1. INTRODUCTION

Welcome to PREOS.

These Terms of Service ("Terms") constitute a legally binding agreement between AVREOS Technologies Private Limited, a company incorporated under the laws of the Republic of India ("AVREOS", "PREOS", "Company", "we", "our", or "us"), and every individual, organization, partnership, corporation, builder, developer, construction company, real estate firm, channel partner, consultant, contractor, employee, representative, or any other legal entity ("Subscriber", "Customer", "Organization", "you", or "your") that accesses, registers for, subscribes to, purchases, integrates with, or otherwise uses PREOS.

PREOS is an enterprise Software-as-a-Service (SaaS) platform developed to assist organizations in managing operational workflows relating to real estate development, sales, inventory management, customer relationship management (CRM), lead management, bookings, collections, analytics, artificial intelligence, workflow automation, reporting, integrations, and other business operations offered by PREOS from time to time.

These Terms govern every aspect of your relationship with PREOS, including use of the website, software platform, APIs, artificial intelligence services, mobile applications, documentation, integrations, customer support, trial services, paid subscriptions, and services introduced under the PREOS brand from time to time.

By creating an account, accepting these Terms electronically, beginning a free trial, purchasing a subscription, inviting Authorized Users, accessing any portion of PREOS, or otherwise using the Services, you acknowledge that you have carefully read, understood, and agreed to be legally bound by these Terms and applicable policies.

If you do not agree with these Terms, you must discontinue use of PREOS and refrain from accessing the Services.

2. RELATIONSHIP BETWEEN THE PARTIES

PREOS is provided as a licensed Software-as-a-Service platform.

Nothing contained in these Terms shall be interpreted as creating any partnership, joint venture, agency, franchise, employment relationship, fiduciary relationship, reseller arrangement, or other legal association between AVREOS and any Subscriber.

Each Subscriber remains an independent legal entity solely responsible for management of its business, employees, customers, vendors, contractors, channel partners, and regulatory obligations.

PREOS provides software tools designed to assist organizations in conducting business operations efficiently.

AVREOS does not participate in, supervise, approve, guarantee, or assume responsibility for commercial transactions, contractual negotiations, pricing decisions, legal documentation, financial arrangements, customer relationships, construction activities, regulatory filings, sales commitments, or operational decisions made by Subscribers through PREOS.

All business decisions remain the responsibility of the Subscriber.

3. ACCEPTANCE OF THESE TERMS

By using PREOS, you expressly represent and warrant that:

• You have reviewed these Terms before accepting them.
• You possess the legal authority necessary to enter into binding agreements.
• If accepting on behalf of an organization, you possess authority to legally bind that organization.
• These Terms govern use of PREOS unless replaced by a separately executed written agreement signed by AVREOS.
• You agree to comply with applicable policies published by AVREOS as amended from time to time.

Electronic acceptance of these Terms shall have the same legal force and effect as a handwritten signature to the extent permitted by applicable law.

4. ELIGIBILITY

PREOS is intended for commercial and professional use.

To access or use PREOS, you must:

• Be at least eighteen (18) years of age, unless applicable law permits otherwise.
• Possess legal capacity to enter into binding contracts.
• Register truthful, accurate, complete, and current information.
• Use PREOS solely for lawful business purposes.
• Ensure that use of PREOS complies with applicable laws, regulations, licensing requirements, and contractual obligations.

Organizations must ensure that every Authorized User accessing PREOS on their behalf complies with these Terms.

PREOS is not intended for consumer, household, or personal use.

AVREOS may refuse registration or restrict access where eligibility requirements are not satisfied.

5. DEFINITIONS

Account — The digital account established within PREOS for an Organization.

Administrator — An Authorized User designated by the Organization with authority to manage subscriptions, users, permissions, billing information, integrations, and organizational settings.

AI Features — Artificial intelligence capabilities provided by PREOS, including AI Lead Scoring, AI Assistant, AI Search, AI Recommendations, AI Forecasting, AI Analytics, AI Reports, AI-generated summaries, intelligent workflow suggestions, predictive insights, natural language search, and future AI-powered services introduced by AVREOS.

Authorized User — An individual authorized by the Organization to access PREOS through a licensed user account.

Customer Data — Information uploaded, entered, imported, created, generated, processed, transmitted, stored, or otherwise made available within PREOS by the Organization or its Authorized Users, including customer records, leads, inventory information, pricing data, booking details, financial information, communications, reports, documents, media files, configuration settings, analytics, and operational data.

Documentation — User guides, manuals, knowledge base articles, technical documentation, API references, onboarding materials, tutorials, support resources, and other informational content published by AVREOS relating to PREOS.

Organization — The legal business entity subscribing to PREOS.

Organization Administrator — The primary administrator appointed by the Organization to represent it in matters relating to PREOS.

Platform — The PREOS software platform, including web applications, mobile applications, APIs, artificial intelligence services, dashboards, integrations, automation capabilities, documentation, and associated services.

Project — A development, community, property, construction project, township, commercial project, or other operational entity managed by an Organization within PREOS.

Services — Products, features, functionality, software, AI capabilities, APIs, integrations, customer support, professional services, documentation, websites, applications, updates, upgrades, enhancements, and future offerings provided under the PREOS brand.

Subscriber — The Organization purchasing or otherwise authorized to use PREOS.

Subscription — The commercial license granted by AVREOS permitting an Organization and its licensed Authorized Users to access PREOS for the applicable Subscription Term.

Subscription Term — The period for which a Subscription remains active following successful payment and activation.

Trial — A limited evaluation period that may be offered by AVREOS to eligible Organizations, subject to these Terms and any applicable trial conditions.

User License — The right granted to one named Authorized User to access PREOS under an active Subscription.

6. ORGANIZATION ACCOUNTS

PREOS is licensed on an organizational basis. Each subscription is intended for use by a single legal business entity ("Organization"), including builders, developers, construction companies, real estate firms, channel partner organizations, or other approved commercial entities.

The Organization shall designate at least one Organization Administrator responsible for subscription management, billing, security, user administration, permissions, integrations, and communications with AVREOS.

Subject to the applicable subscription plan, an Organization may create and manage multiple projects, departments, business units, teams, locations, developments, or operational entities within a single PREOS account.

The Organization is responsible for ensuring that only authorized personnel are granted access and that information maintained within the Organization Account remains accurate and current.

AVREOS may rely upon instructions provided by the Organization Administrator concerning account management, subscription modifications, user administration, integrations, billing matters, and security settings unless otherwise required by law.

The Organization shall promptly notify AVREOS of unauthorized access, compromised credentials, suspected misuse, or other security incidents affecting its PREOS account.

7. AUTHORIZED USERS AND USER LICENSES

PREOS may be licensed on a named-user basis. Every individual accessing PREOS must have an assigned User License where required by the applicable subscription plan.

User Licenses are personal to the assigned Authorized User and may not be simultaneously shared among multiple individuals. Generic or shared credentials may constitute a violation where they undermine security, accountability, or licensing requirements.

The Organization is responsible for maintaining sufficient User Licenses for individuals requiring access.

Authorized Users may include employees, directors, officers, consultants, contractors, sales representatives, channel partner personnel, or other individuals authorized by the Organization.

Organizations may reassign User Licenses when personnel leave or no longer require access, subject to applicable licensing policies.

AVREOS may implement reasonable technical controls to detect excessive credential sharing or suspicious authentication activity.

AVREOS may introduce additional licensing models, enterprise licensing programs, or volume licensing arrangements in the future.

8. ROLE-BASED ACCESS CONTROL

PREOS provides configurable Role-Based Access Control ("RBAC") to enable Organizations to manage operational responsibilities securely.

Organizations may create, modify, assign, revoke, or customize user roles according to their requirements.

Depending on subscription and configuration, roles may include Organization Administrator, Managing Director / CEO, Sales Manager, Sales Executive, Pre-Sales Executive, CRM Executive, Marketing Executive, Accounts Executive, Channel Partner Manager, Site Manager, and custom organizational roles.

Organizations remain responsible for determining access permissions, segregation of duties, approval workflows, and internal governance.

AVREOS is not responsible for actions performed by Authorized Users acting within permissions assigned by the Organization.

Organizations should periodically review permissions and promptly revoke access when individuals no longer require it.

9. SUBSCRIPTIONS

PREOS is offered through commercial subscription plans.

Plans may differ based upon licensing quantities, supported features, storage allocations, AI usage, API access, integrations, support entitlements, enterprise capabilities, or other commercial criteria established by AVREOS.

Plans, pricing, entitlements, and commercial offerings are published separately on the PREOS Pricing page or communicated through an authorized commercial proposal.

Unless otherwise agreed in writing, subscriptions are billed according to the applicable commercial terms.

Subscription plans may evolve as PREOS introduces functionality, infrastructure improvements, AI capabilities, enterprise services, compliance features, security enhancements, and other offerings.

Nothing guarantees that a subscription plan, feature, integration, promotional offer, or commercial arrangement will remain available indefinitely.

AVREOS may introduce, modify, discontinue, replace, or rename plans, provided changes do not adversely affect active subscriptions during the then-current Subscription Term except where required by law, security considerations, or technical necessity.

10. FREE TRIAL

Eligible Organizations may receive one fourteen (14) day free trial of PREOS.

A trial is intended to enable prospective Subscribers to evaluate functionality, suitability, and compatibility before purchasing a commercial subscription.

AVREOS may require valid registration information and, where applicable, a payment method for trial activation.

A trial does not automatically convert to a paid subscription unless the applicable conversion terms are expressly disclosed before activation and accepted by the Organization.

The Organization may cancel the trial according to the applicable trial or account procedures.

AVREOS may modify, suspend, refuse, limit, or discontinue free trials, including where multiple trial accounts are created to circumvent licensing requirements or where fraudulent or abusive conduct is suspected.

A free trial for one Organization does not create an obligation to provide trials to other Organizations.

11. SUBSCRIPTION FEES, BILLING AND PAYMENTS

Subscription fees are payable according to the applicable commercial terms.

Fees are exclusive of applicable taxes, duties, levies, governmental charges, payment processing fees where applicable, and other statutory obligations unless expressly stated otherwise.

The Organization shall maintain valid, current, and complete billing information.

Payments may be processed through payment service providers approved by AVREOS.

Invoices, payment confirmations, renewal notices, tax invoices, and billing communications may be delivered electronically.

Failure to maintain a valid payment method may result in suspension of renewals or interruption of Services.

Subscription fees are generally non-refundable except where expressly provided in applicable commercial terms or required by law.

12. RENEWAL OF SUBSCRIPTIONS

Where a Subscription is configured for automatic renewal, it will renew at the end of the applicable Subscription Term unless cancelled before the renewal date.

The Organization authorizes AVREOS or its payment processor to charge applicable renewal fees according to the commercial terms.

The Organization may disable automatic renewal before the renewal date through applicable account settings or by contacting PREOS Support.

If renewal payment cannot be processed, AVREOS may provide a reasonable grace period. AVREOS may suspend or terminate access where payment remains outstanding beyond that period.

AVREOS may modify subscription pricing for future Subscription Terms upon reasonable prior notice.

13. LICENSE GRANT

Subject to these Terms and payment of applicable fees, AVREOS grants the Subscriber a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use PREOS solely for its internal business operations during the applicable Subscription Term.

The license permits the Organization to:

• Access PREOS through approved interfaces.
• Create and manage organizational projects.
• Invite and administer Authorized Users.
• Store, manage, process, analyze, and retrieve Customer Data.
• Use AI Features, automation capabilities, integrations, reports, and other Services available under the applicable subscription plan.
• Generate reports, dashboards, exports, and business analytics for legitimate internal business purposes.

