Terms of Service

1. Acceptance of Terms

By accessing or using gocrd ("the Service"), you agree to be bound by these Terms of Service ("Terms"). If you do not agree to these Terms, please do not use the Service. The Service is operated as a product of Tanishkha, a GST registered proprietorship in Tamil Nadu, India.

2. Description of Service

gocrd is a personal life management platform that allows users to track finances, health records, reminders, projects, software assets, life events, important reference numbers and related personal information. Some features may be released over time and may change, be added or removed without prior notice. The Service is provided "as is" and may be updated, modified, or discontinued at any time.

3. User Accounts

You must provide a valid email address to create an account. You are responsible for maintaining the confidentiality of your account credentials and for all activities that occur under your account.

You must notify us immediately at hello@gocrd.com of any unauthorised use of your account. gocrd will not be liable for any losses resulting from unauthorised use of your account.

4. Subscription and Payments

gocrd offers free and paid subscription plans. Paid subscriptions are billed in advance on a monthly or yearly basis. All prices are listed in Indian Rupees (INR) and applicable taxes (including 18% GST) are charged as required by law.

Payments are processed through third-party payment providers such as Razorpay. gocrd does not store your payment card details on our servers. Subscriptions may auto-renew unless cancelled before the renewal date.

Refunds are not provided for partial months unless required by applicable law or specifically approved by us. You may cancel your subscription at any time and will retain access until the end of your billing period. If you downgrade from the Signature plan, the Secure Notes vault becomes read-locked - you cannot add or edit items, but existing data remains accessible with your PIN.

5. Sensitive Features and Reference Information

Certain features, including the Secure Notes vault (Signature plan), health records, finance information, and identity reference numbers, may involve sensitive personal data. You are solely responsible for deciding what information you choose to store in the Service.

For most features, gocrd applies industry-standard security practices, including HTTPS in transit, encryption-at-rest provided by our infrastructure providers, row-level access controls at the database, and authentication and session management designed to keep your data isolated to your account.

Secure Notes Vault Terms of Use:

The Secure Notes vault uses an additional layer of end-to-end encryption: vault content is encrypted in your browser using a key derived from your PIN (PBKDF2 with 250,000 iterations, SHA-256, followed by AES-256-GCM), before it reaches our servers. This means:

• gocrd cannot read your vault content, recover your PIN, or restore your vault data once it is wiped.
• You are solely responsible for remembering your PIN. Forgetting your PIN means your vault content is permanently unrecoverable.
• Resetting the vault is irreversible and wipes all stored content.

By using the Secure Notes vault, you also agree to the following:

• You will not store passwords, UPI PINs, card CVVs, OTPs, full card numbers, net banking credentials, or crypto recovery phrases. These are restricted by RBI, NPCI, and PCI-DSS rules.
• The vault is intended for reference information only - account numbers, policy IDs, locker info, identity references, and similar non-credential data.
• gocrd may scan your inputs for risk keywords and warn you before saving, but the responsibility for what you store remains entirely with you.
• You agree to keep your own backup copies of any vault content you cannot afford to lose.

gocrd is not designed or marketed as a password manager. We do not recommend storing login passwords, banking passwords, UPI PINs, card CVVs, recovery phrases, or similar high-risk authentication secrets in any part of gocrd. For those use cases, please use a dedicated password manager.

No software system can be guaranteed to be completely secure. You should not store information you are not comfortable managing digitally.

6. Acceptable Use

You agree not to:

• Use the Service for any illegal purpose
• Attempt to access another user's data
• Reverse engineer or attempt to extract the source code
• Upload malicious files, scripts, or harmful content
• Use automated tools to abuse or overload the Service
• Resell or commercially exploit the Service without permission
• Use the Secure Notes vault to store content prohibited under section 5 of these Terms

7. Data and Privacy

Your use of the Service is also governed by our Privacy Policy, which is incorporated into these Terms by reference. By using gocrd, you consent to the collection and use of your data as described in the Privacy Policy.

8. User Data and Backups

We may maintain backups and logs to operate, secure, and improve the Service. While we take reasonable care to protect your data, you are encouraged to keep your own copies of critical documents and important records. Note that Secure Notes vault content is stored encrypted with your PIN; backups of this content cannot be decrypted by gocrd, and recovery is not possible if the PIN is lost.

9. Disclaimer of Warranties

gocrd is provided "as is" without warranties of any kind, express or implied. We do not guarantee that the Service will be uninterrupted, error-free, or completely secure. Financial, health, project, software, and reminder information tracked in gocrd is for personal organisation and reference only and does not constitute financial, medical, legal, tax, or professional advice.

10. Limitation of Liability

To the maximum extent permitted by Indian law, Tanishkha and the people involved in building or operating gocrd shall not be liable for any indirect, incidental, special, consequential, or loss-of-profit damages arising from your use of the Service, including but not limited to loss of data due to a forgotten PIN or vault reset. Our total liability shall not exceed the amount you paid for the Service in the 3 months preceding the claim.

11. Account Termination

We reserve the right to suspend or terminate accounts that violate these Terms or misuse the Service. Upon termination, access to the Service may be restricted. Where technically feasible, you may request export or deletion of your data by contacting us. Note that encrypted vault content cannot be exported in plaintext, as gocrd does not have the ability to decrypt it.

12. Governing Law

These Terms are governed by the laws of India. Any disputes shall be subject to the jurisdiction of competent courts in Tamil Nadu, India, unless applicable law requires otherwise.

13. Changes to Terms

We may update these Terms at any time. We will notify you of significant changes via email or a notice within the Service. Continued use after changes constitutes acceptance of the updated Terms.

14. Contact & Legal Information