A1 Definitions

In these Terms, the following words have the meanings set out below:

A2 The CromaPages Group of Products

CromaPages operates a suite of software products through the Platform, each marketed under a distinct brand name but provided by the same legal entity — CromaPages — under these Terms. When you register for any Product, regardless of which brand website you arrived from, you are entering into this Agreement with CromaPages. The signup interface at app.cromapages.com will display the relevant product brand and the text "by CromaPages" to confirm the operating entity.

If you use more than one CromaPages Product, the same Agreement governs all Products you use. The relevant Product Schedule applies in addition to Part A for each Product.

A3 Account Registration and Eligibility

• aTo use any CromaPages Product you must create an account at app.cromapages.com and provide accurate, complete, and current information including your name or business name, email address, and billing details.
• bYou must be at least 18 years of age to subscribe. By registering, you confirm that you meet this requirement.
• cIf you are registering on behalf of a company or other legal entity, you represent that you have authority to bind that entity to this Agreement. In that case, "you" and "Subscriber" refers to that entity.
• dYou are responsible for maintaining the security of your account credentials and for all activity that occurs under your account. Notify CromaPages immediately at support@cromapages.com if you suspect any unauthorised access.
• eCromaPages reserves the right to refuse registration or cancel any account where it suspects fraudulent activity, violation of these Terms, or misuse of the Platform.
• fAccount credentials are personal and may not be shared between multiple individuals unless you are on a plan that explicitly permits multiple named users.

A4 Subscriptions, Billing and Payment

• aAll CromaPages Products are available on a paid subscription basis only. CromaPages does not offer a permanent free plan for any Product.
• bSubscription Fees are set out on the pricing page for the relevant Product at the time of subscription. By completing checkout, you agree to pay the stated Subscription Fee for the selected plan and billing cycle.
• cPayments are processed by Stripe on behalf of CromaPages. By subscribing, you authorise CromaPages (via Stripe) to charge your nominated payment method on the agreed billing cycle — monthly or annual — until you cancel.
• dAll fees are stated exclusive of applicable taxes. Where GST, VAT, or any other tax applies, it will be added and displayed at checkout.
• eSubscription Fees are non-refundable except as required by applicable law. Cancellation takes effect at the end of the current billing period. No pro-rata refunds are issued for partial periods.
• fIf a payment fails, CromaPages will notify you by email. You will have 7 days to update your payment method before your account may be suspended. If payment is not received within 14 days of suspension, CromaPages may terminate your subscription.
• gCromaPages reserves the right to change Subscription Fees with 30 days' written notice to your registered email address. Continued use after the effective date constitutes acceptance of the new pricing.
• hFor Subscribers based in India, Stripe India Private Limited processes domestic payments under applicable Reserve Bank of India regulations. International inward remittance documentation (FIRA, eBRC) for GST and regulatory compliance is the Subscriber's responsibility.

A5 Free Trial and Promotional Periods

• aCromaPages may offer a limited-period free trial or promotional access to new Subscribers. The duration and conditions of any such trial will be communicated at the time of offer.
• bAll provisions of these Terms apply during any trial or promotional period, including acceptable use obligations and intellectual property clauses.
• cAt the end of a trial period, continued access requires selection of a paid subscription plan. CromaPages will notify the Subscriber before any charge is applied.
• dPromotional periods are at the absolute discretion of CromaPages. A Subscriber is not entitled to a promotional period as of right, and receipt of a promotional period for one Product does not entitle the Subscriber to a promotional period for any other Product.
• eCromaPages reserves the right to withdraw, shorten, or modify any trial or promotional offer at any time without liability.

A6 Acceptable Use

You may use CromaPages Products only for lawful purposes and in accordance with this Agreement. You must not use any Product to:

• violate any applicable law, regulation, or third-party right — including intellectual property rights, privacy rights, or data protection law;
• collect, process, or store personal data without a lawful basis and without providing appropriate notice to those individuals;
• upload, transmit, publish, or display Content that is unlawful, defamatory, obscene, harassing, fraudulent, or otherwise objectionable;
• attempt to gain unauthorised access to the Platform, other Subscribers' accounts, or any related systems or networks;
• send unsolicited communications (spam), conduct phishing, or distribute malware;
• impersonate any person or entity, or misrepresent your affiliation with any person or entity;
• use automated tools to access the Platform in a manner that creates disproportionate load or could disrupt service for other Subscribers;
• resell, sub-license, or provide access to any CromaPages Product to a third party without CromaPages' express written consent;
• use the Platform in any way that could bring CromaPages into disrepute or create legal liability for CromaPages.