No ownership rights are transferred. AVREOS retains all rights, title, and interest in PREOS and its intellectual property.

14. LICENSE RESTRICTIONS

The Subscriber shall not, directly or indirectly, and shall ensure that Authorized Users do not:

• Copy, reproduce, distribute, publish, sell, lease, rent, sublicense, or commercially exploit PREOS except as expressly authorized.
• Reverse engineer, decompile, disassemble, decode, or attempt to derive source code, algorithms, models, architecture, or underlying technology.
• Remove or alter copyright notices, trademarks, proprietary notices, or branding.
• Circumvent licensing mechanisms, authentication systems, subscription controls, security features, or technical restrictions.
• Attempt unauthorized access to other customer accounts, systems, databases, APIs, infrastructure, or confidential information.
• Upload malicious software, ransomware, viruses, worms, spyware, trojans, or code intended to disrupt or compromise PREOS.
• Use automated scraping tools, bots, crawlers, or similar technologies except through officially documented APIs expressly permitted by AVREOS.
• Use PREOS for unlawful, fraudulent, misleading, deceptive, or abusive activities.
• Use PREOS in violation of applicable laws, regulations, sanctions, court orders, or governmental directives.
• Use PREOS to develop or provide competing products or services through unauthorized copying or extraction of functionality.

Any use beyond the granted license may constitute a material breach.

15. CUSTOMER DATA

The Organization retains ownership of Customer Data submitted to PREOS.

Nothing in these Terms transfers ownership of Customer Data to AVREOS.

The Organization grants AVREOS a limited, worldwide, non-exclusive license to host, process, transmit, store, index, back up, analyze, and otherwise use Customer Data solely as necessary to provide, operate, maintain, secure, support, and administer the Services; deliver requested features, including AI Features; perform backups and disaster recovery; prevent fraud and detect security threats; comply with legal obligations; provide customer support; and fulfil contractual obligations. AVREOS may use aggregated or de-identified information that does not identify the Organization or an individual for service analytics, security, reliability, and product or service improvement, subject to applicable law. Nothing in this clause authorizes AVREOS to use Customer Data to train or fine-tune AI models except where expressly agreed in writing and permitted by applicable law.

AVREOS shall not sell Customer Data to advertisers or unrelated third parties.

Customer Data shall be processed in accordance with the PREOS Privacy Policy and applicable data-protection laws.

The Organization remains responsible for the accuracy, legality, completeness, and integrity of Customer Data.

AVREOS is not responsible for verifying the authenticity or legal validity of Customer Data.

16. CUSTOMER RESPONSIBILITIES

The Subscriber agrees to:

• Maintain accurate organizational information.
• Purchase sufficient User Licenses where applicable.
• Maintain appropriate internal security procedures.
• Protect usernames, passwords, authentication credentials, and access tokens.
• Ensure Authorized Users comply with these Terms.
• Maintain lawful rights to upload Customer Data.
• Obtain required consents and permissions from individuals whose information is processed through PREOS.
• Promptly notify AVREOS of suspected security incidents or unauthorized access.
• Cooperate with reasonable security investigations where necessary.
• Maintain independent backups of critical business information where appropriate.

PREOS supports business operations but does not replace the Subscriber's responsibility for governance, internal controls, legal compliance, accounting practices, regulatory obligations, or professional judgment.

17. ARTIFICIAL INTELLIGENCE FEATURES

PREOS may include AI capabilities designed to assist Organizations with operational efficiency, decision-making, productivity, reporting, forecasting, and business analysis.

AI Features may include AI Lead Scoring, AI Assistant, AI Search, AI Recommendations, AI Forecasting, AI Analytics, AI Reports, intelligent summaries, natural language queries, workflow suggestions, and future AI capabilities introduced by AVREOS.

AI generates probabilistic outputs and may produce incomplete, inaccurate, outdated, inconsistent, or unexpected results.

Accordingly:

• AI-generated content should be reviewed by appropriately authorized personnel before reliance.
• AI outputs assist human decision-making and do not replace professional, commercial, legal, financial, accounting, engineering, architectural, regulatory, or management judgment.
• Final responsibility for business decisions remains with the Subscriber.

AVREOS does not warrant that AI-generated outputs will always be accurate, complete, suitable, error-free, or fit for a particular purpose.

AVREOS may improve, replace, modify, suspend, limit, or discontinue AI Features as technology evolves, subject to applicable law and applicable subscription entitlements.

18. INFORMATION SECURITY

AVREOS implements administrative, technical, and organizational safeguards designed to protect the confidentiality, integrity, and availability of Customer Data.

Measures may include:

• Encryption of data during transmission using industry-standard protocols.
• Encryption of sensitive information at rest where technically appropriate.
• Role-Based Access Control.
• Multi-factor authentication capabilities.
• Secure authentication and session management.
• Monitoring of platform availability.
• Infrastructure redundancy where commercially reasonable.
• Security logging and audit capabilities.
• Regular software updates and security patches.
• Controlled access to production infrastructure.
• Backup and disaster recovery procedures.
• Vulnerability assessment and remediation processes.

No technology platform can guarantee absolute security. AVREOS does not warrant that PREOS will be immune from cyberattacks, unauthorized access, malware, service interruptions, telecommunications failures, internet disruptions, or other incidents beyond reasonable control.

Security is a shared responsibility. Organizations are responsible for protecting credentials, managing permissions, using strong authentication practices, and maintaining secure devices and networks.

19. CONFIDENTIALITY

Each party may obtain confidential or proprietary information belonging to the other.

Confidential Information includes business strategies, software architecture, product roadmaps, technical documentation, source code, algorithms, AI models, pricing proposals, customer information, security procedures, infrastructure details, financial information, non-public operational information, commercial agreements, product demonstrations, training materials, and trade secrets.

Each party agrees to maintain confidentiality, use Confidential Information solely for purposes related to these Terms, restrict disclosure to persons with a legitimate need to know, and protect it using reasonable care.

These obligations do not apply to information that becomes public without breach, was lawfully known before disclosure, is independently developed, is lawfully obtained from another source without confidentiality obligations, or must be disclosed by law or lawful authority.

Confidentiality obligations survive termination.

20. THIRD-PARTY SERVICES AND INTEGRATIONS

PREOS may integrate with or facilitate connections to third-party products, services, platforms, APIs, communication providers, payment gateways, productivity tools, business applications, and other external technologies.

Such integrations may include messaging platforms, email and SMS providers, telephony providers, Meta platforms, Google services, Microsoft services, payment gateways, accounting software, calendar services, document storage providers, identity providers, analytics platforms, and future third-party integrations.

Third-party services are operated independently from PREOS.

AVREOS does not control and is not responsible for their availability, interruptions, pricing, security practices, privacy practices, data handling, API changes, functional limitations, or business decisions.

Use of third-party services remains subject to their terms and privacy policies.

Where an integration becomes unavailable due to circumstances beyond AVREOS's reasonable control, AVREOS will use commercially reasonable efforts to restore compatibility or provide an alternative where feasible, but will not be liable for interruptions arising solely from the third-party provider.

21. APPLICATION PROGRAMMING INTERFACES (APIs)

PREOS may provide APIs for integrations with other software systems.

API access may be subject to subscription entitlements, authentication requirements, usage limitations, documentation, security requirements, fair-use policies, and commercial agreements.

Subscribers shall keep API credentials confidential.

Subscribers shall not use APIs to circumvent licensing restrictions, access unauthorized data, overload infrastructure, interfere with other Subscribers, perform unauthorized scraping, conduct malicious activities, or reverse engineer PREOS functionality.

AVREOS may modify, enhance, replace, version, deprecate, suspend, or discontinue APIs where necessary to improve security, performance, or functionality.

Reasonable efforts will be made to communicate material API changes in advance where practicable.

22. ACCEPTABLE USE

Subscribers shall use PREOS responsibly, ethically, and lawfully.

Subscribers shall not use PREOS to:

• Violate applicable laws or regulations.
• Infringe intellectual property rights.
• Commit fraud or deceptive practices.
• Upload unlawful or harmful content.
• Distribute malware or malicious software.
• Interfere with platform security.
• Circumvent technical restrictions.
• Attempt unauthorized access.
• Abuse AI Features.
• Conduct denial-of-service attacks.
• Send spam or unsolicited communications.
• Misrepresent identity.
• Harass or threaten others.
• Upload illegal content.
• Process data without lawful authority.
• Engage in activities that could materially damage PREOS infrastructure or security.

AVREOS may investigate suspected violations and take appropriate action, including suspension or termination where necessary.

Nothing limits AVREOS's ability to cooperate with law enforcement or governmental authorities where legally required.

23. SERVICE AVAILABILITY

AVREOS is committed to providing a reliable, secure, and continuously improving software platform.

PREOS is designed with the objective of achieving high service availability; however, uninterrupted access cannot be guaranteed.

Interruptions may occur due to scheduled or emergency maintenance, infrastructure upgrades, internet service disruptions, cloud provider incidents, telecommunications failures, security events, software defects, force majeure events, or circumstances beyond AVREOS's reasonable control.

AVREOS may provide service availability objectives or an SLA where applicable.

Nothing guarantees uninterrupted, error-free, or continuous availability.

24. BETA FEATURES

AVREOS may make experimental, preview, beta, early-access, or evaluation features available.

Beta Features may be incomplete, contain defects, produce inaccurate outputs, change without notice, be discontinued, be replaced, or never become generally available.

Unless otherwise expressly stated, Beta Features are provided "AS IS" and may be excluded from service availability commitments, warranties, and service-level guarantees.

Subscribers use Beta Features at their discretion.

Feedback regarding Beta Features may be used by AVREOS to improve PREOS.

25. SUSPENSION OF SERVICES

AVREOS may temporarily suspend, restrict, or limit access to PREOS where reasonably necessary to protect security, integrity, availability, lawful operation, or the interests of PREOS, Subscribers, or third parties.

AVREOS may suspend access where:

• Subscription fees remain unpaid beyond the applicable grace period.
• The Organization materially breaches these Terms or applicable policies.
• Unauthorized access, credential compromise, or suspicious activity is detected.
• Services are used for unlawful, fraudulent, abusive, or malicious purposes.
• The Organization attempts to circumvent licensing restrictions or safeguards.
• Continued operation presents a material security risk.
• Suspension is required by applicable law, governmental directive, court order, or regulatory requirement.
• Emergency maintenance or security remediation is necessary.

Where reasonably practicable, advance notice will be provided. Immediate action may be taken where necessary.

Suspension does not relieve the Subscriber of payment obligations accrued before or during suspension.

26. TERMINATION

These Terms remain effective until terminated.

The Subscriber may terminate its Subscription by disabling automatic renewal before the renewal date, providing notice according to applicable subscription procedures, or following applicable cancellation procedures.

Termination by the Subscriber does not entitle it to refunds except where expressly provided in applicable commercial terms or required by law.

AVREOS may terminate these Terms or access where:

• A material breach remains uncured following reasonable notice where applicable.
• Fraudulent or unlawful activity is identified.
• Subscription fees remain unpaid beyond applicable grace periods.
• Continued provision would violate applicable law.
• The Subscriber repeatedly violates PREOS policies.
• The Subscriber intentionally compromises platform security or integrity.

Upon termination:

• The license granted under these Terms ceases.
• Access to PREOS may be revoked.
• Customer Data will be handled in accordance with applicable data retention and deletion procedures.
• Provisions intended to survive termination shall remain effective.

