Welcome back! Please enter your details
Already have an account? Sign In
Welcome! Please enter your details
Consent on behalf of company: [Company Name]
Already have an account? Sign In
DhanIQ — Cloud-Based Accounting Software
Effective Date: 16th September 2026
These Terms and Conditions ("Agreement") constitute a legally binding agreement between you, whether personally or on behalf of an entity ("User", "you" or "your"), and Dhanvridhi System Private Limited ("Company", "we", "us" or "our"), concerning your access to and use of the DhanIQ cloud-based accounting software platform, including its websites, mobile applications, APIs, dashboards and related services (collectively, the "Service").
By registering for, accessing, or using the Service, you confirm that you have read, understood and agree to be bound by this Agreement and the Privacy Policy. If you do not agree, you must not use the Service.
If you use the Service on behalf of a company or other legal entity, you represent that you have authority to bind that entity.
The Company may amend these Terms from time to time. Material changes affecting your rights or obligations, including changes to data-processing practices, will be notified through the Service, email or other reasonable means at least 15 days before taking effect. Continued use after the effective date constitutes acceptance, subject to applicable law.
This Agreement may be accepted electronically and electronic records, clicks, acknowledgements and communications may be retained as evidence of acceptance to the extent permitted by applicable law, including the Information Technology Act, 2000.
"Account" means the account created to access the Service.
"Customer Data" means information, records, documents, invoices, financial information and other content submitted or uploaded by the User or on the User’s behalf.
"Personal Data", "Data Principal", "Data Fiduciary", "Data Processor" and "Significant Data Fiduciary" shall have the meanings assigned under the Digital Personal Data Protection Act, 2023 and rules made thereunder.
"DPDP Act" means the Digital Personal Data Protection Act, 2023 and "DPDP Rules" means the Digital Personal Data Protection Rules, 2025, in each case as amended, and to the extent the relevant provisions have come into force.
"Privacy Policy" means the Company’s privacy notice/policy applicable to the Service, as amended from time to time, which forms part of this Agreement.
"Payment Data" means account numbers, card details, UPI handles, payment credentials or transaction data processed through any payment feature of the Service.
"Subscription" means the paid plan or other access arrangement under which the User is permitted to use the Service.
DhanIQ is a cloud-based accounting and business-management software service that may provide bookkeeping, invoicing, expense tracking, financial records, reports, dashboards, data storage and related functionality.
The Service is a software tool and is not a substitute for an accountant, auditor, tax adviser, lawyer, financial adviser or other qualified professional.
The Company may add, modify, suspend or discontinue features. Where reasonably practicable, the Company will provide advance notice of material discontinuation. Nothing in this section limits rights that cannot lawfully be excluded.
You must provide accurate, current and complete information during registration and keep such information updated.
You are responsible for maintaining the confidentiality of login credentials, OTPs, API keys and other authentication information and for all activity occurring through your Account, except to the extent caused by the Company’s breach or applicable law.
Do not share credentials except through authorised account-management mechanisms.
Use strong and unique passwords where passwords are supported and enable available multi-factor authentication.
Notify the Company promptly, and in any event within 24 hours of becoming aware, if you suspect unauthorised access, credential compromise or other security incidents involving your Account.
The Company may suspend access where reasonably necessary to protect the Service, Customer Data or other users, subject to applicable law and prior or prompt subsequent notice where practicable.
Subscriptions may be offered on monthly or annual terms and may automatically renew unless cancelled before the applicable renewal date.
Fees, taxes and billing terms will be disclosed at the time of purchase or in the applicable order/subscription page.
The Company may change Subscription Fees for future renewal periods with reasonable prior notice of at least 30 days. Any mandatory statutory taxes or charges may be added as required by law.
If payment is overdue, the Company may restrict or suspend access after reasonable notice, subject to applicable law. Interest or late-payment charges, if any, will not exceed the maximum permitted by law.
Refunds will be handled according to the applicable plan, order terms, the Consumer Protection (E-Commerce) Rules, 2020 where applicable, and other mandatory consumer-protection law. Any ‘non-refundable’ provision is subject to rights that cannot legally be waived.
Where the Service processes Payment Data, such processing will be carried out through Reserve Bank of India ("RBI") authorised payment aggregators/gateways, and Payment Data shall be handled in accordance with Clause 8.6 (Payment Data Localisation) below.
