Aiyoo!

Terms & Privacy Notice

TERMS OF USE, USER AGREEMENT AND PRIVACY NOTICE

Effective Date: October 2026
Operating Entity: Aiyoo! (A Sole Proprietorship under the laws of India)
Platform URL: https://aiyoo.shop
Grievance & Legal Officer: Platform Administrator (admin@aiyoo.shop)

1. LEGAL STRUCTURE AND ACCEPTANCE OF TERMS

  1. Contractual Binding: This Terms of Use Agreement, together with all incorporated policies, schedules, and notices (collectively, the "Agreement"), is an electronic contract executed pursuant to the Information Technology Act, 2000 (and rules framed thereunder) and Section 10A thereof, forming a legally binding agreement between Aiyoo! (including its proprietor, operators, successors, and assigns; hereinafter "Platform", "We", "Us", or "Our") and any individual or entity accessing, registering, or transmitting data to the Platform (hereinafter "User", "You", or "Your").
  2. Affirmative Consent: By executing a click-wrap/magic-link authentication, configuring email auto-forwarding rules, transmitting HTTP payloads/webhooks, or accessing aiyoo.shop, You explicitly consent to and agree to be bound by all covenants, representations, warranties, and indemnities contained herein. If You do not agree to every provision of this Agreement in its entirety, You are strictly prohibited from accessing or using the Platform.
  3. Capacity to Contract: You represent and warrant that You are at least 18 years of age, possess full legal capacity under the Indian Contract Act, 1872, and are not barred from receiving services under Indian or international laws.

2. SCOPE OF SERVICES, DISCLAIMERS AND INTERMEDIARY STATUS

  1. Service Scope: Aiyoo! provides a software-as-a-service (SaaS) utility designed to parse, categorise, and present transactional data derived from invoice documents, order confirmations, and quick-commerce delivery links explicitly routed or submitted by You.
  2. Intermediary Status & Safe Harbor: The Platform operates strictly as an "Intermediary" as defined under Section 2(1)(w) of the Information Technology Act, 2000. The Platform does not initiate the transmission, select the receiver of the transmission, or modify the core informational content contained within Your forwarded receipts. As such, the Platform claims full safe-harbor protections guaranteed under Section 79 of the Information Technology Act, 2000.
  3. No Financial Advisory or Banking Representation: Aiyoo! is not a financial institution, non-banking financial company (NBFC), payment aggregator, or financial advisor. Insights, tracking figures, and analytics generated by the Platform are provided for informational and convenience purposes only.
  4. Third-Party Data Reliability: The Platform parses unstructured third-party data (including emails, PDF attachments, and HTML/JSON payloads from platforms such as Amazon, Swiggy, Blinkit, Zepto, and others). The Platform makes no representation or warranty regarding the absolute accuracy, completeness, legal compliance, or validity of underlying third-party merchant line items, taxes, or invoice calculations.