Termination does not affect rights or obligations accrued before termination.

27. DATA EXPORT AND RETENTION

PREOS recognizes that Customer Data represents valuable business information belonging to the Subscriber.

Subject to an active Subscription or applicable post-termination retention period, Subscribers may export Customer Data using available platform functionality or methods supported by AVREOS.

Following expiration or termination, Customer Data is retained and deleted in accordance with the PREOS Data Retention & Deletion Policy, including its 90-day wind-down and applicable backup-retention periods.

During that period, the Subscriber may request export, subject to verification, outstanding obligations, and technical feasibility.

After the applicable retention period, AVREOS may permanently delete Customer Data from production systems in accordance with operational procedures and backup retention schedules.

Recovery may not be possible after permanent deletion.

28. INTELLECTUAL PROPERTY

PREOS, including software, source code, object code, architecture, databases, AI models, workflows, documentation, designs, graphics, interfaces, dashboards, APIs, trademarks, logos, branding, inventions, know-how, methodologies, reports, templates, and related intellectual property are and remain the property of AVREOS Technologies Private Limited or its licensors.

Nothing transfers ownership of PREOS or its intellectual property to the Subscriber.

Subscribers acquire only the limited right to access and use PREOS during an active Subscription Term.

Subscribers shall not claim ownership, copy substantial portions, create derivative works, reverse engineer proprietary technologies, remove copyright notices, misappropriate trade secrets, or register confusingly similar trademarks, domains, or branding.

All rights not expressly granted are reserved by AVREOS.

29. FEEDBACK

PREOS welcomes suggestions, ideas, recommendations, comments, enhancement requests, usability feedback, feature proposals, bug reports, and other communications relating to the Services ("Feedback").

By voluntarily submitting Feedback, the Subscriber grants AVREOS a perpetual, worldwide, irrevocable, royalty-free, transferable, sublicensable right to use, modify, commercialize, publish, incorporate, reproduce, and otherwise exploit such Feedback without restriction or compensation.

Nothing obligates AVREOS to implement Feedback.

30. DISCLAIMERS

PREOS is provided on an "AS IS" and "AS AVAILABLE" basis.

To the maximum extent permitted by applicable law, AVREOS disclaims warranties, whether express, implied, statutory, or otherwise, including warranties relating to merchantability, satisfactory quality, fitness for a particular purpose, non-infringement, uninterrupted operation, accuracy, reliability, availability, or compatibility.

AVREOS does not warrant that:

• PREOS will operate without interruption.
• Every defect will be corrected.
• AI-generated outputs will always be accurate.
• Services will always meet every business requirement.
• Integrations will remain permanently available.
• PREOS will be free from all vulnerabilities.

Subscribers acknowledge that software services have technological limitations and commercial decisions should not rely solely upon automated outputs.

31. LIMITATION OF LIABILITY

To the fullest extent permitted by applicable law, AVREOS, its directors, officers, employees, affiliates, licensors, contractors, suppliers, and representatives shall not be liable for indirect, incidental, consequential, exemplary, special, punitive, or similar damages arising from or relating to PREOS.

Without limitation, AVREOS shall not be liable for loss of profits, business opportunities, revenue, goodwill, anticipated savings, loss or corruption of Customer Data, business interruption, regulatory penalties arising from Subscriber conduct, decisions made using AI-generated outputs, third-party service failures, or cyber incidents beyond reasonable control.

Except where liability cannot legally be excluded, AVREOS's aggregate liability arising out of these Terms shall not exceed the total subscription fees actually paid by the Subscriber to AVREOS during the twelve (12) months immediately preceding the event giving rise to the claim.

Nothing excludes liability that cannot legally be limited.

32. INDEMNIFICATION

The Subscriber agrees to defend, indemnify, and hold harmless AVREOS Technologies Private Limited, its affiliates, directors, officers, employees, licensors, contractors, successors, and assigns from and against claims, demands, proceedings, damages, liabilities, losses, penalties, fines, costs, and expenses, including reasonable legal fees, arising from or relating to:

• The Subscriber's use of PREOS.
• Breach of these Terms.
• Violation of applicable laws.
• Infringement of third-party rights.
• Customer Data uploaded by the Subscriber.
• Misuse of AI Features.
• Unauthorized activities conducted through the Subscriber's account.

AVREOS shall notify the Subscriber of an indemnifiable claim where practicable.

33. FORCE MAJEURE

Neither party shall be liable for delays or failures resulting from circumstances beyond its reasonable control, including natural disasters, floods, earthquakes, fire, epidemics, pandemics, government actions, war, terrorism, civil unrest, internet outages, cloud infrastructure failures, telecommunications disruptions, power failures, labour disputes, or extraordinary cyberattacks.

The affected party shall use commercially reasonable efforts to resume performance as soon as reasonably practicable.

34. GOVERNING LAW AND DISPUTE RESOLUTION

Subject to mandatory local law that cannot lawfully be excluded, these Terms shall be governed by and construed in accordance with the laws of the Republic of India, without regard to conflict-of-law principles.

The parties shall first attempt to resolve disputes through good-faith negotiations.

Where a dispute cannot be resolved amicably, the parties agree to refer the matter to arbitration in accordance with the Arbitration and Conciliation Act, 1996, as amended.

The seat and venue of arbitration shall be Hyderabad, Telangana, India.

Subject to arbitration, courts located in Hyderabad, Telangana shall have exclusive jurisdiction over matters requiring judicial intervention.

Nothing in this Section prevents a party from seeking urgent interim or injunctive relief from a court of competent jurisdiction where permitted by law.

35. INTERNATIONAL USE

Nothing in these Terms excludes or limits rights, remedies, or protections that cannot lawfully be excluded or limited under mandatory applicable law. If a mandatory local legal requirement conflicts with these Terms, that requirement will prevail to the extent of the conflict.

Where required by applicable law or contract, additional terms, data-processing agreements, transfer mechanisms, disclosures, consent mechanisms, or other safeguards may apply.

Subscribers are responsible for ensuring that their use of PREOS and the Customer Data they process through PREOS complies with laws applicable to them, including applicable privacy, data protection, consumer, communications, tax, sanctions, employment, and sector-specific requirements.

AVREOS's primary legal framework is the law applicable to AVREOS as an Indian company. Where PREOS is offered or used in another jurisdiction and mandatory local law imposes additional or different requirements, AVREOS will comply with those requirements to the extent applicable.

PREOS may be made available to Subscribers and Authorized Users in India and other jurisdictions. These Terms are intended to apply globally, subject to mandatory laws applicable to the relevant Subscriber, Authorized User, transaction, processing activity, or service.

36. CHANGES TO THESE TERMS

AVREOS may revise these Terms from time to time to reflect changes in law, technology, business operations, security practices, or PREOS Services.

Material changes will become effective upon publication or as otherwise communicated to Subscribers.

Where required by applicable law, AVREOS will provide advance notice of material amendments.

Continued use of PREOS after the effective date of revised Terms constitutes acceptance of the updated Terms to the extent permitted by applicable law.

37. CONTACT INFORMATION

Questions regarding these Terms may be directed to AVREOS Technologies Private Limited through the contact channels published on preos.tech.

AVREOS may designate specific communication channels for legal notices, billing matters, privacy inquiries, security reporting, and customer support.

Official communications issued through designated channels shall constitute valid notice under these Terms where permitted by applicable law.

38. ENTIRE AGREEMENT

These Terms, together with policies expressly incorporated by reference, including the Privacy Policy, Cookie Policy, Subscription & Billing Policy, Refund & Cancellation Policy, Acceptable Use Policy, AI Usage Policy, Data Processing Addendum (DPA), Service Level Agreement (SLA), Support Policy, Data Retention & Deletion Policy, and other applicable PREOS policies, constitute the agreement between the Subscriber and AVREOS regarding use of PREOS and supersede prior understandings, communications, proposals, or agreements relating to the Services, except for separately executed agreements that expressly govern the relationship.

Questions about this document? Contact support@preos.tech.

1. Our two roles

AVREOS may act in different capacities depending on the data and processing activity.

Processor / Data Processor. This applies to Customer Data that a Subscriber uploads to or generates within PREOS, including records concerning leads, homebuyers, channel partners, employees, site visits, calls, bookings, payments and related documents. The Subscriber generally determines the purposes and means of processing this Customer Data. The PREOS Data Processing Addendum governs this processing.

Controller / Data Fiduciary. This applies to data AVREOS processes for its own purposes, such as account administration, website visitors, support, billing, security and direct marketing where applicable.

If a builder recorded your enquiry in PREOS and you want your data corrected or deleted, the relevant Subscriber is generally the party responsible for that Customer Data. Where AVREOS acts as a Processor, we will assist the Subscriber in accordance with our agreement and applicable law. Where AVREOS acts as Controller/Data Fiduciary, Sections 7 and 8 apply directly.

2. What we collect

Account Data — where AVREOS is the Controller/Data Fiduciary

Identity: name, job title and organisation, where provided, to create and administer an account.

Contact: work email and phone number for authentication, service notices and support.

Authentication: password credentials, OTP/verification information, session tokens and related security information. Passwords are stored in protected form and are not recoverable by us.

Billing: billing name, address, GSTIN or other tax identifiers, invoice information and transaction history as required for billing and legal compliance.

Usage: features used, timestamps, diagnostics and error information to operate, secure and improve the Platform.

Technical: IP address, browser, device and similar technical information for security, fraud prevention and diagnostics.

Support: correspondence with our team and information necessary to resolve support requests.

Payment card details are not intended to be stored by PREOS where payment processing is handled by a third-party payment provider through a third-party payment provider.

Customer Data — where the Subscriber is the Controller/Data Fiduciary

Subscribers use PREOS to manage their own real-estate sales and operations. Customer Data may include prospective buyer names and contact details, requirements and budget information, site-visit records, call records or recordings where enabled, booking and payment schedules, and documents such as agreements or identity documents.

We process Customer Data to provide, operate, secure and support the Platform and as otherwise instructed or agreed with the Subscriber. We do not independently determine the Subscriber's purposes for collecting Customer Data. We do not sell, rent or license Customer Data to advertisers or data brokers, and we do not use Customer Data for unrelated purposes.

What we do not do

• Sell, rent or license personal data to advertisers or data brokers.
• Purchase personal data from data brokers for use in PREOS.
• Use Customer Data to train or fine-tune AI models, subject to the terms and configurations of the applicable AI service providers and our agreements.
• Use advertising or third-party tracking cookies as described in Section 11.

3. Why we process personal data

Depending on the context and applicable law, we may process personal data to:

• provide and administer PREOS and perform our agreements;
• authenticate users and secure accounts;
• bill, invoice and meet applicable tax and accounting obligations;
• provide support and service communications;
• detect fraud, abuse, misuse and security incidents;
• respond to lawful requests from courts, regulators or law-enforcement authorities;
• send marketing communications where permitted and, where required, with consent; and
• operate, maintain, troubleshoot and improve PREOS.

Where we rely on consent, you may withdraw it in accordance with applicable law. Withdrawal does not affect processing lawfully carried out before withdrawal.

4. Who we share data with

Sub-processors. We may use service providers that process data on our behalf under contractual arrangements and subject to applicable requirements. Our current Subprocessor List identifies relevant providers, their functions and, where available, applicable processing locations.

The Subscriber's organisation. Customer Data may be visible to Authorized Users permitted by the Subscriber according to its configured roles and permissions.