You are responsible for the accuracy, quality, integrity and legality of Customer Data submitted to the Service and for ensuring that you have the rights and permissions necessary to submit it, including any consents required from third parties whose Personal Data is contained in Customer Data (for example, your employees’, vendors’ or clients’ details entered into invoices or records).
You must not:
submit Special Category or sensitive financial identifiers (such as full card numbers, CVV, or banking passwords) into free-text or non-designated fields where such submission is not necessary for the intended Service functionality and a designated secure field exists.
The Service, software, source and object code, interfaces, designs, documentation, trademarks, logos, algorithms and related intellectual property are owned by or licensed to the Company and remain the property of the Company or its licensors.
Subject to this Agreement and payment of applicable fees, the Company grants you a limited, non-exclusive, non-transferable, non-sublicensable right to access and use the Service during the applicable Subscription term for your internal business purposes.
You retain ownership of Customer Data. You grant the Company a limited right to host, store, process, transmit and otherwise use Customer Data only as reasonably necessary to provide, secure, maintain and improve the Service, comply with law, and as otherwise described in the Privacy Policy or agreed with you.
Feedback provided by you may be used by the Company for improving the Service without compensation, provided that such use does not disclose your confidential information or Personal Data except as permitted by law.
The Company will process Personal Data in accordance with applicable Indian data-protection law, including the DPDP Act and DPDP Rules, to the extent and from the dates on which the relevant provisions apply to the Company. Where the Company determines the purpose and means of processing Personal Data, it will act as a Data Fiduciary. Where the Company processes Personal Data solely on a customer’s documented instructions for the purpose of providing the Service, the Company acts as a Data Processor, and the customer (as the entity determining the purpose and means of collecting Personal Data of its own employees, vendors or clients through the Service) will itself be the Data Fiduciary in respect of such Personal Data and is responsible for its own notice and consent obligations to those individuals.
Where the Company acts as Data Fiduciary in respect of a User’s own Personal Data, it will provide, at or before the time of collection, an itemised notice, in English and such other languages as may be required, specifying: (a) the Personal Data collected; (b) the specified purpose(s) of processing; (c) the manner in which the Data Principal may exercise rights under Section 12 and 13 of the DPDP Act; and (d) the manner in which a complaint may be made to the Data Protection Board of India. This notice is set out in the Privacy Policy, which is incorporated into and forms an integral part of this Agreement.
The Company will seek consent where consent is the applicable legal basis for processing. Consent will be free, specific, informed, unconditional and unambiguous, with a clear affirmative action, and will be as easy to withdraw as it was to give. Where the Company enables processing through a Consent Manager registered with the Data Protection Board of India, consent given, managed or withdrawn through such Consent Manager will be recognised as valid consent for the purposes of this Agreement.
Subject to applicable law and exemptions under the DPDP Act, individuals may exercise rights including: the right to obtain a summary of Personal Data processed and processing activities (Section 11); the right to correction, completion, updating and erasure of Personal Data (Section 12); the right to grievance redressal (Section 13); and the right to nominate another individual to exercise these rights in the event of death or incapacity (Section 14). Requests may be submitted through the contact details specified in the Privacy Policy and Clause 24, and the Company will respond within the timelines prescribed under the DPDP Rules.
The Company will retain Personal Data only for so long as is necessary for the specified purpose, or as required for the Company to comply with any law for the time being in force, including record-retention obligations under the Companies Act, 2013, the Income-tax Act, 1961, applicable GST legislation, and other accounting, tax, regulatory, contractual, security or dispute-resolution requirements. Where the DPDP Rules prescribe a specific retention/erasure trigger for a category of processing applicable to the Company (including deemed erasure following a defined period of inactivity, subject to prior notice to the Data Principal), the Company will comply with such trigger.
Notwithstanding anything else in this Agreement, where the Service processes Payment Data, such Payment Data will be stored only in India, in accordance with the Reserve Bank of India’s directions on storage of payment system data (including RBI circular DPSS.CO.OD No.2785/06.08.005/2017-2018 dated April 6, 2018, as amended or superseded), and will not be transferred outside India except to the extent expressly permitted for cross-border transaction processing under applicable RBI directions, and then only for the minimum time necessary for that processing.
Subject to Clause 8.6 above, other Personal Data may be processed or stored outside India, except in respect of any country or territory to which the Central Government has restricted such transfer by notification under Section 16 of the DPDP Act, and subject to any sector-specific restriction applicable to the Company at the relevant time.
