IrisOS Legal

Terms of Service

These terms describe the responsibilities of GRL Enterprises and customers using IrisOS.

Last updated: October 22, 2026

1. Parties, eligibility and agreement

IrisOS, available at https://irisos.app, is operated by GRL Enterprises (we, us, or our). Our business address is 307, Grima Unnathi, Kyalasanahalli, Bengaluru – 560077, Karnataka, India.

Customer means the person or organization subscribing to IrisOS; User means a person authorized to use its Workspace. A Workspace is the organization environment holding its records and permissions. Users must be adults with legal capacity; a person accepting for an organization must have authority to bind it. Signing a customer-created document through IrisOS does not by itself purchase an IrisOS subscription.

By creating an account, purchasing a subscription, or accessing or using IrisOS, the Customer agrees to these Terms. The Privacy Policy explains processing; acknowledgement of it is not blanket consent to every optional use. The Cancellation, Suspension and Refund Policy and AI Usage and Credit Policy address those specific subjects. The Data Processing Agreement forms part of these Terms and applies whenever GRL Enterprises processes Personal Data in Customer Data on the Customer’s behalf. A signed order overrides a conflicting general commercial term only where it expressly does so. The DPA controls conflicts concerning processor obligations; mandatory law always prevails.

2. Service and availability

IrisOS supports business records, client/project/task workflows, financial records, documents and signing, communications, reports, integrations and Miles AI. Availability depends on plan, permissions, configuration and supported integrations. A catalog entry or preview does not guarantee an operational third-party integration.

Hosting, authentication, model and integration providers may experience outages, capacity limits, API changes, synchronization delays and maintenance. Models and features can change or be substituted. No uptime, recovery time or business-result guarantee is offered unless expressly agreed in a service-level commitment. Material changes to a purchased service remain subject to the agreement and mandatory remedies.

3. Accounts and customer responsibilities

  • Provide accurate details; secure credentials, devices, API keys and OAuth accounts; grant appropriate workspace permissions and remove unnecessary access. Report suspected unauthorized access promptly.
  • Obtain authority, lawful grounds and required notices before submitting records about employees, clients, leads, signers or other individuals. You are responsible for uploaded content and the instructions of your authorized users.
  • Review connected-service permissions, sharing destinations, exports and automation settings. Do not expose private credentials in prompts or public documents.

4. Plans, payment and cancellation

Fees, currency, taxes, plan limits and the purchased service period must be stated at checkout or in the accepted order. The current checkout uses a one-time Razorpay order. It does not itself create an automatically renewing subscription or payment mandate. An independently agreed recurring arrangement requires its own express renewal and cancellation disclosures.

The current Cancel Plan control switches the Workspace to Basic (shown as Free) immediately; it does not schedule cancellation for the end of a paid period. Paid-to-paid downgrades are not supported in that flow. An upgrade activates after verified payment without an automatic prorated credit for the prior purchase. Contact support before making a change if your order provides different rights.

Fees are ordinarily non-refundable under the existing commercial policy, subject to mandatory remedies, billing corrections and any expressly agreed order terms. The linked cancellation policy governs these details. AI allocation periods and measurement are set out separately in the AI Usage and Credit Policy.

5. Customer Data, confidentiality and instructions

You retain your rights in Customer Data. You grant GRL Enterprises and appropriately engaged service providers the limited rights to host, process, transmit and display it to deliver, secure and support the service and follow lawful instructions. This does not authorize unrestricted reuse or general-model training.

Each party will protect the other’s confidential information with reasonable care, limit access to those who need it for the agreement, and use it only for authorized purposes. Exceptions cover information lawfully public, independently developed or lawfully received without restriction. Disclosure required by law is permitted with notice where lawful and appropriate safeguards.

You are responsible for the legality, accuracy and rights in submitted content. Processing of personal data is described in the Privacy Policy and any executed DPA.

6. Third-party AI, output and ownership

Miles AI can use OpenAI, Google Gemini and Anthropic Claude where configured. Routing may be automatic and may involve multiple providers for classification and completion. Models, availability and restrictions can change; provider outages, capacity limits and substitutions may affect results.

Outputs can hallucinate or be inaccurate, incomplete, non-unique, out of date, legally unsuitable or unsuitable for a professional purpose. You must review consequential output, calculations, sources, permissions and instructions before relying on it or sharing it. Miles does not replace qualified legal, financial, medical or other professional judgment.

As between you and GRL Enterprises, and to the extent permitted by law and applicable provider terms, you retain rights in your inputs and own generated outputs supplied for you, excluding pre-existing IrisOS technology and third-party material. We do not guarantee copyright protection, exclusivity, non-infringement or uniqueness. Other customers may receive similar output.

You must comply with applicable provider restrictions communicated for the feature. Do not use AI for unlawful content, fraud, abusive automation, privacy violations, infringement, discriminatory consequential decisions or bypassing safeguards. Do not upload content you lack authority to disclose.

