End-user licence agreement · v1.0 · effective 1 October 2026

End-User Licence Agreement

This End-User Licence Agreement governs your individual access to the Consent Tree platform under an account your organisation authorised. It operates alongside — and never overrides — the separate agreement between Trovance Ventures and that organisation.

The short version

This EULA is between Trovance Ventures Private Limited (Consent Tree) and you personally, as an individual accessing the Platform under an account your organisation (the "Customer") authorised. It does not replace the Customer Agreement between us and your organisation — that contract still governs fees, service levels and Customer Data. This EULA covers only your own access: keeping your account and credentials secure, acceptable use, what you may not do with Platform data or AI-generated output, and what happens if your access ends. Data Principals who only use a notice, consent, withdrawal or rights page are never parties to this EULA by that alone.

This End-User Licence Agreement ("EULA") is a legally binding agreement between Trovance Ventures Private Limited, a company incorporated under the Companies Act, 2013, having its registered office at No. 146, Arignar Anna Salai, Cooperative Nagar, Thiruverkadu, Poonamallee, Tiruvallur – 600077, Tamil Nadu, India ("TVPL", "we", "us" or "our"), and the individual who accesses or uses the Platform pursuant to an account authorised by a subscribing organisation ("you" or "End User").

This EULA governs your individual access to and use of the Platform. It is intended to operate together with, and subject to, the agreement entered into between TVPL and the organisation subscribing to the Platform ("Customer").

1 · Definitions and Scope

1.1 Customer Agreement. "Customer Agreement" means the written or online contract between TVPL and the Customer for the Platform, including any Master Services Agreement, Order Form, Data Processing Agreement, service-level schedule and partner or API schedule then in force.

1.2 Data Principal. "Data Principal" means the individual to whom the personal data relates, as defined under the Digital Personal Data Protection Act, 2023, as amended or replaced from time to time.

1.3 Customer Data. "Customer Data" means all data, information, records and content submitted, uploaded, transmitted or otherwise made available by or on behalf of the Customer or its Authorised Users through or in connection with the Platform, including personal data of Data Principals, but excluding data processed by TVPL solely for its own independent purposes.

1.4 Authorised User. "Authorised User" means an individual who has been authorised by a Customer to access or use the Platform, including an employee, contractor, consultant, adviser, auditor or other permitted user, as applicable.

1.5 Platform. "Platform" means the Consent Tree platform and the related software, applications, interfaces, documentation, features, modules, workspaces, dashboards and associated services made available by TVPL, including application programming interfaces ("APIs"), software development kits ("SDKs"), webhooks, hosted capture or notice pages, embeddable components, and any verification tools published by TVPL, including any AI-assisted functionality embedded in or forming part of the Platform.

1.6 Scope and Data Principal Access. A Data Principal's access to or use of a notice, consent, withdrawal, rights or public receipt-verify page does not constitute acceptance of this EULA. A Data Principal shall not become a party to this EULA solely by reason of such access or use.

1.7 API and Embedded Access. Where the Customer accesses the Platform through APIs or an embed, each individual to whom the Customer issues credentials or API keys is an Authorised User. API keys, service-account tokens and webhook secrets are credentials for the purposes of Clause 3.2.

2 · Relationship with Customer Agreement

2.1 Customer Agreement. The Customer has entered into a Customer Agreement with TVPL governing the Customer's subscription to and use of the Platform. If no Customer Agreement is in force, TVPL may refuse or suspend access to the Platform.

2.2 Customer and Authorised User Relationship. The Customer Agreement constitutes the contract between TVPL and the Customer (being the subscribing organisation) and governs matters including the Customer's subscription, fees, service levels, Customer Data and liability. This EULA constitutes the agreement between TVPL and you, as the individual Authorised User, and governs only your access to and use of your account and the Platform. For the avoidance of doubt, "Customer" and "End User" are separate and distinct parties for the purposes of this EULA.

2.3 No Amendment of Customer Agreement. Nothing in this EULA shall create any additional payment obligation on the Customer, reduce, limit or otherwise modify any obligation of TVPL under the Customer Agreement, grant you any ownership interest in or rights to Customer Data, or amend, modify or override the Customer Agreement. In the event of any conflict concerning the contractual rights or obligations of the Customer, the Customer Agreement shall prevail to the extent applicable.

