Terms & conditions

1. Agreement and Company Information 

These Terms & Conditions ("Terms") govern access to and use of https://www.runroma.com, the Roma software platform, related applications, integrations, content and services (collectively, the "Services"). The Services are owned and operated by AlphaStar Technologies Private Limited (CIN: U72900DL2021PTC389698), with its registered office at Plot No. 27, 3rd Floor, Community Centre, Naraina Vihar, Phase-I, Delhi, South West Delhi, India 110028 ("AlphaStar", "Roma", "we", "us" or "our"). 

These Terms are an electronic record under the Information Technology Act, 2000 and applicable rules. They are generated by a computer system and do not require a physical or digital signature. 

By accessing or using the Services, creating an account, accepting an order form, or connecting a third-party account, you agree to these Terms and our Privacy Policy at https://www.runroma.com/privacy-policy. If you use the Services on behalf of an organization, you represent that you are authorized to bind that organization. In these Terms, "Customer" means that organization and "User" means each person it authorizes. 

If a signed order form, master services agreement, data processing agreement or other written contract between Roma and Customer conflicts with these Terms, that written contract controls for the subject of the conflict. 

2. The Roma Services 

Roma is a business-to-business software platform for deduction management, financial analytics, accounting operations and related workflows. Depending on the subscribed features, the Services may: 

• ingest documents and data from email, uploads, distributor or retailer portals, cloud storage and authorized integrations; 

• classify documents and extract fields from remittance advice, invoices, debit or credit notes, claims, statements and other records; 

• organize and validate deductions, retrieve supporting documents and support dispute workflows; 

• reconcile transactions and surface exceptions, trends and analytics; and 

• provide dashboards, reports, exports, audit trails and integrations with accounting, ERP and collaboration tools. 

Features, supported sources and availability may vary by plan, configuration, region and customer agreement. Roma may improve or modify the Services, provided that it does not materially reduce the core functionality purchased during an active subscription without reasonable notice. 

3. Eligibility and Business Use 

You must be legally competent to enter into a binding contract. The Services are intended for business use and are not directed to children. A Customer is responsible for its Users, account administration, permissions and compliance with these Terms. 

4. Accounts and Security 

• Provide accurate, complete and current registration and billing information. 

• Keep account credentials confidential, use appropriate security controls and promptly notify Roma of suspected unauthorized access. 

• Do not share individual credentials or permit access by unauthorized persons. 

• Customer is responsible for activity under its accounts except to the extent caused by Roma's breach of these Terms. 

5. Third-Party Integrations and Provider Authorization 

The Services may allow a User to connect an email account, accounting or ERP system, cloud-storage service, retailer or distributor portal, collaboration tool or another third-party service. Each connection is optional and must be initiated or approved by an authorized User. By connecting an account or system, Customer instructs and authorizes Roma to access and process data from it only as necessary to provide the enabled features and as described in the Privacy Policy. 

5.1 Google Login 

Roma may offer Continue with Google as a login method. This authentication flow requests only https://www.googleapis.com/auth/userinfo.email and https://www.googleapis.com/auth/userinfo.profile. Roma uses the resulting primary email address and basic profile information to authenticate the User, create or identify the corresponding Roma account, associate the User with the correct organization, and display basic account information. Google Login does not provide Roma with access to Gmail messages or attachments. 

5.2 Optional Gmail email integration 

After signing in, an authorized User may separately connect Gmail to Roma's email integration. This optional flow is distinct from Google Login and requests only https://www.googleapis.com/auth/gmail.readonly. Roma uses the read-only scope to retrieve relevant message bodies and attachments—such as remittance advice, deduction notices, debit or credit memos, invoices and supporting documents—classify and extract relevant fields, associate the information with deduction or reconciliation records, and display results in Roma. Roma does not use this permission to send, compose, modify, label, archive, move or delete email. 

5.3 Microsoft Login 

Roma may offer Microsoft Login as a sign-in method. This authentication flow requests the OpenID Connect scopes openid, profile and email. Roma uses the resulting unique account identifier, email address where available and basic profile information to authenticate the User, create or identify the corresponding Roma account, associate the User with the correct organization, and display basic account information. Microsoft Login by itself does not provide Roma with access to mailbox messages or attachments. 

5.4 Optional Microsoft email integration 

After signing in, an authorized User may separately connect a Microsoft email account to Roma. This optional flow is distinct from Microsoft Login and requests delegated Microsoft permissions User.Read, Mail.Read, Mail.Send and offline_access. User.Read identifies the connected account; Mail.Read permits Roma to retrieve relevant message bodies, attachments and metadata for enabled deduction-management and finance-operations workflows; Mail.Send permits Roma to send from the connected account only when an authorized User initiates or configures an enabled Roma email-sending workflow; and offline_access permits the authorized integration to maintain access through refresh tokens for background synchronization and enabled workflows. 

