Legal · Terms of Service

Terms & Conditions

Effective: 4 October 2026  ·  Last updated: 4 October 2026

These Terms & Conditions (“Terms”) form a binding agreement between you (the “Tenant”, “You”) and Finipe Ventures Private Limited (CIN U82990RJ2026PTC113025; GSTIN 08AAGCF9646J1Z2; “FINIPE Ventures”, “we”, “us” or “our”), a private limited company incorporated under the Companies Act, 2013, with its registered office at 21, 6th Floor, Bhamashah Techno Hub, Jhalana Dungri, Malviya Nagar, Jaipur, Rajasthan 302017, India. They govern access to and use of the FINIPE Business Operating System, the developer sandbox, the marketing site at finipe.com, the partner portal, the mobile applications and any related products, APIs, datasets, integrations and documentation (collectively, the “Services”).

By creating an account, signing an Order Form, integrating with our APIs, ticking the “I agree to the privacy policy & terms” checkbox at registration, or otherwise using the Services, you confirm that you have read, understood and accepted these Terms, the Privacy Policy, the applicable Order Form and any module-specific addenda referenced below. If you do not agree, you must not access or use the Services.

If you use Fini Proof — the code-verification command-line tool, its CI templates and integrations, and the hosted Developer workspace — section 25 applies to that use and prevails over the rest of these Terms where the two differ.

These Terms are published in compliance with the Information Technology Act, 2000 read with the Information Technology (Intermediaries Guidelines and Digital Media Ethics Code) Rules, 2021 and do not require any digital or physical signature.

1. Definitions

  • “Authorised User” means any individual to whom the Tenant grants access to the Services, including employees, downline agents, distributors, master distributors, super distributors, white-label admins, business managers, business employees, and lead partners.
  • “Distribution Network” means the persona class consisting of Super Distributor (SD), Master Distributor (MD), Distributor (DT) and Retail Agent (RT) tiers operating channel services such as BBPS, Payouts, Collections and Wallet.
  • “SaaS Tenant” means an organisation subscribing to FINIPE for internal operations (CRM, HRMS, Payroll, Accounting, Invoicing, Documents, Analytics) on a per-seat or per-tenant licence model.
  • “API Developer” means a person or entity using the developer sandbox at sandbox.finipe.com on a per-transaction basis under a separate API Subscription Agreement.
  • “Lead Partner” means a Chartered Accountant, Company Secretary, Accountant, freelance professional or referral agent enrolled in the Loan DSA Lead Management module on a revenue-share basis.
  • “White-Label Tenant” means a Distribution Network operator that has elected the white-label tier with custom domain, brand independence and tenant-isolated data plane.
  • “Tenant Data” means all data submitted to or processed by the Services by or on behalf of the Tenant, including transaction records, customer KYC, ledger entries, document uploads and configuration.
  • “Order Form” means the commercial document executed (digitally or physically) between FINIPE Ventures and the Tenant setting fees, modules, persona class, pricing model and limits.
  • “Pricing Model” means one or a combination of: (i) per-transaction, (ii) recurring subscription (monthly / annual / per-seat), (iii) hybrid, or (iv) revenue-share.
  • “Third-Party Provider” means a regulated entity or technology partner whose rails are accessed through the Services, listed in the Annexure.
  • “DPDP Act” means the Digital Personal Data Protection Act, 2023.
  • “RBI” means the Reserve Bank of India.

2. Nature of the Services

FINIPE is a software-as-a-service operating system that orchestrates regulated and unregulated workflows across distribution, lending, payments and enterprise operations. FINIPE Venturesis not a bank, non-banking financial company, payment aggregator, payment system operator, business correspondent, BBPOU, AePS sponsor bank, account aggregator, or insurance / mutual-fund intermediary. We do not hold customer funds, we do not bear settlement obligations, and we do not assume credit, fraud, money-laundering or chargeback liability for transactions executed via Third-Party Providers.