3 · Account and Access

3.1 Account. You may access the Platform only through an account authorised for you. You shall provide accurate and complete information required for the creation and administration of your account and shall keep such information reasonably current and up to date.

3.2 Credentials. You shall keep your login credentials confidential, shall not share them with any other person, shall not permit any unauthorised person to access or use your account, and shall take reasonable steps to safeguard your account and credentials. You shall promptly notify TVPL of any suspected unauthorised access to or compromise of your account. You shall not embed, disclose or otherwise expose any API keys, service-account tokens, webhook secrets or other credentials in any public repository or client-side code.

3.3 Responsibility for Account Activity. Subject to the operation of the Platform and applicable security controls, activities performed through your authenticated account may be attributed to you in the applicable Customer audit record. You shall not knowingly permit any other person to access or use your account.

3.4 Suspension. TVPL or the Customer may suspend or restrict your access to the Platform where reasonably necessary for security purposes, prevention of misuse, compliance with the Customer Agreement, investigation of suspected unauthorised activity, or other legitimate operational purposes.

4 · Limited Licence

4.1 Grant of Licence. Subject to your compliance with this EULA and the applicable Customer Agreement, TVPL grants you a limited, non-exclusive, non-transferable and revocable right to access and use the Platform solely for the authorised internal business purposes of the Customer, including operating Customer-facing consent, withdrawal and rights facilities for that Customer's Data Principals.

4.2 No Transfer of Ownership. Your use of the Platform does not transfer to you any ownership or proprietary interest in:

  1. the Platform;
  2. software or source code;
  3. documentation;
  4. models or model-related materials;
  5. legal or regulatory reference materials;
  6. interfaces;
  7. methodologies; or
  8. trademarks or branding.

4.3 Reservation of Rights. Except for the limited rights expressly granted under this EULA, all right, title and interest in and to the Platform and TVPL's intellectual property are reserved by TVPL.

5 · Acceptable Use and Restrictions

You shall not, and shall not permit or knowingly facilitate any other person to:

5.1 Unauthorised Access.

  1. access or use the Platform without proper authorisation;
  2. attempt to access or use another user's account;
  3. circumvent or attempt to circumvent any authentication, access control or security mechanism; or
  4. use the Platform in breach of the Customer's instructions or applicable law.

5.2 Credential Misuse.

  1. share, transfer, sell, disclose or otherwise make your credentials available to any other person;
  2. permit any other person to access or use your account; or
  3. create or use an account using another person's identity or credentials.

5.3 Security Testing. You shall not conduct penetration testing, vulnerability testing, security testing, scanning or any other testing against the Platform or TVPL's infrastructure without prior written authorisation from TVPL. This restriction does not prohibit testing expressly authorised in writing by TVPL or permitted under the Customer Agreement, including a scoped vulnerability assessment and penetration testing ("VAPT") window.

5.4 Data Misuse.

  1. attempt to access or reveal masked personal data except where such access is expressly authorised for a legitimate work-related purpose;
  2. export, download or copy personal data beyond the permissions granted to you;
  3. use Platform data for any unauthorised purpose; or
  4. disclose Customer Data to any unauthorised person.

5.5 Reverse Engineering. Except to the extent expressly permitted or required by applicable law, you shall not:

  1. reverse engineer the Platform;
  2. decompile or disassemble the Platform;
  3. decode or attempt to derive the source code of the Platform;
  4. circumvent any technical restriction or protection measure; or
  5. otherwise attempt to discover or reproduce the underlying structure, algorithms or operation of the Platform.

5.6 Copying and Competitive Use. You shall not:

  1. scrape or systematically extract Platform content;
  2. bulk-download or extract substantial quantities of Platform information, unless expressly authorised;
  3. reproduce the Platform or any substantial portion thereof;
  4. use the Platform to develop or assist in developing any product or service that competes with the Platform; or
  5. commercially exploit the Platform except as expressly authorised under this EULA or the Customer Agreement.

Nothing in this Clause 5.6 prohibits (i) the export of Customer Data or receipts using Platform features made available to you, or (ii) the use of any verification tool or documentation published by TVPL for the independent checking of audit packs.

