Terms and Conditions

Acceptance of Terms

By accessing, registering, or using the Appoint8 platform ("Service"), you agree to be bound by these Terms and Conditions ("Terms"). This constitutes a legally binding agreement between you ("User", "Customer", "You") and OMNARYON LLP ("Company", "We", "Us", "Our").

If you are entering into these Terms on behalf of a clinic, hospital, practice, business, or other organization, you represent that you are authorized to bind that organization, and "You"/"Customer" refers to that organization.

If you do not agree with these Terms, you must not access or use the Service.

Company Information

Appoint8 is owned and operated by:

• OMNARYON LLP
• Registered Address: Yashone, Mann Village Road, Hinjewadi, Pune, Maharashtra – 411057

Definitions

For the purposes of these Terms, and in line with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (together, "DPDP Law"):

• "Personal Data" means any data about an individual who is identifiable by or in relation to such data.
• "Data Principal" means the individual to whom Personal Data relates — including, in the clinic context, the patients, customers, and end-clients of the Customer.
• "Data Fiduciary" means the person who, alone or with others, determines the purpose and means of processing Personal Data.
• "Data Processor" means a person who processes Personal Data on behalf of a Data Fiduciary.
• "Processing" means any operation performed on Personal Data, including collection, storage, use, sharing, or erasure.
• "Customer Data" means all data, including Personal Data of Data Principals, that the Customer or its authorized users upload, enter, or generate within the Service.

Description of Service

Appoint8 is a cloud-based appointment management software that allows businesses to manage:

• Appointment scheduling
• Customer and patient contact information
• Reminders and notifications
• Calendar integrations
• Reporting and analytics

The Service is an administrative software tool only. The Company reserves the right to modify, suspend, or discontinue any part of the Service at any time, with reasonable notice where practicable.

User Eligibility

To use the Service:

• You must be at least 18 years old.
• You must have the legal authority to enter into agreements under the Indian Contract Act, 1872.
• If you are using the Service on behalf of an organization, you confirm you have authority to bind that organization.

The Service is designed for use by businesses and professionals. It is not intended for direct use by individual patients or by children. Where appointment records relate to minors, Section 8 (Data Protection — Children's Data) applies.

Account Registration

To access certain features of the Service:

• You must create an account.
• You agree to provide accurate and complete information.
• You are responsible for maintaining the confidentiality of login credentials.
• You agree to immediately notify the Company of any unauthorized use of your account.
• The Company shall not be liable for any loss or damage resulting from unauthorized account access caused by your failure to safeguard your credentials.

Data Protection — Roles and Responsibilities under DPDP Law

This Section governs how Personal Data is handled and is fundamental to these Terms.

7.1 Allocation of Roles

The parties acknowledge and agree that, in respect of Personal Data of Data Principals (including patients) processed through the Service:

• The Customer is the Data Fiduciary. The Customer alone determines the purposes and means of processing such Personal Data, decides what data is collected, and is responsible for the lawfulness of that data.
• OMNARYON LLP is the Data Processor. The Company processes Personal Data only on behalf of, and in accordance with the documented instructions of, the Customer, as set out in these Terms and the Service's normal functionality.

The Customer's act of uploading, entering, or instructing the processing of any Personal Data through the Service constitutes the Company's documented instruction to process that data for the purpose of providing the Service.

7.2 The Customer's Obligations as Data Fiduciary

The Customer represents, warrants, and agrees that it shall, at its sole responsibility and cost:

• Obtain valid consent from each Data Principal before entering their Personal Data into the Service, where consent is the applicable lawful basis. Such consent must be free, specific, informed, unconditional, and unambiguous, with a clear affirmative action, as required by DPDP Law.
• Provide notice to each Data Principal as required by DPDP Law, including the purpose of processing, the manner of exercising their rights, and the manner of making a complaint to the Data Protection Board of India.
• Be solely responsible for the lawfulness of all Customer Data and for ensuring it has a valid legal basis to collect, store, and process such data through the Service.
• Respond to and fulfil all requests from Data Principals to access, correct, complete, update, or erase their Personal Data, and to address grievances. The Customer is the responder of record for all such requests.
• Not upload any Personal Data that it is not legally entitled to process, and not use the Service for any purpose beyond what it has lawfully notified to its Data Principals.

The Company is not responsible for, and provides no representation regarding, whether the Customer has obtained valid consent or provided lawful notice to any Data Principal. That responsibility rests entirely with the Customer.

7.3 The Company's Obligations as Data Processor

The Company shall:

• Process Personal Data only on the documented instructions of the Customer and only as necessary to provide the Service.
• Implement and maintain reasonable security safeguards designed to protect Personal Data against personal data breaches, appropriate to the nature of the Service.
• Assist the Customer, so far as is reasonably practicable and using the standard features of the Service, in responding to Data Principal requests and in meeting the Customer's own DPDP obligations.
• Upon expiry or termination of the Service, and subject to Section 11 (Data Retention and Deletion), cease processing and erase or return Customer Data as described in these Terms.

