Kinshiro Terms and Conditions#

Effective date: 05/11/2026 (DD/MM/YYYY)

1. Who these terms are between#

These terms are between Kinshiro LLP, a limited liability partnership registered in India ("we"; the web service it provides is also called "Kinshiro"), and the business that subscribes to Kinshiro ("the Customer", "you"). The Customer is usually an outsourced bookkeeping firm.

• You accept these terms by ticking the box in Kinshiro or by signing an order form that refers to them. The person accepting confirms they may bind the Customer. We record the version, the person, the time and the IP address of each acceptance.
• Legal notices: #16, 2nd Cross, SRK Garden, Jayanagar, Bangalore, Karnataka 560041, and Support@kinshiro.com.
• The Privacy Policy describes how personal data is handled. It is a description and not a promise. The binding data-protection duties are in sections 16 and 20 and in any data processing agreement.

2. The service#

Kinshiro is a web service that helps bookkeepers prepare work on the accounting systems of their clients. It reads uploaded files and information from systems the Customer connects, suggests categories, supports review, and lets a person approve entries before they are posted back.

• Kinshiro assists people. It is not accounting, tax, audit, legal or financial advice. The Customer and its qualified staff are solely responsible for the books they keep, for what they file or advise their own clients, and for their use of Kinshiro and everything that follows from it.
• The Customer decides and approves. Nothing is posted to a connected system or sent to a client until a person at the Customer approves it (or approves the reminder schedule it follows). By approving, the Customer confirms the item is correct, authorized and lawful. If the Customer switches on any automatic approval or rule-based posting, items posted under it count as approved by the Customer, at the Customer's sole risk.
• We do not check the Customer's work. We do not verify the accuracy, completeness, tax treatment or suitability of any entry, category, suggestion or message, and we are not responsible for decisions made on them or for losses from items the Customer approved.
• Kinshiro never creates accounts, or bank and card accounts, in a connected system. If one is missing, a person creates it there.
• Kinshiro works in US dollars. Other currencies are flagged for a person.

3. Connected systems#

• A "Connected Platform" is a third-party accounting or business system that the Customer links to Kinshiro, for example an online accounting system. The Connected Platforms available (QuickBooks Online first; others as they are added) are listed in the order form or in the product, and we may add or remove them with notice.
• "Platform Data" means everything Kinshiro gets from a Connected Platform and anything made from it, including rules, history and choices learned from it and records of entries posted.
• The person who connects a company must be authorized to do so and must accept the connection terms in Annex A. The Customer confirms this.
• Each Connected Platform's own terms and privacy statement also apply, and the Customer must follow them. We may follow a platform's rules where they are stricter than these terms.
• A Connected Platform may suspend or end our access at any time. If that happens the related features stop working. We are not responsible for the platform, its outages, its changes or its decisions. We will tell the Customer as soon as we reasonably can.
• The Customer can disconnect at any time, in the platform or in Kinshiro. When a connection ends we stop using that company's Platform Data as soon as we learn the connection has ended, and start deleting it, and the client's uploaded files, 7 days later (a reconnect inside the 7 days cancels the deletion). Records of entries posted, review decisions and activity records are kept as stated in section 14. The owner of the connected company or the Customer may also ask us to delete it. We are not liable for any loss, disruption or deletion of data that results from our compliance with a disconnection or deletion request from a Connected Platform or the owner of a connected company.
• Nothing here makes Kinshiro a product of any platform, and we do not say a platform has approved it.
• If Kinshiro later offers features that work with other services, such as email, additional terms and a separate consent will apply before that feature is used.

4. Accounts and security#

• The Customer manages its users and roles. Each person uses their own account, and accounts may not be shared.
• The Customer is responsible for keeping passwords, devices and sign-in methods secure and for removing access when someone leaves. Sign-in uses a password and, on new devices, a one-time code sent by email. If the Customer's legal duties or contracts require multi-factor authentication or another sign-in method, it must tell us before it uses Kinshiro for that data.
• The Customer must tell us within 12 hours of finding any unauthorized use of an account or device, or any unauthorized access to Platform Data it got from Kinshiro, at Support@kinshiro.com or +91 8088448997. If the Customer does not tell us within that time, we are not liable for loss that earlier notice would have avoided.
• The Customer is responsible for what its users do in Kinshiro, except where an action resulted from a failure of Kinshiro's own security or from our staff.
• Unauthorized access that results from stolen, phished, shared or reused credentials is a security failure of the Customer, not of Kinshiro.

