Terms of Service

Ektasi operates a multi-tier, zero-trust infrastructure. Your access is limited to the modules, seats and plan tier specified in your active subscription or contract:

• The Creative & Campaign Desk (Free / Starter / Growth): marketing workspaces, CRM, quotes and invoicing, content pipelines and standard analytics.
• The Tech & Protocol Desk (Enterprise): isolated infrastructure, SecOps copilots, private LLM routing and forensic database ledgers.

We may modify, suspend or deprecate specific features, provided such changes do not materially degrade the core security or functionality of your active tier. Material changes are notified to workspace administrators in advance.

Ektasi enforces tenant isolation in the database engine itself — PostgreSQL Row-Level Security under a restricted role. Credentials you store in the Platform (integration passwords, OAuth tokens and AI-provider keys) are encrypted with AES-256-GCM. Most are encrypted under a key derived for your workspace alone; the Google and Zoom meeting credentials you enter under Meetings (the client secrets and the Google refresh token) and your two-factor authentication secrets are encrypted under a platform key instead. Other workspace data is protected by that isolation, by access control and by encryption in transit; it is not separately encrypted per workspace.

2.1 Our commitment: structural tenant isolation. Another tenant cannot access your data through platform operations. Access to your workspace by Ektasi personnel is limited to designated platform administrators, who use it only to provide support you ask for, to investigate a security incident or abuse, or where the law requires it.

2.2 Your responsibility: you are solely responsible for the confidentiality of your administrative credentials, API keys and MFA devices, for the lawfulness of the data you and your users put into the workspace, and for the conduct of users you invite. Ektasi is not liable for loss arising from compromised credentials or from content you upload.

Your workspace data is your property. Ektasi acts as your data processor under the Data Processing Addendum, which forms part of these Terms.

3.1 Right to erasure: on termination, or on a verified request from a workspace administrator, Ektasi runs the Tenant Decommissioning Protocol.

3.2 Erasure: decommissioning runs in one database transaction — if any step fails nothing is deleted, so there is no partial erasure. It deletes every table that holds the workspace’s data from our live database, and destroys the per-workspace key salt, so credentials keyed to the workspace can no longer be decrypted from the live Platform. Two records are kept, because the law requires Ektasi to keep them: the GST tax invoices Ektasi issued for the workspace, and the record of who accepted these Terms for each charge — the version accepted, the date and time, the price shown, and the IP address and browser the acceptance came from. Both are retained for eight financial years: CGST Act, 2017 s.36 (seventy-two months from the due date of that year’s annual return) and Companies Act, 2013 s.128(5). Section 8(7) of the Digital Personal Data Protection Act, 2023 permits that retention, because it is necessary for compliance with law. Nothing else survives: the billing profile, the tax profile, consent and data-request records and every other table carrying the workspace’s identifier are deleted. Copies of the workspace’s data already in our backups are not altered; they are deleted as those backups expire under our rolling retention schedule, and until then are used only to recover the Platform after an incident. What else remains is a content-free tombstone and the append-only audit ledger. You acknowledge that once decommissioning is executed the workspace cannot be recovered from the live Platform. Export what you need first. Procedure: /legal/data-deletion.

4.1 Payment terms: paid plans are billed monthly in advance, via Razorpay or Stripe. Customers in India are billed in INR: listed prices exclude GST, which is added at 18% and shown, with the total, before you pay. Customers outside India are billed in USD as an export of services, without Indian GST; any tax due in your own country is yours to account for. Ektasi issues a GST tax invoice for each charge: it is emailed to the billing address on the workspace when the charge is collected, and every invoice can be downloaded from Plan & Credits in the dashboard. The invoice carries the buyer's legal name, address, GSTIN where one has been given, and place of supply, because the GST rules require them on the document; keep your billing details current in the dashboard, because the invoice is issued from what is on file at the time of the charge. An invoice for a charge in USD is issued as an export of services and carries the declaration required for a zero-rated export. Enterprise invoicing is Net-30 unless a Master Services Agreement says otherwise. Price changes to an existing subscription are notified to workspace administrators by email at least 30 days before they take effect; you may cancel before that date and pay nothing further.

