MASTER TERMS OF SERVICE AND COMPREHENSIVE PRIVACY POLICY

Effective Date: July 23, 2026 | Document Control Number: MZ-SPICY-LEGAL-2026-V113 | Developer Entity: MyZini Solutions | Application: MyZini Spicy (com.myzinisolutions.spicy)

MANDATORY GOOGLE API SERVICES USER DATA POLICY STATEMENT

MyZini Spicy's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Information retrieved via Google OAuth 2.0 authentication is strictly limited to essential identity verification and is never sold, leased, transferred, or utilized for generalized artificial intelligence model training or advertising profiling.

PART I: DEFINITIONS, APPLICABILITY AND GENERAL PROVISIONS

Section 1 (Definitions): Throughout this Master Terms of Service and Comprehensive Privacy Policy document, the terms "MyZini Solutions", "Company", "We", "Us", and "Our" refer to MyZini Solutions, its parent entity, subsidiaries, hardware partners, and authorized technology affiliates. The terms "User", "Licensee", "Restaurant Owner", "Dhaba Operator", "Subscriber", and "You" refer to any commercial establishment, sole proprietorship, partnership, private limited company, or legal individual accessing, downloading, installing, subscribing to, or operating the MyZini Spicy software application platform, cloud infrastructure, or hardware accessories.

Section 2 (Scope of Agreement): This instrument constitutes a legal, binding contract executed between You and MyZini Solutions. By clicking "I Accept", accessing the website domain https://myzinisolutions.in/myzini-spicy, completing account registration via Google OAuth 2.0, or deploying the thermal billing printer machine, you acknowledge having thoroughly read, understood, and consented without reservation to all terms, clauses, and conditions detailed herein.

Section 3 (Application Identification): The software product governed hereunder is officially designated as "MyZini Spicy - Restaurant & Dhaba Management ERP" (operating under application package identifier com.myzinisolutions.spicy), accessible via multi-tenant web interface, native mobile binaries, and localized cloud POS terminal instances.

Section 4 (Electronic Record Enforceability): This document is an electronic record generated in compliance with applicable information technology legislation, electronic contract frameworks, and cyber governance statutes across operating jurisdictions. It does not require physical or digital ink signatures to establish full legal enforceability between contracting parties.

Section 5 (Modification & Revision Rights): MyZini Solutions reserves the unrestricted right to modify, amend, update, or alter any portion of this Master Agreement at any time. Material updates will be published to this URL with a revised "Last Updated" timestamp. Continued operational access of the software post-publication constitutes binding ratification of modified terms.

Section 6 (Corporate Authorization): If you are accepting this Agreement on behalf of a restaurant chain, franchise partnership, corporate food business, or institutional entity, you represent and warrant that you possess full legal authority to bind said entity to these provisions.

Section 7 (Age of Capacity): Account creation and software operation are restricted to individuals who have attained the legal age of majority in their jurisdiction (minimum 18 years of age) and possess full contractual capacity to execute commercial agreements.

Section 8 (Geographic Operational Scope): MyZini Spicy is engineered primarily for commercial food and beverage operators across India and international jurisdictions complying with applicable local food licensing statutes (including FSSAI mandates) and tax authority rules.

Section 9 (Severability Clause): If any provision, clause, or paragraph of this Agreement is held by a competent court of law to be invalid, illegal, or unenforceable, such determination shall not affect the validity or legal force of the remaining provisions, which shall remain in full effect.

Section 10 (Entire Agreement Mandate): This Master Document, alongside executed commercial invoices for subscription licenses, supersedes all prior verbal understandings, email communications, marketing literature, or informal representations made by sales personnel.

Section 11 (Non-Waiver): Failure by MyZini Solutions to enforce strict compliance with any provision of this Agreement shall not be construed as a waiver of future rights to enforce such provisions.

Section 12 (Force Majeure): Neither party shall be held liable for operational failure or service downtime caused by events beyond reasonable control, including natural disasters, telecommunication failures, cyber warfare, regional power grid outages, or governmental restrictions.