5.7 Interference. You shall not introduce or transmit any malicious code, malware or harmful instructions, or otherwise interfere with or attempt to interfere with the security, integrity, availability or operation of the Platform.

5.8 Misrepresentation of Outputs. You shall not represent any Platform outputs as:

  1. legal advice;
  2. a legal opinion;
  3. statutory certification;
  4. regulatory approval;
  5. an audit conducted by an independent statutory or regulatory authority;
  6. a guarantee of compliance with any applicable law or regulatory requirement; or
  7. a guarantee that any penalty, liability, breach or regulatory consequence will not arise.

5.9 Legal Characterisation of Platform Materials. You shall not represent default notice packs, translations or control-catalog text as independent legal advice, or publish any such materials as a standalone legal product without the Customer's authority.

6 · Platform Records and Assessment Outputs

6.1 Platform Records. The Platform may generate and maintain records relating to user activity, assessments, evidence, actions, system events and other information generated through or in connection with the use of the Platform.

6.2 Audit Integrity. Where the Platform records user activity in a Customer-controlled audit record, such record is intended to preserve the integrity and traceability of the relevant activity.

6.3 Assessment Outputs. Diagnostic scores, scan results and DPIA questionnaires are operational aids generated from information supplied to the Platform. They do not constitute an audit opinion and shall not be issued to any third party or represented as a certification that the Customer is compliant with the Digital Personal Data Protection Act, 2023 ("DPDP Act"), or any other applicable law.

6.4 Integrity of Audit and Consent Artefacts. You shall not attempt to rewrite, delete or otherwise tamper with the hash chain of any audit or consent artefact, except through Platform functions that themselves write a compensating record.

7 · AI-Assisted Features

7.1 AI Features. The Platform may contain AI-assisted features that generate suggestions, summaries, classifications, explanations, recommendations or other outputs based on information made available to the relevant feature.

7.2 Advisory Nature. AI-generated output is provided for informational and advisory purposes only. You shall independently review and verify any material AI-generated output before relying upon it.

7.3 No Guarantee of Accuracy. TVPL does not represent or warrant that any AI-generated output will be accurate, complete, current or suitable for any particular purpose.

7.4 Human Review. AI-generated output shall not be treated as a substitute for professional legal, regulatory, compliance, technical or other qualified human judgment.

7.5 Person-Affecting Decisions. You shall not use an AI-generated output as the sole basis for making a decision that materially affects an identifiable individual without appropriate human review and independent consideration.

8 · No Legal Advice or Compliance Guarantee

8.1 No Legal Advice. The Platform and its outputs do not constitute legal advice, a legal opinion or professional legal advice.

8.2 No Compliance Guarantee. Use of the Platform does not guarantee that the Customer or any person will comply with any particular law, regulation, contractual requirement or regulatory framework.

8.3 Diagnostic Information. Scores, assessments, classifications and other Platform outputs are intended to provide diagnostic or operational information based on the information and evidence available to the Platform.

8.4 Evidence. An evidence record indicates, where applicable, that particular information or records were available or existed at the relevant recorded time. It does not, by itself, constitute a legal determination that the underlying activity was lawful or compliant.

8.5 Regulatory Status. Nothing in this EULA or your use of the Platform shall be interpreted as representing that TVPL is a statutory regulator, statutory auditor, statutory certification authority or statutory Consent Manager, unless separately authorised under applicable law.

9 · Customer Data and Personal Data

9.1 Customer Data. Customer Data shall remain subject to the ownership rights and other contractual rights specified in the Customer Agreement. Nothing in this EULA shall transfer any ownership of Customer Data to TVPL or to you.

9.2 User Account Data. TVPL may process information relating to you, including your name, business email address, role, organisation, account information, authentication information, sign-in events and activities performed through your account, for legitimate purposes including account administration, authentication and security, operation and provision of the Platform, audit and accountability, customer support, prevention of misuse, and compliance with applicable law.

9.3 Data Protection Roles. TVPL is a Data Fiduciary only in respect of End User account data that it collects and processes for its own operations under Clause 9.2. Personal data of Data Principals processed within a Customer workspace is processed by TVPL as a Data Processor on the Customer's documented instructions under the applicable Data Processing Agreement ("DPA"). The holding or use of a login does not, by itself, make an End User a Data Fiduciary.

