1. Acceptance and contracting parties
These Terms of Service (‘Terms’) govern access to the SB AURA website and, where expressly incorporated into an executed order form or subscription agreement, the SB AURA AI-powered registration and admissions platform. The provider is PinnacleWorks InfoTech Pvt Ltd, 34 A, B, C, Tower B4, Spaze iTech Park, Sector 49, Sohna Road, Gurgaon, Haryana, India – 122018 (‘Provider’, ‘SB AURA’, ‘we’); the subscribing educational institution or other authorised organisation is the ‘Customer’.
By accepting an order, accessing an authorised account or using the Services, the Customer confirms that its signatory is authorised to bind it. In case of conflict, a signed master agreement, data-processing agreement or order form takes precedence in the order expressly specified there. Mere use of the public website does not create a paid subscription.
2. Services and scope
SB AURA is a configurable admissions and student-engagement platform supporting lead capture, workflows, applications, document review, merit/counselling, offers, fee tracking, student portal, communications, reporting, AI-generated suggestions and related functionality, subject to the purchased plan and documented deployment configuration.
Website demonstrations and marketing materials are illustrative. Features labelled ‘early access’, ‘coming soon’, ‘beta’ or similar are not guaranteed to be included in the current subscription or available by a particular date unless explicitly agreed in writing. Change requests, integrations, migration and professional services may require separate commercial terms.
3. Eligibility, institution administration and accounts
The Customer must be lawfully established and authorised to offer its programmes and administer student admission processes. It shall appoint authorised administrators, maintain accurate user and institutional information, configure role-based access on a need-to-know basis, and promptly deactivate departing or unauthorised users.
The Customer is responsible for activities on its accounts arising from its users or compromised credentials to the extent attributable to its acts or omissions. It must maintain credential confidentiality, implement appropriate authentication and promptly report suspected security incidents. Users must not share accounts or circumvent access controls.
4. Student information, lawful collection and data roles
As between the parties, the Customer controls its student/admissions records and determines lawful purposes and permissions for their processing. When the Provider processes such records solely on behalf of the Customer, it acts as Data Processor under the DPDP Act where applicable; the Customer remains responsible for its statutory duties as Data Fiduciary. Provider may separately be Data Fiduciary for its own billing, service administration, compliance and security purposes.
The Customer shall supply legally sufficient notices, obtain and document necessary consents or other lawful grounds, configure appropriate retention and access settings, respond to data-principal requests and avoid uploading data it has no authority to process. The Provider shall process institutional data only for documented service purposes or otherwise as permitted by an executed data-processing agreement and applicable law.
5. Children and education-specific safeguards
Where an applicant is below 18 years of age, the Customer must assess and fulfil all applicable parental-consent, child-data and educational obligations. It shall not use the platform to conduct impermissible tracking, behavioural monitoring or targeted advertising of children. The Provider shall provide agreed safeguards and reasonable assistance under its contractual role.
The Customer retains sole responsibility for admission policies, eligibility criteria, quotas, reservations, verification requirements, academic rules, fairness of decisions and compliance with directions of relevant regulators, universities and educational authorities.
6. AI functions; verification and approval
AI-enabled functions may summarise interactions, suggest follow-ups, generate draft messages, indicate potential duplicates or discrepancies, rank attention priorities and display projections. Outputs are probabilistic or heuristic assistance, not verified facts, professional advice or substitutes for institutional judgment.
The Customer must ensure competent human verification and approval of consequential decisions, particularly applicant rejection, eligibility, merit, seat allotment, fee/waiver changes, document discrepancies and student communications. The Customer may not rely on an AI score alone as the basis for a materially adverse decision. Provider does not guarantee that AI output is error-free, unbiased or suitable for a specific admissions decision.
No Customer personal data may be used for unrelated general model training by Provider except under a separate lawful, written agreement specifically describing the use, subject to applicable law and contractual restrictions.
7. Communications and consent controls
The Customer is responsible for the lawfulness, truthfulness and appropriateness of outbound calls, messages, campaigns, scripts and templates, including consent, unsubscribe/DND compliance, required sender registrations, permitted calling hours and the terms of integrated channels. It shall not send spam, misleading admission assurances, or otherwise unlawful promotional communications.
Consent/suppression features are tools to assist compliance and must be appropriately configured, audited and maintained by the Customer; they do not guarantee legal validity of any campaign. Call recording and AI-mediated outreach must be disclosed where legally required. Provider may suspend abusive campaigns or activity that creates material legal or security risk.
8. Fees, transactions and refunds
Subscription, onboarding, implementation, usage-based messaging, telephony, AI inference, integrations and other charges, where applicable, are set out in the applicable order form. Invoices, payment dates, taxes, renewal periods, price adjustments and service limits will be governed by that agreement. Except as required by law or expressly agreed, prepaid subscription fees are non-refundable.
Student application fees, tuition and institutional refunds are set, collected and administered under the Customer’s policies and applicable education and consumer laws. Unless separately contracted as merchant of record, Provider is not the seller of educational services or the party determining fees/refunds. Third-party payment providers may apply independent charges, delays, rules and terms.
9. Customer content, intellectual property and feedback
The Customer and its lawful licensors retain ownership of the admissions data, application content and other materials they provide (‘Customer Data’). Customer grants Provider a limited, non-exclusive licence to host, transmit, transform, secure and otherwise process Customer Data solely to supply the contracted Services and fulfil lawful instructions.