Data Protection — Children's Data

The Service may be used to record appointments relating to minors (individuals under 18 years of age).

• The Customer is solely responsible for obtaining verifiable consent of a parent or lawful guardian before processing the Personal Data of any child or person with a disability who has a lawful guardian, as required by DPDP Law.
• The Customer shall not undertake any processing of children's data that is likely to cause detriment to a child, nor any tracking, behavioural monitoring, or targeted advertising directed at children.
• The Company acts only as a Data Processor for such data on the Customer's instructions and bears no responsibility for the Customer's failure to obtain guardian consent.

Data Ownership and Use

All Customer Data entered into the Service remains the property of the Customer. However:

• The Customer grants OMNARYON LLP a limited licence to host, store, process, and transmit Customer Data solely as necessary to provide, maintain, secure, and support the Service.
• The Company may generate and use aggregated, de-identified, and anonymized data (which does not identify any Data Principal or Customer) to operate, analyze, and improve the platform. Such anonymized data is not Personal Data.
• The Customer is responsible for ensuring it has all rights and consents necessary for the Company to process Customer Data as contemplated by these Terms.

Sub-Processors and Third-Party Services

To provide the Service, the Company may engage third-party providers ("Sub-Processors"), including but not limited to:

• Cloud hosting and infrastructure providers
• SMS and notification providers
• Email service providers
• Payment gateways
• Calendar integration providers

The Customer consents to the Company's use of such Sub-Processors. The Company shall impose data protection obligations on its Sub-Processors that are consistent with those in these Terms. The Company remains responsible for the performance of its Sub-Processors' obligations to the extent required by DPDP Law, but is not responsible for the independent acts, availability, or reliability of third-party services that the Customer separately chooses to connect.

The Company shall maintain a current list of its Sub-Processors and make it available to the Customer on request or via its website. The Company will give the Customer reasonable prior notice (at least fourteen (14) days where practicable) before engaging a new Sub-Processor that processes Personal Data. If the Customer objects to a new Sub-Processor on reasonable data protection grounds and the Company is unable to accommodate the objection, the Customer's sole and exclusive remedy is to terminate the affected Service and receive a pro-rata refund of any prepaid fees for the unused subscription period. Such an objection does not entitle the Customer to prevent, delay, or veto the Company's engagement of the Sub-Processor or its continued operation of the Service for other customers.

Data Retention and Deletion

• The Company will retain Customer Data for as long as the Customer's account is active, or as needed to provide the Service.
• Upon termination or expiry of the account, Customer Data may be retained for a limited period (not exceeding the period stated in our Privacy Policy) to allow for account reactivation and to meet legal obligations, after which it will be erased or anonymized.
• The Company will, using the standard features of the Service, assist the Customer in giving effect to a Data Principal's request for erasure that the Customer is obligated to honour.
• The Customer is responsible for exporting or backing up any Customer Data it wishes to retain before deletion.

Data Breach Notification

• The Company will notify the Customer within twenty-four (24) hours after definitively becoming aware of a personal data breach affecting Customer Data processed by the Company, and will provide the information reasonably available to it at that time, supplementing it as further details emerge. The clock starts when the Company confirms a genuine breach, not on receipt of an unverified alert.
• As the Data Fiduciary, the Customer is solely responsible for assessing the breach and for making any notification required to the Data Protection Board of India and to affected Data Principals, within the timelines and in the manner required by DPDP Law.
• Each party remains responsible for its own direct statutory reporting obligations. This includes any obligation the Company may independently have to report a cybersecurity incident to CERT-In under the CERT-In Directions, 2022, and the Customer's obligations as Data Fiduciary under DPDP Law. Compliance with one obligation does not discharge the other.
• The Company's notification to the Customer is not, and shall not be construed as, an admission of fault or liability by the Company.

Subscription and Payments

Access to the Service is provided through paid subscription plans.

Billing

Subscription fees are charged monthly or annually depending on the selected plan. Payments must be made through authorized payment gateways.

Taxes

OMNARYON LLP may currently operate below the GST registration threshold, and prices may not include GST. If tax regulations or the Company's registration status change, applicable taxes may be added.

Non-Refundable

All subscription payments are non-refundable, except where required by law.

Pricing Changes

The Company reserves the right to modify pricing with reasonable notice.

Free Trials (If applicable)

• The Company may offer free trial access to the Service.
• Free trials may be limited in functionality.
• The Company may terminate or modify a trial at any time.

User Responsibilities and Acceptable Use

Users agree to:

• Use the Service only for lawful purposes.
• Maintain the accuracy of appointment data and customer information.
• Comply with all applicable laws, including DPDP Law, when collecting and storing Customer Data.

Users must not:

• Attempt to reverse engineer, decompile, or disassemble the software.
• Introduce malware or harmful code.
• Use the platform for illegal, fraudulent, or infringing activities.
• Attempt to access unauthorized system components or other customers' data.

Violation may result in immediate suspension or termination.

Service Availability and Interruptions

OMNARYON LLP makes reasonable efforts to maintain the availability and reliability of the Appoint8 platform but does not guarantee uninterrupted, error-free, or continuously available service.