CromaPages reserves the right to investigate suspected violations and, where found or reasonably suspected, to suspend or terminate access without notice. Additional product-specific acceptable use provisions are set out in each Product Schedule.

A7 Intellectual Property

• aCromaPages owns and retains all intellectual property rights in the Platform, the Products, their design, software, source code, trade marks, and all associated documentation. Nothing in this Agreement transfers any ownership of CromaPages' intellectual property to the Subscriber.
• bCromaPages grants the Subscriber a limited, non-exclusive, non-transferable, revocable licence to access and use the relevant Product(s) solely for their own internal business or professional purposes, for the duration of their active subscription.
• cThe Subscriber retains all intellectual property rights in their Content. By uploading Content to the Platform, the Subscriber grants CromaPages a limited, non-exclusive, royalty-free licence to host, store, process, and deliver that Content solely for the purpose of providing the Services.
• dCromaPages will not use the Subscriber's Content for advertising, for training AI models, for commercial exploitation, or for any purpose other than delivering the Services.
• eThe Subscriber warrants that they own or have obtained all necessary rights to upload and use any Content on the Platform, and that such Content does not infringe the rights of any third party.
• fWhere the Subscriber provides feedback or suggestions about CromaPages Products, CromaPages may use such feedback freely without obligation, restriction, or payment.

A8 Data Protection and Privacy

• aCromaPages processes personal data in accordance with its Privacy Policy, available at cromapages.com/privacy/. The Privacy Policy is incorporated into this Agreement by reference.
• bCromaPages acts as a Data Controller in respect of personal data relating to Subscriber accounts, billing, and usage of the Platform.
• cCromaPages acts as a Data Processor in respect of personal data that the Subscriber's End Users provide through Product features. In each case, the Subscriber is the Data Controller for that End User data.
• dWhere the Subscriber is a Data Controller for End User data processed through the Platform, the Subscriber is responsible for: (i) having a valid lawful basis for that data collection; (ii) providing End Users with appropriate privacy notices; and (iii) handling End User rights requests in relation to data the Subscriber controls.
• eSubscribers who require a Data Processing Agreement (DPA) for GDPR or other regulatory compliance may request one by contacting support@cromapages.com.
• fAll data is hosted on infrastructure provided by Amazon Web Services (AWS) and Microsoft Azure. CromaPages will notify Subscribers of any material change to data storage locations with no less than 30 days' notice.
• gIn the event of a personal data breach affecting Subscriber data, CromaPages will notify the Subscriber without undue delay and within 72 hours of becoming aware of the breach.

A9 Confidentiality

• aEach party agrees to keep the other party's Confidential Information confidential and not to disclose it to any third party without prior written consent, except as required by law.
• bEach party may disclose Confidential Information to its employees, contractors, or advisors who have a legitimate need to know and are bound by equivalent confidentiality obligations.
• cConfidential Information does not include information that: (i) is or becomes publicly available other than through breach of this Agreement; (ii) was already known to the receiving party at the time of disclosure; (iii) is independently developed without use of the Confidential Information; or (iv) is required to be disclosed by law or court order.
• dCromaPages treats all Subscriber Content and account information as confidential. CromaPages personnel who access Subscriber data do so only as strictly necessary for providing the Services.

A10 Security

• aCromaPages implements and maintains commercially reasonable technical and organisational security measures to protect the Platform and Subscriber data, including encryption of data at rest and in transit using industry-standard protocols.
• bThe Subscriber is responsible for maintaining the security of their account credentials and for promptly notifying CromaPages of any suspected security incident.
• cCromaPages does not guarantee that the Platform will be immune from all security threats. In the event of a security incident affecting Subscriber data, CromaPages will take reasonable steps to mitigate the impact and will notify affected Subscribers in accordance with Clause A8(g).

