1. Acceptance and Scope. These Terms of Service (the "Terms") govern access to and use of FURNEX, a cloud-based induction-furnace intelligence platform made available by PSM Orechem, a sole proprietorship established under the laws of India with its principal place of business at Jamshedpur, Jharkhand, India ("PSM", "we", "us"). The entity identified in the onboarding record — together with its authorized users — is the "Customer" ("you"). By provisioning a workspace, signing in, or otherwise using FURNEX, the Customer agrees to these Terms on behalf of itself and its authorized users.

2. The Service. FURNEX provides heat logging, lining-campaign tracking, operational analytics, and predictive recommendations for induction-melting operations. The Service is delivered on a subscription basis and is provided "AS IS" and "AS AVAILABLE" without warranty of any kind. Features, dashboards, model outputs, and advisories are decision-support tools; they do not replace engineering judgment, plant safety procedures, or the Customer's own quality controls.

3. Limitation of Liability. PSM Orechem is not liable for decisions made using platform data, loss of production, equipment damage, or data loss. Total liability is limited to the fees paid in the prior twelve (12) months.

4. Customer Data and Ownership.

4.1 Customer Data defined. "Customer Data" means the raw production records the Customer, its operators, or its connected equipment enter into or transmit to FURNEX, including heat logs, tap timings, charge-mix profiles, material consumption, meter readings, supplier names and prices, campaign outcomes, media attachments, and user-generated notes.

4.2 Ownership. As between the parties, the Customer retains all right, title, and interest in and to Customer Data. PSM acquires no ownership interest in Customer Data and processes it solely to provide the Service, meet its obligations under these Terms, and as permitted by §4.3.

4.3 Aggregated and De-identified Data. PSM may generate statistical, aggregated, anonymized, or otherwise de-identified data ("Derived Data") from Customer Data — for example, cross-plant benchmarks, model training corpora, anonymized grade-vs-life curves, and industry trend signals. Derived Data does not identify the Customer, its plants, its operators, its suppliers, or its commercial relationships, and cannot reasonably be used to re-identify them. PSM may use Derived Data for the limited purposes of (a) operating, securing, troubleshooting, and improving the Service; (b) training, tuning, and evaluating the machine-learning models that power FURNEX; (c) publishing anonymized industry benchmarks and research; and (d) developing new features and successor products. Derived Data is owned by PSM and may be retained after the Customer's subscription ends (see §4.6).

4.4 Confidentiality of Identifiable Data. PSM will not sell, license, or otherwise disclose identifiable Customer Data to third parties. In particular, PSM will not disclose Customer-identified supplier names and pricing, plant production volumes, campaign yields, operator identities, or any other information from which a specific Customer, plant, supplier, or commercial counterparty could be identified. This restriction applies to marketing, lead generation, and data-brokering of every kind. Disclosure is permitted only (i) to sub-processors acting on PSM's written instructions and bound by equivalent confidentiality terms, (ii) where compelled by a lawful court or regulatory order, or (iii) with the Customer's prior written consent.

4.5 Security. PSM will maintain commercially reasonable administrative, technical, and physical safeguards designed to protect Customer Data against unauthorized access, disclosure, alteration, and loss. The Customer remains responsible for its own credential hygiene, user provisioning, and role-based access inside its workspace.

4.6 Retention and Deletion. Customer Data will be retained in identifiable form for as long as the Customer's subscription is active. Upon termination, expiration, or the Customer's written request, identifiable Customer Data will be deleted from production systems within ninety (90) days, subject to routine backup rotation. Derived Data created before termination will remain in PSM's corpora indefinitely because it no longer identifies the Customer; the Customer acknowledges that anonymized contributions cannot be individually reversed out of downstream models, benchmarks, or aggregates.

5. Governing Law and Jurisdiction. These Terms constitute a legally binding agreement under the Indian Contract Act, 1872, and are governed by and construed in accordance with the laws of India, including the Information Technology Act, 2000 and the Digital Personal Data Protection Act, 2023. The courts at Jamshedpur, Jharkhand have exclusive jurisdiction over any dispute arising from or relating to these Terms or the Service. The parties will attempt good-faith resolution before initiating proceedings.

6. Indemnity. The Customer agrees to indemnify and hold harmless PSM Orechem, its proprietor, and personnel from and against any claim, loss, liability, or expense (including reasonable legal fees) arising out of (a) the Customer's use or misuse of the Service, (b) the Customer's breach of these Terms or of applicable law, (c) the accuracy, legality, or quality of data the Customer enters, or (d) any decision the Customer or its personnel make in reliance on the Service's outputs.

