Legal Document

Terms of Service & Privacy Policy

Service: AIVPS (aivps.in)  ·  Legal entity: ADHABI DATA CENTRE LLP  ·  Last updated: 20 October 2026

AIVPS is a brand and service operated by ADHABI DATA CENTRE LLP, a Limited Liability Partnership incorporated under the Limited Liability Partnership Act, 2008, with its registered office at Room No. 112, 1st Floor, Zilla Parishad Market, Salar, Murshidabad, West Bengal — 742401, India ("we", "us", "our", or the "Company").

All contracts for AIVPS Cloud VPS, Dedicated VPS, Dedicated Server and related services are entered into with ADHABI DATA CENTRE LLP. ADHABI DATA CENTRE LLP is the Data Fiduciary for the purposes of the Digital Personal Data Protection Act, 2023. These documents are drafted in accordance with the DPDP Act, 2023, the DPDP Rules, 2025, the CERT-In Directions 2022, and the Information Technology Act, 2000.

Part A — Terms of Service

A1. Acceptance of Terms

By registering an account on aivps.in or purchasing any AIVPS Cloud VPS, Dedicated VPS, or Dedicated Server product, you agree to be bound by these Terms of Service, the Acceptable Use Policy below, and our Refund & Cancellation Policy. If you do not agree, please discontinue use of the Services immediately.

A2. Eligibility

The customer must be at least 18 years of age or a legally recognised business entity holding a valid GSTIN. You are responsible for maintaining the confidentiality of your account credentials.

A3. Server Provisioning & Root Access

All AIVPS Cloud VPS and Dedicated Servers provide complete root access to the customer. As a root-level administrator, you maintain complete control and responsibility over installed software, operating system updates, firewall configurations, and internal security. You are solely responsible for all activity originating from your server, including content hosted and traffic generated.

Infrastructure Disclosure: The Company operates as a cloud service provider. Services are provisioned utilizing enterprise-grade third-party upstream data centre operators (colocation partners) located within India. The Company acts as the primary contractual entity and billing provider for all customers.

A4. Service Level Agreement (SLA) & Uptime

AIVPS targets 99.9% network uptime for all Cloud VPS and Dedicated Server instances. This excludes scheduled maintenance announced in advance, customer-initiated OS reboots, customer-side misconfiguration, and third-party upstream carrier interruptions beyond our direct control.

A5. Billing, Suspension and Termination

• Invoices unpaid after the due date are subject to automated suspension after 3 calendar days.
• Server data may be reclaimed or purged after 7 days of non-payment.
• We may suspend or terminate accounts that violate the Acceptable Use Policy, without refund where a violation is established.
• You may cancel at any time from the client area; cancellation stops future renewals but does not entitle you to a refund except as set out in the Refund & Cancellation Policy.

A6. Refunds

Refunds and cancellations are governed exclusively by our Refund & Cancellation Policy.

A7. Disclaimer & Limitation of Liability

Services are provided on an "as is" and "as available" basis. To the maximum extent permitted by law, ADHABI DATA CENTRE LLP shall not be liable for indirect, incidental, special, or consequential damages, including loss of profits, revenue, or data. Our aggregate liability for any claim shall not exceed the amount paid by you for the affected service during the one (1) month preceding the claim.

A8. Governing Law & Jurisdiction

These Terms are governed by the laws of India. Courts at Murshidabad, West Bengal shall have exclusive jurisdiction, subject to applicable consumer protection provisions.

A9. Changes to Terms

We may amend these Terms from time to time. Material changes will be notified by email or through the client area at least 7 days before they take effect. Continued use of the Services after that date constitutes acceptance.