Where the Services route transactions through Third-Party Providers, the regulated entity behind that rail (and not FINIPE Ventures) is the principal counterparty for the customer. Settlement, hold-and-release behaviour, daily limits, KYC tiering, dispute timelines and refund mechanics are governed by the Third-Party Provider’s terms, RBI master directions and applicable scheme rules. FINIPEsurfaces these as transparent line-items in the ledger and dispute panels.

3. Eligibility & account registration

The Services are intended for business use by persons aged 18 or above with capacity to contract under the Indian Contract Act, 1872, and for legal entities incorporated in India. Persons resident outside India may use the Services only where FINIPE Ventures has expressly enabled the relevant geography (planned rollout: India → United Arab Emirates → Singapore → United States → European Union).

Age. You may create an account only if you are at least eighteen (18) years and one (1) day old. By registering — with a mobile number, an e-mail code or Google — you confirm that you meet this requirement. Accounts found to belong to a younger person are closed and their personal data is deleted, as described in our Privacy Policy.

At registration, you must provide accurate identity, contact, business and tax information. You agree to keep this information current. FINIPE Ventures reserves the right to refuse, delay or revoke registration where there is reasonable suspicion of fraud, sanctions exposure, mis-selling, identity mismatch, or prior platform abuse. Accounts are personal to the registered Authorised User; credentials must not be shared, sold or rented.

A given user belongs to exactly one persona class — Distribution, SaaS, API or Lead Partner. Cross-class behaviour is restricted by design. A Tenant organisation may, however, run more than one persona class concurrently subject to executed module-specific addenda.

4. Persona-specific terms

4.1 Distribution Network (Agents → Distributor → MD → SD)

Distribution Network users transact on behalf of underlying customers using BBPS, Payouts, Collections (UPI VAN), Wallet and Transactions modules. Commissions are calculated by the FINIPE commission engine according to slabs published in the Order Form, distributed across the upline tree (RT → DT → MD → SD), and settled per the cycle defined in the Order Form. Refunds and chargebacks trigger commission clawback or FIFO recovery against future inflows. KYC for end customers follows the Individual KYC workflow and is gated by tier-ladder limits set by the relevant Third-Party Provider.

4.2 SaaS / White-label (Business Owner / Manager / Employee)

SaaS Tenants operate FINIPE for their internal business: CRM, HRMS, Payroll, Documents, Operations, Analytics and Reports. Subscription fees are charged per seat or per tenant on a recurring basis as specified in the Order Form. Tenant data is isolated by tenant_id and, for White-Label Tenants, by custom subdomain. Business KYC (CIN, GSTIN, PAN, signatory verification) is mandatory before any billable activity.

4.3 API Developer (sandbox.finipe.com)

API Developers receive a one-time onboarding fee and per-transaction usage charges. API keys are scoped, rate-limited and revocable. Usage is metered with idempotency keys, replay protection and outbound webhooks. Production access requires successful sandbox tests, executed Master Services Agreement and clearance of the FINIPE Ventures integration review. FINIPE Ventures may throttle, reject or terminate API access without prior notice on detection of abuse, scanning, scraping or breach of the acceptable-use clause.

4.4 Lead Partner (Loan DSA Lead Management)

Lead Partners refer prospective borrowers (secured or unsecured loans) into the FINIPE Loan DSA module, which routes the lead to one or more aggregator partners (presently Urban Money, Ruloans and Andromeda Sales & Marketing — see Annexure). Where a lead is disbursed, revenue is shared net of aggregator deduction in accordance with the Order Form (typically ₹1,500 to ₹7,500 per ₹10,00,000 of sanctioned principal). Lead Partners must hold a valid PAN, GSTIN where applicable, and execute the Lead Partner Addendum. Lead Partners may not represent themselves as employees or franchisees of FINIPE Ventures or of any aggregator.

The Loan DSA module replaces the generic CRM offering. Generic CRM functionality is not part of the MVP scope and may not be relied upon by Tenants for non-loan workflows.