3. DATA PRIVACY, DIGITAL PERSONAL DATA PROTECTION & CONSENT FRAMEWORK

  1. Data Fiduciary & Purpose Limitation: For the purposes of the Digital Personal Data Protection Act, 2023 ("DPDP Act"), the Platform acts as a Data Fiduciary. You explicitly grant the Platform informed, specific, unconditional, and unambiguous consent to process digital personal data contained within Your submitted receipts strictly for the purpose of constructing Your household spending analytics.
  2. Ingestion Engine Consent:
    • Engine A (Email Ingestion): By setting auto-forwarding parameters or sending emails to an assigned forwarding address (*@aiyoo.shop), You authorise the Platform to parse headers, metadata, HTML body content, and attachments strictly to extract purchase metrics (vendor name, date, itemisation, line-item price, and totals).
    • Engine B (URL/Webhook Ingestion): By submitting SMS delivery URLs or automated webhooks (/api/v1/ingest-link), You grant Us authorisation to fetch publicly exposed or state-blob transactional metrics (__NEXT_DATA__ JSON objects) linked to such receipt addresses.
    • Engine C (Browser Extension Ingestion): By installing, enabling, and authorising the "Aiyoo — order sync" browser extension (the "Extension") with Your household member token, You explicitly authorise the Extension to: (i) inject content-reading scripts into order-history and order-detail pages of the e-commerce and quick-commerce platforms enumerated in the Extension's published host permissions (presently Myntra, Blinkit, Zepto, Amazon.in, and Flipkart), strictly while such pages are rendered within Your own, already-authenticated browser session on Your device; (ii) extract solely transactional metadata therefrom (order identifiers, order and delivery dates, item descriptions, quantities, unit and line-item prices, and order totals); and (iii) transmit such extracted metadata, over an encrypted HTTPS connection, to the Platform's servers for ingestion and analytics purposes identical to those governing Engines A and B above. For platforms whose itemised record is available only as a downloadable tax invoice (presently Amazon.in and Flipkart), the Extension retrieves that invoice document from the platform within Your own session and transmits the document itself, over an encrypted HTTPS connection, to the Platform's servers. Such invoices ordinarily also contain Your billing name and delivery address as printed by the platform; the document is parsed in memory solely to extract the transactional metadata enumerated in sub-clause (ii), and the Platform retains only that extracted metadata together with a one-way cryptographic hash of the document (used solely to prevent duplicate processing) — the document itself, and any name or address printed in it, are not stored. The Extension operates only upon Your own affirmative action (manual synchronisation) or a schedule You configure, and performs no background network interception, page modification beyond its own read operations, or automated interaction simulating trusted user input.
  3. Onboarding Usage Records: To understand where people get stuck while setting up, the Platform records first-party onboarding events (for example, which of its pages You opened, whether You started or finished connecting an inbox, Gmail or the Extension, and whether a sign-in or connection failed) together with Your device type, operating system, whether You used an in-app browser, how long You stayed on a page and how far You scrolled, and Your approximate city and region as derived by Our hosting provider. Your IP address is not stored for this purpose; no third-party analytics or advertising trackers are used; these records are not sold or shared. If You arrive by tapping one of Our ads on Facebook or Instagram, the Platform tells Meta when You stay on the page for a few seconds or tap to start, and when You sign up, sending only the ad-click identifier, Your browser and IP address at that moment and, for a sign-up, a scrambled (hashed) copy of Your email address, so Meta can measure the ad; no order, spending or inbox data is ever shared. Records from visitors who never create an account are deleted after 90 days. If You sign up but have not connected a data source, the Platform may send You one reminder email.
  4. Zero Inaccessible Data Access: The Platform does not request, require, or maintain access to Your private email account credentials, bank account passwords, UPI PINs, raw bank SMS channels, or — with respect to the Extension referenced in Clause 3.2 above — Your login credentials, passwords, or payment card details for any third-party e-commerce or quick-commerce platform. The Extension has no technical capability to access, intercept, or transmit such credentials, and reads only the specific order-history/order-detail pages it is designed to parse.
  5. Data Retention & Anonymisation: Personal data shall be retained only so long as necessary to fulfil the analytical purposes of the account or as required by Indian statutory obligations. The Platform reserves the absolute right to generate, store, and utilise fully anonymised, aggregated statistical datasets derived from non-identifiable user metadata for machine learning optimisation, systems development, and benchmarking.
  6. Browser Extension Permissions & Technical Scope: The Extension requests only the following browser permissions, each strictly limited to the purpose stated: (a) storage — to save Your household member token(s) and per-platform identity preferences locally within Your browser; (b) scripting — to read the rendered content of the order-history/order-detail pages referenced in Clause 3.2 above; (c) alarms and idle — to schedule periodic synchronisation and to defer such synchronisation until Your device is not actively in use, so as not to interrupt Your work; and (d) notifications — to inform You locally, via Your operating system, when an unattended scheduled synchronisation has run. The Extension does NOT request, and has never requested, the debugger, webRequest, or downloads permissions, nor any permission enabling it to intercept network traffic, simulate trusted user input, read Your browsing history, or access any open tab or page other than the specific platforms enumerated in Clause 3.2. Your per-platform identity preferences configured within the Extension are stored solely within Your own browser's local/synced extension storage and are never transmitted to or retained on the Platform's servers. You may review, modify, or revoke the Extension's permissions at any time via Your browser's extension management settings, and may uninstall the Extension at any time, which shall immediately and permanently delete all tokens and preferences stored locally by it within Your browser.