5. Records and evidence#

• We keep records of account and service activity (for example sign-ins, user and permission changes, uploads, connection changes and review decisions).
• The Customer agrees to this recording and will give its users any notice, and get any consent, the law requires.
• The records are presumed accurate unless shown otherwise. On request we will give the Customer the records relevant to a dispute within 10 business days.
• An action taken with a user's login is treated as the user's action and the Customer's, subject to section 4. An IP address shows a network, not a person.
• The Customer must report an error, unauthorized action or loss within 40 days of discovering it. If it reports later, we are not liable for loss that earlier notice would have avoided.
• We may share records with a platform, regulators, courts, the Customer's insurer or auditor, or to investigate an incident or protect ourselves in a dispute.
• The Customer will help us investigate any incident or dispute.

6. Customer data#

• Each client company owns its Platform Data. The Customer owns its own files and work, and has each client's permission to use Kinshiro on its books.
• The Customer gives us a limited licence to use its data only to provide Kinshiro to the Customer: to store, process, secure, support and show it to the Customer's authorized users, and to share it with the subprocessors we use under written agreements. We do not sell it or use it for advertising.
• We do not use the Customer's data to help another customer.
• We do not train AI models on Customer data.
• Kinshiro is not a backup or archive. The Customer keeps its own copies of the records it needs.
• We use counts of clients and transactions only to bill, run and secure Kinshiro.

7. Rules for Platform Data#

Platforms make us responsible for everyone who gets Platform Data through us, including the Customer. So the Customer will:

• (a) use Platform Data only to serve the client company it belongs to;
• (b) never sell it or give it to anyone who does not serve that client;
• (c) keep any exported copy as secure as Kinshiro does, and delete it when the client asks or the engagement ends;
• (d) tell us within 12 hours of any unauthorized access (section 4);
• (e) cooperate with our and the platform's audits and investigations; and
• (f) follow any instruction a platform gives about notifying affected people.

Breach of this section is a material breach and we may suspend access at once.

8. The Customer's own clients#

The Customer confirms that it has the right to give us its clients' data and to use Kinshiro on it. It will give its CPA firms and clients every notice and get every consent the law requires, including for work done outside the United States and, where relevant, IRS Section 7216 consents. It will tell its CPA firms about Kinshiro and its subprocessors where they need to know, and will name its software providers in its engagement letters.

9. AI features#

• Kinshiro uses AI providers to suggest categories. Suggestions can be wrong. A person must review them before anything is posted. AI will be used to provide useful insights to the customers.
• Each AI request carries one client's data. We do not use customer data to train AI models. AI providers may keep inputs for a limited time under their own terms, for example for safety and abuse monitoring, and we do not promise zero retention.
• Kinshiro labels where each value came from, including AI suggestions, and does not use AI for lending, credit or decisions about a person.
• AI spend. Each plan includes AI use up to a share of the fees. By default, AI features pause when the plan limit is reached, unless the Customer turns on overage billing in settings, in which case use above the limit is billed at cost plus 20%. Provider price changes pass through with 30 days' notice.

10. Fees#

• Fees are per active client per month as set out in the order form. Invoices are in US dollars, exclude taxes, and are due in 15 days. There is no late fee. We may suspend access if an invoice is unpaid 15 days after a reminder.

11. Acceptable use#

The Customer will not, and will not allow others to:

• use Kinshiro unlawfully or put unlawful data into it;
• try to reach another customer's data or defeat the separation between customers and clients;
• probe, scan or test Kinshiro's security without our written permission;
• copy, reverse engineer, resell or build a competing product from Kinshiro;
• overload Kinshiro or use automated requests other than through Kinshiro's features;
• break a platform's rules or section 7;
• use Platform Data as, or to build, a consumer report or credit decision;
• use Kinshiro if it or its owners are on a sanctions list or in an embargoed country or region. The Customer must tell us at once if this changes. We check new customers against sanctions lists, and the Customer checks its own clients and users.

We may suspend access where needed to protect Kinshiro or other customers and will tell the Customer as soon as we reasonably can.

12. Support#

Support is at Support@kinshiro.com on weekday business hours in India and US East, with no response-time promise. In the application, our staff can see a client's data only if the Customer approves a support request, each time. Named system administrators may access stored data directly for maintenance or emergencies, and that access is logged.

