Legal

Terms, Privacy & Data Protection.

AureVAT is operated by Pinnacle Consultancy Group. This page contains our Terms of Service, Privacy Policy, Data Processing Addendum, and Subprocessor list. For commercial agreements (MSA / Order Form / SCC), contact info@aurevat.com.

Effective from January 2026. Issued under the laws of India, with jurisdiction-specific addenda for EU customers (GDPR + SCCs 2021/914), UK customers (UK IDTA), and India customers (DPDP Act).

1. Terms of Service

These Terms govern your access to and use of AureVAT (“the Service”), operated by Pinnacle Consultancy Group from 3-3-110/VF/301, Veejay Flora, Hyderguda, Hyderabad – 500048, India. By accessing the Service you agree to be bound by these Terms.

Service description

AureVAT is an enterprise tax intelligence platform providing VAT/GST determination validation, anomaly detection, simulation, AI-assisted advisory, real-time tax-authority reporting, and live e-invoicing submission across multiple jurisdictions.

Eligibility & account

You must be at least 18 years old and authorised to bind your organisation. You are responsible for maintaining the confidentiality of your credentials and for all activities under your account.

Acceptable use

You will not (a) reverse-engineer, decompile, or attempt to extract source; (b) use the Service to violate any law; (c) circumvent rate limits or quota; (d) introduce malware; (e) make the Service available to a third party as a standalone product.

Fees, term & termination

Subscriptions are governed by the plan you select on aurevat.com or by your custom Order Form. Annual plans renew automatically unless cancelled at least 30 days before renewal. We may suspend the Service for non-payment after 14 days' notice.

Confidentiality & ownership

Each party will hold the other's Confidential Information in trust. Pinnacle Consultancy Group retains all right, title and interest in the Service. Customer retains all right, title and interest in customer data.

Limitation of liability

To the maximum extent permitted by law, Pinnacle Consultancy Group's aggregate liability under these Terms shall not exceed the fees paid by Customer in the twelve months preceding the event giving rise to the claim. Neither party shall be liable for indirect, consequential or punitive damages.

Governing law

These Terms are governed by the laws of India. Disputes will be subject to the exclusive jurisdiction of the courts in Hyderabad, Telangana, India.

2. Privacy Policy

Pinnacle Consultancy Group (“we”) respects your privacy. This Policy explains what personal data we process, why, and your rights.

Personal data we collect

  • Account data: name, work email, role, company.
  • Authentication data: hashed credentials, SSO identifiers, login timestamps.
  • Service-usage telemetry: events, feature interactions, audit-log entries.
  • Customer data: tax transactions and ERP metadata you upload — processed strictly under your instructions as a Data Processor.

Lawful basis

We process personal data under (a) contract performance, (b) legitimate interests in operating and securing the Service, and (c) consent where required.

Your rights (GDPR / DPDP)

You have rights of access, rectification, erasure, restriction, portability and objection. To exercise these rights, write to info@aurevat.com.

Data residency

EU customer data is stored in the EU (Frankfurt region). India customer data is stored in India (Mumbai region). Cross-region replication only for disaster recovery.

Retention

We retain personal data for the duration of your subscription plus 90 days, unless legal obligations require longer.

3. Data Processing Addendum (DPA)

Our Data Processing Addendum applies to all customer subscriptions and is incorporated by reference into the Terms. It contains the EU Standard Contractual Clauses (2021/914), UK IDTA, and India DPDP addenda. A countersigned PDF is available on request from info@aurevat.com.

4. Subprocessors

Pinnacle Consultancy Group uses the following subprocessors to deliver the Service. Customers will receive 30 days' notice of changes.

  • Hosting — managed Kubernetes (Mumbai + Frankfurt regions).
  • Database — managed MongoDB replica set (region-pinned).
  • Object storage — S3-compatible (region-pinned).
  • Monitoring — Datadog, Sentry.
  • LLM — Anthropic Claude Sonnet 4.5 via Emergent Integrations (no training on customer data).
  • Email transactional — Resend / Postmark.
  • Payments — Razorpay (India), Stripe (international).
Issued by Pinnacle Consultancy Group, 3-3-110/VF/301, Veejay Flora, Hyderguda, Hyderabad – 500048, India · Effective from January 2026.