Section 13 (Language of Construction): This document is executed in the English language. In the event of any linguistic discrepancy or translation divergence, the official English text shall serve as the authoritative standard.

Section 14 (Commercial SaaS License): Software licenses granted under MyZini Spicy operate strictly on a non-exclusive, revocable, non-transferable, subscription-based Software as a Service (SaaS) basis.

Section 15 (System Requirements): Users are responsible for maintaining hardware compatibility, network connectivity, and minimum operating environment conditions required to run the Web and POS client engines.

PART II: GOOGLE OAUTH 2.0 SPECIFIC ACCESS, SCOPES & LIMITED USE DISCLOSURES

Section 16 (Google OAuth 2.0 Single Sign-On Integration): MyZini Spicy incorporates Google OAuth 2.0 protocol to facilitate streamlined, password-less single-sign-on (SSO) authentication for restaurant managers, dhaba cashiers, and administrative staff.

Section 17 (Exclusivity of Requested OAuth Scopes): MyZini Solutions explicitly limits its Google OAuth 2.0 permission requests to strictly three essential identity scopes: (a) openid, (b) https://www.googleapis.com/auth/userinfo.email, and (c) https://www.googleapis.com/auth/userinfo.profile. No additional sensitive, restricted, or elevated Google API scopes are requested or accessed.

Section 18 (Detailed Scope Purpose - openid): Access to the openid scope is requested strictly to verify digital user identity, issue cryptographically signed session tokens, and maintain secure authenticated states across web browser sessions without storing raw user passwords on local storage.

Section 19 (Detailed Scope Purpose - userinfo.email): Access to the https://www.googleapis.com/auth/userinfo.email scope is utilized solely to retrieve the primary email address associated with your Google Account. This email functions as your unique account identifier, enables multi-factor login verification, and serves as the destination for automated digital order receipts, GST billing ledgers, and subscription alerts.

Section 20 (Detailed Scope Purpose - userinfo.profile): Access to the https://www.googleapis.com/auth/userinfo.profile scope is restricted to fetching your basic profile display name and profile picture URI. This metadata is rendered exclusively within your localized POS Manager Dashboard header to personalize your administrative workspace.

Section 21 (Zero Secondary Data Usage): Information obtained through Google OAuth 2.0 authentication is used solely for the primary functions described in Sections 18, 19, and 20. It is strictly prohibited from being repurposed for secondary telemetry, user tracking, cross-site behavior profiling, or third-party analytical aggregation.

Section 22 (Absolute Prohibition on Data Monetization): MyZini Solutions unequivocally commits that data obtained via Google APIs will NEVER be sold, rented, leased, bartered, or monetized to data brokers, advertising networks, marketing firms, or external commercial entities under any circumstances.

Section 23 (AI & Machine Learning Exclusion): User data retrieved from Google API services is expressly excluded from being ingested into, processed by, or utilized for training generalized artificial intelligence (AI) models, deep learning networks, large language models (LLMs), or natural language processing algorithms.

Section 24 (Human Data Access Limitations): Human personnel employed by MyZini Solutions are prohibited from reading or inspecting Google user data except in limited emergency situations: (a) when explicit written authorization is granted by the User for technical troubleshooting, (b) when mandated by binding law enforcement court orders, or (c) for internal security audits to resolve critical session token bugs.

Section 25 (Google Identity Token Lifecycle): Google OAuth 2.0 access tokens and refresh tokens are stored using AES-256 cryptographic encryption at rest. Refresh tokens are automatically invalidated upon account deletion or manual revocation by the User.

Section 26 (Limited Use Compliance Certification): MyZini Solutions certifies full compliance with the Google API Services User Data Policy Limited Use requirements across all deployed production servers, staging instances, and database mirrors.

Section 27 (Third-Party Sub-Processor Disclosure): Google OAuth user data is processed exclusively on secure cloud infrastructure hosted within Tier-3 certified data centers with strict encryption standards. Sub-processors are bound by identical non-disclosure and security mandates.