5. Third-Party Providers & rails

FINIPE integrates with the regulated rails listed in the Annexure. FINIPE Ventures maintains a multi-provider abstraction layer with at least two providers per channel where commercially feasible. Each transaction routed through a rail is governed by the provider’s terms, RBI master directions, NPCI scheme rules and applicable taxes. FINIPE Ventures is not the obligor for funds movement, settlement, chargebacks, fraud reversal or scheme penalties; the regulated entity behind the rail is.

Money-remittance under the legacy domestic-money-transfer (DMT) construct and Aadhaar-Enabled Payment System (AEPS) cash services are withdrawn from the Services and are not offered. Any earlier statement that a DMT module would be enabled under a future addendum is superseded and creates no entitlement.

6. Fees, taxes and billing

Fees are stated in the Order Form and are exclusive of GST, withholding tax, equalisation levy and any other applicable government charge, which the Tenant shall bear. Fees may be charged on a per- transaction, recurring subscription, hybrid or revenue-share basis. FINIPE Ventures renders tax invoices in accordance with the Central Goods and Services Tax Act, 2017 and applicable rules.

A plan renews automatically only where its Order Form or checkout page says it is an auto-renewing subscription; such a plan renews unless cancelled before the next renewal date. A plan sold as prepaid (for example Fini Proof plans today — clause 25.9) does not renew automatically. Per-transaction fees are netted off settlement or charged via the Tenant’s registered payment method. Failed collections follow a dunning schedule (Day 0 attempt, Day 3 retry, Day 7 final notice, Day 10 suspension) before the account is downgraded to read-only. Disputed invoices must be raised within thirty (30) days of issue, after which they are deemed accepted.

FINIPE Ventures may revise fees with thirty (30) days’ prior notice. Revised fees apply to the next billing cycle. Continued use of the Services after the revised fees take effect constitutes acceptance.

7. KYC, AML & sanctions compliance

The Tenant shall comply with the Prevention of Money Laundering Act, 2002 (“PMLA”), the Master Direction on KYC, the FATF Recommendations as adopted by India, and any applicable sanctions list issued by the United Nations Security Council, the Government of India, the United States Office of Foreign Assets Control or the European Union.

Tenants and their Authorised Users must (a) collect and retain CDD/EDD evidence, (b) flag suspicious transactions to the Tenant’s designated principal officer and to FINIPE Ventures where required, (c) not transact for or on behalf of sanctioned persons, and (d) cooperate with reasonable requests for information from FINIPE Ventures and the regulated rail behind the transaction. Wallet tier-ladder limits (₹10,000 / ₹50,000 / ₹2,00,000 per RBI norms or as updated) are enforced by the platform and the Third-Party Provider; the Tenant must not attempt structuring or smurfing to evade them.

8. Acceptable use

You shall not, and shall not permit any Authorised User to:

  • Use the Services for any unlawful, fraudulent, deceptive or harassing purpose;
  • Process transactions related to gambling, illicit drugs, terror financing, escort services, weapons trade or any other RBI-restricted merchant category;
  • Circumvent or disable security features, audit logs, rate limits, KYC tiering, IDOR controls or commission-engine validations;
  • Reverse-engineer, decompile, disassemble or attempt to derive the source code of the Services, except as permitted by law;
  • Introduce malware, perform denial-of-service attacks, conduct vulnerability scans or penetration tests without prior written consent;
  • Resell, sublicense, lease or share the Services with non-Authorised Users or competitors of FINIPE Ventures;
  • Process personal data unlawfully or in breach of the DPDP Act or applicable foreign privacy law;
  • Use the Services to spam, scrape, harvest contact lists or build a competing dataset;
  • Misrepresent persona class (e.g. transact as a Distribution agent under a SaaS account, or vice versa);
  • Generate fake testimonials, fabricate KYC documents, simulate disbursements or otherwise create misleading evidence within or about the Services.

9. Tenant Data, ownership & privacy

The Tenant retains all right, title and interest in Tenant Data. FINIPE Ventures processes Tenant Data strictly to provide the Services, comply with law and protect the integrity of the platform, in accordance with the Privacy Policy and the DPDP Act. The Tenant represents that it has obtained all consents and notices required to lawfully share Tenant Data with FINIPE Ventures and the relevant Third-Party Providers.