13. Availability#

We work to keep Kinshiro available but give no uptime guarantee. We may carry out maintenance. Outages of platforms, AI providers and the internet are outside our control.

14. Term, ending and data afterwards#

• These terms start when accepted and continue until ended. The subscription is monthly and renews automatically. Either side may end it with 30 days' notice (or as the order form says), or for a serious breach not fixed after notice.
• When the subscription ends, Platform Data is deleted as in section 3. The Customer may export its uploaded files and notes, and we delete them 90 days after the end, after a person confirms. Activity records are kept for 7 years (longer where a legal claim or law requires) without client data values. Backups expire after 30 days.

15. Confidentiality#

Each side keeps the other's confidential information confidential and uses it only for these terms, except information that is public, already known, independently developed, lawfully received from someone else, or required by law to be disclosed.

16. Our security#

We keep a written information-security programme with safeguards suited to the data. We will tell the Customer of a security incident affecting its data without undue delay, and within 48 hours of becoming aware that it has compromised the Customer's data.

17. Warranties#

We will provide Kinshiro with reasonable skill and care. Otherwise Kinshiro is provided "as is". We do not promise it will be uninterrupted or error-free, that suggestions are correct, or that a platform will accept or keep any entry. We do not warrant that Kinshiro meets any specific legal or regulatory requirement of the Customer or its clients.

18. What we are responsible for#

• We are responsible only for direct loss caused by (a) our own material breach of these terms, gross negligence or wilful misconduct (including that of our staff), or (b) a disclosure of the Customer's data to another customer that is caused by a defect in the application code Kinshiro writes and manages. We are not responsible for anything else, including the acts or omissions of the Customer, its users, CPA firms or clients; the accuracy or legality of the Customer's data and entries; what the Customer approves, posts or sends (including entries posted under a rule or automatic approval); tax, accounting or legal outcomes; or any Connected Platform, AI provider, hosting provider or other third party. Nothing here makes us responsible for the Customer's clients, the Customer's contracts, or any dealings between the Customer and anyone else.
• Cap. Our total liability to the Customer for all claims together, including indemnities and the cost of restoring data or notifying people, is limited to the greater of (i) the fees the Customer paid us in the 3 months before the event giving rise to the claim and (ii) US$500.
• Third-party services. We use third-party services to run Kinshiro under their standard terms and privacy policies, and each is bound by its own data-processing terms. We are not liable for downtime, faults or loss caused by those services, by Connected Platforms or by AI providers. Where a service provider's fault causes a loss, our liability for it is limited to what we actually recover from that provider, shared fairly if several customers are affected.
• Excluded losses. We are not liable for lost profit, revenue, business, goodwill or savings, or for indirect, special or consequential loss, or for loss caused by the Customer's delay in telling us of an incident (section 4).
• Every theory of claim. These limits apply to every claim however brought, whether in contract, tort (including negligence), statute or otherwise.
• Time limit. Claims must be brought within one year of the event that gave rise to them, or, if the governing law forbids a one-year period, within the shortest period that applicable law allows.
• Fundamental basis. These limits are a fundamental basis of the bargain and apply even if a remedy fails of its essential purpose. They do not limit what the law does not allow to be limited.
• The partners, members, officers and employees of Kinshiro are not personally liable for any claim under or in connection with these terms. Claims lie only against Kinshiro LLP, and these people may rely on this clause. This does not protect anyone against their own fraud or wrongful act.

19. Indemnities#

• The Customer indemnifies Kinshiro and its partners, officers and employees against any claim, loss or cost, including legal fees, arising from: the Customer's data and instructions; its entries and the books it keeps; its use of Kinshiro in breach of these terms or the law; its failure to give notices or get consents (section 8) or to follow section 7; claims by its CPA firms, clients or their clients; claims or demands by a Connected Platform because of something the Customer or its users did; and security incidents arising from its users' credentials, devices, shared or reused passwords. Where a Connected Platform makes a claim or demand on us because of something the Customer or its users did, the Customer pays what we owe the platform, including remediation, notice and audit costs. This does not apply to the extent the loss is caused by our gross negligence or wilful misconduct, or by our material breach of our security duties in the application code we write and manage (it does not cover third-party infrastructure or services).
• The Customer keeps suitable professional and cyber insurance for its business and shows proof on request.
• Kinshiro indemnifies the Customer only against third-party claims that Kinshiro as delivered infringes intellectual property, up to the cap in section 18.
• Procedure: prompt notice, control of the defence by the indemnifying side, no settlement without consent.