Legal and regulatory requests. We may disclose data where required by applicable law or a valid order, warrant, notice or other legally enforceable request from a court, regulator or law-enforcement authority. We may take reasonable steps to verify the request and, where legally permitted, limit disclosure to the information required or reasonably relevant to the request. Where legally permitted, we may notify the affected Subscriber or person before or after disclosure. We will not provide notice where prohibited by law, where a lawful order requires secrecy, or where notice could reasonably compromise an investigation, security measure or other lawful process. We may preserve relevant records where required by law or a valid legal process. In an emergency, we may disclose information where permitted or required by applicable law to address an imminent risk of serious harm or other legally recognised emergency.

Corporate transactions. If AVREOS is involved in a merger, acquisition, financing, reorganisation or sale of assets, relevant data may transfer as part of that transaction subject to applicable law and appropriate protections.

We do not share personal data with advertisers or data brokers for their own marketing purposes.

5. Where data is stored

PREOS application services are hosted through our cloud hosting provider. The production database for structured application data is hosted using MongoDB Atlas on AWS infrastructure in the Hyderabad region (AWS ap-south-2), as currently configured.

Structured application data may include leads, visitors, inventory, calls, site visits and other operational records.

Files such as brochures, images, master plans and legal documents are not stored as binary files inside MongoDB documents and PREOS does not use MongoDB GridFS for these files. Where file storage is enabled, the binary files are intended to be stored through a separate object-storage service, while MongoDB stores related metadata and file references. The applicable storage provider and processing location may be identified in

Data may be processed in India or other jurisdictions where AVREOS or its service providers operate or where processing is required to provide PREOS. Where personal data is transferred across borders, AVREOS will apply safeguards and transfer mechanisms required by applicable law. Where another jurisdiction imposes mandatory requirements that differ from this Policy, those requirements will apply to the extent applicable.

6. How long we keep data

We retain personal data only for as long as reasonably necessary for the purposes described in this Policy, to provide PREOS, meet contractual and legal obligations, resolve disputes, maintain security, and enforce agreements.

Customer Data after a subscription ends: retained for the period specified in the applicable agreement and Data Retention & Deletion Policy, followed by deletion or return subject to legal obligations and backup-cycle requirements.

Application and access logs: retained for the period reasonably necessary for security, operational and legal requirements.

Support correspondence: retained for the period reasonably necessary to manage the support relationship and legal obligations.

Invoices and tax records: retained for the period required by applicable accounting and tax laws.

Marketing contacts: retained until consent is withdrawn where consent is the applicable basis, or for a reasonable period of inactivity subject to applicable law.

Backup copies may remain for the configured backup-retention period before being overwritten or deleted as part of the normal backup lifecycle. Current MongoDB Atlas backup configuration includes automated hourly/daily backups and longer weekly/monthly retention schedules; these settings may change as our infrastructure evolves.

The Data Retention & Deletion Policy provides additional operational detail.

7. Your rights

Where AVREOS acts as Controller/Data Fiduciary, you may have rights under applicable law, which may include access, correction, completion, updating, deletion/erasure, withdrawal of consent, objection or restriction where applicable, data portability where applicable, and the right to raise a grievance.

For Customer Data processed by AVREOS as a Processor, requests concerning that data should generally be directed to the relevant Subscriber. We will assist the Subscriber as required by the applicable agreement and law.

To exercise a right concerning data for which AVREOS is responsible, contact grievance@avreos.in. We may request reasonable information to verify identity and protect personal data from unauthorised disclosure. We will respond within the period required by applicable law or, where no specific period applies, within a reasonable period.

8. Grievance redressal

Grievance Officer: Sumalatha G

Designation: Grievance Officer, AVREOS Technologies Private Limited

Email: grievance@avreos.in

How to raise a grievance: Write to the Grievance Officer at the email or postal address above. Describe the concern, the data involved and the outcome you are seeking. No particular form is required.

Where applicable under Indian law, individuals may pursue escalation to the competent data-protection authority after using the applicable grievance mechanism. Individuals in other jurisdictions may have additional rights or complaint routes under local law.

9. Security

We use technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss and misuse.

• Encryption of data in transit using TLS/HTTPS where supported by the applicable service.
• Protected password storage using one-way hashing.
• Role-based access controls for application data.
• Password authentication and OTP/2FA mechanisms where enabled.
• Restricted administrative access to production systems based on operational need.
• Automated database backups through MongoDB Atlas Cloud Backup.
• Security monitoring, logging and access controls appropriate to the Platform and its environment.

Our security controls and technical and organisational measures are described in greater detail in the PREOS Security Policy. No platform can guarantee absolute security.

10. If there is a data breach

AVREOS maintains incident-response processes designed to identify, contain, investigate and remediate security incidents.

Where AVREOS acts as a Processor, AVREOS will notify the affected Subscriber without undue delay and, where required under the PREOS Data Processing Addendum, within 72 hours after becoming aware of the relevant Personal Data Breach. AVREOS will provide information reasonably available to help the Subscriber meet its own obligations.

Where AVREOS acts as Controller/Data Fiduciary, AVREOS will assess the incident and make notifications to individuals and authorities where required by applicable law and within the applicable legal timelines.

For incidents subject to applicable cyber-security reporting requirements, AVREOS will comply with the reporting obligations and timelines applicable to the incident.

11. Cookies

PREOS and the PREOS website may use cookies or similar technologies that are necessary for authentication, security, session management and core functionality.

We do not currently use advertising cookies or third-party tracking cookies for behavioural advertising.

If we introduce analytics, advertising or other non-essential cookies or similar technologies, we will update the applicable Cookie Policy and obtain consent where required by law.

12. Artificial intelligence

PREOS includes AI-enabled features that may generate suggestions, scores, summaries, drafts and other assistive outputs.

• Customer Data is not intentionally used by AVREOS to train or fine-tune general AI models.
• AI services are used under applicable provider terms and configurations intended to protect submitted content.
• AI output is advisory and should be reviewed by an authorised human before being relied upon for material business decisions.
• AI functionality, providers, models and capabilities may change as PREOS evolves. Applicable providers may be identified in the current PREOS Subprocessor List.

The PREOS AI Usage Policy provides additional information.

13. Children

PREOS is a business platform and is not intended to be used directly by children. We do not knowingly collect personal data directly from children for the purpose of providing PREOS accounts.

Where a Subscriber processes information concerning a minor in PREOS, the Subscriber is responsible for complying with the applicable law governing that processing, including requirements concerning parental or guardian consent where applicable.

14. Marketing

We may send product updates, event invitations, educational information and offers to existing Subscribers and to people who request or permit marketing communications, subject to applicable law.

Marketing communications will provide an appropriate unsubscribe or opt-out mechanism where required. Service communications, including security alerts, billing notices and material changes to legal documents, are not marketing communications and may continue where necessary to provide the service or comply with law.

15. Subscriber responsibilities

If you use PREOS to process other people's personal data, you are responsible for determining and documenting the lawful basis and purposes for that processing and for complying with applicable privacy and data-protection laws.

• provide appropriate privacy notices to individuals;
• obtain and manage consent where consent is required;
• respond to requests from individuals whose data you control;
• configure roles and access appropriately and revoke access promptly when personnel leave or no longer require access;
• maintain appropriate security measures for your own systems and integrations; and
• maintain any grievance or privacy process required by applicable law.

Subscribers must not use PREOS to process personal data in a manner that violates applicable law, the Terms of Service or the Acceptable Use Policy.

16. Changes

The current Policy will be published on the PREOS website, with the effective date shown at the top.

17. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Grievance Officer (data protection): grievance@avreos.in

Privacy and data protection: privacy@avreos.in

Legal notices, copyright, trademark, security reports: legal@avreos.in

Customer support (PREOS): support@preos.tech

AVREOS Technologies Private Limited. CIN U74102TS2025PTC205165.

Questions about this document? Contact support@preos.tech.

1. What cookies are

A cookie is a small text file a website stores on your device. It allows the site to recognise your browser between requests — for example, to keep you signed in as you move between pages. This Policy applies to cookies used on PREOS websites and web-based services. It is intended to operate globally; mandatory local privacy and cookie requirements will apply where applicable.

2. The cookies we use

Based on the current PREOS configuration covered by this Policy, these cookies are set by AVREOS and are not used for advertising, retargeting or cross-site profiling. If a third-party cookie is introduced in the future, it will be disclosed and handled in accordance with applicable law.

3. What we do not use

• Advertising or retargeting cookies.
• Analytics cookies, including Google Analytics.
• Social media pixels or embedded trackers.
• Cross-site tracking of any kind.
• Cookies that share data with third parties for their own purposes.

4. Consent

Strictly necessary cookies may be used without consent where permitted by applicable law because the service cannot function without them. Disabling them will prevent you from signing in. If we introduce any non-essential cookie — for example product analytics — we will update this Policy, provide appropriate notice, and obtain consent where required by applicable law. We will not set a non-essential cookie where applicable law requires prior consent unless that consent has been obtained.

If we introduce any non-essential cookie in future — for example product analytics — we will update this Policy, tell you before it takes effect, and ask for your consent where the law requires it. We will not set a non-essential cookie without doing so.

5. Managing cookies

Most browsers allow you to view, delete and block cookies through their settings. Blocking the cookies listed in section 2 will prevent PREOS from working, because you will not be able to remain signed in.

Signing out of PREOS clears your session cookie and invalidates your authentication token.

6. Changes

We will update this Policy if the cookies we use change. The effective date at the top shows when it was last revised. Where a change introduces a non-essential cookie, we will provide appropriate notice before it takes effect. Information collected through cookies, where it constitutes personal data, is handled in accordance with the PREOS Privacy Policy and applicable law.

We will update this Policy if the cookies we use change. The effective date at the top shows when it was last revised. Where a change introduces a non-essential cookie, we will give notice before it takes effect.

7. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall,

KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

AVREOS Technologies Private Limited. CIN U74102TS2025PTC205165.

Questions about this document? Contact support@preos.tech.

1. Subscription structure

PREOS is licensed on a per-user basis. Fees are stated in the Order Form and depend on the plan, the number of User Licences and the Subscription Term.

2. Billing frequency

2.1 Annual is the default. Subscriptions are invoiced annually in advance unless the Order Form states otherwise.

2.2 Monthly billing. Monthly billing is available on request at the same per-user rate, invoiced monthly in advance.

2.3 Mid-term changes. Additions during a term are invoiced pro rata and co-terminate with the current Subscription Term, so that all charges align to a single renewal date.

3. FREE TRIAL

An eligible Subscriber may receive one fourteen (14) day free trial of PREOS. No fee is charged during the 14-day Trial.

At the end of the Trial, access ends or may be converted to a paid Subscription only on the terms disclosed and accepted before conversion. If no paid Subscription is activated, the account enters the wind-down described in the Data Retention & Deletion Policy.

4. Taxes

4.1 Indirect taxes. All fees are exclusive of applicable indirect taxes unless the Order Form states otherwise. AVREOS will charge and show applicable taxes on invoices as required by law, and the Subscriber shall pay them in addition to the fees.

4.2 Tax invoices. AVREOS will issue invoices containing the information required by applicable law, including tax registration and tax details where applicable.

4.3 Tax information. The Subscriber shall provide any tax registration or exemption information reasonably required for accurate invoicing. AVREOS may be unable to amend invoices retrospectively where prohibited by applicable tax law.

4.4 Withholding taxes. Where the Subscriber is required by applicable law to withhold tax, it shall provide the required withholding certificate or other evidence within the applicable statutory period. Amounts properly withheld and remitted will be treated as paid to AVREOS to the extent supported by the required documentation.