A11 Third-Party Services and Integrations

• aCromaPages Products may integrate with third-party services (including Stripe for payment processing and third-party CRM or storage platforms). Such services are governed by their own terms and privacy policies, for which CromaPages takes no responsibility.
• bThe Subscriber's use of any third-party integration is at the Subscriber's own risk. CromaPages does not warrant the availability, accuracy, or fitness for purpose of any third-party service.
• cCromaPages' key subprocessors — third-party services that process personal data on CromaPages' behalf — are listed in the Privacy Policy and in the Data Processing Agreement available on request.

A12 Warranties and Disclaimers

• aCromaPages warrants that it will provide the Services with reasonable care and skill and in accordance with this Agreement.
• bCromaPages does not warrant that: (i) the Platform will be uninterrupted, error-free, or available at all times; (ii) the Platform will meet all of the Subscriber's requirements; or (iii) any defects will be corrected within any particular timeframe.
• cExcept as expressly stated in this Agreement, all implied warranties, conditions, and terms (including any implied warranty of merchantability, fitness for a particular purpose, or non-infringement) are excluded to the fullest extent permitted by applicable law.
• dThe Subscriber warrants that: (i) it has authority to enter into this Agreement; (ii) its Content does not infringe any third-party rights; (iii) its use of the Platform will comply with all applicable laws; and (iv) it will comply with all applicable data protection obligations in connection with its use of the Platform.

A13 Limitation of Liability

• aTo the fullest extent permitted by applicable law, CromaPages shall not be liable for any: (i) indirect, incidental, or consequential losses; (ii) loss of profits, revenue, or business; (iii) loss of data or goodwill; or (iv) losses arising from reliance on the Platform — whether or not CromaPages has been advised of the possibility of such damages.
• bCromaPages' total aggregate liability to the Subscriber — whether in contract, tort, or otherwise — shall not exceed the total Subscription Fees paid by the Subscriber to CromaPages in the 12 months immediately preceding the event giving rise to the claim.
• cNothing in these Terms limits or excludes CromaPages' liability for: (i) death or personal injury caused by CromaPages' negligence; (ii) fraud or fraudulent misrepresentation; or (iii) any liability that cannot be excluded by law.
• dThe Subscriber acknowledges that the Subscription Fees reflect the allocation of risk set out in this Agreement.

A14 Indemnification

The Subscriber agrees to indemnify, defend, and hold harmless CromaPages, its proprietor, employees, contractors, and agents from and against any claims, liabilities, damages, costs, and expenses (including reasonable legal fees) arising from: (i) the Subscriber's breach of this Agreement; (ii) the Subscriber's Content infringing any third-party intellectual property or privacy rights; (iii) the Subscriber's failure to comply with applicable data protection laws in respect of End User data; or (iv) the Subscriber's misuse of the Platform.

A15 Term and Termination

• aThis Agreement commences on the date the Subscriber creates an account and pays their first Subscription Fee (or commences a trial period) and continues until terminated in accordance with this clause.
• bThe Subscriber may cancel their subscription at any time through their account dashboard. Cancellation takes effect at the end of the current billing period. No refund is payable for the remaining portion of the billing period after cancellation.
• cCromaPages may terminate this Agreement with 30 days' written notice to the Subscriber's registered email address, for any reason.
• dCromaPages may terminate or suspend this Agreement immediately, without notice or refund, where: (i) the Subscriber is in material breach and fails to remedy it within 7 days of written notice; (ii) the Subscriber fails to pay Subscription Fees; (iii) the Subscriber uses the Platform in a manner that creates immediate legal risk for CromaPages; or (iv) CromaPages is required to do so by applicable law.
• eOn termination for any reason, the Subscriber's access to the Platform and all Products will cease, and CromaPages' obligations to provide the Services will end.

A16 Data Deletion on Termination

• aFollowing termination or cancellation, CromaPages will retain the Subscriber's account data and Content for 30 days from the date of actual termination (the "Retention Period"). During the Retention Period, the Subscriber may contact support@cromapages.com to request an export of their data.
• bAt the end of the Retention Period, CromaPages will permanently delete the Subscriber's account data and Content from active systems. Payment records and transaction history are retained for 7 years in accordance with Indian accounting law.
• cCromaPages is not responsible for any loss of data that the Subscriber fails to export before the end of the Retention Period.
• dEnd User data processed through the Platform will be deleted in accordance with the above schedule unless applicable law requires earlier or later deletion.