Provider and its licensors retain all rights in the platform, software, workflows, pre-existing models, designs, documentation and improvements excluding Customer Data. No intellectual-property rights are transferred other than expressly granted access rights. Feedback may be used for product improvement only in a manner that does not improperly disclose Customer confidential or personal data.
10. Acceptable use
Users must not: (a) violate law or third-party rights; (b) upload unlawfully obtained or excessive personal data; (c) distribute malware, spam or harmful content; (d) attempt unauthorised access, security testing without permission, scraping, reverse engineering to the extent prohibited by law or contract, or service interference; (e) use the Services for discriminatory, deceptive or unlawful admission decisions; or (f) resell or sublicense the platform without written authorisation.
Provider may reasonably restrict a harmful activity where necessary to protect security, other customers or compliance, with notice where feasible and appropriate opportunity to remedy unless immediate action is necessary.
11. Confidentiality and data protection
Each party shall protect the other’s confidential information with reasonable care and disclose it only to personnel, advisers or contracted providers bound by appropriate safeguards who need it for authorised purposes, subject to legally required disclosures. These confidentiality obligations do not apply to information that is independently known, independently developed, properly received or public other than through breach.
Processing of personal data on the Customer’s behalf is governed by a separate Data Processing Agreement between the parties addressing processing instructions, approved subprocessors, security schedule, incident escalation, data subject assistance, audits, retention, deletion/return, cross-border processing and cooperation with regulators. These website Terms are not a substitute for that agreement.
12. Security and incident cooperation
Provider shall implement commercially reasonable safeguards commensurate with the Services and the agreed security schedule. Customer is responsible for its endpoints, staff permissions, credentials, data quality and security of external systems it connects to the platform.
Each party shall promptly notify the other of a reasonably suspected incident affecting the other party’s data or systems, cooperate in investigation and comply with applicable reporting requirements.
13. Availability, maintenance and third parties
Provider will use commercially reasonable efforts to provide the Services, subject to scheduled maintenance, emergency security measures, connectivity, integrations and third-party service dependencies. Any uptime commitment, support response time, service credits or disaster-recovery objectives are specified only in a separate SLA, if purchased.
Third-party payment gateways, telecom operators, messaging platforms, cloud services and external APIs may be governed by separate terms and availability conditions. Provider is not responsible for failures outside its reasonable control, but will provide contractually agreed cooperation.
14. Warranties and disclaimers
Each party represents it has authority to perform its obligations. Provider will use reasonable skill and care in performing contracted services. Except for express contractual warranties and rights that cannot lawfully be excluded, the Services are supplied without any promise of particular admission conversion rates, enrollment numbers, regulatory accreditation, selection outcomes or uninterrupted and error-free AI operation.
Nothing in these Terms excludes non-excludable statutory remedies, or purports to authorise unlawful processing or conduct.
15. Liability and indemnity
To the maximum extent permitted by applicable law, neither party is liable to the other for indirect or consequential losses such as lost profit, business opportunities or reputational harm, except to the extent such exclusion is prohibited by law. The parties’ aggregate contractual liability shall be capped at fees paid/payable during the preceding 12 months, excluding exceptions such as fraud, wilful misconduct, confidentiality/IP breach, payment obligations and non-excludable liability.
The Customer shall indemnify Provider against third-party claims arising from Customer’s unlawful admission practices, inaccurate or unauthorised data, unlawful campaign content or misuse of the Services, to the extent caused by Customer and subject to customary notice, defence control and mitigation provisions. Provider shall indemnify the Customer against qualifying third-party IP infringement claims relating to the unmodified Provider software, subject to defined exclusions and remedies.
16. Term, termination and exit
The subscription term, renewals, suspension for nonpayment and termination rights are governed by the order form. Either party may terminate for material breach not remedied within 30 days after written notice, subject to immediate remedies for serious illegality, security risk or insolvency where lawfully available.
On termination, access ceases according to the agreement; Provider will offer the contractually specified export/return window and deletion process, subject to legal retention and archival backups. Customer must export information and migrate relevant workflows during the exit period. Financial settlement and surviving confidentiality, IP, legal compliance, data protection and dispute provisions continue where appropriate.
17. Changes, notices and disputes
Provider may update website-specific terms by posting changes with an updated date. Material changes to an active paid subscription that adversely affect the Customer will be handled in accordance with its signed agreement; continued use alone will not be treated as acceptance of an unagreed material commercial alteration.
Indian law governs these Terms, excluding conflict principles. Courts at Gurugram, India shall have jurisdiction, subject to any signed arbitration or dispute-resolution agreement, mandatory statutory jurisdiction and legally non-excludable consumer remedies. Formal notices: 34 A, B, C, Tower B4, Spaze iTech Park, Sector 49, Sohna Road, Gurgaon, Haryana, India – 122018, [email protected].
18. Contact and operational disclosures
Provider’s registered entity: PinnacleWorks InfoTech Pvt Ltd. Registered address: 34 A, B, C, Tower B4, Spaze iTech Park, Sector 49, Sohna Road, Gurgaon, Haryana, India – 122018. Legal/support email: [email protected]. Product website: https://superbotaura.com. Product sales contact: [email protected].
How we handle personal data is described in our Privacy Policy.