The provider permissions are not identical: Roma's Gmail integration is read-only and cannot send through Gmail, while the Microsoft integration can send through the connected Microsoft account when a User-authorized feature requires it. Roma does not use Mail.Send for unrelated marketing or unsolicited email. 

5.5 Customer authorization and revocation 

Customer represents that it has all rights, authority, notices and consents required to connect the account and permit Roma's processing. Customer must not connect a personal or third-party mailbox unless authorized to do so. Roma is not responsible for a third-party service's availability, changes or independent acts. 

A User may disconnect an integration using the available Roma controls. A User may revoke Google's authorization through Roma's integration settings or the Google Account connections page, and may revoke Microsoft's authorization through Roma, the user's Microsoft account or the applicable organization administrator. Revocation stops new retrieval and provider-dependent actions but may not automatically delete information already imported into or generated through Roma. Retention and deletion are governed by the Privacy Policy and the applicable customer agreement. 

6. Customer Data 

"Customer Data" means data, documents, communications and content submitted to, uploaded to, generated for, or made accessible to Roma by or for Customer, including data received through authorized integrations. As between Roma and Customer, Customer retains its rights in Customer Data. 

Customer grants Roma a limited, non-exclusive right to host, copy, transmit, retrieve, transform, classify, extract, analyze, display and otherwise process Customer Data solely to provide, secure, support and improve the Services for Customer, comply with law and perform our contractual obligations. This right ends when the relevant data is deleted, except for lawful retention and backup periods described in the Privacy Policy. 

Customer is responsible for the legality, accuracy and quality of Customer Data and for providing legally required notices or obtaining consents. Customer must not submit data that it is prohibited from providing to Roma. 

7. Provider User Data and Google Limited Use 

Roma's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In particular, Roma does not sell Google user data; use it for advertising, lending or creditworthiness; or use it to train generalized or non-personalized artificial-intelligence or machine-learning models. Additional disclosures, security measures, retention periods, deletion methods and user controls are set out in the Privacy Policy. 

Roma uses Microsoft user data received through Microsoft identity services and Microsoft Graph only to provide, secure and support the sign-in and email-integration features enabled by the User or Customer. Roma does not sell Microsoft user data or use it for third-party advertising. Mail.Send is used only for an email-sending action or workflow authorized through Roma. 

8. Privacy, Confidentiality and Security 

Roma processes personal information and Google and Microsoft user data as described in the Privacy Policy. Each party will protect the other party's confidential information using reasonable care and use it only for the relationship contemplated by these Terms. Customer Data is Customer's confidential information unless it is public through no breach, was independently developed without use of confidential information, or was lawfully received without confidentiality restrictions. 

Roma maintains administrative, technical and organizational safeguards designed to protect Customer Data, including encryption in transit and at rest, access controls, monitoring, secure development and incident-response practices. No service can guarantee absolute security, and Customer remains responsible for secure use of its accounts, devices and connected services. 

9. Automated Processing and User Review 

Roma may use automated rules, extraction technologies and artificial intelligence to classify documents, extract fields, suggest deduction categories, identify potential exceptions and generate analytics. Automated outputs may be incomplete or incorrect. Customer must apply appropriate human review before relying on an output, submitting a dispute, changing an accounting entry or taking a financial, legal or operational action. 

Roma is a software provider and does not provide legal, tax, accounting, audit, lending or investment advice. Customer remains responsible for its decisions, books and records, regulatory obligations and submissions to third parties. 

10. Acceptable Use 

You must not, and must not enable another person to: 

• use the Services unlawfully or infringe another person's privacy, confidentiality, intellectual-property or other rights; 

• access or process a mailbox, account or data source without proper authorization; 

• upload malware or harmful code, disrupt the Services, bypass security controls, probe vulnerabilities without written authorization, or interfere with other users; 

• reverse engineer, decompile, copy or create derivative works of the Services except where applicable law expressly permits; 

• scrape, resell, sublicense or provide the Services to third parties except as expressly authorized; 

• use the Services or outputs to build or train a competing generalized model or product; 

• misrepresent identity, submit false information or use the Services for fraud, surveillance, harassment or other harmful activity; or 

• use Google user data obtained through Roma for advertising, lending, creditworthiness, data brokerage or any purpose prohibited by Google's policies. 

11. Fees and Taxes 

Fees, payment terms, usage limits, subscription duration and renewal terms are specified in the applicable order form or customer agreement. Unless stated otherwise, fees are exclusive of applicable taxes and are non-refundable except where required by law or expressly provided in the applicable agreement. 