Section 28 (User Consent Mechanics): Granting OAuth permissions during Google Sign-In is completely voluntary. Users may disallow scope access, though doing so will prevent single-sign-on access to the MyZini Spicy dashboard.

Section 29 (Revocation Procedure via Google Security): Users may instantly revoke MyZini Spicy's access permissions at any time by navigating to their Google Account Security Settings page (https://myaccount.google.com/permissions) and removing "MyZini Spicy".

Section 30 (Audit & Security Review): MyZini Solutions undergoes routine internal and third-party security audits to ensure OAuth token storage mechanisms adhere to published security guidelines.

PART III: DATA COLLECTION, PROCESSING AND STORAGE PROTOCOLS

Section 31 (ERP Operational & Software Usage Data): In addition to Google OAuth identity verification, MyZini Spicy processes comprehensive restaurant operational data required to deliver core ERP software functionality. This includes item menu master catalogs, dish pricing schedules, recipe bills of materials (BOM), ingredient inventory stock deductions, Kitchen Order Ticket (KOT) dispatch timestamps, digital QR code menu table assignments, discount override logs, and daily cashier sales register totals.

Section 32 (End-Customer Dining & Transaction Data): To facilitate digital receipt dispatch via SMS/Email, legal GST invoice generation, and customer loyalty management, the software processes end-customer transactional data entered by restaurant staff during checkout. This includes customer mobile phone numbers, guest party sizes, dining table numbers, payment method breakdowns (cash tendered, UPI transaction reference numbers, card approval authorization codes), and itemized dish order histories.

Section 33 (Restaurant Staff & Cashier Activity Audit Logs): For internal security and fraud prevention within restaurant and dhaba operations, MyZini Spicy logs employee software usage metrics. This includes waiter PIN login sessions, cashier shift opening/closing cash drawer balances, voided bill approvals, manager discount overrides, and thermal print command dispatches.

Section 34 (Server Architecture & Data Residency): Enterprise billing data is hosted within secure cloud server environments located in India, utilizing encrypted multi-region failover backups.

Section 35 (Data Retention Schedules): Transactional billing ledgers and GST audit records are retained for the mandatory statutory period prescribed by tax laws (minimum 7 years) unless account termination and explicit data purge is requested.

Section 36 (Encryption in Transit): All HTTPS web traffic exchanged between client devices and server APIs is encrypted using Transport Layer Security (TLS 1.3) protocols.

Section 37 (Encryption at Rest): Enterprise databases, database backups, and OAuth credential stores are encrypted at rest using Advanced Encryption Standard (AES-256).

Section 38 (Role-Based Access Control): Restaurant staff credentials, waiter PIN codes, and manager override keys are segmented via strict role-based access control (RBAC) permissions.

Section 39 (Log Anonymization): System diagnostic logs, performance telemetry, and server request metrics are stripped of personal user identifiers prior to analytical processing.

Section 40 (Cookies and Technical Identifiers): Essential session cookies are deployed strictly to maintain logged-in states, store UI preferences, and prevent cross-site request forgery (CSRF) attacks.

Section 41 (Third-Party Analytics Exclusion): MyZini Spicy does not deploy invasive third-party tracking scripts or ad-targeting cookies within active billing software consoles.

Section 42 (Incident Notification Protocols): In the unlikely event of a confirmed security breach affecting operational data, MyZini Solutions will notify impacted users via email within 72 hours of verification.

Section 43 (Data Accuracy Obligations): Users are responsible for ensuring accuracy when inputting item prices, GST rates, and commercial organization details into the ERP.

Section 44 (Backup Maintenance): Automated daily database snapshots are taken to protect subscribers against operational data corruption.

Section 45 (System Telemetry): Hardware performance data (thermal printer paper feed status, battery voltage) is collected to facilitate hardware warranty support.

PART IV: HARDWARE & THERMAL BILLING PRINTER MACHINE TERMS

Section 46 (Hardware Machine Bundle): The ₹3,999 / Year subscription package includes a complementary wireless thermal billing printer machine provided for operational deployment during active subscription terms.