Transaction records, ledger entries, audit logs, KYC documents, dispute records and grievance threads are retained by FINIPE Ventures for the period mandated by the RBI, the PMLA, the Income-Tax Act, 1961, the Companies Act, 2013, applicable scheme rules and the DPDP Retention Policy Matrix — even after termination of the Order Form or deletion of the Tenant’s workspace. The hash-chained audit log is tamper-evident and retained on S3 Object Lock or equivalent regulator-grade archival.

10. Confidentiality

Each party shall protect the other party’s Confidential Information with the same degree of care it applies to its own confidential information, but no less than reasonable care. Confidential Information excludes information that is (a) publicly known without breach, (b) independently developed, (c) rightfully received from a third party without restriction, or (d) required to be disclosed by law or regulator subject to prior notice where lawful.

11. Intellectual property

FINIPE, the FINIPE logo, the Services, all derivative works thereof and all associated patents, copyrights, trademarks, trade dress, source code, schemas, prompts, dashboards, business templates and documentation are and shall remain the exclusive property of Finipe Ventures Private Limited. Subject to compliance with these Terms and payment of fees, the Tenant is granted a non-exclusive, non-transferable, revocable, limited licence to use the Services during the subscription term solely for its internal business purpose. No rights are granted by implication, estoppel or otherwise.

Tenant feedback, suggestions, ratings or evaluation results submitted to FINIPE Ventures are deemed non-confidential and may be used by FINIPE Ventures to improve the Services without obligation or attribution.

12. Service availability & SLA

FINIPE Ventures strives to maintain 99.5% monthly uptime for the production environment, excluding scheduled maintenance, regulator-imposed downtime, force-majeure events and outages of Third-Party Providers. Scheduled maintenance is announced at least seventy-two (72) hours in advance where feasible. Production-incident severity, response and resolution targets are defined in the SLA addendum referenced from the Order Form. Sandbox and developer-tier environments are best-effort.

13. Suspension & termination

FINIPE Ventures may suspend or terminate the Services, in whole or in part, immediately and without prior notice if (a) the Tenant materially breaches these Terms, (b) the regulator directs suspension, (c) there is suspected fraud, money laundering, sanctions violation or platform abuse, (d) fees are unpaid beyond the dunning schedule, or (e) continued operation poses material legal, reputational or security risk to FINIPE Ventures.

On termination, the Tenant shall (i) cease all use of the Services, (ii) settle outstanding fees, and (iii) request data export within thirty (30) days. FINIPE Ventures shall return or delete Tenant Data after the export window, except for records subject to statutory retention. Provisions intended to survive termination (including IP, confidentiality, audit retention, indemnity, limitation of liability and dispute resolution) shall so survive.

14. Force majeure

Neither party shall be liable for delay or failure to perform caused by events beyond reasonable control, including acts of God, government action, regulator-imposed shutdowns, internet failure, cyberattacks not attributable to negligence, pandemics, war, civil unrest, strikes affecting the banking system, NPCI / scheme outages and outages of Third-Party Providers. The affected party shall notify the other promptly and resume performance as soon as reasonably possible.

15. Disclaimers

Except as expressly stated in the Order Form, the Services are provided on an “as is” and “as available” basis. To the maximum extent permitted by law, FINIPE Ventures disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, accuracy, non-infringement, quiet enjoyment, uninterrupted operation and freedom from defects. FINIPE Ventures does not warrant that third-party content, lead-quality scores, KYC API responses or aggregator quotes will be accurate or complete; the Tenant must perform its own due diligence before relying on them for decisioning.

