Terms of Service

These Terms of Service ("Terms") constitute a legally binding agreement between you ("Customer", "you", or "your") and Bachao.AI, operated by Shouvik Mukherjee ("Company", "we", "us", or "our"), governing your access to and use of the Bachao.AI platform and services available at www.bachao.ai.

By creating an account, initiating a scan, or making a payment, you acknowledge that you have read, understood, and agree to be bound by these Terms. If you are accepting these Terms on behalf of a company or other legal entity, you represent that you have the authority to bind that entity.

Bachao.AI provides AI-powered automated security scanning and compliance assessment services for businesses. Our services include:

• AI VAPT Scanner: Automated vulnerability assessment and penetration testing of web applications and infrastructure.
• DPDP Compliance Suite: Assessment and readiness tools for Digital Personal Data Protection Act, 2023 compliance.
• Cloud Security Audit:Misconfiguration detection across AWS, Azure, and GCP environments.
• API Security Testing: Automated API endpoint discovery and OWASP API Top 10 vulnerability scanning.
• Dark Web Monitoring: Credential leak detection, brand impersonation alerts, and threat intelligence.
• Security Awareness Training: AI-generated phishing simulations and employee training programmes.
• Incident Response Retainer: On-call breach response with CERT-In notification support.

All scans are performed using automated tools and AI agents. Results are provided "as-is" based on the information accessible at the time of the scan.

By using our services, you represent and warrant that:

• Domain ownership or authorisation: You own or have explicit written authorisation to scan every domain, URL, application, or infrastructure asset you submit for testing. Unauthorised scanning is illegal and strictly prohibited.
• Accurate information: All information you provide, including company details and contact information, is accurate and up to date.
• Account security: You are responsible for maintaining the security of your account credentials and OTP access.
• Lawful use: You will use the platform and scan results only for lawful security assessment and improvement purposes.
• No misuse of findings: You will not use vulnerability information from scan reports to exploit, attack, or harm any system, whether your own or any third party's.

We reserve the right to suspend or terminate your account immediately if we have reasonable grounds to believe you are scanning assets without proper authorisation.

All prices are listed in Indian Rupees (INR) and are inclusive of applicable taxes unless stated otherwise. Payments are processed securely through Cashfree.

• Subscriptions: Recurring subscriptions are billed at the start of each billing cycle. You may cancel at any time; cancellation takes effect at the end of the current billing period.
• One-time scans: Charged at the time of purchase. The scan is initiated upon successful payment.
• Free tier: Certain services offer a free initial scan or assessment. Free-tier usage is subject to fair-use limits.
• Refunds: If a paid scan fails to complete due to a platform error, you are entitled to a full refund. No refunds are issued after a scan report has been delivered. See our Refund Policy for full details.

Your reports: All security scan reports, vulnerability assessments, and compliance reports generated for your account belong to you. You may use, share, and distribute your reports as you see fit.

Our platform: The Bachao.AI platform, including its software, algorithms, AI models, user interface, branding, and documentation, is the intellectual property of Bachao.AI. You may not copy, modify, reverse-engineer, or create derivative works from any part of our platform.

Aggregated data: We may use anonymised and aggregated scan data (with no personally identifiable information) for research, benchmarking, and improving our scanning capabilities.

You agree not to:

• Use the platform to scan domains, applications, or systems you do not own or are not authorised to test.
• Attempt to overload, disrupt, or interfere with the platform's infrastructure.
• Use automated tools (bots, scrapers) to access the platform outside of normal use.
• Resell, sublicense, or redistribute access to the platform without written permission.
• Upload malicious code or attempt to exploit vulnerabilities in the Bachao.AI platform itself.
• Use scan results to conduct attacks, extortion, or any unlawful activity.

Violation of these terms may result in immediate account termination without refund, and we reserve the right to report illegal activity to law enforcement.

To the maximum extent permitted by applicable law:

• Bachao.AI provides its services on an "as-is" and "as-available" basis. We do not guarantee that our scans will identify every vulnerability or that our assessments will be error-free.
• We shall not be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, data, or business opportunity, arising from your use of or inability to use our services.
• Our total aggregate liability for any claim arising from these Terms or your use of the platform shall not exceed the amount you paid to Bachao.AI in the 12 months preceding the claim.
• We are not liable for any damages resulting from cyberattacks, data breaches, or security incidents that occur despite our assessments, as our scans represent a point-in-time evaluation and do not guarantee ongoing protection.

You may terminate your account at any time by contacting us at ceo@bachao.ai. Upon termination, your access to the platform will cease and your data will be handled in accordance with our Privacy Policy.

We may terminate or suspend your account at our discretion if you violate these Terms, engage in fraudulent activity, or if we are required to do so by law. We will endeavour to provide reasonable notice before termination, except in cases of serious or urgent violations.

These Terms shall be governed by and construed in accordance with the laws of India. Any disputes arising out of or relating to these Terms or the use of our services shall be subject to the exclusive jurisdiction of the courts in Bengaluru, Karnataka, India.

Before initiating formal legal proceedings, both parties agree to attempt to resolve any dispute through good-faith negotiation for a period of 30 days from the date of written notice of the dispute.

We may modify these Terms at any time. When we make material changes, we will notify you via email or a prominent notice on the platform at least 15 days before the changes take effect. Your continued use of the platform after the effective date constitutes acceptance of the updated Terms.