Section 47 (Hardware Ownership Status): The thermal printer device provided under bundled subscription tiers remains the legal property of MyZini Solutions or its authorized hardware leasing partners during the subscription lifecycle.

Section 48 (One-Year Hardware Replacement Warranty): Devices carry a 1-year limited replacement warranty covering internal manufacturing defects, thermal printing head failures, and mainboard malfunctions under normal usage conditions.

Section 49 (Warranty Exclusions): Warranty coverage is voided if hardware damage results from physical drops, liquid spills, fire exposure, unauthorized disassembly, voltage surges, or physical tampering.

Section 50 (Dispatch and Delivery SLA): Hardware shipping is initiated within 48 hours of subscription payment confirmation, with estimated transit times ranging between 3 to 7 business days depending on delivery location.

Section 51 (Consumables Responsibility): Thermal paper rolls (58mm / 80mm standard sizes) and routine operating consumables are the sole purchasing responsibility of the Subscriber.

Section 52 (Device Replacement Procedure): Defective devices under active warranty must be reported to support@myzinisolutions.in to receive a Return Merchandise Authorization (RMA) tracking number.

Section 53 (Return Shipping Costs): Return transit costs for defective hardware repair evaluation are borne by the Subscriber, while replacement dispatch costs are covered by MyZini Solutions.

Section 54 (Device Connectivity Mandates): Bluetooth and Wi-Fi pairing configurations must comply with device documentation to ensure stable POS printing performance.

Section 55 (Firmware Upgrades): Automatic remote firmware patches may be pushed to connected printer hardware to resolve security vulnerabilities or improve print speeds.

Section 56 (Hardware Return upon Termination): Upon non-renewal or cancellation of yearly subscriptions, leased hardware must be returned in operating condition within 14 days.

Section 57 (Unreturned Hardware Fee): Failure to return printer hardware upon subscription expiration incurs a unreturned device fee of ₹4,500 per unit.

Section 58 (Device Serial Tracking): Hardware units are mapped to Subscriber account IDs via unique MAC addresses and serial IMEI tracking codes.

Section 59 (Use of Approved Paper Rolls): Subscribers agree to utilize standard BPA-free thermal paper rolls to prevent premature wear on thermal printing heads.

Section 60 (Hardware Limitation of Liability): MyZini Solutions is not liable for delayed order processing caused by paper jams or depleted battery levels.

PART V: SUBSCRIPTION, BILLING (₹3,999/YEAR), AND PAYMENT SLA

Section 61 (Yearly Package Pricing): The standard commercial license fee for MyZini Spicy is ₹3,999 (INR) per annum per outlet, inclusive of cloud ERP access, mobile app synchronization, and hardware device bundling.

Section 62 (Advance Payment Requirement): Subscription fees are billed annually in advance. Access to cloud billing features is activated upon verified receipt of payment.

Section 63 (Taxation Applicability): All published subscription rates are subject to applicable Goods and Services Tax (GST) laws. Invoices will itemize applicable tax components.

Section 64 (Renewal Notice Schedule): Automated subscription renewal reminders will be dispatched via email and WhatsApp 30 days, 15 days, and 7 days prior to annual expiration dates.

Section 65 (Grace Period Provisions): Accounts reaching expiration are granted a 5-day operational grace period before billing APIs and thermal print dispatch services undergo automated suspension.

Section 66 (Refund Policy Mandate): Due to immediate provisioning of cloud infrastructure and hardware dispatch, annual subscription fees of ₹3,999 are strictly non-refundable post 7 days from hardware delivery.

Section 67 (Money-Back Trial Guarantee): If Subscriber cancels order within 7 days of delivery due to unresolvable software incompatibility, a refund minus shipping fees will be issued upon hardware return.

Section 68 (Payment Gateway Processing): Online transactions are processed through authorized PCI-DSS compliant payment gateways (Razorpay, Paytm, CCAvenue). MyZini Solutions does not store credit card CVV numbers.