4.5 Other taxes. Fees are exclusive of other taxes, duties or levies that may apply, except taxes imposed on AVREOS's net income. The Subscriber shall bear taxes properly chargeable to it under applicable law.

5. Invoicing and payment

5.1 Invoicing. AVREOS issues a tax invoice at the start of each Subscription Term, or at the start of each month where monthly billing has been agreed.

5.2 Payment term. Invoices are payable within 15 days of the invoice date unless the Order Form states otherwise.

5.3 Payment methods. Payments may be processed through third-party payment service providers. AVREOS does not store payment card details.

5.4 Currency. Fees are payable in the currency stated in the Order Form. If no currency is stated, fees are payable in Indian Rupees.

6. Late payment

6.1 AVREOS may charge interest at 1.5% per month on overdue amounts, or the maximum permitted by law if lower.

6.2 Where an invoice remains unpaid 30 days after its due date, AVREOS may suspend the Services on 7 days’ written notice. Suspension does not relieve the Subscriber of the obligation to pay.

6.3 AVREOS will restore access promptly on payment.

6.4 AVREOS will not suspend access in respect of an amount genuinely disputed under section 9.

7. Changes during a term

7.1 Adding users. User Licences may be added at any time, charged pro rata for the remainder of the Subscription Term.

7.2 Reducing users. User Licences may not be reduced mid-term. A reduction takes effect at renewal, on notice given at least 30 days before the end of the current term.

7.3 Upgrading a plan. A plan may be upgraded at any time. The difference is charged pro rata.

7.4 Downgrading a plan. A downgrade takes effect at renewal. Functionality available only on the higher plan ceases at that point, and the Subscriber should export any data held in those modules beforehand.

8. Renewal and price changes

8.1 Renewal. Subscriptions renew automatically for successive terms of the same length unless either party gives written notice of non-renewal at least 30 days before the end of the current term.

8.2 Reminder. AVREOS will send a renewal reminder to the Subscriber’s billing contact at least 30 days before an annual term renews.

8.3 Price changes. AVREOS may change fees with effect from a renewal, on at least 60 days’ written notice before the end of the then-current term. Fees do not change during a term. A Subscriber that does not accept a change may give notice of non-renewal within the notice period.

9. Billing disputes

A Subscriber disputing an invoice should notify support@preos.tech within 15 days of the invoice date, stating the amount disputed and the reason. AVREOS will investigate and respond within 15 business days. Undisputed amounts remain payable on the due date.

10. Records

AVREOS retains invoices and billing records for 8 financial years, or longer where required by applicable law. This applies notwithstanding deletion of Customer Data under the Data Retention & Deletion Policy, and covers billing records only — not Customer Data.

11. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Office Space No. 1204, Plot No. 52, Sy. No. 1050P,

Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall,

KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

AVREOS Technologies Private Limited. CIN U74102TS2025PTC205165.

Office Space No. 1204, Plot No. 52, Sy. No. 1050P, Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall, KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

Questions about this document? Contact support@preos.tech.

1. How to cancel

A Subscriber may cancel by giving written notice to support@preos.tech at least 30 days before the end of the current Subscription Term. Cancellation takes effect at the end of that term. Access continues, and fees remain payable, until then.

Cancellation does not delete data immediately. The account enters the wind-down described in the Data Retention & Deletion Policy: the 90-day wind-down described in the Data Retention & Deletion Policy: 30 days of read-only access with full export, followed by 60 days of suspension during which export is available on request.

2. The general position

Subscription Fees, User Licence fees, project fees, AI add-on fees, onboarding fees and professional services fees are non-refundable once the relevant Service has been provisioned or delivered.

Provisioning of an Organization Account, activation of User Licences, or commencement of onboarding constitutes delivery for the purposes of this Policy.

3. When a refund is available

4. When a refund is not available

Refunds are not available where:

• the Subscriber changes its business plans, or no longer needs the Platform;
• the Subscriber has not used the Platform, or has used it less than expected;
• User Licences purchased are not assigned;
• the Subscriber cancels mid-term;
• access is suspended or terminated for the Subscriber’s breach;
• a Trial is not converted to a full Subscription; or
• a third-party service the Subscriber integrated becomes unavailable.

5. How to request a refund

Send a request to support@preos.tech within 30 days of the event giving rise to it, stating the invoice number, the amount and the ground relied on. AVREOS will respond within 15 business days.

Approved refunds are made to the original payment method within 15 business days of approval. Bank processing times may add to that.

6. Goodwill adjustments

AVREOS may, at its discretion, offer a credit or other commercial accommodation in circumstances not covered by section 3. Any such accommodation is made without admission and does not establish a precedent or an ongoing entitlement.

7. Taxes

Refunds are net of any taxes already remitted to the authorities where those taxes cannot be recovered. Where GST has been charged, a credit note will be issued in accordance with applicable law.

8. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Office Space No. 1204, Plot No. 52, Sy. No. 1050P,

Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall,

KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

AVREOS Technologies Private Limited. CIN U74102TS2025PTC205165.

Office Space No. 1204, Plot No. 52, Sy. No. 1050P, Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall, KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

Questions about this document? Contact support@preos.tech.

1. General

PREOS is a business platform for real estate sales and operations. It must be used lawfully, for the Subscriber’s own business purposes, and in accordance with the Documentation. PREOS may be made available globally. India is AVREOS's primary legal framework, and mandatory privacy, communications, cybersecurity and other local laws applicable to a Subscriber or use of PREOS will apply to the extent required.

2. Prohibited content

You must not upload, store, transmit or generate content that:

• is unlawful, or facilitates unlawful activity;
• infringes intellectual property, privacy or other rights of any person;
• is defamatory, obscene, harassing, or incites violence or hatred;
• relates to a child in a manner prohibited by applicable law, including tracking, behavioural monitoring or targeted advertising where prohibited;
• contains malware or any code designed to disrupt or gain unauthorised access to a system;
• you have no lawful basis to process; or
• consists of sensitive, special-category or similarly protected data, such as health or biometric information, or financial account credentials, which PREOS is not designed to hold as part of ordinary platform use;

3. Prohibited conduct

You must not:

• access or attempt to access another Subscriber’s account or data;
• probe, scan or test the vulnerability of the Platform except under the responsible disclosure process in the Security Policy;
• circumvent authentication, rate limits, usage limits or access controls;
• share user credentials, or use one User Licence for more than one individual;
• use automated means to extract data at a scale or rate that degrades the Platform for others;
• resell, sublicense or provide PREOS to a third party as a service;
• reverse engineer the Platform or attempt to extract source code, models or prompts; or
• use PREOS to build a competing product.

4. Communications

PREOS may be used to contact buyers and prospects in the ordinary course of the Subscriber’s business. You must not use it to send unsolicited bulk communications, and you must comply with applicable law on telemarketing, electronic communications and the National Do Not Call registry, and with the terms of any communications provider integrated with PREOS.

You are responsible for having a lawful basis to contact the individuals whose details you upload.

5. Call recording

Where the Subscriber uses call recording functionality, the Subscriber is responsible for obtaining any consent or other lawful basis required by applicable law, providing any required notice, and respecting applicable recording and privacy requirements. AVREOS provides the functionality; the Subscriber decides how and when to use it.

6. AI features

Use of AI features is additionally governed by the PREOS AI Usage Policy. AI output is advisory and must be reviewed by an authorised human before it is relied upon for a decision producing a legal, similarly significant, or otherwise materially consequential effect on an individual, where applicable law requires such review.

7. Fair use

Subscriptions are subject to fair-use limits appropriate to the applicable plan, including limits on storage, API calls and AI usage. Where usage materially exceeds normal levels or threatens the stability, security or availability of PREOS, AVREOS will contact the Subscriber to discuss the issue before applying a non-emergency limit, except where immediate action is reasonably necessary to protect PREOS or other Subscribers.

8. Reporting

Suspected breaches of this Policy should be reported to legal@avreos.in. Security incidents or vulnerabilities may also be reported through the security contact published by AVREOS.

9. Consequences of breach

9.1 AVREOS may investigate a suspected breach, and may remove or disable access to content that breaches this Policy.

9.2 AVREOS may suspend or restrict access in accordance with the Terms of Service. Except where an imminent risk to security, law, PREOS or another user makes prior notice impracticable, AVREOS will give notice and a reasonable opportunity to remedy the breach before suspension.

9.3 A material breach that is not remedied may lead to termination under clause 13.2 of the Terms of Service.

9.4 AVREOS will report to the appropriate authority where required by law.

10. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall,

KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

Questions about this document? Contact support@preos.tech.

1. AI features

2. The governance boundary

2.1 Advisory fields only. The PREOS AI assistant ("Reo") writes only to advisory fields: suggestions, scores, reasons and drafts. Reo does not directly write to operational state.

2.2 What AI cannot do. No AI feature within PREOS will, of its own operation and without an affirmative action by an authorised human user, make or execute any of the following operational decisions:

• change the status of an inventory unit, including holding, releasing, reserving, booking or blocking it;
• change the price of a unit or approve a discount;
• change the ownership or assignment of a lead;
• approve, reject or escalate a request requiring managerial authority; or
• send any communication to a Subscriber’s customer.

2.3 Audit trail. Where a user acts on an AI recommendation, the action is recorded against that user. The audit trail records the person who acted, not the feature that suggested it.

2.4 Reasoning. AI recommendations are presented with the basis on which they were generated, so that the reviewing user can evaluate and reject them.

2.5 Why this matters. Pricing and inventory decisions carry commercial and regulatory consequences. Automating them would move accountability from a named person to a model. AVREOS has chosen not to do that.

3. Customer Data and AI

3.1 Customer Data and outputs. Customer Data remains the Subscriber’s as provided in the PREOS Terms of Service and DPA. As between AVREOS and the Subscriber, AI outputs generated from the Subscriber’s Customer Data are made available to the Subscriber for its use, subject to applicable law, third-party rights and the Terms of Service. AVREOS does not claim ownership of the Subscriber’s Customer Data.

3.2 No training. AVREOS does not use Customer Data to train, fine-tune, re-train or otherwise improve any general-purpose artificial intelligence or machine-learning model, whether developed by AVREOS or operated by a third party.

3.3 Provider commitments. AVREOS uses paid, billing-enabled tiers of its AI providers under service terms appropriate to the relevant feature. Where an enterprise or zero-retention configuration is available and appropriate, AVREOS may use it. A provider may retain limited submitted content for security, abuse monitoring or policy-enforcement purposes where its applicable terms permit; such retention does not authorise model training. Applicable AI providers and processing locations are maintained in the PREOS sub-processor information.

3.4 Permitted processing. Content submitted to AI features is processed only to generate the requested output and for the operational purposes necessary to deliver it — routing, abuse prevention, security monitoring, error diagnosis and billing.

3.5 Aggregated statistics. AVREOS may compile aggregated, de-identified statistics about feature usage, provided they do not identify and cannot reasonably be used to identify any Subscriber, user, individual or item of Customer Data.

3.6 No sale. AVREOS does not sell, rent or licence Customer Data to any third party.

4. AI sub-processors

The AI providers AVREOS uses, the function each performs and applicable processing locations are maintained in the current PREOS sub-processor information. AI processing may occur in India or other jurisdictions where the relevant provider operates. AVREOS applies the safeguards required by applicable law for such processing.

AVREOS will give at least 30 days’ notice before adding or replacing an AI sub-processor that processes Customer Data, subject to the procedure and exceptions in the PREOS Data Processing Addendum. A Subscriber may object within that period on reasonable, documented data-protection grounds. If the objection cannot reasonably be resolved, the remedies set out in the DPA apply.