16. Limitation of liability

To the maximum extent permitted by law, FINIPE Ventures’s aggregate liability arising out of or relating to the Services in any twelve-month period shall not exceed the fees paid by the Tenant to FINIPE Ventures in that twelve-month period. Neither party shall be liable for indirect, incidental, consequential, special, exemplary or punitive damages, including loss of profit, loss of goodwill, business interruption, regulatory penalties or third-party claims, even if advised of the possibility. Nothing in this clause limits liability for (a) gross negligence or wilful misconduct, (b) breach of confidentiality, (c) infringement of the other party’s intellectual property, or (d) any liability that cannot be limited under applicable law.

17. Indemnification

The Tenant shall indemnify and hold harmless FINIPE Ventures, its directors, officers, employees and affiliates from third-party claims arising out of (a) breach of these Terms, (b) violation of applicable law or regulator direction, (c) infringement of intellectual property or privacy rights, (d) misuse of Third-Party Provider rails, or (e) misrepresentation by the Tenant or its Authorised Users. FINIPE Ventures shall reciprocate in respect of claims that the Services, when used as permitted, infringe the third party’s Indian intellectual-property rights, subject to customary control-of-defence and mitigation carve-outs.

18. Compliance & grievance redressal

FINIPE Ventures maintains a designated Grievance Officer in line with the Information Technology Rules, 2021 and the DPDP Act: Veerendra Kumar. Complaints may be raised with the Grievance Officer at connect@finipe.com with subject line beginning “Grievance —”. Acknowledgement is sent within forty-eight (48) hours and resolution targeted within fifteen (15) days, escalating to thirty (30) days for complex matters. Unresolved grievances may be escalated to the Data Protection Board of India under the DPDP Act.

19. Governing law & dispute resolution

These Terms are governed by and construed in accordance with the laws of India. The parties shall attempt to resolve disputes amicably within thirty (30) days of written notice. Failing amicable resolution, disputes shall be referred to arbitration by a sole arbitrator appointed by mutual consent, under the Arbitration and Conciliation Act, 1996. The seat and venue of arbitration shall be 21, 6th Floor, Bhamashah Techno Hub, Jhalana Dungri, Malviya Nagar, Jaipur, Rajasthan 302017, India; the language shall be English. Subject to arbitration, the courts at 21, 6th Floor, Bhamashah Techno Hub, Jhalana Dungri, Malviya Nagar, Jaipur, Rajasthan 302017, India shall have exclusive jurisdiction.

20. Cross-border use & export controls

FINIPE is offered globally as the worldwide Business Operating System with phased rollout starting in India. The Tenant agrees not to access or use the Services in any jurisdiction where such access is prohibited, where regulatory authorisation has not yet been obtained by FINIPE Ventures, or where the Tenant would breach local export-control or sanctions law. Where the Services are made available outside India, additional jurisdiction-specific terms (UAE, Singapore, US, EU) may apply and prevail over conflicting provisions of these Terms in respect of that jurisdiction.

21. Assignment, notices & severability

The Tenant may not assign these Terms without FINIPE Ventures’s prior written consent. FINIPE Ventures may assign these Terms to an affiliate or in connection with a merger, acquisition or sale of assets without consent. Notices must be in writing and sent to the registered email address on record. Notices to FINIPE Ventures may be sent to connect@finipe.com. If any provision is held unenforceable, the remainder shall continue in full force; the unenforceable provision shall be replaced by an enforceable provision closest in intent.

22. Changes to these Terms

FINIPE Ventures may amend these Terms from time to time. Material changes will be notified at least fifteen (15) days in advance via email to the Tenant’s registered address and via in-app banner. Continued use of the Services after the effective date constitutes acceptance. The latest version is always available at finipe.com/terms-conditions.

23. Marketplace Transactions and Escrow

When you transact with a supplier through a FINIPE marketplace vertical, the following applies:

Escrow

Buyer funds are held in a FINIPE-managed escrow (using the FINIPE Wallet) until the supplier confirms fulfillment or the resolution period (7 days) expires.

Fulfillment confirmation

Suppliers must confirm fulfillment within forty-eight (48) hours of service delivery. Failure to confirm triggers automatic escalation to the FINIPE dispute team.