Section 69 (Price Adjustment Rights): MyZini Solutions reserves the right to revise renewal pricing tiers upon providing 60 days advance written notice prior to next billing cycle.

Section 70 (Multi-Outlet Discount Tiers): Commercial entities operating 5 or more outlets qualify for enterprise volume pricing quotes managed via custom corporate contracts.

Section 71 (Billing Dispute Timeline): Subscription invoice discrepancies must be reported to billing@myzinisolutions.in within 14 days of invoice issuance.

Section 72 (Account Suspension Mechanics): Non-payment of subscription fees past the grace period results in account suspension and read-only access to historical ledgers.

Section 73 (Re-Activation Fee): Suspended accounts reactivated past 30 days of expiration incur a standard administrative re-activation charge of ₹500.

Section 74 (Chargeback Penalties): Unwarranted credit card or UPI payment chargebacks trigger instant account locking and legal debt recovery procedures.

Section 75 (Electronic Invoice Issuance): Official tax invoices are issued in PDF format and accessible directly within the software administrative panel.

PART VI: USER DATA RIGHTS, REVOCATION AND DELETION PROCEDURES

Section 76 (Right to Access Data): Subscribers maintain unrestricted rights to export full transaction histories, item catalogs, and GST reports in CSV, Excel, or PDF formats at any time.

Section 77 (Right to Account Data Purge): Subscribers may request complete, permanent erasure of their MyZini Spicy user profile, commercial dining records, and OAuth credentials from production servers.

Section 78 (Data Deletion SLA): Requests for account deletion submitted to support@myzinisolutions.in will be executed within 24 hours of identity verification, with written confirmation returned via email.

Section 79 (Irrevocability of Purge): Data purge operations are permanent and unrecoverable. Subscribers are strongly advised to export ledgers prior to issuing deletion instructions.

Section 80 (Statutory Exclusions from Deletion): Financial billing transaction logs mandated for tax compliance audits will be retained in anonymized format as required by local revenue statutes.

Section 81 (OAuth Permission Revocation): Users may revoke Google Sign-In authorization independently at any time via https://myaccount.google.com/permissions.

Section 82 (Data Portability Rights): Upon account termination, MyZini Solutions will provide standard database dump exports upon written request within 7 business days.

Section 83 (Correction of Inaccurate Data): Subscribers may correct or update organization details directly within software settings or by contacting customer support.

Section 84 (Consent Withdrawal): Withdrawal of consent for non-essential communications (e.g. product updates) can be executed via unsubscribe links in email footers.

Section 85 (Automated Decision Making Disclosure): MyZini Spicy does not employ automated decision-making algorithms that produce legal or significant adverse effects on individual users.

Section 86 (Child Data Protection): MyZini Spicy is an enterprise B2B commercial software system and does not knowingly collect or solicit personal data from minors under 18 years of age.

Section 87 (Privacy Inquiries Officer): Data protection inquiries, deletion requests, and security concerns should be directed to privacy@myzinisolutions.in.

Section 88 (Verification of Deletion Requests): To prevent unauthorized account destruction, data purge requests must originate from the registered primary account email address.

Section 89 (Post-Deletion Token Destruction): Upon deletion execution, stored Google OAuth access tokens and refresh tokens are cryptographically wiped from active databases.

Section 90 (Regulatory Reporting Compliance): MyZini Solutions complies with privacy regulatory directives issued by relevant data protection authorities.

PART VII: INTELLECTUAL PROPERTY, LIMITATION OF LIABILITY & INDEMNIFICATION

Section 91 (Proprietary Rights): All source code, user interface layouts, database schemas, graphic designs, logos, trade names, and documentation associated with MyZini Spicy are the exclusive intellectual property of MyZini Solutions.

Section 92 (Trademark Protection): "MyZini", "MyZini Solutions", "MyZini Spicy", and associated logos are registered trademarks. Unauthorized commercial use of company trademarks is strictly prohibited.

Section 93 (Reverse Engineering Prohibition): Licensee agrees not to decompile, reverse engineer, disassemble, modify, create derivative works, or attempt to extract source code from the software.

