Terms & Conditions

1. Acceptance of Terms

By accessing and using SuTan Digital Solutions' website and services, you accept and agree to be bound by the terms and provisions of this agreement. If you do not agree to these Terms & Conditions, please do not use our services.

These terms apply to all users, including Partners (ERP companies, resellers) and Customers (end-users of signing services).

2. Description of Services

SuTan provides enterprise-grade digital signature solutions and ERP integration services. Our services include:

• Digital signature API services for ERP integration
• Document hash signing and verification
• Desktop application for local signing operations
• Certificate management services
• License management and quota tracking
• Technical support and integration assistance
• Audit logging and compliance reporting

3. Service Architecture

3.1 Document Handling

Our service operates on a zero-knowledge document principle:

• Your actual documents are never transmitted to or stored on our servers
• Only the cryptographic hash (SHA-256) of your document is sent for signing
• All document processing occurs on your local systems or infrastructure
• We cannot access, read, or recover your document content

3.2 Signing Methods

We offer two signing methods:

• Cloud/Organization Signing: Using certificates stored securely on our platform
• Desktop/USB Token Signing: Using hardware tokens on your local machines

4. Digital Certificate Storage and Management

4.1 Certificate Upload and Storage

When you choose to use our Cloud/Organization Signing service:

• You may upload your digital signing certificate (PFX/P12 format) to our platform
• Your certificate and associated password are stored using AES-256 encryption
• Certificate passwords are encrypted separately from the certificate files
• All certificate data is stored on secure, access-controlled infrastructure

4.2 Certificate Usage Authorization

By uploading your certificate, you authorize SuTan to:

• Store your certificate securely for the purpose of signing document hashes on your behalf
• Use your certificate only when a valid, authenticated signing request is received through your account
• Apply signatures to document hashes as instructed by authorized users under your account

4.3 Certificate Ownership and Responsibility

You acknowledge and agree that:

• You are the rightful owner or authorized user of any certificate you upload
• You have the legal authority to use the certificate for digital signing purposes
• You are responsible for the validity, renewal, and revocation of your certificates
• SuTan is not liable for signatures made using expired, revoked, or compromised certificates
• You will notify us immediately if a certificate is compromised or should be removed

4.4 Certificate Security

We implement the following security measures for stored certificates:

• Encryption at rest using AES-256
• Access controls limiting certificate use to authorized accounts only
• Audit logging of all certificate access and signing operations
• Secure deletion upon account termination or certificate removal request

4.5 Certificate Removal

You may request removal of your certificate at any time by:

• Using the certificate management feature in your account
• Contacting our support team
• Upon account termination, all certificates will be securely deleted within 30 days

5. User Obligations

When using our services, you agree to:

• Provide accurate, current, and complete information
• Maintain the security of your account credentials, API keys, and license keys
• Use the service only for lawful document signing purposes
• Not attempt to gain unauthorized access to our systems
• Not interfere with or disrupt the service
• Comply with all applicable laws and regulations including IT Act 2000
• Not use the service for fraudulent document signing
• Not share your API keys or license keys with unauthorized parties
• Ensure all uploaded certificates are legally obtained and authorized for use

6. Partner Terms

If you are a Partner (ERP company, reseller, integrator):

6.1 Partner Responsibilities

• You are responsible for your customers' compliance with these terms
• You must implement proper security measures in your integration
• You must not expose API keys or sensitive data in client-side code
• You are responsible for managing customer quotas within your allocated limits

6.2 Customer Data

• You act as a Data Controller for your customers' personal data
• SuTan acts as a Data Processor on your behalf
• You must obtain necessary consents from your customers
• You must have appropriate data processing agreements with your customers

6.3 White-Label Services

If using white-label features:

• You may brand the service interface with your company identity
• You remain responsible for compliance and customer support
• Core security and signing infrastructure remains under SuTan control

7. License and Usage Limits

7.1 License Terms

• Licenses are issued per customer/organization
• Licenses may be limited by document count, time period, or device count
• License terms are specified in your subscription agreement
• Exceeding license limits may result in service suspension or additional charges

7.2 Device Binding

• Desktop licenses may be bound to specific devices
• Device limits are specified in your license agreement
• Device deactivation/reactivation is subject to your license terms

8. Account Registration

To access certain features of our services, you may be required to register for an account. You agree to:

• Provide accurate registration information
• Maintain and update your information as needed
• Keep your password, API keys, and license keys confidential
• Be responsible for all activities under your account
• Notify us immediately of any unauthorized use

9. Intellectual Property Rights

All content, features, and functionality of our services, including but not limited to software, APIs, documentation, logos, and trademarks, are owned by SuTan Digital Solutions or its licensors and are protected by intellectual property laws.