Disputes

Either party may raise a dispute within seven (7) days of the transaction. FINIPE's dispute team reviews evidence and issues a final ruling within five (5) business days. FINIPE's ruling is binding on both parties.

Platform commission

FINIPE deducts a platform commission — displayed before transaction confirmation — from the supplier's settlement amount. Commission rates are defined per vertical and available at finipe.com/marketplace/fees.

Chargebacks

Buyers disputing a transaction outside the FINIPE dispute system (for example, via bank chargeback) may have their FINIPE account suspended pending investigation.

24. Trust Score

Every verified supplier on FINIPE has a Trust Score (0–1000) computed from KYC tier, listing completeness, transaction history, dispute rate, SLA response time, account age, and verified review aggregate. The Trust Score is:

  • Publicly displayed on supplier listings;
  • Updated nightly;
  • Used by the AI to rank supplier recommendations;
  • Not guaranteed to be accurate at any given moment.

Suppliers may request a manual recompute from their profile dashboard. FINIPE Ventures does not guarantee any specific Trust Score for any supplier.

25. Fini Proof — software licence and service terms

25.1 What this section covers

This section governs Fini Proof: (a) the Fini Proof command-line software distributed as an npm package, together with its CI templates, coding-agent hooks, MCP server and any pull-request verification integration we make available (the “Software”); and (b) the optional hosted Developer workspace to which the Software can upload verification records (the “Hosted Service”). For Fini Proof, this section prevails over any conflicting provision of these Terms; sections 4, 5, 7, 12, 23 and 24 do not apply to it. An executed Order Form prevails over this section for the matters it covers. You (the “Customer”) are the organisation, or the individual acting for themselves, that runs the Software or holds a Hosted Service workspace.

25.2 Definitions

  • “Licence Key” means a key issued by FINIPE Ventures and signed with our vendor signing key, naming the licensed organisation, the number of seats, an expiry date and a licence identifier, and, where stated, the code-hosting providers it covers.
  • “Run” means one execution of a verification command of the Software against a repository, and “Evidence” means the record a Run writes (findings, verdict, the repository, commit and file identifiers it covered, and the digests that make the record tamper-evident).
  • “Active Contributor” means each distinct commit-author identity — the author e-mail address of the commit a Run checked, compared without regard to letter case — recorded on at least one Run in a calendar month (UTC), whether in the Software’s local usage meter or in the Hosted Service. A person or automated coding agent that commits under more than one author address counts once per address; an agent that commits under a person’s address counts as that person.
  • “Trial” means use of the Software without a Licence Key under clause 25.4.

25.3 Licence

The Software is proprietary to Finipe Ventures Private Limited. Publication of the Software on a public package registry does not grant any licence. Subject to these Terms, payment of the applicable fees and either a valid Licence Key or an active Trial, we grant you a non-exclusive, non-transferable, non-sublicensable, revocable licence to install and run the Software on machines and CI runners you control, for your own software development, within the seats, expiry and providers stated in your Licence Key and Order Form. You shall not (a) copy, modify, distribute, sublicense, rent or resell the Software, (b) reverse-engineer or decompile it except to the extent the law permits despite this restriction, (c) remove, disable or work around its licence check, Trial limits or usage meter, or edit a usage export or Evidence record, or (d) use it to build or train a competing product. Third-party tools that the Software can call when you have installed them (for example the gitleaks scanner) are licensed to you by their owners under their own terms.

25.4 Free trial

Without a Licence Key the Software runs as a Trial for up to 7 days from its first Run on a machine or 7 Runs, whichever limit is reached first, on one repository (identified by the repository’s first commit). The Trial is recorded on your machine, and nothing is sent to us during a Trial unless you choose to upload Evidence to the Hosted Service. Each organisation may take one Trial. Re-setting or deleting the Trial record, or using further machines, accounts or repositories to extend the Trial, is a breach of these Terms. The Trial is free, is provided “as is” without support commitments, and ends automatically; there is nothing to cancel.