The Company may engage cloud infrastructure providers, payment providers, analytics providers, security vendors and other processors/sub-processors for operating the Service. Such parties will be engaged under written contracts imposing data-protection and security obligations at least equivalent to those applicable to the Company under this Agreement and applicable law, and the Company will remain responsible for their compliance to the extent required under the DPDP Act.
The Company will implement reasonable technical and organisational safeguards appropriate to the nature and risk of the processing, including access controls, authentication, encryption of Personal Data at rest and in transit or equivalent safeguards, monitoring, backups, vulnerability management and incident-response measures, consistent with the reasonable security practices standard under Section 8(5) of the DPDP Act and, to the extent applicable, the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011.
No internet or cloud service can be guaranteed to be completely secure. Accordingly, the Company does not warrant absolute security or uninterrupted availability. Nothing in this clause excludes liability that cannot lawfully be excluded.
If the Company becomes aware of a Personal Data breach, it will, without undue delay: (a) contain, investigate and remediate the incident; (b) notify the Data Protection Board of India in the form and manner, and within the time, prescribed under the DPDP Rules; and (c) notify affected Data Principals, describing in clear and plain language the nature, extent, timing and likely impact of the breach, and the measures taken to mitigate risk, in each case within the timelines prescribed under the DPDP Rules.
The Company will comply with applicable directions issued by CERT-In and other competent authorities, including reporting qualifying cybersecurity incidents to CERT-In within six hours of noticing or being brought to notice of such incident, in accordance with the CERT-In Cyber Security Directions of 2022 (or any successor directions).
Where applicable to the Company’s infrastructure, ICT system logs and other records will be maintained and preserved for the period prescribed under applicable CERT-In requirements and other legal obligations.
You remain responsible for maintaining appropriate backups of critical Customer Data. The Company may provide export functionality where available.
Following termination or expiry, Customer Data may remain available for a limited recovery/export period of at least 30 days as stated in the applicable plan or Service documentation. After that period, the Company may delete or anonymise Customer Data unless retention is required by law (including the record-retention statutes referenced in Clause 8.5) or reasonably necessary for legitimate legal, security or accounting purposes.
Deleted data may be irrecoverable. You are responsible for exporting data before termination where export is available.
Each party shall protect the other party’s Confidential Information using reasonable safeguards and shall use it only for purposes connected with the Service and this Agreement.
Confidential Information does not include information that is public without breach, was lawfully known before disclosure, is independently developed without use of the information, or is lawfully received from a third party without confidentiality obligations.
A party may disclose Confidential Information where required by law, court order or competent authority, subject to, where legally permissible, prior notice to the other party and applicable confidentiality protections.
The Service may integrate with third-party platforms, payment gateways, banks, cloud services, communication services or other external systems. Your use of such services may be subject to separate terms and privacy policies.
The Company is not responsible for third-party services to the extent they are outside the Company’s reasonable control. Integration availability may change without notice where required by the third-party provider.
The Company does not warrant that the Service will be uninterrupted, error-free, completely secure, or that all calculations, reports or outputs will be accurate in every circumstance.
DhanIQ does not provide accounting, tax, legal, financial, investment or regulatory advice. You are responsible for independently verifying financial information, calculations, reports, tax positions and regulatory compliance before relying on them.
Nothing in these Terms excludes statutory warranties, consumer rights or other protections that cannot lawfully be excluded.
To the maximum extent permitted by applicable law, the Company will not be liable for indirect, incidental, special, consequential or punitive losses, including loss of profits, revenue, goodwill or business opportunity, arising from use of the Service.
Subject to mandatory law and Clause 14.3, the Company’s aggregate liability arising from this Agreement will not exceed the Subscription Fees actually paid by the affected User for the twelve (12) months immediately preceding the event giving rise to the claim, or INR 10,000, whichever is greater.
The cap in Clause 14.2 will not apply to, and the Company’s liability will instead be limited to an amount equal to the annual Subscription Fees paid in the preceding twelve (12) months, or such higher amount as the parties may separately agree in writing, in respect of: (a) a breach of confidentiality obligations under Clause 11; (b) a Personal Data breach arising from the Company’s failure to implement reasonable security safeguards required under Clause 9; or (c) the Company’s gross negligence.
The limitations in this section do not apply to liability that cannot lawfully be limited or excluded, including liability arising from fraud, wilful misconduct or statutory rights.