A17 Changes to These Terms

• aCromaPages may update these Terms at any time. For material changes (such as changes to pricing, data handling, or liability), CromaPages will give at least 30 days' written notice by email before the change takes effect.
• bFor non-material changes (such as clarifications or corrections), CromaPages will update the Terms and display the revised effective date. Continued use after the effective date constitutes acceptance.
• cIf a Subscriber does not agree to a material change, they may cancel their subscription within the 30-day notice period and receive a pro-rata refund of any prepaid fees for the period after the change would have taken effect.

A18 Governing Law and Dispute Resolution

• aThis Agreement is governed by and construed in accordance with the laws of the Republic of India.
• bAny dispute arising out of or in connection with this Agreement shall be subject to the exclusive jurisdiction of the courts of Chennai, Tamil Nadu, India.
• cBefore commencing legal proceedings, the parties agree to attempt resolution in good faith through direct negotiation for 30 days from written notice of the dispute.
• dNothing in this clause prevents either party from seeking urgent injunctive or interim relief from a competent court to prevent irreparable harm.

A19 General Provisions

• aEntire Agreement. This Agreement (including all Product Schedules) constitutes the entire agreement between the parties and supersedes all prior agreements, representations, and understandings.
• bSeverability. If any provision is found invalid or unenforceable, it shall be modified to the minimum extent necessary to make it valid and enforceable. The remaining provisions continue in full force.
• cWaiver. No failure or delay by either party to exercise any right shall constitute a waiver of that right.
• dAssignment. The Subscriber may not assign any rights or obligations without CromaPages' prior written consent. CromaPages may assign this Agreement in connection with a merger, acquisition, or sale of substantially all of its assets, with 30 days' notice.
• eForce Majeure. Neither party will be liable for failure or delay caused by Force Majeure. The affected party must notify the other promptly and use reasonable efforts to resume performance.
• fRelationship. The parties are independent contractors. Nothing in this Agreement creates a partnership, joint venture, agency, or employment relationship.
• gNotices. All formal notices must be in writing and sent by email. Notices to CromaPages must be sent to support@cromapages.com. Notices to the Subscriber will be sent to the registered email address on the account and are effective the next business day after sending.

A20 Contact

For any questions, concerns, or notices relating to this Agreement, please contact:

S1.1 Scope

GatherMonk enables Subscribers to collect documents and information from named third parties (their clients) via the Platform, to automate follow-up communications, to review and approve or reject submitted items, and to provide an authenticated portal through which clients can access and submit their requests.

S1.2 The Two-Party Data Structure

GatherMonk operates with a clear separation of data roles:

• The Subscriber sends requests to named Clients and is the Data Controller for those Clients' personal data.
• Clients ("Guest Users") who receive a request link or log into the Client Portal are not Subscribers. They do not have a CromaPages account. They interact with the Platform solely as recipients of a Subscriber-initiated request.
• CromaPages acts as a Data Processor for all personal data that Clients submit through GatherMonk request links, Client Portal logins, or form submissions.
• The Subscriber is responsible for ensuring that their Clients have been informed, in accordance with applicable data protection law, that their information will be collected and processed via GatherMonk (operated by CromaPages).

S1.3 Subscriber Obligations — GatherMonk

In addition to the general acceptable use provisions in Clause A6, Subscribers using GatherMonk must:

• only send document requests to individuals for whom they have a legitimate business relationship and a lawful basis for data collection;
• not use GatherMonk to collect personal data for purposes that are disproportionate, unlawful, or undisclosed to the recipient;
• not use automated reminder sequences in a manner that constitutes harassment or causes distress to recipients;
• ensure that document requests sent to individuals in the EU or UK include information sufficient to satisfy the recipients' GDPR Article 13 rights (right to be informed);
• maintain appropriate records of their Clients' consent or other lawful basis for personal data collected through GatherMonk.