25.5 Seats, Active Contributors and overage

Subscription fees are charged per Active Contributor (seat), per repository or as otherwise stated at checkout or in your Order Form; the published prices are on the Fini Proof pricing page. The Software records each Run in a local usage meter that stores commit-author addresses only as one-way hashes, and the Hosted Service counts Active Contributors from uploaded Runs in the same way. Exceeding your licensed seats does not stop the Software; it is reported as overage. You agree to send us the usage export the Software produces (fini-proof usage --export) on request and at the end of each billing period, without editing it. Active Contributors above your licensed seats are subject to the rates agreed at checkout or in your Order Form, or you may add seats to your plan. Paid-plan Run fair use is a soft allowance: exceeding it does not block Runs or trigger automatic charges. This does not extend the Trial limits in clause 25.4.

25.6 Licence Keys, expiry and revocation

A Licence Key is checked on your machine, offline, and stops working on its expiry date. We may revoke a Licence Key, on written notice, if a renewal or other charge remains unpaid under clause 25.9, if you breach this section, or when your subscription ends. Because Licence Keys are verified offline, a copy of a revoked key may continue to pass the Software’s own check until its expiry date; your right to use it ends on the date in our notice regardless. You shall stop using a revoked or expired Licence Key and delete every copy of it, including copies stored as CI secrets, within the period stated in our notice. We may also retire a vendor signing key in a new release of the Software, after which keys signed with it are refused; we will re-issue a valid Licence Key at no charge to any Customer whose subscription is current. You shall keep Licence Keys and Hosted Service API keys confidential, are responsible for all use made of them, and shall tell us without delay if one is exposed.

25.7 Hosted Service, uploads and API keys

The Software runs on your machines and does not send your source code to us. The Hosted Service is optional: Evidence is uploaded only when you run the Software with its upload option and a Hosted Service API key, or configure your CI to do so. An uploaded Run contains the repository name, branch and commit identifier, the file paths and file hashes the Run covered, its findings (rule, file path, line and message, with detected secrets redacted), tool and engine versions, and the commit author’s e-mail address. API keys are shown once when created, stored by us only as a hash with their last four characters, and can be revoked by your workspace administrators at any time. Uploaded Evidence is kept in an append-only record: neither you nor we can edit or delete an individual Run through the Hosted Service, and deleting a repository hides it without removing its Runs. You confirm that you are entitled to upload the commit-author data contained in your Evidence and that you have informed your contributors of it. How we handle that data is described in our Privacy Policy. The Hosted Service is provided on a reasonable-efforts basis; service levels apply only where an Order Form states them.

25.8 What a verification result does and does not mean

The Software applies a defined set of rules (“engines”) to the files in scope of a Run. A PASS verdict, or a property shown as PROVEN, means only that, for that Run, those rules ran, their built-in controls behaved as expected, and they found no blocking finding in the files they read. A finding’s proof is a command that reproduces it. A verification result:

  • does not mean that the code is free of defects, secure, correct, compliant with any law or standard, or fit for any purpose;
  • says nothing about files, rules, languages or behaviours outside the scope of that Run, and is shown as NOT_MEASURED where the Software could not establish a result;
  • stops describing the code once a file in scope, the engine or the configuration changes (the Software then reports it as STALE);
  • is reported as SELF_REPORTED, not PROVEN, where the Evidence was read from a file that no trusted verifier signed — its digest shows that the record is intact, not who produced it;
  • may contain false positives and may miss defects; and
  • is not an audit, certification, attestation or legal opinion by FINIPE Ventures, and must not be presented to anyone as one.

You remain responsible for reviewing findings and any change the Software proposes, for your own testing, code review and release decisions, and for the code you ship.

25.9 Subscriptions, renewal and payment

Paid plans are bought online: you choose a plan, seats and a monthly or annual billing period and pay by card, UPI or another method offered at checkout, processed by a regulated payment partner. Prices are shown at checkout and are exclusive of GST and other applicable taxes, which are added and shown before you pay. Your Licence Key is issued automatically once payment is confirmed, and a GST tax invoice under GSTIN 08AAGCF9646J1Z2 is issued automatically for every charge.