4.2 Renewal: a paid plan is billed for each monthly billing period, at the plan price then in effect (plus GST in India), against the recurring mandate you authorise at checkout with Razorpay or Stripe, until you cancel. Renewal is not automatic for every price. Where a single charge is more than ₹15,000, the Reserve Bank of India's e-mandate framework requires you to authenticate each debit, so your bank, card issuer or UPI app asks you to approve every monthly charge and notifies you at least 24 hours before it; Ektasi cannot collect a charge you have not approved. At or below ₹15,000, and for charges in USD, a renewal may be collected against the mandate without asking you again, subject to your issuer's own rules. A charge that is not approved or not collected is not a renewal: the plan does not renew for that period and clause 4.4 applies. You can cancel at any time from Plan & Credits in the dashboard, or by writing to support@ektasi.io from your account address. Cancelling stops the next renewal and no further charge is made; the paid plan stays active until the end of the period already paid.

4.3 Refunds and cancellation are governed by the Refund & Cancellation Policy; delivery of access by the Shipping & Delivery Policy. Both form part of these Terms.

4.4 Charges not collected: a monthly charge may fail to be collected because it was declined, because the payment failed, or because you did not approve it when your bank asked. In each case the payment gateway retries it and the subscription is marked past due. After three consecutive attempts that do not result in a payment the workspace is locked: administrators can still sign in, and the paid features stop working, until a payment succeeds — at which point access is restored automatically. Notice of an upcoming, failed or unapproved charge comes from your bank and the payment gateway; Ektasi does not send a separate notice today. Ektasi is not liable for business interruption caused by a lock for non-payment.

4.5 Data after cancellation or lock: your workspace data is retained, isolated from other workspaces, for at least 90 days after a cancellation takes effect or a lock begins, so you can export it or resume. After 90 days we may erase it under section 3, giving the administrator 14 days’ notice by email first. Records we must keep by law are retained as described in the Privacy Policy.

You agree not to use the Platform to:

• violate any applicable law or regulation, including data-protection, anti-spam and consumer-protection law in any jurisdiction you send messages to;
• send unsolicited commercial messages, or messages to recipients who have not consented or have withdrawn consent;
• deploy malicious code, ransomware, or engage in unauthorised cryptomining;
• perform penetration testing, DDoS simulation or vulnerability scanning against the Ektasi API or edge without prior written authorisation from our security team;
• bypass, disable or reverse-engineer our session verification, rate limits, licence checks or role-based access controls;
• submit to AI features content that is unlawful, or use AI output to deceive, harass or infringe the rights of others.

Violations may result in immediate suspension or termination of the workspace without refund, and referral to the authorities where required.

AI features generate output from the prompts and content you supply using third-party model providers listed in the DPA. Output may be inaccurate, incomplete or similar to output generated for others; you are responsible for reviewing it before relying on or publishing it, and for compliance with any law that applies to its use (including disclosure obligations). As between you and Ektasi, you own the output you generate, subject to the provider terms where you bring your own key.

7.1 Availability: for paid plans we commit to a 99.5% monthly availability objective for the Platform’s core functions, measured by our own monitoring and excluding scheduled maintenance announced at least 24 hours in advance and outages caused by your systems, third-party networks or force majeure. Live status is published at /status. If availability in a calendar month falls below 99.5%, your sole and exclusive remedy is the refund of affected fees in section 8 of the Refund Policy, claimed within 30 days of the month’s end. Beyond that commitment the Platform is provided “as is” and “as available”, and we do not warrant that it will be uninterrupted or error-free.

7.2 To the maximum extent permitted by law, Ektasi is not liable for indirect, punitive, incidental, special, consequential or exemplary damages, including loss of profits, goodwill, use or data. Ektasi’s cumulative liability under these Terms shall not exceed the amounts you paid to Ektasi in the twelve months preceding the claim. Nothing in these Terms excludes liability that cannot be excluded by law, including under the Consumer Protection Act, 2019 where it applies to you.

These Terms are governed by the laws of India. Disputes are subject to the exclusive jurisdiction of the competent courts at Varanasi, Uttar Pradesh, India, unless your Enterprise MSA provides otherwise.

Complaints about the service, content on the Platform or the handling of your data go to our Grievance Officer, Rajan Singh, at rajan@ektasi.io or by post at Sandaha, Varanasi, Uttar Pradesh 221007, India. Grievances are acknowledged within 24 hours of receipt and resolved within 15 days. General support: support@ektasi.io.

We may update these Terms to reflect changes in the service, our providers or the law. Workspace administrators are notified of material changes by email at least 15 days before they take effect; continued use after the effective date constitutes acceptance. If you do not accept a change you may cancel under the Refund Policy before it takes effect.