The User acknowledges that the Service may be unavailable due to, among other causes:

• Scheduled or emergency maintenance and upgrades
• Infrastructure or hosting provider failures
• Internet connectivity issues
• Third-party service disruptions (SMS, email, payment gateways, cloud providers)
• Cyber incidents or security mitigation actions
• Events beyond the reasonable control of OMNARYON LLP

OMNARYON LLP shall not be liable for any loss, damage, loss of revenue, business interruption, or data loss arising from outages, downtime, maintenance, infrastructure failures, or third-party disruptions. Where continuous availability is critical to the User's operations, the User is responsible for maintaining appropriate operational safeguards and contingencies.

Medical Disclaimer and Limitation of Liability

Appoint8 is a software tool for managing appointments only.

• OMNARYON LLP does not provide medical advice, diagnosis, treatment, or healthcare services.
• The platform does not replace professional medical judgment or clinical decision-making.

Healthcare providers using the platform are solely responsible for:

• Managing their appointment schedules
• Communicating with patients
• Providing medical services and ensuring patient care standards
• The accuracy of all patient information they enter

OMNARYON LLP shall not be liable for any medical or clinical outcome, including but not limited to missed appointments, delayed consultations, incorrect patient information entered by users, or failure to notify patients.

Any medical, clinical, and patient-care responsibility remains solely with the healthcare provider using the platform.

Intellectual Property

All intellectual property related to Appoint8 — including software, code, design, branding, and trademarks — remains the exclusive property of OMNARYON LLP.

Users are granted a limited, non-exclusive, non-transferable, revocable licence to use the platform. Users may not copy the software, resell the platform, modify the source code, or create derivative works.

Confidentiality

Each party agrees not to disclose the other's proprietary or confidential information, including information about the platform, except as required to provide or use the Service or as required by law.

Limitation of Liability

To the maximum extent permitted by law, OMNARYON LLP shall not be liable for:

• Loss of profits, revenue, business, goodwill, or anticipated savings
• Loss of, or damage to, data
• Service interruptions
• Indirect, incidental, special, punitive, or consequential damages

This includes any liability arising from the Customer's failure to comply with its obligations as a Data Fiduciary, including any failure to obtain valid consent, provide notice, or lawfully process Customer Data.

The Company's total aggregate liability under or in connection with these Terms, whether in contract, tort (including negligence), statute, or otherwise, shall not exceed the total subscription fees actually paid by the User to the Company during the three (3) months immediately preceding the event giving rise to the claim. This cap applies to any and all liability arising out of or relating to data protection claims, personal data breaches, regulatory non-compliance, or indemnities, notwithstanding anything to the contrary in these Terms.

Nothing in these Terms excludes or limits any liability that cannot be excluded or limited under applicable law. The limitations in this Section do not purport to limit any penalty that the Data Protection Board of India may impose directly under DPDP Law; as between the parties, however, the Customer remains responsible for liabilities arising from its own acts and omissions as Data Fiduciary, as further set out in Section 21.

Indemnification

The Customer agrees to indemnify, defend, and hold harmless OMNARYON LLP, its partners, employees, and affiliates against any and all claims, liabilities, damages, penalties, losses, costs, and legal fees arising out of or relating to:

• The Customer's misuse of the platform;
• The Customer's breach of these Terms;
• The Customer's failure to obtain valid consent from, or provide lawful notice to, any Data Principal;
• The unlawfulness of any Customer Data or the Customer's processing of it;
• Any claim, complaint, inquiry, or penalty brought by a Data Principal, the Data Protection Board of India, or any authority, to the extent arising from the Customer's acts or omissions as Data Fiduciary.

Term, Suspension and Termination

The Company may suspend or terminate accounts if Users violate these Terms, misuse the Service, or where required by law. Users may terminate their account at any time.

Upon termination:

• Access to the Service will cease.
• Stored Customer Data will be handled in accordance with Section 11 (Data Retention and Deletion).

Force Majeure

The Company shall not be liable for failure or delay in performing its obligations due to events beyond its reasonable control, including natural disasters, internet or infrastructure outages, government or regulatory actions, cyber-attacks, and pandemics.

Grievance Redressal and Contact

For any questions, complaints, or grievances regarding these Terms or the processing of Personal Data by the Company in its role as Data Processor:

• Email: support@appoint8.com
• Company: OMNARYON LLP
• Address: Yashone, Mann Village Road, Hinjewadi, Pune, Maharashtra – 411057

Data Principals (including patients) seeking to exercise their rights under DPDP Law should, in the first instance, contact the relevant Customer (clinic / business), which is the Data Fiduciary responsible for their data.

Governing Law and Jurisdiction

These Terms are governed by the laws of India. Subject to applicable law, any dispute arising from the use of the Service shall be subject to the exclusive jurisdiction of the courts located in Pune, Maharashtra.

Modifications to Terms

OMNARYON LLP may update these Terms from time to time. Material changes will be notified by reasonable means. Continued use of the Service after updates constitutes acceptance of the revised Terms.