5. Accuracy and human review

5.1 AI output may be incomplete, outdated or incorrect. It is a starting point for a decision, not the decision.

5.2 The Subscriber is responsible for reviewing AI output before relying on it and for all decisions taken by its Authorized Users, including decisions informed by AI. Where applicable law requires human review or prohibits solely automated decision-making, the Subscriber must ensure those requirements are met.

5.3 AI output is not legal, financial, tax, valuation, engineering or other professional advice.

5.4 AVREOS does not warrant the accuracy of AI output. Clause 14.3 of the Terms of Service applies.

6. Prohibited uses

The Subscriber must not use AI features to:

• make a decision about an individual that produces a legal or similarly significant effect, without human review;
• process sensitive, special-category or similarly protected personal data unless the relevant feature expressly supports it and the Subscriber has a lawful basis and appropriate safeguards;
• generate content that is unlawful, defamatory, discriminatory or misleading;
• impersonate any person or organisation;
• circumvent usage limits, or extract the underlying models or prompts; or
• process data the Subscriber has no lawful basis to process.

7. Fair use

AI features are subject to fair use limits appropriate to the Subscription plan. Where usage materially exceeds normal levels, AVREOS will contact the Subscriber to discuss it before applying any limit, except where immediate action is necessary to protect the Platform.

8. Changes to models

AVREOS may update, replace or retire the models and providers used in PREOS to improve quality, reliability, cost or safety, subject to applicable law and contractual commitments. Where a change materially alters the behaviour of an AI feature on which the Subscriber reasonably relies, AVREOS will provide at least 30 days’ notice where reasonably practicable, unless a shorter period is necessary for security, legal, provider or safety reasons.

9. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall,

KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

AVREOS Technologies Private Limited. CIN U74102TS2025PTC205165.

Questions about this document? Contact support@preos.tech.

1. Purpose and scope

This Policy states how long AVREOS keeps data processed through PREOS, what happens to that data when a Subscription ends, and how deletion is carried out. It sets out specific periods rather than general principles, so that a Subscriber can plan against it.

This Policy applies to Customer Data, Account Data, operational records and backups. It forms part of the PREOS Legal Center and is incorporated into the PREOS Terms of Service and the PREOS Data Processing Addendum.

This Policy applies to PREOS Subscribers and users in India and outside India. Where mandatory law in an applicable jurisdiction requires a different retention period, deletion procedure, legal hold, or other mandatory requirement, AVREOS will comply with that requirement to the extent applicable.

2. Retention schedule

The following periods apply. Where a period is expressed as a maximum, AVREOS may delete earlier.

3. What happens when a subscription ends

Termination does not delete Customer Data immediately. The account moves through three defined stages over 90 days. This is deliberate: a substantial proportion of cancellations arise from a failed payment or an administrative error, and immediate deletion would destroy a Subscriber’s business records without recourse.

AVREOS will notify the Subscriber’s designated administrator by email on entry to the grace period, on entry to suspension, and not less than 14 days before deletion begins.

4. Export

4.1 During an active Subscription. Authorized Users may export Customer Data at any time using the export functions within PREOS, in commonly used machine-readable formats.

4.2 During the grace period. The same export functions remain available in read-only mode.

4.3 During suspension. AVREOS will provide a complete export on written request to support@preos.tech, within 5 business days of a verified request, at no charge.

4.4 After deletion. Export is not possible. AVREOS cannot recover deleted Customer Data, and the notice given under section 3 is the Subscriber’s opportunity to act.

5. Deletion method

5.1 Production systems. Customer Data is deleted from the production database and file storage. Deletion is irreversible.

5.2 Backups. Backups are snapshots of the entire database taken at a point in time. It is not technically possible to remove an individual Subscriber’s records from an existing snapshot. Deleted data therefore remains within backup snapshots until those snapshots expire on their normal rotation, which is within 35 days of production deletion. During that period the data is not accessible through the Platform, is not processed, and remains subject to the same encryption and access controls as production data.

AVREOS states this openly because it is true of every platform that maintains backups. A policy claiming instantaneous deletion from all systems would be inaccurate.

5.3 Certification. On written request made within 30 days of deletion, AVREOS will provide the Subscriber with written confirmation that Customer Data has been deleted, stating the date of production deletion and the date on which the final backup containing that data expired.

6. Deletion on request

6.1 Subscriber request. A Subscriber may request deletion of its Customer Data at any time, including before the end of the 90-day period. AVREOS will action a verified request within 30 days and will confirm in writing when deletion is complete.

6.2 Data Principal requests. Where an individual asks AVREOS to delete personal data held within a Subscriber’s account, AVREOS will direct the request to that Subscriber, who is the Data Fiduciary for that data, and will inform the individual that it has done so. AVREOS will assist the Subscriber in giving effect to the request.

6.3 Where deletion is refused. AVREOS will not delete data where retention is required by law, necessary for the establishment or defence of legal claims, or subject to a legal hold. Where AVREOS declines a deletion request on any of these grounds, it will state which ground applies.

7. Legal holds

Where AVREOS becomes aware of actual or reasonably anticipated litigation, a regulatory investigation, or a lawful order requiring preservation, the relevant data is placed under legal hold and is exempt from the schedule in section 2 until the hold is lifted.

AVREOS will notify the affected Subscriber that a hold has been applied, unless prohibited from doing so by law or by the terms of the order.

8. AI data

Content submitted to AI features is processed to generate the requested output and is not retained by AVREOS beyond that request, except where the output is stored within the Platform as Customer Data at the user’s direction. AVREOS does not use Customer Data to train, fine-tune or improve any AI model. AI providers may retain submitted content for a limited period for abuse monitoring and policy enforcement, which does not involve model training.

9. Subscriber responsibilities

The Subscriber is the Data Fiduciary for Customer Data and is responsible for:

• determining what personal data it uploads to PREOS and for how long it needs to be retained;
• configuring any retention settings available within the Platform;
• exporting data it wishes to keep before the end of the 90-day period;
• responding to requests from its own Data Principals; and
• complying with any retention obligation applicable to its own business, including under RERA and tax legislation.

10. Changes

AVREOS may update this Policy. Where a change shortens a retention period in a way that adversely affects a Subscriber, AVREOS will give at least 30 days’ notice before the change takes effect.

11. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Questions about this document? Contact support@preos.tech.

1. Definitions

2. Roles

2.1 In respect of Customer Data, the Subscriber is the Data Fiduciary and AVREOS is a Data Processor. The Subscriber determines the purpose and means of processing.

2.2 The Subscriber is responsible for issuing notices to Data Principals, obtaining and managing consent where consent is the basis of processing, responding to requests from Data Principals, notifying the Data Protection Board of India and affected Data Principals of a Personal Data Breach affecting Customer Data, and maintaining its own grievance redressal mechanism.

2.3 The Subscriber warrants that it has a lawful basis for the processing it instructs, and that any notice or consent required under the DPDP Act has been given or obtained.

2.4 AVREOS is the Data Fiduciary in respect of Account Data — the personal data of Subscriber administrators and Authorized Users collected for account creation, authentication, billing and support. That processing is governed by the PREOS Privacy Policy and not by this DPA.

3. Scope of processing

4. Processing instructions

4.1 AVREOS shall process Customer Data only on the documented instructions of the Subscriber. The Terms of Service, this DPA, and the Subscriber’s use of the configuration options within PREOS constitute the Subscriber’s documented instructions.

4.2 AVREOS shall not process Customer Data for its own independent purposes, and shall not sell, rent or license Customer Data to any third party. AVREOS may process Customer Data only as necessary to provide, operate, secure, support and administer PREOS, comply with applicable law, prevent fraud and security incidents, provide requested features, including AI-assisted features, and perform the documented instructions of the Subscriber.

4.3 AVREOS shall not use Customer Data to train or fine-tune artificial intelligence or machine-learning models. AI-assisted features may process Customer Data only to provide the requested feature and in accordance with this DPA, the Terms of Service and applicable law.

4.4 Where AVREOS is required by law to process Customer Data otherwise than on the Subscriber’s instructions, AVREOS shall inform the Subscriber before processing unless prohibited from doing so by that law.

4.5 If AVREOS considers that an instruction infringes applicable law, it shall inform the Subscriber without undue delay and may suspend performance of that instruction until it is withdrawn or amended. 4.6 Where permitted or required by applicable law, AVREOS may disclose Customer Data in an emergency to address an imminent risk of serious harm or other legally recognised emergency. AVREOS shall provide reasonable assistance to the Subscriber in relation to a legal request concerning Customer Data where such assistance is reasonably available and required by applicable law or this DPA, but AVREOS is not required to provide legal advice or assume the Subscriber's obligations as Data Fiduciary. 4.6 Where permitted or required by applicable law, AVREOS may disclose Customer Data in an emergency to address an imminent risk of serious harm or other legally recognised emergency. AVREOS shall provide reasonable assistance to the Subscriber in relation to a legal request concerning Customer Data where such assistance is reasonably available and required by applicable law or this DPA, but AVREOS is not required to provide legal advice or assume the Subscriber's obligations as Data Fiduciary.

5. Confidentiality

AVREOS shall ensure that every person authorised to process Customer Data is bound by a written obligation of confidentiality that survives the end of their engagement, and has access only to the Customer Data necessary for their role.

6. Security

6.1 AVREOS shall implement and maintain the technical and organisational measures set out in the PREOS Security Policy, which is incorporated into this DPA by reference. Those measures include encryption in transit and at rest, role-based access control, logging and audit trails, backup and recovery, and an incident response process.

6.2 AVREOS shall not materially reduce the overall level of security provided under this DPA during the term of a Subscription.

6.3 The Subscriber is responsible for the security of its own systems and credentials, for configuring roles and permissions within its Organization Account, and for revoking access promptly when an Authorized User leaves.

7. Sub-processors

7.1 Authorisation. The Subscriber gives AVREOS general authorisation to engage Sub-processors, subject to this section.

7.2 Current list. The current Sub-processors, with the function performed and the location of processing for each, are

7.3 Notice of change. AVREOS shall give at least 30 days’ notice before appointing or replacing a Sub-processor that processes Customer Data. Notice shall be given by email to the Subscriber’s designated administrator and by publication on the Sub-processor page.

7.4 Objection. Within the notice period, the Subscriber may object to a new Sub-processor on reasonable, documented data protection grounds. The parties shall discuss the objection in good faith. If the objection is not resolved within 30 days, the Subscriber may terminate the affected Services on written notice and AVREOS shall refund any prepaid fees for the unexpired term.

7.5 Flow-down. AVREOS shall impose on each Sub-processor data protection obligations no less protective than those in this DPA.

7.6 Liability. AVREOS remains liable to the Subscriber for the acts and omissions of its Sub-processors as if they were its own.

8. Cross-border transfers

8.1 PREOS may process Customer Data in India and, where required to provide the Services, in other jurisdictions through AVREOS or its authorised Sub-processors. AVREOS will maintain appropriate safeguards for such processing.

8.2 Where a Sub-processor processes Customer Data outside India, the applicable processing location is disclosed in the current Sub-processor list, subject to lawful and reasonable updates.

8.3 AVREOS shall not make a transfer that is prohibited or restricted under applicable law, including any restriction imposed by the Central Government under applicable Indian data-protection law.

8.4 Where Customer Data is transferred across national borders, AVREOS shall apply the safeguards and contractual transfer mechanisms required by applicable law and appropriate to the transfer.