You may not:

• Reproduce, distribute, or create derivative works of our software
• Reverse engineer, decompile, or disassemble our software
• Remove any copyright or proprietary notices
• Use our trademarks without written permission
• Resell or redistribute our services without authorization

10. Service Availability

We strive to maintain 99.9% uptime for our cloud services. However:

• We do not guarantee uninterrupted access
• Services may be suspended for maintenance with prior notice when possible
• Desktop/offline signing functionality operates independently of cloud availability
• We are not liable for any disruption of service beyond our reasonable control

11. Payment Terms

If you purchase services from us:

• All fees are in Indian Rupees (INR) unless otherwise stated
• Payment is due as per the agreed payment schedule
• All fees are non-refundable unless specified in our Refund Policy
• We reserve the right to change fees with 30 days prior notice
• Failure to pay may result in service suspension
• Overage charges apply for usage exceeding your plan limits

12. Data and Privacy

Your use of our services is also governed by our Privacy Policy. Key points:

• We do not access or store your actual documents
• We store only document hashes, signatures, and metadata
• Certificate data is encrypted and access-controlled
• Audit logs are maintained as per compliance requirements
• We comply with DPDPA 2023 and GDPR requirements

13. Legal Validity of Signatures

Digital signatures created using our service:

• Are compliant with the Information Technology Act, 2000
• Use industry-standard cryptographic algorithms (SHA-256, RSA/ECDSA)
• Include trusted timestamps when configured
• Are legally equivalent to handwritten signatures under Indian law when using valid Class 2/Class 3 certificates

However, the legal validity of any specific signed document depends on:

• The validity and class of the certificate used
• Compliance with applicable laws and regulations
• The nature of the document and transaction

SuTan does not provide legal advice. Consult legal counsel for specific legal requirements.

14. Limitation of Liability

To the maximum extent permitted by law, SuTan Digital Solutions shall not be liable for:

• Indirect, incidental, special, or consequential damages
• Loss of profits, data, or business opportunities
• Damages resulting from unauthorized access to your account
• Service interruptions or errors beyond our reasonable control
• Third-party actions or content
• Signatures made using expired, revoked, or compromised certificates
• Legal disputes regarding signed documents
• Loss of certificate data due to customer negligence

Our total liability shall not exceed the amount paid by you for our services in the 12 months preceding the claim.

15. Indemnification

You agree to indemnify and hold harmless SuTan Digital Solutions, its officers, directors, employees, and agents from any claims, damages, losses, liabilities, and expenses arising from:

• Your use of our services
• Your violation of these Terms
• Unauthorized use of certificates uploaded to our platform
• Fraudulent or illegal use of digital signatures
• Your violation of any rights of another party
• Your breach of any applicable laws or regulations

16. Termination

We reserve the right to terminate or suspend your account and access to our services immediately, without prior notice, for:

• Breach of these Terms & Conditions
• Non-payment of fees
• Illegal or fraudulent activity
• Request by law enforcement
• Extended period of inactivity (12 months)
• Suspected compromise of account security

Upon termination:

• Your right to use the services will immediately cease
• Stored certificates will be securely deleted within 30 days
• Audit logs may be retained as per legal requirements
• You may request export of your data before termination

17. Modifications to Terms

We reserve the right to modify these Terms & Conditions at any time. We will notify you of significant changes via email or by posting a notice on our website at least 30 days before changes take effect. Your continued use of our services after such modifications constitutes acceptance of the updated terms.

18. Governing Law

These Terms & Conditions shall be governed by and construed in accordance with the laws of India, including:

• Information Technology Act, 2000
• Digital Personal Data Protection Act, 2023
• Indian Contract Act, 1872

Any disputes arising from these terms shall be subject to the exclusive jurisdiction of the courts in Hyderabad, Telangana, India.

19. Dispute Resolution

In the event of any dispute:

• First attempt resolution through good faith negotiations
• If unresolved within 30 days, either party may request mediation
• If mediation fails, the dispute may be submitted to binding arbitration in accordance with the Arbitration and Conciliation Act, 1996
• Arbitration shall be conducted in English in Hyderabad

20. Severability

If any provision of these Terms is found to be invalid or unenforceable, the remaining provisions shall continue in full force and effect.

21. Entire Agreement

These Terms & Conditions, together with our Privacy Policy, Security Policy, Refund Policy, and any service-specific agreements, constitute the entire agreement between you and SuTan Digital Solutions regarding your use of our services.

22. Contact Information

For questions about these Terms & Conditions, please contact us:

SuTan Digital Solutions
Email: legal@sutansign.com
Support: support@sutansign.com
Phone: +91 995-113-3856
Available: 24/7