20. Data processing agreement#

Where the Customer or its CPA firms need one, we will sign a data processing agreement that forms part of these terms.

21. Governing law and disputes#

Law and arbitration. These terms are governed by the laws of India. The parties will first try to settle a dispute by written notice and good-faith talks for 30 days. If that fails, the dispute is finally settled by binding arbitration under the Arbitration and Conciliation Act, 1996, by one arbitrator, administered by and under the rules of the Arbitration & Conciliation Centre, Bengaluru (Domestic & International). The seat and venue are Bengaluru, India, and the language is English. Only urgent relief to protect rights, data or confidential information may be sought from any competent court meanwhile. All claims must be brought in a party's individual capacity, and not as a plaintiff or class member in any class, collective or representative proceeding.

22. Changes#

We may change these terms. We will tell the Customer by email at least 30 days before a material change takes effect. If the Customer does not agree it may end the subscription before then.

23. General#

• No third-party rights. Only we and the Customer have rights under these terms, except that the persons named in section 18 may rely on that section. The Customer's CPA firms, clients and others must look first to the Customer, and the Customer will say so in its own contracts. This does not limit any right a company owner or individual has under the Privacy Policy, the law or Annex A, including to disconnect and ask us to delete their data.
• Entire agreement. These terms, Annex A, the order form and any data processing agreement are the whole agreement. The order form prevails over these terms.
• If a part is unenforceable, the rest stays. Not enforcing a right does not give it up.
• Assignment. The Customer may not assign without our consent. We may assign to an affiliate or in a sale of our business.
• Events outside control. Neither side is liable for delay or failure to perform from events outside its reasonable control, including internet, Connected Platform, AI provider or cloud-hosting outages. This does not excuse the Customer's payment duties or either side's confidentiality duties. Either side may end the affected service after 30 days.
• Survival. Sections 2, 3 (deletion), 5, 6, 7, 10 (fees owed), 14, 15, 16, 17, 18, 19, 20, 21 and 23 survive.
• Notices are by email to Support@kinshiro.com or the Customer's account email. English language.

24. Contact#

Support, privacy and legal notices: Support@kinshiro.com. Post: #16, 2nd Cross, SRK Garden, Jayanagar, Bangalore, Karnataka 560041.

Annex A. Connection Terms (accepted by the person who connects a company)#

Shown before the connection is made. A short page.

A-1. Connection terms for every Connected Platform. The platform is named on the screen (for example QuickBooks Online). By ticking the box, I confirm that:

1. I am authorized to connect the company named on the screen to Kinshiro and I agree to these Connection Terms (the version shown on the screen).
2. Kinshiro will read the company's data in the Connected Platform and, only when a person approves (or under an automatic approval rule the bookkeeper turns on), post entries to it. Kinshiro asks for the smallest permission it needs, shown on the platform's own consent screen.
3. Kinshiro uses the data only to serve this company's bookkeeper, does not sell it and does not use it for other customers.
4. I can disconnect at any time in the Connected Platform or in Kinshiro, and I can ask Kinshiro directly to delete the company's data from the platform at Support@kinshiro.com. Kinshiro then stops using it and deletes it within 7 days of a verified request.
5. Kinshiro assists bookkeepers and is not accounting, tax or legal advice. The bookkeeper's staff approve each entry.
6. Kinshiro is not liable to me or to the company for indirect or consequential loss, or for tax, accounting or business loss, or for entries approved by the bookkeeper's staff. To the extent the law allows, Kinshiro's total liability to me and to the company for this connection is limited to US$100 or, if greater, the fees paid to Kinshiro for this company's connection in the 3 months before the event. This does not limit rights that the law does not allow to be limited. Any claim must be brought in an individual capacity and not as part of a class or representative action. These Connection Terms are governed by the law and dispute clause in section 21 of the Kinshiro Terms and Conditions, which I accept for this purpose.
7. Kinshiro records the email the connect link was sent to, my IP address, browser, the time and the version as evidence of this consent.

Platform schedules. Schedule 1: QuickBooks Online (Accounting permission only; Intuit's notice and deletion rules apply). Further schedules are added for other platforms, starting with Xero; the same form applies and the strictest rule wins.