9.4 Privacy Notice. The processing of personal data by TVPL shall also be subject to TVPL's applicable Privacy Notice, as made available or notified to you from time to time.

9.5 Audit Records. Where information concerning your activity on the Platform forms part of a Customer-controlled audit record, the Customer's applicable data-protection and retention obligations shall apply in accordance with the DPA. The removal or alteration of an audit record shall not be required solely because the relevant individual no longer has access to the Platform, where retention is lawfully required or reasonably necessary for audit, security, compliance, dispute resolution or evidentiary purposes. Nothing in this Clause shall be construed as excluding any non-excludable statutory right available under applicable law.

9.6 Security. Credentials and other security-sensitive information shall not be recorded in audit logs except as expressly permitted by applicable security and operational requirements. TVPL shall implement reasonable technical and organisational measures appropriate to the nature of the information processed through the Platform, subject to the Customer Agreement and applicable law.

9.7 No Sale or Advertising. TVPL shall not sell your personal data or use your Platform activity for unrelated advertising purposes, except as expressly permitted by applicable law and the applicable Privacy Notice.

10 · Confidentiality and Feedback

10.1 Confidentiality. You shall not disclose or misuse confidential information of TVPL or the Customer obtained through your use of the Platform. Your confidentiality obligations shall survive termination of your access to the extent applicable.

10.2 Feedback. If you provide suggestions, comments or feedback concerning the Platform, TVPL may use such feedback for improving, developing or operating its products and services, provided that TVPL does not thereby obtain ownership of Customer Data or confidential information merely by receiving feedback.

11 · Availability and Changes to the Platform

11.1 Availability. TVPL does not provide any individual End User with a separate guarantee of availability of the Platform. Any availability, response-time or service-credit commitment applicable to the Customer shall be set out only in a service-level schedule forming part of the Customer Agreement, if the Customer has one. This EULA does not create or confer any service-level agreement ("SLA") for the End User.

11.2 Changes. TVPL may modify, update or improve the Platform from time to time, provided that such changes do not modify the Customer's contractual rights under the Customer Agreement except in accordance with the terms of that agreement.

12 · Warranties and Disclaimers

12.1 Platform Provided on an "As Available" Basis. To the maximum extent permitted by applicable law, the Platform is provided to individual users on an "as is" and "as available" basis, without any separate warranty or representation by TVPL except as expressly set out in this EULA or the applicable Customer Agreement.

12.2 No Individual Warranty. To the maximum extent permitted by applicable law, TVPL does not provide any individual End User with any separate warranty or representation concerning:

  1. uninterrupted or continuous availability of the Platform;
  2. error-free operation of the Platform;
  3. suitability of the Platform for any particular purpose;
  4. achievement of any particular compliance outcome;
  5. regulatory acceptance; or
  6. any particular result arising from or in connection with the use of the Platform.

12.3 Statutory Rights Preserved. Nothing in this EULA shall exclude, restrict or limit any right, remedy, liability or protection that cannot lawfully be excluded, restricted or limited under applicable law.

13 · Limitation of Liability

13.1 Individual Liability. This EULA does not confer upon an End User any independent or personal contractual right to recover from TVPL any fees, loss of profit, loss of business, loss of revenue, loss of time, business interruption, or any other indirect, incidental, special or consequential loss arising out of or in connection with the End User's access to or use of the Platform. Any commercial claim arising from the Customer's subscription, service levels or other contractual arrangements with TVPL shall, to the extent applicable, be governed by the Customer Agreement and may be pursued only by the Customer in accordance with its terms.

Nothing in this Clause 13.1 shall exclude, restrict or limit TVPL's liability to an End User for fraud, wilful misconduct, death or personal injury caused by TVPL's negligence, or any other liability, right or remedy that cannot lawfully be excluded, restricted or limited under applicable law.

13.2 No Individual Commercial Claim. The commercial obligations, service commitments, warranties, indemnities and liability arrangements applicable to the Customer are governed by the Customer Agreement and shall not, solely by reason of this EULA, create separate contractual rights or entitlements in favour of an individual End User.

13.3 User Misuse. Nothing in this EULA shall restrict or prevent TVPL from taking appropriate action against an individual End User in respect of unauthorised use of the Platform, intentional misuse, infringement of intellectual property rights, unauthorised disclosure of confidential information or any other material breach of this EULA.