To the extent permitted by law, you agree to defend, indemnify and hold harmless the Company and its directors, officers, employees and contractors from third-party claims, losses and reasonable costs arising from your unlawful use of the Service, your breach of this Agreement, infringement caused by Customer Data, or your violation of applicable law.
The indemnity does not apply to the extent a claim results from the Company’s own breach, negligence, wilful misconduct or violation of applicable law.
You may cancel your Subscription in accordance with the applicable plan terms.
The Company may suspend or terminate access for material breach, non-payment, security risks, unlawful use, or where required by law. Where reasonably practicable, the Company will provide notice and a reasonable opportunity to cure before termination for a curable breach.
Upon termination, your right to access the Service ends, subject to the data-export period stated in Clause 10.
Termination does not affect rights or obligations that by their nature survive termination, including intellectual property, confidentiality, accrued payment obligations, limitations of liability, indemnification and dispute provisions.
The Company has appointed a Grievance Officer / Data Protection contact for Service, privacy and data-protection complaints, whose name, designation and contact details are published at Clause 24 and in the Privacy Policy, as required under Section 13 of the DPDP Act and the Information Technology Act, 2000 and rules thereunder.
The Company will acknowledge a grievance and provide a substantive response within the timelines prescribed under applicable law. For a Personal Data grievance, the individual should provide sufficient information to enable verification and investigation. The Company may request reasonable information to authenticate the requester.
If a grievance is not resolved to the individual’s satisfaction, the individual may make a complaint to the Data Protection Board of India. Nothing in this Agreement prevents a person from exercising a non-waivable statutory right or approaching a competent governmental, regulatory, adjudicatory or judicial authority.
You consent to receiving service-related communications electronically, including account notifications, invoices, security alerts, legal notices and updates. Electronic records may be maintained and relied upon to the extent permitted by applicable law.
This Agreement shall be governed by the laws of India.
The parties will first attempt in good faith to resolve disputes through written notice and discussion within 30 days]. Nothing prevents either party from seeking urgent interim or injunctive relief from a competent court.
Subject to applicable law, disputes may be referred to arbitration in accordance with the Arbitration and Conciliation Act, 1996. The seat and venue of arbitration shall be Mumbai, Maharashtra, India, unless otherwise agreed in writing. The arbitration shall be conducted by a sole arbitrator appointed by mutual agreement, and the language shall be English.
Courts at Mumbai, Maharashtra shall have jurisdiction for matters that are not required to be resolved through arbitration, subject to applicable law, including any statutory jurisdiction of the Data Protection Board of India or consumer fora.
Neither party may assign this Agreement except as permitted by law or with the other party’s consent, provided the Company may assign it as part of a merger, restructuring, financing, acquisition or sale of substantially all relevant assets, subject to the transferee assuming equivalent data-protection obligations in respect of Personal Data transferred.
If any provision is held invalid or unenforceable, the remaining provisions will continue to operate to the extent permitted by law.
Failure to enforce a provision is not a waiver of future enforcement.
This Agreement, together with the Privacy Policy, applicable subscription/order terms and any incorporated policies, constitutes the agreement between the parties concerning the Service.
The Service is intended for business and accounting use by adults and entities. The Company does not knowingly collect or process Personal Data of children (individuals below 18 years of age) except with verifiable parental or lawful guardian consent, and does not undertake tracking, behavioural monitoring, or targeted advertising directed at children, in accordance with Section 9 of the DPDP Act.
If the Company becomes aware that it has inadvertently collected a child’s Personal Data without the requisite consent, it will take reasonable steps to promptly delete such data, save to the extent retention is separately required by law.
The Company and Users shall comply with applicable Indian information-technology and cybersecurity laws, rules, directions and binding governmental requirements relevant to their respective activities, including the Information Technology Act, 2000, applicable rules made under it, CERT-In directions, and applicable data-protection legislation.
The Information Technology (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021 apply to the Company to the extent, and only to the extent, it meets the statutory definition of an "intermediary" under Section 2(1)(w) of the Information Technology Act, 2000 in respect of the relevant feature or functionality (for example, where Customer Data is made accessible by a User to third parties through the Service). Where those Rules apply, the Company will comply with the applicable due-diligence, grievance-officer and reporting requirements.
The Company may cooperate with lawful requests, court orders, regulatory directions and cybersecurity investigations and may preserve or disclose information where legally required, and will, where legally permissible, make reasonable efforts to notify the affected User of such a request.