4. ACCEPTABLE USE & CYBERCRIME PROHIBITIONS

  1. Restricted Activities: You agree, covenant, and warrant that You shall NOT, directly or indirectly:
    • Submit or forward fraudulent, fabricated, stolen, forged, or altered invoices, receipts, or transactional links.
    • Attempt to compromise, probe, scan, or breach the security architecture, SSRF guards, rate limiters, or firewall constraints of aiyoo.shop.
    • Inject viruses, malware, trojans, worms, or logic bombs, or execute denial-of-service (DoS/DDoS) attacks against the Platform's server infrastructure.
    • Reverse engineer, decompile, disassemble, or extract source code, parsing modules, or underlying algorithms of the Platform.
    • Impersonate any individual, family member, or corporate entity, or utilise unauthorised forwarding tokens.
    • Engage in any act that constitutes an offence under Sections 43, 65, 66, 66C, 66D, or 66E of the Information Technology Act, 2000 (including computer-related offences, identity theft, cheating by personation, and privacy violations).

5. ABSOLUTE INDEMNIFICATION

  1. Indemnity Obligations: You hereby agree to defend, indemnify, and hold completely harmless Aiyoo!, its sole proprietor, legal representatives, software engineers, service providers, and assigns from and against any and all losses, liabilities, claims, suits, demands, damages, penalties, fines, administrative assessments (including regulatory fines under the DPDP Act), costs, and expenses (including reasonable attorney fees and litigation costs) arising out of or related to:
    • Your breach or violation of any covenant, representation, or warranty contained within this Agreement.
    • Any unlawful, fraudulent, or negligent act, or cybercrime initiated via Your account, registered email address, or forwarding token.
    • Any third-party claim asserting that data or receipts submitted by You infringe upon the privacy, intellectual property, or legal rights of any third party.
    • Any unauthorised multi-member family access or receipt submission performed without explicit consent from the respective account holder.

6. LAW ENFORCEMENT & REGULATORY COOPERATION

  1. Log Maintenance & Compliance: In compliance with Indian cyber laws and regulations promulgated by the Indian Computer Emergency Response Team (CERT-In), the Platform logs transactional metadata, ingress IP addresses, timestamps, and payload origins.
  2. Disclosure Mandate: Notwithstanding anything to the contrary in this Agreement or Privacy Policy, the Platform reserves the unrestricted right to access, preserve, and disclose any account logs, data, or communication details to Indian law enforcement agencies, judiciary bodies, or statutory authorities without prior notice to You, upon receipt of a lawful order, subpoena, summons, or directive issued under Section 91 of the Code of Criminal Procedure, 1973 / Bharatiya Nagarik Suraksha Sanhita, 2023, or Section 69 of the Information Technology Act, 2000.

7. LIMITATION OF LIABILITY & WARRANTY EXCLUSION

  1. "As-Is" Provision: The Platform and all associated APIs, parsing scripts, and analytics tools are provided on an "AS IS" and "AS AVAILABLE" basis without warranties of any kind, whether express, implied, statutory, or otherwise, including implied warranties of merchantability, fitness for a particular purpose, or non-infringement.
  2. Exclusion of Damages: To the maximum extent permitted under applicable law, Aiyoo! and its sole proprietor shall under no circumstances be liable for any direct, indirect, incidental, consequential, special, punitive, or exemplary damages, including but not limited to loss of profits, household budgeting discrepancies, technical downtime, third-party platform API changes, data loss, or server interruptions.
  3. Monetary Liability Cap: In the event that liability is attached to the Platform under a court of competent jurisdiction, the total cumulative monetary liability of Aiyoo! for all claims combined shall strictly be capped at and limited to ₹500 (Five Hundred Indian Rupees) or the actual net fee paid by You to Aiyoo! in the preceding thirty (30) days, whichever is lower.