S1.4 Client Portal

• aCromaPages processes authentication events on the Client Portal on behalf of the Subscriber. The Subscriber is the Data Controller for authentication data collected during Client Portal access.
• bThe Subscriber is responsible for ensuring that Clients who access the Portal are aware that their login activity is logged by CromaPages.
• cClient Portal branding materials (logo, colours, custom subdomain) remain the intellectual property of the Subscriber.

S1.5 Approval and Rejection Workflow

• aOnce approved by the Subscriber, items are permanently locked on the Platform. CromaPages will not permit modification of approved items by the Client.
• bRejection comments left by the Subscriber are stored on the Platform and delivered to the Client as part of the review notification. The Subscriber is responsible for the content of all comments they make.
• cA complete audit log of all approvals, rejections, and comments is maintained by CromaPages for the duration of the subscription and the 30-day retention period thereafter.

S1.6 Embedded Widgets

Where a Subscriber embeds a GatherMonk form or portal widget on their own or a third-party website, the Subscriber is responsible for ensuring that website's privacy policy and cookie notice discloses the use of the embedded GatherMonk functionality and any associated data collection. CromaPages is not responsible for the Subscriber's website's compliance.

S1.7 Data on Cancellation — GatherMonk

On cancellation of a GatherMonk subscription, all request data, submitted documents, Client Portal data, and audit logs will be retained for 30 days then permanently deleted in accordance with Clause A16.

S2.1 Scope

VeeSpaces enables Subscribers to create, host, and share virtual tours using content they upload to the Platform, and to publish those tours to their audiences via direct link, embed code, or password-protected access. Subscribers may also collect visitor analytics and receive lead submissions from viewers through tools embedded within tours.

S2.2 Content Ownership and Licence

• aThe Subscriber retains full ownership of all Content they upload to VeeSpaces.
• bBy uploading Content, the Subscriber grants CromaPages a limited, non-exclusive, royalty-free licence to host, store, and deliver that Content solely for the purpose of providing the VeeSpaces service. This licence terminates upon deletion of the Content or cancellation of the account.
• cCromaPages will not use the Subscriber's Content for advertising, AI model training, or any commercial purpose beyond delivering the Services.
• dThe Subscriber warrants that they own or have the lawful right to use all Content they upload, that such Content does not infringe any third-party rights, and that no Content depicts any person or privately owned space without the necessary consent.

S2.3 Tour Viewer Data

CromaPages collects visitor analytics data (including IP address, approximate geographic location, device type, and engagement data) on behalf of the Subscriber when End Users view a published tour. CromaPages acts as Data Processor; the Subscriber is the Data Controller for this data. The Subscriber is responsible for ensuring their audiences are appropriately informed of such collection. The specific categories of data collected are described in the Privacy Policy at cromapages.com/privacy/.

S2.4 Password-Protected Tours

• aPassword-protected tours are authenticated by CromaPages on the Platform. CromaPages processes authentication events on behalf of the Subscriber, who is the Data Controller for this data. Authentication logs are retained for security purposes and deleted in accordance with the retention schedule in the Privacy Policy.
• bThe Subscriber must not configure passwords that are so simple or widely shared as to fail to protect restricted tour content.
• cThe Subscriber is responsible for ensuring viewers of password-protected tours are informed that their access is logged.

S2.5 Lead Capture Forms Within Tours

• aWhen a viewer submits a lead capture form embedded within a VeeSpaces tour, the submitted data passes through CromaPages' servers before being delivered to the Subscriber. CromaPages acts as a Data Processor; the Subscriber is the Data Controller.
• bThe Subscriber is responsible for: (i) providing form respondents with clear notice of what data is collected and why; (ii) having a lawful basis for that data collection; and (iii) handling any data subject rights requests in relation to data collected through their forms.
• cCromaPages will not use data submitted through lead capture forms for any purpose other than delivering it to the Subscriber.

S2.6 Embedded Tours on Third-Party Websites

When a VeeSpaces tour is embedded on a third-party website using the embed code provided by VeeSpaces, CromaPages' tour player loads on that website and may collect viewer data as described in Clause S2.3. The Subscriber is responsible for ensuring that any website on which they embed a VeeSpaces tour has an appropriate cookie policy and privacy notice disclosing the use of the embedded VeeSpaces player and the data it collects.