13.4 Mandatory Liability. Nothing in this EULA shall exclude or limit any liability, right, remedy or statutory protection to the extent that such exclusion or limitation is prohibited or rendered unenforceable under applicable law.

14 · Suspension and Termination

14.1 Termination of Access. Your right to access and use the Platform may terminate or be withdrawn upon the occurrence of any of the following:

  1. the Customer withdraws or revokes your authorisation to access or use the Platform;
  2. your employment, engagement or other authorised relationship with the Customer terminates or expires;
  3. the Customer Agreement terminates or expires, to the extent such termination or expiry affects your access to the Platform;
  4. your account is suspended and is not reinstated within the applicable period; or
  5. you materially breach any provision of this EULA.

14.2 Effect of Termination. Upon termination or suspension of your access, you shall immediately cease accessing and using the Platform and shall not attempt to access or use the Platform thereafter, unless and until such access is expressly restored or otherwise authorised.

14.3 Continuing Obligations. The provisions relating to intellectual property, acceptable use and restrictions, confidentiality, data protection, disclaimers, limitation of liability, dispute resolution and any other provisions which, by their nature or express terms, are intended to survive termination shall continue in full force and effect following termination or expiry of this EULA.

14.4 Audit Records. Termination, suspension or deletion of an individual End User account shall not, by itself, require the deletion of historical audit records where such records are lawfully required or reasonably necessary to be retained pursuant to the Customer Agreement or applicable law.

15 · EULA Updates and Version Control

15.1 Version Control. Each version of this EULA shall identify its applicable version number and effective date.

15.2 Material Changes. Where TVPL makes any material change to this EULA that requires fresh acceptance, TVPL shall provide reasonable notice of such change and, where appropriate, require the applicable End User to accept the updated EULA before continuing to access or use the Platform.

15.3 Urgent Changes. Changes required to comply with applicable law, address material security risks or correct material errors may take effect upon publication or implementation, to the extent permitted by applicable law.

15.4 No Retrospective Amendment. No amendment to this EULA shall retrospectively modify or otherwise affect the Customer's rights or obligations under the Customer Agreement.

15.5 Historical Versions. TVPL shall maintain appropriate records of historical versions of this EULA and applicable acceptance records to enable the version applicable to a particular End User at the relevant time to be reasonably identified.

16 · Consumer Rights

16.1 Business Use. The Platform is ordinarily accessed by an End User as an employee, contractor, consultant, adviser or other authorised representative of a Customer for the Customer's business purposes.

16.2 Consumer Status. Whether an individual qualifies as a "consumer" under applicable law shall depend upon the circumstances and the capacity in which the relevant service is obtained or used. For business use by an employee on behalf of the Customer, the commercial-purpose provisions of Section 2(7) of the Consumer Protection Act, 2019, may be relevant.

17 · Intellectual Property Rights

17.1 TVPL Intellectual Property. All intellectual property rights, title and interest in and to the Platform, including all software, source code, object code, interfaces, documentation, designs, methodologies, trademarks, logos, models and proprietary materials, shall remain vested in and owned by TVPL or its applicable licensors. Except for the limited rights expressly granted under this EULA, no right or licence in respect of such intellectual property is granted to you.

17.2 No Removal of Notices. You shall not remove, obscure, modify or alter any copyright notices, proprietary notices, trademarks or other rights notices contained in or made available through the Platform.

17.3 Third-Party Components. Certain components of the Platform may be provided by third parties, including open-source software, and may be subject to separate licence terms or applicable notices. Where separate third-party terms apply to a particular component, such terms shall govern that component to the extent applicable. TVPL may publish or provide a link to the applicable open-source and third-party notice file through the Platform.

18 · Compliance with Law

You shall access and use the Platform in accordance with:

  1. applicable laws and regulations;
  2. the Customer's lawful policies and instructions applicable to your use of the Platform;
  3. applicable information-security requirements; and
  4. this EULA.

You shall not access or use the Platform for any unlawful, fraudulent or unauthorised purpose.

19 · Authority and Capacity

19.1 Individual Capacity. By accepting this EULA, you represent that you have the legal capacity to enter into this EULA and that you are accepting it for the purpose of governing your own access to and use of the Platform.