Part B — Acceptable Use Policy (AUP)

The following activities are strictly prohibited on our network and will result in immediate suspension without refund:

• Distribution or hosting of malicious software, viruses, Trojans, ransomware, or botnet command-and-control infrastructure.
• Participation in, origination of, or knowingly facilitating Denial of Service (DoS / DDoS) attacks.
• Sending unsolicited bulk email (SPAM) or operating open mail relays.
• Port scanning, network probing, vulnerability exploitation, or unauthorised intrusion attempts against systems you do not own or have written permission to test.
• Hosting child sexual abuse material (CSAM), or any content prohibited under the IT Act, 2000 and its rules, including the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules, 2021.
• Any other illegal content or activity prohibited under applicable Indian or international law.

We may suspend service immediately, without prior notice, where a violation poses a risk to our network, other customers, or the public.

Part C — Privacy Policy

Legal basis: DPDP Act, 2023 · DPDP Rules, 2025 · CERT-In Directions 2022 · IT Act, 2000.

C1. Data Fiduciary

ADHABI DATA CENTRE LLP, registered office at Room No. 112, 1st Floor, Zilla Parishad Market, Salar, Murshidabad, West Bengal — 742401, India, is the Data Fiduciary for personal data processed in connection with the AIVPS service.

C2. Data We Collect

Name, email address, phone number, billing address, IP addresses allocated to you, payment reference, KYC verification status, and GSTIN (for business customers). We do not store your full Aadhaar number, raw Aadhaar XML, QR payload, or any identity document beyond what is required to complete verification.

C3. Purpose and Legal Basis

Identity verification is mandatory under the CERT-In Directions 2022 for VPS, cloud, and data centre services. Our processing rests on: (a) legal obligation (CERT-In Directions 2022); (b) performance of our contract with you; and (c) legitimate interest in fraud and abuse prevention. Refusal to provide data required by CERT-In results in rejection of service.

C4. Customer Server Data — Zero Access

AIVPS operates a strict Zero Data Access Policy. We do not access, inspect, copy, or monitor the internal data, files, databases, or memory of your Cloud VPS or Dedicated Server, except where you have explicitly requested technical assistance in writing, or where we are legally compelled to do so by a valid order from a competent authority.

C5. Your Rights as a Data Principal

You have the right to: (a) access and inspect your stored account profile; (b) request correction of inaccurate data; (c) download your transaction history; (d) request erasure of personal data, subject to legal retention obligations; (e) withdraw consent, which does not affect processing carried out before withdrawal; and (f) nominate a person to exercise your rights in the event of death or incapacity. Grievances are resolved within 90 days.

C6. Erasure Procedure

Submit a written erasure request to the Grievance Officer at grievance@adhabidatacentre.in. We will confirm receipt and provide 48 hours' notice before erasure is carried out, unless retention is required by CERT-In, tax, or PMLA obligations — in which case we will tell you the specific legal basis for continued retention.

C7. Sub-Processors

Your personal data may be processed using infrastructure provided by third-party data centre operators located within India. We remain the Data Fiduciary; our colocation providers act as sub-processors and are contractually bound to maintain equivalent security and confidentiality standards.

• Payment Gateway: Razorpay / PhonePe for payment processing.
• KYC Provider: an authorised DigiLocker-integrated provider for identity verification.

C8. Payment Security

We do not collect or retain payment card details, bank credentials, or UPI PINs. All transactions are handled through PCI-DSS compliant payment gateways.

C9. Cookies & Local Storage

We use session cookies to maintain login sessions and user preferences. We do not use advertising or cross-site tracking cookies.

C10. Cross-Border Data

Aadhaar-related infrastructure and verification data are stored strictly within India.

C11. Breach Notification

In the event of a personal data breach, affected Data Principals and the Data Protection Board of India are notified within 72 hours, in line with DPDP Act obligations. See Part F.

Part D — KYC & Identity Verification Policy

Legal basis: CERT-In Directions 2022 (Directions 8–10) · IT Act, 2000.

D1. Mandatory Data

Full legal name, validated address, contact number, email, IP address allotted, purpose of hire, and ownership pattern.