S2.7 Subscriber Obligations — VeeSpaces

In addition to Clause A6, Subscribers using VeeSpaces must not:

• upload 360° images that depict individuals in a way that violates their privacy or dignity, or that depicts private residential spaces without the occupant's consent;
• upload Content that infringes the copyright of any third party (including photographs taken by a third-party photographer unless the Subscriber has a licence to upload them);
• use VeeSpaces to host Content that is deceptive or creates a false impression of a space (for example, using digitally altered images to misrepresent a property);
• share the password to a password-protected tour with any person who is not an intended authorised viewer.

S2.8 Data on Cancellation — VeeSpaces

On cancellation of a VeeSpaces subscription, all uploaded 360° images, tour configurations, analytics data, and lead capture form data will be retained for 30 days. The Subscriber is strongly encouraged to export any Content they require during this period. After 30 days, all data will be permanently deleted. Tours will become inaccessible to viewers immediately upon account cancellation and deletion.

S3.1 Scope

CromaPages DXP enables Subscribers to create, host, and publish interactive digital experiences — including store locators, microsites, digital guidebooks, and personalised content pages — and to collect visitor analytics and personalisation data in connection with those experiences.

S3.2 Content Ownership

• aThe Subscriber retains full ownership of all content, media, copy, and data they create or upload within CromaPages DXP.
• bCromaPages is granted a limited, non-exclusive, royalty-free licence to host, render, and deliver the Subscriber's DXP experiences to End Users, solely for the purpose of providing the Services.
• cCromaPages will not use DXP experience content for advertising, AI model training, or any purpose other than delivering the Services.

S3.3 End User Data — Visitor Analytics and Location

• aCromaPages collects visitor analytics — including IP address, approximate geographic location, device data, and engagement data — from End Users who access DXP experiences. CromaPages acts as Data Processor; the Subscriber is the Data Controller. The specific data collected is described in the Privacy Policy at cromapages.com/privacy/.
• bThe lawful basis relied upon for this processing is Legitimate Interest. The Subscriber is responsible for ensuring this basis is valid in their jurisdiction and for informing End Users accordingly.
• cWhere a DXP experience is embedded on any website, the Subscriber is responsible for ensuring that website's privacy notice and cookie policy discloses the End User data collection described in this clause.

S3.4 Personalised Content Pages and Invitation Codes

• aWhen a Subscriber creates a personalised content page for a named recipient, the Subscriber is acting as Data Controller in respect of that recipient's personal data used for personalisation.
• bCromaPages processes personalisation data as a Data Processor on the Subscriber's behalf and logs access events (including access timestamp and IP address) when a personalised URL is accessed.
• cThe Subscriber is responsible for informing named recipients, before sending a personalised invitation URL, that their name and viewing activity will be processed when they access the personalised experience.

S3.5 Store Locators — GPS Consent

• aWhere a Store Locator feature requests the End User's device-level GPS coordinates, the Subscriber is responsible for ensuring that explicit consent is obtained from the End User before GPS data is collected, in accordance with applicable law. CromaPages does not retain precise GPS coordinates beyond the immediate transaction required to display location results.

S3.6 Subscriber Obligations — CromaPages DXP

In addition to Clause A6, Subscribers using CromaPages DXP must:

• ensure that all DXP experiences comply with applicable consumer protection, advertising, and data protection laws in the jurisdictions where those experiences are accessed;
• not use Personalised Content Pages to send unsolicited communications to individuals who have not consented to receive them;
• ensure that any interactive elements within DXP experiences (including contact forms or lead capture tools) are appropriately disclosed to End Users and comply with applicable regulations;
• not use CromaPages DXP to publish experiences that are misleading, deceptive, or designed to manipulate End Users into providing personal data they would not otherwise provide;
• maintain their own privacy notice on any website where DXP experiences are embedded or linked, disclosing the data collection described in Clause S3.3.

S3.7 Data on Cancellation — CromaPages DXP

On cancellation of a CromaPages DXP subscription, all experience content, personalisation data, End User analytics, and associated data will be retained for 30 days. The Subscriber is encouraged to export any data they require during this period. After 30 days, all data will be permanently deleted in accordance with Clause A16. Published experiences will become inaccessible to End Users immediately upon account cancellation.