting Private Limited (KCPL) is not responsible for "System Hangups" or failed "Parameter Digs" caused by dynamic IP shifts (e.g., rapid WireGuard endpoint cycling) during a critical transaction.

The composite security token is generated and utilized strictly for the duration of the active state-handover sequence. Kujur Consulting Private Limited (KCPL) explicitly disclaims the use of this network validation data for tracking, behavioral monitoring, or secondary commercial profiling. The IP-bound security interlock exists exclusively as a technical forensic measure to verify the origin of critical transactions and ensure the absolute integrity of the immutable audit trail.

Acknowledgment of Infrastructure Overhead: The Client acknowledges that KCPL incurs substantial, ongoing operational expenditures to maintain high-availability Tier-III Indian infrastructure, blind storage hosting relays, and dedicated cryptographic processing nodes. Consequently, cash refunds or financial paybacks for any system disturbances, server latencies, or operational downtimes are strictly excluded under this Agreement.

Absolute Third-Party Infrastructure Exclusion: KCPL is explicitly insulated from any liability, service credits, or subscription disputes arising from hardware outages, network routing failures, physical data center latency, or connectivity disruptions originating directly at the third-party hosting server point (including upstream drops by the primary data centre facility or global cloud transit providers). Such events are structurally classified as Force Majeure, and the Service Credit Matrix shall trigger exclusively for verified software-layer bugs residing entirely within KCPL’s proprietary native application code stack.

Exclusion of Financial Payback: The Client explicitly agrees that their sole and exclusive remedy for any verified native software anomalies or unexpected application downtime shall be the allocation of non-refundable, non-transferable Additional Subscription Extensions (Service Credits) added directly onto the Client's existing active subscription term.

Graduated Service Credit Matrix: In the event of a verified application framework disturbance that directly impairs the Client's core operational capabilities, Service Credits will be calculated and curtailed based on the severity and duration of the disruption, strictly limited to the following tiers:

• Tier 1 (Minor/Brief Disturbances): For localized component latency or intermittent connectivity issues lasting less than 24 aggregate hours within a calendar month, the Client may be provisioned a maximum subscription extension of one (1) month, applied to the end of the current billing cycle.
• Tier 2 (Moderate/Extended Disturbances): For widespread component disruptions or hosting node unavailability lasting between 24 and 72 consecutive hours, the extension may be scaled up to a maximum of two (2) months.
• Tier 3 (Major/Severe Disturbances): For catastrophic infrastructure outages exceeding 72 consecutive hours that completely halt document validation loops, the extension is strictly capped at a maximum of three (3) months.

Absolute Compensation Cap: Under no circumstances shall the cumulative total of all subscription extensions granted within a single contractual year exceed three (3) months, regardless of the frequency or nature of the disturbances experienced by the Client. Service Credits must be claimed in writing within fourteen (14) business days of the incident, failing which any claim to extensions is permanently waived.

• Upon subscription expiration or voluntary termination notice, the Client must submit a formal exit request at least seven days prior to expiration. The data extraction functionality is automatically provisioned within the administration panel upon complete payment clearance of the final 30-day operational fee applicable at that point in time.
• During the active 30-day transition window, the panel enters a strict read-only freeze state, suppressing all active write and upload menus. The customer holds full responsibility for utilizing the chronological single-download dropdowns to retrieve their files and relational CSV text streams. Failure to extract all repositories within the defined 30-day window results in the automated decommissioning of the environment. The engine will run a permanent overwrite script, completely purging all data to eliminate ongoing storage liability.

To ensure rapid resolution across all time zones, any operational dispute or technical variance shall first be subject to a mandatory remote forensic audit conducted by the designated Success Consultant. This digital mediation serves as the primary gateway to an amicable resolution. In the rare event that institutional mediation fails, the matter shall be governed strictly by the laws of India, with exclusive legal jurisdiction residing in Ranchi, Jharkhand.

E-SafeDoc™—including its proprietary source code, stateless 64-Hexa hardening logic, sessionless parameter management framework, and Smart Document Wrappers™ user interface architecture—remains the exclusive Intellectual Property of Kujur Consulting Private Limited (KCPL). Any unauthorized reproduction, reverse-engineering, or distribution of the service is strictly prohibited. KCPL reserves the right to initiate immediate legal action against any infringement to protect its institutional software assets.