8. PAYMENT TERMS & SUBSCRIPTIONS (RAZORPAY INTEGRATION)

  1. Payment Processing: When paid subscription tiers (e.g., Pro Family) are enabled, payments are processed via RBI-authorised Payment Aggregators (including Razorpay Software Private Limited). By selecting a subscription plan, You agree to abide by the terms, policies, and mandates set forth by Razorpay and card networks/NPCI (UPI AutoPay).
  2. Recurring Auto-Debits: Recurring plans (Monthly or Annual) authorise automated debits to Your chosen payment instrument until explicitly cancelled by You via the in-app subscription management settings prior to the billing cycle renewal date.
  3. Non-Refundability: All subscription fees, once charged, are strictly non-refundable, save and except in cases where a technical system error results in duplicate charges for the same transaction period.

9. TERMINATION & SUSPENSION

  1. Platform Rights: The Platform reserves the unilateral right to immediately revoke, suspend, or permanently terminate Your account, forwarding token, or webhook access without prior notice or refund if:
    • You breach any material term of this Agreement.
    • System monitoring detects abnormal, fraudulent, or malicious receipt submission activity.
    • Required by statutory authorities or regulatory compliance directives.

10. GOVERNING LAW AND EXCLUSIVE JURISDICTION

  1. Governing Law: This Agreement and any disputes arising out of or in connection with it shall be governed by, interpreted, and construed strictly in accordance with the substantive and procedural laws of the Republic of India.
  2. Exclusive Jurisdiction: The parties explicitly agree that any suit, legal action, or judicial proceeding arising out of or relating to this Agreement, the Platform, or services shall be instituted exclusively in the competent civil courts located in Bengaluru, Karnataka, India, and You hereby irrevocably submit to the personal jurisdiction of such courts.

11. DATA PRINCIPAL RIGHTS (DPDP ACT, 2023)

  1. Right to Access and Correction: You are entitled to obtain a summary of the Personal Data the Platform holds about You, and to have any inaccurate or incomplete Personal Data corrected. A self-serve export of every household You belong to, its orders and items, and Your connected inboxes (addresses only — never a stored app password or refresh token) is available at all times from Settings → Your data → Download my data, requiring no request or waiting period.
  2. Right to Erasure: You are entitled to withdraw consent and have Your Personal Data erased. A self-serve deletion tool is available at Settings → Your data → Delete my account: for a household to which You are the sole member, this permanently and irrevocably deletes that household and every record within it (orders, items, and all derived data); for a household shared with other Data Principals, Your own login, credentials, and household membership are permanently deleted, while the shared order history created by the household's continuing members is retained on their behalf. This action, once confirmed, cannot be reversed by the Platform under any circumstance.
  3. Right to Grievance Redressal: You are entitled to file a grievance regarding the processing of Your Personal Data with the Grievance Redressal Officer named in Clause 12 below, and thereafter, where applicable, with the Data Protection Board of India.
  4. Right to Nominate: You are entitled to nominate another individual to exercise these rights on Your behalf in the event of Your death or incapacity, by written notice to the Grievance Redressal Officer.

12. GRIEVANCE REDRESSAL OFFICER

In accordance with the Information Technology Act, 2000 (and rules made thereunder) and the DPDP Act, 2023, the name and contact details of the Grievance Redressal Officer are provided below:

  • Designation: Legal & Grievance Officer
  • Entity Name: Aiyoo! (Sole Proprietorship)
  • Grievance Portal / Email: admin@aiyoo.shop
  • Address for Service: Bengaluru, Karnataka, India
  • Response Timeline: Acknowledgment within 24 hours; resolution within statutory timelines prescribed under Indian law.

All rights reserved © 2026

Sign in to accept.