Terms of Service

1. Who these terms are with

Arrota is an early-stage service operated by Ryan Sinha. In these terms, “Arrota”, “we”, “us” and “our” refer to that service and its operator. These Terms form a contract between Arrota and the person or organisation using the service. Questions may be sent to ryan@ryansinha.com .

2. What Arrota provides

Arrota provides a professional credential vault. Holders can store education, employment and credential records, ask an issuer to verify them, selectively share approved records and create career materials grounded in vault facts. Organisations can issue or confirm records for holders. Public credential pages show limited credential facts and their current status; private profile links show only the records a holder approved and expire automatically.

Some issuer-issued credentials are cryptographically signed. A valid signature proves that the signed payload has not changed and was signed with the relevant issuer key. It does not guarantee that the underlying statement remains true, that an issuer is solvent or accredited, or that a credential has not later expired or been revoked. Always check current status.

3. What the trust labels mean

Arrota deliberately keeps these statements separate:

• Issuer Issued means an authorised organisation created the credential through Arrota.
• Issuer Confirmed means an authorised organisation confirmed a holder-submitted record.
• AI Checked means AI read a holder-supplied document and name-matched it. It is not issuer verification and contributes no Trust Score evidence-coverage points.
• Self Added means the holder added the item and no issuer has verified it.

Trust Score is a 0–100 evidence-coverage indicator across defined record categories. It is not a credit score, background check, employment recommendation or guarantee of honesty, competence or identity. Anyone relying on a credential must make their own assessment.

4. Accounts and eligibility

You must provide accurate account information, keep your password and recovery methods secure, and tell us promptly about suspected unauthorised access. You may not share an administrator or issuer account. You are responsible for activity performed through your account unless caused by Arrota.

Adults may make an age declaration without giving Arrota a date of birth. A minor must use the guardian and age protections presented during onboarding. AI tools are unavailable to minors. A parent or guardian who authorises a minor's use confirms that they have authority to do so and accepts these Terms for that use.

5. Holder responsibilities

Upload only material that relates to you, that you are entitled to use, and that Arrota is permitted to process under the Privacy Notice . Do not alter, forge, impersonate, mislabel or submit another person's credential; circumvent claim, access, rate-limit or security controls; probe accounts or records you do not own; upload malware; or use Arrota for unlawful, discriminatory or deceptive decisions.

You control which vault records are pinned or shared, but a public link can be copied by its recipient. Revoke private access when it is no longer needed and do not publish personal information you do not want others to see.

6. Organisation and issuer responsibilities

An organisation represents that it is authorised to act for the named issuer and that each administrator or issuer user has appropriate authority. Before uploading or issuing a credential about a holder, the organisation must have a valid legal basis, give any required notice, and ensure the facts are accurate. It must correct mistakes, revoke credentials that should no longer be relied upon, protect claim invitations, and remove access when staff roles change.

Issuers must not use Arrota to create sham credentials, make unlawful employment decisions, obtain private profile data without permission, or claim accreditation or authority they do not have. Arrota may request evidence and may refuse, suspend or reverse issuer activation.

7. AI and automated processing

AI processing is optional for an adult holder and is recorded separately from acceptance of these Terms. With that consent, Arrota may use third-party AI to read documents, extract structured facts, name-match a document, draft résumé content grounded in verified facts, and provide general career guidance. Current market questions may use Google Search grounding. Provider and retention details are in the Privacy Notice.

AI can be incomplete or wrong. Review every extracted fact and every generated résumé before using it. Career output is general information, not legal, financial, immigration, education, recruitment or employment advice. Arrota does not make hiring decisions for employers and you should not rely on AI output as the sole basis for a consequential decision.

8. Malware scanning and confidential files

Arrota sends a SHA-256 file fingerprint to VirusTotal to check whether the exact bytes match a known threat. Arrota does not submit document or Brand Kit image bytes, file names or content to VirusTotal. A file that VirusTotal has never seen cannot be content-scanned by this check, so you must still upload only documents you trust and are authorised to use. More detail appears in the Privacy Notice.

9. Ownership and licences

You retain ownership of material you submit. You grant Arrota a non-exclusive, worldwide, royalty-free licence to host, copy, secure, scan, extract, transform, display and transmit that material only as needed to provide, protect and improve the service, comply with law, and follow your sharing choices. This licence ends when the material is deleted except for lawful backups, security evidence and anonymised tombstones described in the Privacy Notice.

Arrota and its licensors own the service, software, branding and documentation. These Terms do not give you a right to copy, resell, reverse engineer or create a competing credential directory from the service, except where law does not allow that restriction. Feedback may be used without restriction and without identifying you.

10. Paid plans, reasonable use and changes

Paid issuer plans, allowances and prices are those shown on the Pricing page or agreed in a written order. Unless an order says otherwise, paid issuer plans carry an annual commitment billed monthly. Fees exclude applicable taxes. Cancellation takes effect at the end of the commitment; amounts already due remain payable and refunds are available only where required by law or agreed in writing.

Plans include multiple eligible records per recipient, subject to technical, security and abuse-prevention limits. If recurring use materially exceeds the applicable allowance, Arrota will contact the organisation to agree appropriate capacity or a different plan; ordinary overage does not silently delete records. Individual access remains free where the Pricing page says so. Formal employment verification and legacy migration are separately priced services.

The service continues to evolve. No uptime or support service level applies unless agreed in writing. Material changes to these Terms will be dated and, where required, notified or presented for renewed acceptance. Keep copies of important material and do not assume a third party will accept a credential.

11. Suspension, deletion and surviving history

You may stop using Arrota or request account deletion through vault settings. We may limit or suspend access to protect users, investigate abuse, comply with law, address an issuer dispute or enforce these Terms. Where practical, we will explain the reason and allow an appeal.

Account deletion removes stored document files and anonymises the holder profile. Arrota does not rewrite an issuer's historical ledger: non-identifying credential tombstones, revocation evidence and audit events may remain so that a past issuance cannot silently disappear. Details and legal rights are in the Privacy Notice.

12. Disclaimers

To the maximum extent permitted by law, Arrota is provided “as is” and “as available”. We disclaim implied warranties of merchantability, fitness for a particular purpose, non-infringement and accuracy. We do not warrant that a credential, issuer, holder, AI result, Trust Score, malware verdict or public-key record is genuine, complete, current or suitable for a particular decision. Nothing in these Terms excludes rights or warranties that cannot lawfully be excluded.

13. Limitation of liability

To the maximum extent permitted by law, Arrota is not liable for indirect, incidental, special, exemplary or consequential loss; lost employment, opportunity, revenue, profits, goodwill or data; or decisions made by issuers, employers, holders or third parties. Arrota's total liability arising from the service will not exceed the greater of the amount you paid Arrota in the preceding 12 months and INR 1,000.

These limits do not apply to fraud, wilful misconduct, death or personal injury caused by negligence, breach of confidentiality or data-protection duties where a limit is prohibited, or any liability that cannot lawfully be limited.

14. Disputes and general terms

Contact us first so we can try to resolve a concern informally. Except where mandatory law gives you another forum, these Terms are governed by the laws of India and disputes are subject to the competent courts in India with territorial jurisdiction over Arrota's operator. Consumer and data-protection rights that apply where you live remain unaffected.

If a provision is unenforceable, the rest remains effective. A delay in enforcing a right is not a waiver. You may not transfer these Terms without our consent; we may transfer them as part of a reorganisation, financing or sale if your rights are not materially reduced. These Terms, the Privacy Notice and any feature-specific terms are the complete agreement about the service.