D2. Verification Levels

• Level 1 (shared / domain / email) — email + mobile + payment verification.
• Level 2 (VPS / higher limits) — Level 1 + government document or DigiLocker verification.
• Level 3 (bulk VPS / large IP blocks / proxy / crypto-adjacent) — Level 2 + manual approval + enhanced monitoring.

D3. Accepted Verification Methods

In order of preference: DigiLocker → government document (Driving Licence / Passport / Voter ID) → Aadhaar offline XML/QR → any other government-approved verification method through an authorised provider.

D4. What We Never Do

• Collect identity documents through ordinary support channels.
• Ask for verification data by email, WhatsApp, phone, or support ticket.
• Store your full Aadhaar number, raw XML, QR payload, or biometric data.

D5. Failed Verification

You will be given a general reason for failure and one alternative verification method. Repeated failed attempts are rate-limited. Genuine cases are escalated to manual review.

D6. Refusal to Verify

Refusal to provide CERT-In-required data is grounds for rejection of service without refund.

Part E — Data Retention & Deletion

Legal basis: CERT-In Directions 2022 (Direction 8) · DPDP Act, 2023 · DPDP Rules, 2025 · Income Tax Act, 1961 · PMLA, 2002.

Data Type	Retention Period	Legal Basis
Validated subscriber records	5 years post-cancellation	CERT-In Direction 8
Transaction / billing records	5 years from transaction	PMLA / Income Tax Act
KYC verification status	5 years post-cancellation	CERT-In + DPDP
Full identity documents	Not retained	DPDP data minimisation
Full Aadhaar number / raw XML	Never stored	UIDAI regulations
ICT / system logs	180 days (rolling)	CERT-In Directions 2022
Developer API logs	7 days	Operational
Signup OTPs	10 minutes (auto-deleted)	Operational
Terminated VM history	3 months	Billing disputes
Login events	Security audit trail period	Security / CERT-In

Erasure requests are honoured except where retention is required by CERT-In, tax, or PMLA obligations. Where retention applies, the customer is informed of the specific legal basis.

Part F — Data Breach & Incident Response

Legal basis: DPDP Act, 2023 (Section 8(6)) · DPDP Rules, 2025 · CERT-In Directions 2022.

1. Detection and isolation: disable compromised accounts, isolate affected systems, preserve logs.
2. CERT-In reporting (within 6 hours): incident@cert-in.org.in · helpline 1800-11-4949.
3. DPDP breach notification (within 72 hours): notify the Data Protection Board of India and affected Data Principals.
4. KYC provider notification: where provider data or systems are involved, notify the provider immediately.
5. Remediation: rotate API keys and credentials, patch the root cause, conduct a post-incident review, and update controls.

Part G — Law Enforcement Requests

Legal basis: IT Act, 2000 · CERT-In Directions 2022 · Bharatiya Nagarik Suraksha Sanhita, 2023.

1. A single point of contact is designated for all law-enforcement requests.
2. Verification required: written request on official letterhead, verification of the requesting officer's identity, and demonstration of legal authority.
3. We provide: validated subscriber records (name, address, contact, allotted IP, purpose of hire, ownership pattern) as required under CERT-In Directions.
4. We do not provide: full Aadhaar number, raw XML/QR, or biometric data, unless specifically required by a court order.
5. Timeline: requests are acknowledged within 24 hours and data is provided within the legally mandated timeframe.
6. All requests and our responses are logged.

Part H — Grievance Officer & Contact

Grievance Officer (DPDP Act, 2023 & IT Rules, 2021):
ADHABI DATA CENTRE LLP
Room No. 112, 1st Floor, Zilla Parishad Market, Salar,
Murshidabad, West Bengal — 742401, India
Email: grievance@adhabidatacentre.in
General support: support@aivps.in · +91 8900361648

Grievances are acknowledged within 48 hours and resolved within 90 days of receipt. If you are not satisfied with our response, you may escalate to the Data Protection Board of India.