19.2 Customer Authority. Where you access or use the Platform on behalf of a Customer, your authority to act on behalf of the Customer shall arise from the Customer's applicable internal authorisation and shall remain subject to the Customer Agreement. Your acceptance of this EULA does not, by itself, amend, vary or otherwise modify the Customer Agreement.

20 · Electronic Acceptance and Records

20.1 Acceptance. You may accept this EULA electronically by selecting "I Accept", "Accept EULA" or any equivalent affirmative acceptance mechanism presented through the Platform.

20.2 Effect of Acceptance. By affirmatively accepting this EULA, you acknowledge that you have had an opportunity to review the applicable terms and agree to be bound by them in respect of your access to and use of the Platform.

20.3 Acceptance Record. TVPL may record and retain information reasonably necessary to evidence the acceptance of this EULA, including:

  1. your name or account identifier;
  2. the Customer or organisation associated with your account;
  3. the applicable EULA version;
  4. the date and time of acceptance;
  5. relevant authentication information; and
  6. other relevant technical information associated with the acceptance event.

20.4 Electronic Records. Electronic acceptance and records maintained by TVPL may be relied upon as evidence of the applicable EULA version and the acceptance thereof, subject to applicable law and applicable evidentiary requirements.

21 · Applicable Law and Jurisdiction

21.1 Governing Law. This EULA shall be governed by and construed in accordance with the laws of India.

21.2 Jurisdiction. Subject to applicable law, the courts at Chennai, Tamil Nadu, India shall have jurisdiction over disputes arising directly between TVPL and an individual End User in connection with this EULA.

21.3 No Individual Arbitration. Unless separately agreed in writing and to the extent legally permissible, nothing in this EULA requires an individual End User to submit any dispute to arbitration.

21.4 Statutory Rights. Nothing in this Clause shall prevent an individual End User from exercising any statutory right or remedy that cannot lawfully be excluded, restricted or waived under applicable law.

22 · Severability

If any provision of this EULA is held by a competent court or authority to be invalid, illegal or unenforceable, such provision shall, to the extent legally permissible, be modified or enforced so as to give effect to its intended purpose, and the remaining provisions of this EULA shall continue in full force and effect.

23 · No Waiver

No failure or delay by TVPL in exercising any right, power or remedy under this EULA shall constitute a waiver of that or any other right, power or remedy. Any waiver shall be effective only if expressly made in accordance with applicable law.

24 · Entire Agreement as to Individual Use

This EULA, together with the applicable Privacy Notice and any other terms expressly incorporated by reference, constitutes the agreement between TVPL and the individual End User governing the End User's access to and use of the Platform.

Nothing in this Clause shall amend, replace, limit or otherwise override the Customer Agreement or the DPA governing the contractual relationship between TVPL and the Customer. In the event of any matter concerning the Customer's contractual rights or obligations, the Customer Agreement shall apply in accordance with Clause 2 of this EULA.

25 · Contact

For questions concerning this EULA or your individual access to and use of the Platform, you may contact:

Trovance Ventures Private Limited
No. 146, Arignar Anna Salai, Cooperative Nagar, Thiruverkadu, Poonamallee, Tiruvallur – 600077, Tamil Nadu, India

Email: hello@consentree.in
Privacy contact: cdpo@consentree.in
Grievance: grievance@consentree.in
Support: incidents@consentree.in

Acceptance

What affirmatively accepting this EULA means

By selecting "I Accept", clicking the applicable acceptance button, or otherwise affirmatively accepting this EULA through the Platform, you acknowledge and agree that:

  1. you have read and understood this EULA;
  2. you agree to comply with its terms;
  3. you will access and use the Platform only for authorised purposes;
  4. you will not misuse, reverse engineer, circumvent or unlawfully access the Platform;
  5. you understand that the Platform and AI-generated outputs do not constitute legal advice or a guarantee of regulatory compliance;
  6. you understand that the Customer Agreement continues to govern the contractual relationship between TVPL and the Customer;
  7. you will not represent Platform scores, receipts or assessments as statutory certification of the Customer; and
  8. Data Principals who access or use only a notice page or capture page are not parties to this EULA solely by reason of such access or use.
EULA Version1.0 Effective Date1 October 2026 Acceptance Date/TimeRecorded electronically User AccountRecorded electronically