Section 94 (Feedback Ownership): Any feature suggestions, enhancement ideas, or feedback submitted by Users regarding MyZini Spicy becomes the sole property of MyZini Solutions without royalty obligations.

Section 95 (Disclaimer of Warranties): Except as expressly stated herein, the software platform is provided "AS IS" and "AS AVAILABLE" without warranties of any kind, whether express, implied, or statutory.

Section 96 (Limitation of Direct Liability): To the maximum extent permitted by law, the aggregate financial liability of MyZini Solutions for any claims arising under this Agreement shall be limited strictly to the total subscription fees paid by Subscriber in the preceding 12 months (maximum ₹3,999).

Section 97 (Exclusion of Consequential Damages): In no event shall MyZini Solutions be liable for indirect, incidental, special, consequential, or punitive damages, including loss of profits, lost revenue, food inventory spoilage, or business interruption.

Section 98 (Subscriber Indemnification Obligations): Subscriber agrees to indemnify, defend, and hold harmless MyZini Solutions from any claims, damages, liabilities, or legal expenses arising from Subscriber's violation of law, breach of contract, or unauthorized software usage.

Section 99 (Third-Party Integrations Disclaimer): MyZini Solutions is not responsible for operational downtime or API deprecation caused by third-party food delivery aggregators (Swiggy, Zomato) or external payment gateways.

Section 100 (Service Level Uptime Commitment): MyZini Spicy targets a 99.9% monthly cloud billing availability uptime, excluding scheduled off-peak maintenance windows.

Section 101 (Scheduled Maintenance Windows): Maintenance updates requiring temporary system pauses are conducted during off-peak hours (02:00 AM to 04:00 AM IST) with 24 hours advance notice.

Section 102 (Third-Party Software Components): Open-source libraries bundled within the client software operate under their respective open-source licensing models.

Section 103 (Data Loss Disclaimer): Subscriber is responsible for verifying daily sales export files to ensure local accounting ledger compliance.

Section 104 (Intellectual Property Infringement Claims): MyZini Solutions will defend Subscriber against third-party claims alleging that the unmodified software infringes valid intellectual property rights.

Section 105 (Survival of Legal Provisions): Clauses governing intellectual property, limitation of liability, indemnification, and dispute resolution shall survive termination of this Agreement.

PART VIII: GOVERNING LAW, JURISDICTION AND DISPUTE RESOLUTION

Section 106 (Governing Law): This Master Agreement shall be governed by, construed, and enforced in accordance with the substantive laws of India, without giving effect to conflicts of law principles.

Section 107 (Jurisdiction Venue): Any legal suits, actions, or proceedings arising out of or relating to this Agreement shall be instituted exclusively in the competent courts located at Muzaffarpur, Bihar, India.

Section 108 (Amicable Dispute Resolution): Prior to initiating formal litigation, contracting parties agree to attempt in good faith to resolve any commercial dispute through informal negotiations for a minimum period of 30 days.

Section 109 (Arbitration Binding Clause): If informal negotiations fail, disputes shall be referred to and finally resolved by binding sole arbitration under applicable arbitration statutes. Venue of arbitration shall be Muzaffarpur, Bihar, India.

Section 110 (Injunctive Relief Rights): Nothing in this section shall prevent MyZini Solutions from seeking emergency injunctive relief in court to prevent intellectual property theft or unauthorized software distribution.

Section 111 (Statute of Limitations): Any cause of action or claim arising out of or related to this software platform must be commenced within one (1) year after the cause of action accrues.

Section 112 (Class Action Waiver): All dispute proceedings must be conducted on an individual basis. Subscriber waives rights to participate in class actions or consolidated litigation against MyZini Solutions.

Section 113 (Official Legal Notice Address): Official legal notices to MyZini Solutions must be dispatched in writing via registered post or tracked courier to: MyZini Solutions Corporate Legal Office, Muzaffarpur, Bihar, India, or emailed to legal@myzinisolutions.in / support@myzinisolutions.in.

MyZini Spicy ERP Contact Support