9. Assistance to the Subscriber

9.1 Data Principal requests. Where AVREOS receives a request from a Data Principal relating to Customer Data, it shall not respond to the substance of the request but shall forward it to the Subscriber within 5 business days and inform the Data Principal that it has done so.

9.2 Technical assistance. AVREOS shall provide, within the Platform, the functionality necessary for the Subscriber to access, correct, export and delete Customer Data in order to give effect to Data Principal rights. Where a Subscriber cannot give effect to a request using that functionality, AVREOS shall assist on written request within 10 business days.

9.3 Regulatory enquiries. AVREOS shall provide the information reasonably necessary to enable the Subscriber to respond to an enquiry from the Data Protection Board of India or another competent authority concerning processing performed by AVREOS.

9.4 Limits. AVREOS is not obliged to provide legal advice, to conduct a compliance assessment on the Subscriber’s behalf, or to assume the Subscriber’s obligations as Data Fiduciary.

10. Personal data breach

10.1 Notification to the Subscriber. AVREOS shall notify the affected Subscriber of a Personal Data Breach affecting Customer Data without undue delay and in any event within 72 hours of becoming aware of it.

10.2 Contents of notification. The notification shall describe, so far as known at the time: the nature of the breach; the categories and approximate volume of Customer Data and Data Principals affected; the likely consequences; the measures taken or proposed to address it; and a point of contact at AVREOS. Where the full information is not available within 72 hours, AVREOS shall provide it in phases as it becomes available.

10.3 Regulatory notification. The Subscriber, as Data Fiduciary/Controller where applicable, is responsible for regulatory and Data Principal notifications concerning Customer Data to the extent required by applicable law. AVREOS shall provide information reasonably necessary for the Subscriber to meet those obligations.

10.4 Mandatory incident reporting. AVREOS will report cyber security incidents to competent authorities where and to the extent required by applicable law, including applicable CERT-In requirements in India.

10.5 Remediation. AVREOS shall take reasonable steps to contain and remediate the breach and to prevent recurrence, and shall keep the Subscriber informed of material developments.

10.6 No admission. Notification under this section is not an admission of fault or liability by either party.

11. Audit and verification

11.1 Documentation. On written request, and not more than once in any 12-month period, AVREOS shall provide the Subscriber with the then-current PREOS Security Policy, the Sub-processor list, and its responses to a reasonable security questionnaire, together with any independent certification or audit report it holds.

11.2 Audit right. Where the documentation provided under clause 11.1 is not sufficient for the Subscriber to demonstrate compliance with its own obligations as Data Fiduciary, the Subscriber may audit AVREOS’ processing of Customer Data, subject to clauses 11.3 to 11.6.

11.3 Conditions. An audit shall be: on at least 30 days’ written notice; not more than once in any 12-month period, except following a Personal Data Breach affecting the Subscriber or where required by a competent authority; during business hours; conducted so as not to disrupt AVREOS’ operations; and limited to systems and records relating to the processing of that Subscriber’s Customer Data.

11.4 Auditor. The audit may be conducted by the Subscriber or by an independent auditor appointed by the Subscriber, provided the auditor is not a competitor of AVREOS and enters into a confidentiality undertaking with AVREOS before the audit begins.

11.5 Exclusions. AVREOS is not required to disclose information relating to other Subscribers, to provide access to shared infrastructure in a manner that would compromise the security of other Subscribers, or to disclose commercially sensitive proprietary information not relevant to the processing of Customer Data.

11.6 Costs. Each party bears its own costs of an audit, save that where an audit reveals a material breach of this DPA by AVREOS, AVREOS shall reimburse the Subscriber’s reasonable costs of that audit.

11.7 Findings. AVREOS shall remedy any material non-compliance identified by an audit within a reasonable period agreed between the parties.

12. Return and deletion

12.1 During the Subscription. The Subscriber may export Customer Data at any time using the export functions within PREOS.

12.2 On termination. Customer Data is retained and deleted in accordance with the PREOS Data Retention & Deletion Policy, which provides a 90-day period comprising a 30-day grace period during which the Subscriber retains read-only access and full export, followed by a 60-day suspension during which export is provided on request.

12.3 Deletion. AVREOS shall delete Customer Data from production systems within 30 days after the end of the 90-day period, or earlier on the Subscriber’s written request.

12.4 Backups. Customer Data deleted from production remains within backup snapshots until those snapshots expire on their normal rotation, being within 35 days of production deletion. During that period the data is not accessible through the Platform, is not processed, and remains subject to the security measures in this DPA.

12.5 Certification of deletion. On written request made within 30 days after deletion, AVREOS shall provide the Subscriber with written certification of deletion, stating the date of production deletion and the date on which the final backup containing that data expired.

12.6 Retention required by law. AVREOS may retain Customer Data to the extent required by applicable law, or where necessary for the establishment, exercise or defence of legal claims, and shall inform the Subscriber which of these applies. Data so retained shall be processed only for that purpose and shall remain subject to this DPA.

13. Liability

The limitations and exclusions of liability in the PREOS Terms of Service apply to this DPA. Nothing in this DPA excludes or limits either party’s liability where such exclusion or limitation is not permitted by applicable law, including liability for a penalty imposed under the DPDP Act arising from that party’s own act or omission.

14. Term

This DPA takes effect on the effective date of the Subscription and continues for so long as AVREOS processes Customer Data. Clauses 5, 10, 12 and 13 survive termination.

15. Governing law

Subject to mandatory local law that cannot lawfully be excluded, this DPA is governed by the laws of the Republic of India. Disputes are subject to the dispute resolution provisions of the PREOS Terms of Service.

16. Changes

AVREOS may update this DPA to reflect changes in law, regulation or the Services. Where a change materially reduces the protections afforded to the Subscriber, AVREOS shall give at least 30 days’ notice before the change takes effect, and the Subscriber may terminate the affected Services within that period if it does not accept the change.

17. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall,

KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

Questions about this document? Contact support@preos.tech.

1. Availability commitment

AVREOS commits to a Monthly Uptime Percentage of at least 99.5% for the PREOS production environment.

AVREOS operates to an internal target of 99.9%. The 99.5% figure is the level at which service credits become payable, and is set deliberately below the internal target so that the commitment is one AVREOS can meet consistently rather than one that looks impressive on paper.

2. How availability is measured

2.1 Definition. Monthly Uptime Percentage means: total minutes in the calendar month, less Unavailable Minutes, divided by total minutes in the month, expressed as a percentage.

2.2 Unavailable Minutes. A minute is Unavailable if all attempts by the Subscriber to authenticate to, or retrieve data from, the production environment fail during that minute, and the failure is attributable to AVREOS or its infrastructure providers.

2.3 Exclusions. The following are not Unavailable Minutes:

• scheduled maintenance notified in accordance with section 3;
• emergency maintenance reasonably necessary to preserve security or data integrity;
• failures of the Subscriber’s own systems, devices, network or internet connectivity;
• the Subscriber’s breach of the Terms of Service or Acceptable Use Policy;
• suspension properly effected under the Terms of Service;
• failures of a third-party service the Subscriber has elected to integrate; and
• force majeure events under section 7.

3. Maintenance

3.1 Scheduled maintenance. AVREOS will give at least 48 hours’ notice of scheduled maintenance, by email to account administrators and by notice in the Platform. Scheduled maintenance will ordinarily be performed between 23:00 and 05:00 IST.

3.2 Limit. Scheduled maintenance will not exceed 8 hours in any calendar month.

3.3 Emergency maintenance. Where maintenance is necessary to address a security vulnerability or preserve data integrity, AVREOS may act without notice and will inform Subscribers as soon as practicable.

4. Service credits

4.1 Entitlement. Where Monthly Uptime Percentage falls below 99.5%, the Subscriber is entitled on request to a service credit calculated as a percentage of the Subscription Fees for the affected month:

4.2 Claiming. The Subscriber must request the credit in writing to support@preos.tech within 30 days after the end of the affected month, identifying the dates and approximate times of unavailability. AVREOS will respond within 30 days.

4.3 Form. Credits are applied to the next invoice, or refunded within 30 days where no further invoice will be issued. Credits in any month shall not exceed 50% of that month’s Subscription Fees.

4.4 Sole remedy. Service credits are the Subscriber’s sole and exclusive remedy for failure to meet the availability commitment. This does not limit the Subscriber’s right to terminate for material breach under the Terms of Service.

5. Chronic failure

If Monthly Uptime Percentage falls below 99.0% in any three consecutive months, or below 95.0% in any single month, the Subscriber may terminate the Subscription on 30 days’ written notice given within 30 days of the end of the final affected month, and AVREOS shall refund prepaid fees for the unexpired term.

6. Monitoring and reporting

Database performance and availability are monitored through the production database monitoring service.

AVREOS will notify account administrators of any Priority 1 incident affecting the production environment, and will provide a written summary of cause and remediation within 5 business days of resolution on request.

Response times to reported incidents are set out in the PREOS Support Policy. An emergency telephone line is available to Subscribers 24 hours a day for total outages and confirmed security incidents.

7. Force majeure

AVREOS is not in breach of this SLA where unavailability results from an event beyond its reasonable control, including natural disaster, war, civil unrest, government action, failure of public telecommunications, or a widespread failure of infrastructure operated by a third party. AVREOS will use reasonable efforts to restore service and will keep Subscribers informed.

8. Enterprise arrangements

Subscribers requiring a higher availability commitment, a shorter recovery objective, dedicated infrastructure or a documented disaster recovery test schedule may agree enterprise-specific terms with AVREOS in writing.

9. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Office Space No. 1204, Plot No. 52, Sy. No. 1050P,

Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall,

KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

AVREOS Technologies Private Limited. CIN U74102TS2025PTC205165.

Office Space No. 1204, Plot No. 52, Sy. No. 1050P, Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall, KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

Questions about this document? Contact support@preos.tech.

1. Scope

Support covers the operation of PREOS as documented: access and authentication, defects, configuration questions, and guidance on standard functionality.

Support does not cover the Subscriber’s own hardware, network or third-party software; data entry or data cleansing; custom development; or issues arising from use contrary to the Documentation.

2. Monitoring

Database performance and availability are monitored through the production database monitoring service. Application and server availability are monitored through the hosting provider.

Monitoring is distinct from human response. Section 4 sets out when a person will respond to a reported issue.

3. How to raise a request

The emergency telephone number is provided to each Subscriber at onboarding. It is for genuine emergencies — the Platform being wholly unavailable, or a confirmed security incident. Routine issues raised by telephone will be redirected to email.

Support hours are 09:30 to 18:30 IST, Monday to Saturday, excluding public holidays in Telangana.

Please include the Organization Account name, the affected user, a description of the issue, steps to reproduce it, and any error message.

4. Priority levels and response times

4.1 Response, not resolution. The times above are for first response by a person. They are not resolution times. Resolution depends on the nature of the issue; AVREOS will provide an estimate once the issue is diagnosed.

4.2 Updates during a P1. While a P1 incident is open, AVREOS will provide an update at least every 2 hours during support hours, and at least every 4 hours outside them, until the Platform is restored.

4.3 Resolution. AVREOS works to restore service as quickly as possible. AVREOS does not commit to a fixed resolution time, because the time required depends on the cause, which is not known in advance.

4.4 Priority assignment. AVREOS assigns priority using the definitions above. A Subscriber that disagrees may ask for the priority to be reviewed, and AVREOS will respond within one business day.

5. Escalation

If a Subscriber is not satisfied with how a request is being handled, it may escalate by replying to the ticket with "Escalation" in the subject line. Escalated tickets are reviewed by the technical co-founder within one business day.