7. AI actions and authorization

Informational output is different from executing an action. Enabled workflows can create or modify invoices and other records, generate or send documents, schedule events, and invoke connected services. Use is subject to the acting user’s permissions and the workflow’s controls. An instruction or enabled automation is not authority to perform unrelated actions.

Review financial details, recipients, deletion scope and external effects before authorizing a consequential action. Some workflows execute configured steps without an additional confirmation at each step; do not assume every action has a second approval screen. Stop or change an automation when its permissions or purpose are no longer appropriate. Human oversight remains the Customer’s responsibility.

8. Documents and electronic signatures

The native signing workflow records a typed name, consent, signing timestamps and document/audit information. It is not a representation of universal identity verification, a qualified electronic signature or enforceability in every jurisdiction. Customers must verify authority, permitted document types, required formalities and recordkeeping, and obtain professional review where needed. IrisOS-generated contracts and other documents are not final until appropriately reviewed and approved by their parties.

9. Integrations and secure communications

Connecting an external account authorizes the data exchange needed for that feature within your permissions. Provider terms govern the external service; its independent-controller activities are not converted into IrisOS processing by these Terms. Disconnecting or deleting local data does not necessarily revoke a remote credential, remove provider copies or cancel a third-party contract.

Messaging encryption does not protect against compromised devices, authorized-recipient disclosure or exported copies. You are responsible for appropriate recipients and endpoint security. No independent security certification or universal encryption guarantee is made.

10. Acceptable use and intellectual property

Do not bypass security or tenant restrictions, introduce malware, disrupt the service, misuse credentials, send unlawful communications or violate another person’s rights. Regulated or highly sensitive data requires an expressly supported feature and agreed safeguards. We may restrict unlawful or harmful content or activity as reasonably necessary.

GRL Enterprises or its licensors retain rights in the IrisOS software, interfaces, branding and underlying technology. Subject to your agreement, you receive a limited right to use the service for its intended purposes. Feedback may be used to improve the service without disclosing your confidential information or granting unrelated rights to Customer Data.

11. Suspension, termination and deletion

Cancellation changes a plan; suspension restricts access temporarily; termination ends the service relationship. None is the same as Data Deletion (removing covered workspace records) or Account Deletion (the organization-wide removal workflow). Suspension may be necessary for a security threat, material breach, applicable law or unpaid amounts actually due. Notice and an opportunity to resolve the issue will be provided where practicable, unless urgency or law prevents it.

Suspension may limit data access and exports; contact support about required records. Use available exports before cancellation or termination. We do not promise a universal post-termination access window or complete one-click export. Deletion and retained categories follow the Privacy Policy and any executed DPA. Payment, confidentiality, ownership, liability, disputes and lawful-retention provisions survive to the extent relevant.

12. Warranties and mandatory rights

To the extent permitted by law, the service, AI output and integrations are provided as available without implied warranties of uninterrupted availability, fitness for a particular purpose or accuracy. We do not guarantee campaign outcomes, revenue, signature enforceability or third-party availability. This does not remove any non-excludable duty of care, statutory warranty or mandatory remedy.

Nothing in these documents excludes or restricts mandatory privacy, consumer, payment-dispute or other statutory rights. If a mandatory legal protection conflicts with a provision, that protection prevails.

13. Liability and indemnification

Subject to mandatory law, neither party is liable for indirect or consequential loss, lost profits or goodwill arising from the agreement. Each party’s aggregate liability arising from the agreement, including confidentiality, intellectual-property and indemnification claims, is capped at the fees paid or payable for the service giving rise to the claim in the twelve months before the event. Amounts properly due for purchased services, fraud, wilful misconduct and liability that cannot lawfully be limited are not subject to that cap. These limitations and exclusions apply to the maximum extent permitted by applicable law.

For business Customers, and subject to that cap and applicable law, Customer will defend and indemnify GRL Enterprises against third-party claims resulting from unlawful Customer Data or instructions or Customer’s infringement of third-party rights. This does not cover a claim to the extent caused by our breach or misconduct. We will give prompt notice and reasonable cooperation, and allow Customer to control the defence; a settlement imposing liability or obligations on us requires our consent. Mandatory consumer and data-subject rights are unaffected.

14. Governing law and dispute resolution

These Terms are governed by the laws of India. Subject to mandatory jurisdiction and consumer protections, the courts and competent authorities in Bengaluru, Karnataka, India have jurisdiction. The parties should first seek good-faith resolution through the contact below. No mandatory privacy complaint route, consumer forum, payment dispute or non-waivable remedy is restricted; these Terms do not impose an unspecified arbitration process.

15. Changes and contact

Material changes will be communicated as required by the applicable agreement and law, with a prospective effective date. Where renewed consent or acceptance is required, it must be obtained before the change applies. A revised policy does not retroactively authorize a new use of personal data or impose new charges.

For privacy, legal, billing or service requests, email contact@irisos.app, use Get Help in IrisOS, or write to GRL Enterprises at the business address above. Include the relevant workspace and request details; do not send passwords or payment-card credentials.