The current Fini Proof checkout buys a prepaid period and does not automatically debit your payment method for the next period. Continued access after the paid period requires another confirmed payment. The plan and price are shown at checkout before you pay. You may cancel at any time; your plan continues until the end of the period already paid for. The automatic-renewal and dunning provisions in section 6 do not apply to this prepaid checkout.

Plans bought under a signed Order Form (for example a pilot or an Enterprise plan) are invoiced and paid as the Order Form states. Cancellations and refunds are governed by our Refund & Cancellation Policy, which does not limit your rights under the Consumer Protection Act, 2019.

25.10 Your code and Evidence

You retain all rights in your code and your Evidence. We use uploaded Evidence only to provide the Hosted Service, to count Active Contributors for billing, to secure and support the service, and to comply with law. We do not use your code or your Evidence to train or fine-tune any artificial-intelligence model.

25.11 Disclaimer and limitation of liability

The Software and the Hosted Service are provided “as is” and “as available”, and section 15 applies to them. To the maximum extent permitted by law: (a) FINIPE Ventures is not liable for any defect, vulnerability, security incident, data loss or business loss in your software, whether or not a Run reported on it, nor for any decision made in reliance on a verification result; (b) our aggregate liability arising out of or relating to Fini Proof in any twelve-month period shall not exceed the fees you paid us for Fini Proof in that period; and (c) for use under a Trial or any other free use, we have no liability. The exclusions of indirect and consequential loss, and the exceptions, in section 16 apply to this clause.

25.12 Term and termination

Your subscription runs for the prepaid period described in clause 25.9 (or the term in your Order Form), and a Licence Key is valid up to its expiry date. Either party may terminate for the other’s material breach that remains uncured thirty (30) days after written notice. On expiry or termination you shall stop using the Software under clause 25.6. Evidence files on your own machines remain yours; Evidence you uploaded remains in the append-only record described in clause 25.7. Clauses 25.3 (restrictions), 25.8, 25.10 and 25.11 survive termination. Section 19 (governing law and dispute resolution) applies to Fini Proof.

26. Contact

For questions on these Terms, write to connect@finipe.com. Postal correspondence: Finipe Ventures Private Limited, 21, 6th Floor, Bhamashah Techno Hub, Jhalana Dungri, Malviya Nagar, Jaipur, Rajasthan 302017, India.

Annexure A — Third-Party Providers (current MVP)

  • BBPS: Bill Avenue (Euronet) — Bharat Bill Payment Operating Unit.
  • Payouts: Razorpay X — disbursal to bank accounts and UPI handles.
  • Collections (UPI VAN): Razorpay Virtual Account Number — collections via virtual UPI handles and bank accounts.
  • Loan DSA aggregators: Urban Money, Ruloans, Andromeda Sales & Marketing — multi-aggregator routing for the Loan DSA Lead Management module.
  • KYC & document verification: Karza, IDfy, Setu / Finvu (Account Aggregator) — driven by tenant configuration.
  • Cloud infrastructure: AWS (Mumbai region primary; secondary region for DR).
  • Communications: PWASMS (SMS), Microsoft 365 (e-mail), Google Firebase Cloud Messaging (push notifications), Meta WhatsApp Business Platform.

The list of providers may change without affecting the substance of these Terms. The current, authoritative provider matrix is exposed inside the platform under System > Provider Credentials and is accessible to Tenant administrators with the appropriate role.

Annexure B — Regulatory references

  • Reserve Bank of India — Master Direction on KYC; Master Direction on PPI; Payment Aggregator & Payment Gateway directions.
  • NPCI — UPI scheme rules; BBPS scheme guidelines.
  • Government of India — Digital Personal Data Protection Act, 2023; Information Technology Act, 2000; Information Technology Rules, 2021; Prevention of Money Laundering Act, 2002.
  • Companies Act, 2013; Income-Tax Act, 1961; Central Goods and Services Tax Act, 2017; Foreign Exchange Management Act, 1999.
  • Arbitration and Conciliation Act, 1996.