12. Intellectual Property 

Roma and its licensors own the Services, software, models, workflows, interfaces, documentation, trademarks and related intellectual property, excluding Customer Data. Subject to payment and compliance with these Terms, Roma grants Customer a limited, non-exclusive, non-transferable right during the subscription term for authorized Users to use the Services for Customer's internal business purposes. 

If you provide feedback, Roma may use it without restriction or payment, provided that Roma does not publicly identify Customer or disclose Customer's confidential information without permission. 

13. Service Providers and Third-Party Services 

Roma may use contracted service providers for hosting, storage, security, monitoring, support, communications and document processing. They may process Customer Data only to perform services for Roma, under contractual confidentiality, data-protection and use restrictions. Google user data is shared only as permitted by the Privacy Policy and Google's Limited Use requirements, and Microsoft user data is shared only as described in the Privacy Policy and as necessary to provide or secure enabled features. 

Third-party products integrated with or linked from the Services are governed by their own terms. Roma does not control them and is not liable for their independent services, security or availability, except to the extent required by law or expressly agreed in writing. 

14. Suspension and Termination 

Roma may suspend access where reasonably necessary to prevent security harm, unauthorized use, legal exposure or material breach. Where practicable, Roma will provide notice and an opportunity to cure. Either party may terminate as provided in the applicable customer agreement. If no separate agreement applies, a User may stop using the Services and request account closure, and Roma may terminate or discontinue access on reasonable notice, except that immediate termination may occur for serious misuse, security risk or legal requirement. 

After termination, access ends and fees accrued remain due. Customer may request export or deletion of Customer Data subject to available features, the Privacy Policy, the applicable agreement and legal retention obligations. Google and Microsoft OAuth tokens and provider user data are handled according to the retention and deletion periods stated in the Privacy Policy. 

15. Disclaimers 

To the maximum extent permitted by law, the Services are provided "as is" and "as available". Roma disclaims implied warranties of merchantability, fitness for a particular purpose and non-infringement. Roma does not warrant that the Services or automated outputs will be uninterrupted, error-free, complete or suitable for every accounting or business decision. Nothing in these Terms excludes a warranty or right that cannot lawfully be excluded. 

16. Limitation of Liability 

To the maximum extent permitted by law, neither party will be liable for indirect, incidental, special, exemplary, punitive or consequential damages, or loss of profits, revenue, goodwill or data, arising from these Terms or the Services, even if advised of the possibility. Roma's aggregate liability arising out of the Services will not exceed the fees paid or payable by Customer for the affected Services during the twelve months preceding the event giving rise to liability, unless a different limit is stated in a signed agreement. 

The exclusions and limits do not apply to liability that cannot be limited by law, or to Customer's payment obligations, infringement or misuse of Roma's intellectual property, or a party's fraud or willful misconduct. 

17. Indemnity 

Customer will defend and indemnify Roma and its personnel against third-party claims arising from Customer Data, Customer's unlawful or unauthorized use of the Services, or Customer's material breach of these Terms, except to the extent caused by Roma. Roma will promptly notify Customer of a claim and provide reasonable cooperation, at Customer's expense. Any additional indemnity obligations in a signed customer agreement control. 

18. Governing Law and Dispute Resolution 

These Terms are governed by the laws of India, without regard to conflict-of-laws principles. The parties will first attempt in good faith to resolve a dispute through written notice and discussion for thirty days. If unresolved, the dispute will be finally resolved by arbitration under the Arbitration and Conciliation Act, 1996 by a mutually appointed sole arbitrator. The seat and venue of arbitration will be New Delhi, India, and proceedings will be conducted in English. Courts in New Delhi will have jurisdiction for interim relief and matters not capable of arbitration. 

19. Changes to These Terms 

Roma may update these Terms to reflect changes in the Services, law or business practices. We will post the revised Terms with a new effective date and provide reasonable notice of material changes. Changes will not materially reduce purchased rights during a current subscription term unless required by law, security needs or the applicable customer agreement. Continued use after the effective date constitutes acceptance where permitted by law. 

20. General 

These Terms and any applicable customer agreement are the entire agreement regarding the Services. If a provision is unenforceable, it will be modified only to the minimum extent necessary and the remaining provisions will continue. Failure to enforce a right is not a waiver. Neither party may assign these Terms without the other's consent, except in connection with a merger, reorganization or sale of substantially all relevant assets, subject to the Privacy Policy and applicable law. Sections intended by their nature to survive termination will survive. 

21. Contact 

Questions or notices may be sent to: 
AlphaStar Technologies Private Limited 
Attn: Grievance Officer, Mr. Rocky DMary 
Email: rocky.dmary@nakad.co 
Registered office: Plot No. 27, 3rd Floor, Community Centre, Naraina Vihar, Phase-I, Delhi, South West Delhi, India 110028