# NoPoly Umbrella — Terms and Conditions, EULA & Privacy Notice
**Effective Date**: November 15, 2026
**Jurisdiction**: Bengaluru, Karnataka, Republic of India
**Products Covered**: **NoPoly Sovereign** (`prod_nopoly_sovereign`), **NoPoly Vault** (`prod_nopoly_vault`), and **NoPoly Complete Bundle** (`prod_nopoly_bundle`) across Windows, Linux, macOS, Web Browser, Android, and iOS.
---
## 1. Nature of the Business & Single-Person Licensing Scope
1. **Individual Personal Use Only**: Every NoPoly license and subscription is sold strictly for **one (1) individual natural person** across their own personal devices (up to 10 personal devices/kits across Windows, Linux, macOS, Android, and iOS). We do not offer multi-seat, team, or corporate organizational licenses.
2. **Two Purchasing Editions**:
- **Edition A — Perpetual One-Time Purchase (`₹1,000 INR` or local currency equivalent per product)**:
- You pay once and receive a perpetual cryptographic license certificate (`NPLIC-...`), the full self-hostable server bundle, and all associated device kits.
- **Lifetime Free Upgrades**: You receive free access to all future software releases and updates for the purchased product at zero additional software license cost.
- **Customer-Maintained ("No Strings Attached")**: You own the right to run the software you paid for forever. You may choose to upgrade or never upgrade releases. You are 100% responsible for running, securing, backing up, and maintaining your own hardware, operating system, and local/self-hosted environment. NoPoly does not provide managed hosting or hands-on system administration under the One-Time Purchase edition.
- **Edition B — Studio / Managed Cloud Edition (`₹1,000 INR` Base Software + Annual Managed Cloud Subscription)**:
- On top of your perpetual base software license, you subscribe to an optional low-cost annual managed service (`+₹500 INR/year` per product or `+₹800 INR/year` for the Complete Bundle, or global currency equivalent).
- While your annual Studio / Managed Cloud subscription is active, NoPoly runs and maintains your personal Hub & Zero-Knowledge Encrypted Vault Sync backend on our cloud infrastructure, manages SSL/TLS and daily encrypted snapshots, and provides guided device kit onboarding.
- **Perpetual Fallback Guarantee**: If you ever choose to cancel or not renew your annual Managed Cloud subscription, **you never lose the software you paid for**. Your license automatically remains a valid Perpetual Self-Hosted License forever, and you may export your scan history and encrypted `.npvault` archive to run on your own machine.
---
## 2. Zero-Knowledge Security Architecture (NoPoly Vault)
1. **Client-Side Encryption**: NoPoly Vault derives your 256-bit `AES-256-GCM` encryption key locally on your device from your Master Password using `PBKDF2-HMAC-SHA256` (`600,000` iterations).
2. **No Master Password Recovery**: Neither the NoPoly cloud server nor the Platform Admin ever receives your Master Password or unencrypted secrets. **If you lose your Master Password and your Emergency Recovery Kit, we cannot decrypt or recover your vault.** You are solely responsible for safeguarding your Master Password and exporting periodic `.npvault` backups.
---
## 3. On-Device Privacy Architecture (NoPoly Sovereign Kits)
1. **Local Watchlist Matching**: All NoPoly Device Kits (`Windows`, `Linux`, `macOS`, `Browser`, `Android`, `iOS`) download the PolyGraph watchlist and match keywords locally on your device.
2. **Minimal Reporting**: Kits transmit only matched brand/conglomerate identifiers, exposure counts, and up to three short sample labels (`<= 160` characters) to your Hub (either your self-hosted Hub or your Managed Cloud Hub). Raw browsing histories, full file contents, and unrelated personal files never leave your device.
---
## 4. Payments, Merchant of Record, Taxes & Refunds
1. **Global Multi-Currency Checkout**: Prices are offered in `INR` (`₹1,000` base / `+₹500/yr` managed cloud) and equivalent global currencies (`USD`, `EUR`, `GBP`, `CAD`, `AUD`, `SGD`, `AED`, `JPY`, `CHF`, `BRL`, `MXN`, `ZAR`, `MYR`, `IDR`).
2. **Tax & GST/VAT Compliance**: Where processed via our authorized Merchant of Record checkout adapter, applicable regional VAT, GST, or sales taxes are automatically calculated and remitted by the Merchant of Record.
3. **Delivery of Offline License Keys**: Because Perpetual License Purchases immediately issue an irrevocable offline cryptographic license certificate (`NPLIC-...`) and unlock full downloadable software bundles that cannot be remotely deactivated once downloaded cleanly offline, one-time license sales are final once the offline license key and self-host bundle have been downloaded, except where mandatory consumer law requires otherwise. Managed Cloud annual renewals may be cancelled at any time prior to the next annual renewal date.
---
## 5. Compliance with Indian IT Act 2000 & DPDP Act 2023
1. **Data Fiduciary & Grievance Redressal**: In accordance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023 (India):
- **Entity**: NoPoly Sovereign Systems
- **Location**: Bengaluru, Karnataka, India
- **Grievance & Privacy Contact**: `legal@nopoly.org` / `support@nopoly.org`
2. **Right to Data Export & Erasure**: Users on the Managed Cloud edition can export 100% of their account data (JSON scan reports + `.npvault` encrypted archive) or permanently purge their cloud storage at any time from the Web Console.
---
## 6. Limitation of Liability & Exclusive Jurisdiction
To the maximum extent permitted by applicable law, NoPoly Sovereign Systems provides the software "AS IS" without warranties of any kind and shall not be liable for any indirect, incidental, consequential, or data-loss damages. Total cumulative liability is strictly capped at the amount paid by the customer in the preceding 12 months. Any dispute shall be governed by the laws of the Republic of India and subject to the **exclusive jurisdiction of the courts in Bengaluru, Karnataka, India**.