A P1 incident is escalated automatically and does not require the Subscriber to request it.

6. Onboarding

Onboarding is included with every Subscription and covers account setup, configuration of the Subscriber’s first project, import of existing inventory and lead data where the Subscriber provides it in a usable format, role and permission setup, and a walkthrough for the Subscriber’s team.

Onboarding sessions are scheduled during support hours by agreement. Additional training beyond initial onboarding may be arranged separately.

7. Subscriber responsibilities

• Provide the information necessary to reproduce and diagnose an issue.
• Nominate up to three contacts authorised to raise support requests.
• Apply configuration changes and guidance AVREOS recommends.
• Ensure Authorized Users have completed onboarding before raising usage questions.
• Use the emergency line only for genuine emergencies, so that it remains effective for those who need it.

8. Where response times do not apply

The response times in section 4 do not apply to features identified as beta or other experimental/preview features, to requests raised by anyone other than a nominated contact, or while an account is suspended for non-payment.

9. Enterprise arrangements

Subscribers requiring shorter response times, extended support hours, or dedicated support arrangements may agree enterprise-specific terms with AVREOS in writing.

10. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Office Space No. 1204, Plot No. 52, Sy. No. 1050P,

Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall,

KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

AVREOS Technologies Private Limited. CIN U74102TS2025PTC205165.

Office Space No. 1204, Plot No. 52, Sy. No. 1050P, Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall, KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

Questions about this document? Contact support@preos.tech.

1. How to send a notice

Send a takedown notice to legal@avreos.in. If applicable law requires or permits postal delivery, a notice may also be sent to AVREOS's registered office address set out in the Contact section.

A notice must include:

• your name, address, telephone number and email address;
• identification of the work you say has been infringed, and evidence that you own or are authorised to act for the owner of the rights in it;
• identification of the material you say is infringing, and enough detail to locate it — a URL, a share link, or the name of the Subscriber’s account and the item;
• a statement that you believe in good faith that the use is not authorised by the rights owner, its agent, or the law;
• a statement that the information in the notice is accurate; and
• your physical or electronic signature.

An incomplete notice may delay action. If we cannot identify the material from your notice, we will tell you what is missing.

2. What we do

2.1 Acknowledgement. AVREOS will aim to acknowledge a complete notice within 24 hours of receipt.

2.2 Action. Where the notice is complete and the complaint appears well-founded, AVREOS will remove or disable access to the material within 36 hours where reasonably practicable and where that timeframe is consistent with applicable law and the circumstances of the complaint. Where applicable law requires a different timeframe or process, that requirement prevails.

2.3 Notification to the Subscriber. We will inform the Subscriber whose account held the material that it has been removed, and provide a copy of the notice, unless we are prohibited from doing so.

2.4 Records. We retain a record of every notice and the action taken for the period required by law.

3. Counter-notice

A Subscriber who believes material was removed in error may send a counter-notice to legal@avreos.in containing:

• the Subscriber’s name, address, telephone number and email address;
• identification of the material removed and where it appeared;
• a statement that the Subscriber believes in good faith that the material was removed as a result of mistake or misidentification, with the reasons;
• any statement concerning jurisdiction or proceedings required by applicable law, if relevant to the complaint and remedy;
• the Subscriber’s signature.

On receiving a valid counter-notice we will forward it to the complainant. If the complainant does not notify us within 10 business days that it has commenced legal proceedings, we may restore the material.

4. Repeat infringers

AVREOS may suspend or terminate the account of a Subscriber that is the subject of repeated well-founded infringement notices. What counts as repeated depends on the circumstances, including the seriousness of the infringement and the Subscriber’s response.

5. Misuse of this process

A person who knowingly makes a materially false statement in a notice or counter-notice may be liable for the resulting loss. AVREOS may decline to act on notices from a person who has repeatedly submitted unfounded complaints.

6. Content AVREOS owns

5A. Subscriber responsibility for uploaded content

The Subscriber represents and warrants that it has the necessary rights, licences, permissions or other lawful authority to upload, store, reproduce, display, distribute or otherwise use content through PREOS. The Subscriber is responsible for ensuring that its use of third-party content does not infringe copyright, trademark, privacy, publicity or other applicable rights.

5B. Subscriber content and limited platform rights

Subscriber-uploaded content remains the property of the Subscriber or its applicable licensors. Merely uploading or storing content through PREOS does not transfer ownership of that content to AVREOS. The Subscriber grants AVREOS the limited rights necessary to host, store, reproduce, transmit, display, process, secure, back up and otherwise use the content solely to provide, maintain, secure and improve the PREOS service, and as otherwise permitted by the Terms of Service or applicable law.

The PREOS software, interface, documentation and brand are owned by AVREOS. Use of them is governed by the Terms of Service and the Trademark Guidelines. This Policy concerns content uploaded by Subscribers, not the Platform itself.

7. Other unlawful content

Complaints about content that is unlawful for reasons other than copyright, including defamatory, obscene, fraudulent, threatening or otherwise prohibited content, should also be sent to legal@avreos.in. AVREOS will handle such complaints under applicable law and its platform rules.

8. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall,

KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

Questions about this document? Contact support@preos.tech.

1. Infrastructure

1.1 Hosting and residency

The PREOS application runs on managed cloud infrastructure in Hyderabad, India. The production database is a MongoDB Atlas M10 dedicated cluster on AWS infrastructure in the Hyderabad region (ap-south-2). Files uploaded by Subscribers are stored through separate object-storage infrastructure, while MongoDB stores related metadata and file references.

The current sub-processor list, with the processing location for each, is maintained in the current PREOS Subprocessor List.

1.2 Network

• Transport. All traffic between client devices and PREOS uses TLS 1.2 or higher. Plain HTTP is redirected to HTTPS.
• Database. The database is not exposed to the public internet. Access is restricted by IP allowlist and authenticated credentials.
• Administration. Administrative interfaces require authenticated access and are not publicly linked.

2. Encryption

3. Access control

3.1 Within a Subscriber’s account

Access to Customer Data is governed by role-based access control. Each Authorized User holds a role, and the role determines what they can see and do.

PREOS enforces separation of authority in the sales workflow. Holding, releasing, pricing and discount approval are restricted to the Sales Manager role. A Sales Executive may view inventory and may mark a unit reserved or booked when a buyer commits, but cannot return a unit to the market or change its price.

Organization Administrators assign roles, review permissions and revoke access when a user leaves.

3.2 Authentication

• Unique user identity and password, subject to minimum complexity requirements.
• Sessions expire on inactivity and on explicit sign-out.
• Unique user identity and password, subject to minimum complexity requirements. • Sessions expire on inactivity and on explicit sign-out. • Two-factor authentication (2FA) is supported for PREOS user accounts. Where single sign-on is not enabled, users authenticate through the supported PREOS authentication flow.

3.3 AVREOS personnel

Access to production systems is limited to personnel who require it to operate and support the Platform. At AVREOS’ current size that is a small, named group. Access is granted on the principle of least privilege and removed when no longer required.

AVREOS does not access Customer Data except to provide support at the Subscriber’s request, to investigate a security incident, to maintain the Platform, or where required by law.

4. AI security

AI features process Customer Data only to generate the requested output. AVREOS does not use Customer Data to train any model and uses only the paid tiers of its AI providers, under terms which provide that submitted content is not used to train their models.

The PREOS AI assistant operates within a governance boundary enforced in the product: it writes only to suggestion, score, reason and draft fields, and cannot change inventory status, prices, lead ownership or approvals, or send customer communications. The AI Usage Policy sets this out in full.

5. Backup and recovery

6. Monitoring, logging and audit

• Monitoring. Database performance and availability are monitored through MongoDB Atlas monitoring. Application and server availability are monitored through the hosting provider.
• Log retention. Application and access logs are retained for 180 days and held within India, as required by the CERT-In Directions dated 28 April 2022.
• Audit trail. Changes to inventory status, price, lead ownership and approvals are recorded against the user who made them, and are available to Organization Administrators.
• Time synchronisation. System clocks are synchronised to Network Time Protocol servers, as required by the CERT-In Directions.

7. Incident response

7.1 Process

AVREOS maintains an incident response process covering detection, triage, containment, eradication, recovery and post-incident review. The escalation path is short and defined: any person noticing a suspected incident escalates immediately to the technical co-founder, who owns the response.

7.2 Notification

Where AVREOS acts as Data Processor, the Subscriber is the Data Fiduciary and notifies the Board and affected individuals. AVREOS provides the information necessary for it to do so.

8. Vulnerability management

• Dependencies. Dependencies are monitored for known vulnerabilities and updated regularly. Critical vulnerabilities are prioritised.
• Patching. Operating system and platform patches are applied through the managed hosting provider.
• Penetration testing. Independent penetration testing is planned and has not yet been performed. A summary will be published when it has.

8.1 Responsible disclosure

Reports of suspected vulnerabilities should be sent to legal@avreos.in with enough detail to reproduce the issue.

AVREOS will acknowledge within 3 business days and provide an assessment within 10 business days. AVREOS will not pursue legal action against a researcher who reports in good faith, does not access or modify data belonging to others, does not degrade the service, and allows a reasonable period to remediate before disclosure.

9. Secure development

• Source control. Source code is held in a private repository with access limited to authorised developers.
• Change review. Changes are reviewed before deployment to production.
• Environments. Development and production environments are separated. Production Customer Data is not used in development or testing.
• Secure coding. The Platform is developed against common application security risks, including injection, broken access control and insecure direct object references.

10. Personnel

All AVREOS personnel and contractors are bound by written confidentiality obligations covering Customer Data. Access to production is granted only where the role requires it and is revoked on departure.

AVREOS does not currently operate a formal security awareness training programme. This is planned as the team grows.

11. Sub-processor management

The current sub-processors, the function each performs and the location of processing are maintained in the current PREOS Subprocessor List.

AVREOS gives at least 30 days’ notice before appointing or replacing a sub-processor that processes Customer Data. A Subscriber may object on reasonable, documented data protection grounds within that period, and the parties will discuss the objection in good faith.

12. Certification position

AVREOS does not hold ISO 27001 certification, a SOC 2 attestation, or any other independent security certification.

AVREOS states this plainly. A prospective customer is better served by an accurate description of the controls in place than by an implication of certifications not obtained. AVREOS will evaluate formal certification as the Platform and customer base mature, and will publish any attestation obtained.

13. Audit and assurance

Subscribers may request this Policy, the sub-processor list and responses to a reasonable security questionnaire, once in any 12-month period. Audit rights, including the circumstances in which an on-site audit may be conducted, are set out in clause 11 of the Data Processing Addendum.

14. Subscriber responsibilities

Security is shared. The Subscriber is responsible for:

• managing its Organization Account, assigning roles, and revoking access promptly when a user leaves;
• keeping credentials confidential and ensuring accounts are not shared;
• ensuring Customer Data was collected lawfully and that required notices and consents have been obtained;
• securing its own devices, networks and email accounts; and
• reporting any suspected compromise of its account without delay.

15. Changes

AVREOS may update this Policy to reflect changes in infrastructure, controls or regulation. Where a change materially reduces the protections described, AVREOS will give at least 30 days’ notice.

16. Contact

AVREOS Technologies Private Limited

CIN: U74102TS2025PTC205165

Manjeera Trinity Corporate, JNTU–HITECH Road, Near Lulu Mall,

KPHB Phase 3, Kukatpally, Hyderabad, Telangana – 500072, India

AVREOS Technologies Private Limited. CIN U74102TS2025PTC205165.

Questions about this document? Contact support@preos.tech.