7. Force Majeure. PSM is not liable for any delay or failure to perform caused by events beyond its reasonable control, including power or network failure, acts of God, hosting-provider outages, governmental action, or labour disputes.

8. Severability & Entire Agreement. If any provision of these Terms is held unenforceable, the remaining provisions continue in full force. These Terms, together with the Privacy Policy, constitute the entire agreement between the parties and supersede all prior understandings regarding the Service.

9. Changes. PSM may update these Terms from time to time. Material changes will be notified in-app or by email to the Customer's administrator at least thirty (30) days before they take effect. Continued use of the Service after that date constitutes acceptance of the updated Terms.

1. Purpose of this Policy. This Privacy Policy explains how PSM Orechem, a sole proprietorship established under the laws of India ("PSM"), handles personal information and operational data processed through FURNEX. It supplements — and where there is any conflict, is governed by — the FURNEX Terms of Service.

2. Roles. For the business workspace data that Customers submit to FURNEX, the Customer is the data controller and PSM acts as a processor on the Customer's behalf. For account registration data, billing information, support communications, and telemetry PSM collects directly, PSM acts as the controller.

3. Information We Process. Account information (company name, plant location, administrator name, email, phone, designation, role assignments); operational data (heat logs, lining campaigns, charge mixes, material consumption, meter readings, supplier names and prices, campaign outcomes, media, user-generated notes); usage telemetry (login events, feature usage, audit logs, error traces, IP, device and browser metadata); communications (support messages, feedback, access requests).

4. How We Use Information. To deliver, secure, and support the Service; authenticate users, enforce role-based permissions, and record an audit trail; send transactional and service-related communications; detect, investigate, and prevent fraud, abuse, and security incidents; and comply with applicable law. Customer administrators can see the activity of users they have provisioned in their workspace; PSM employees access a Customer's identifiable operational data only where strictly necessary for support, security, or legal compliance.

5. Aggregated and De-identified Data. PSM may aggregate, anonymize, or otherwise de-identify information derived from Customer Data and usage telemetry ("Derived Data") and use it to (a) train and evaluate the machine-learning models that power FURNEX's predictions and recommendations, (b) produce cross-plant benchmarks and industry research, and (c) improve existing features and develop new ones. Derived Data does not identify any individual Customer, plant, operator, supplier, or commercial counterparty, and PSM takes reasonable steps to prevent re-identification, including suppression of small cohorts and removal of direct identifiers.

6. What We Do Not Do. PSM does not sell, rent, or trade identifiable Customer information. PSM does not disclose identifiable Customer-specific supplier names or pricing, plant production volumes, campaign yields, or operator identities to any third party for marketing, lead generation, or commercial exchange. PSM does not use Customer Data to train models for, or on behalf of, any third party.

7. Sub-processors. PSM uses a limited number of service providers to host infrastructure, deliver email, and provide platform telemetry. Each sub-processor is bound by written confidentiality and data-protection obligations no less protective than those in these terms, and is permitted to process Customer Data only on PSM's documented instructions.

8. Security. FURNEX uses encryption in transit, role-based access controls, per-user session tokens, audit logging, and periodic credential rotation. Customer administrators are responsible for provisioning users, managing role assignments, and removing access when employees leave.

9. Retention. Identifiable Customer Data is retained while the Customer's subscription is active and deleted from production systems within ninety (90) days of termination, expiration, or a verified deletion request, subject to routine backup rotation. Administrator account records tied to an executed contract may be retained as required by applicable tax, audit, or statutory obligations. Derived Data (aggregated, anonymized, de-identified) is retained indefinitely, as it no longer identifies the Customer and cannot reasonably be reversed out of downstream models, benchmarks, or aggregates.

10. Your Rights as a Data Principal. In accordance with the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000 (with the SPDI Rules, 2011), you have the right to (a) access a summary of the personal data PSM processes about you; (b) request correction, completion, or updating of inaccurate or incomplete data; (c) request erasure of personal data no longer needed for the stated purpose, subject to §9; (d) withdraw consent previously given (which does not affect processing already carried out); and (e) nominate another individual to exercise these rights in the event of death or incapacity. Customer administrators may export their workspace's operational data and request correction or deletion in accordance with §9. Individual users may contact their own administrator, or PSM's Grievance Officer below, to exercise these rights.

11. Grievance Redressal. In compliance with the Information Technology Act, 2000, the SPDI Rules, 2011, and the Digital Personal Data Protection Act, 2023, the Grievance Officer for FURNEX is: Rahul Maheshwari, PSM Orechem, email info@psmgroup.co.in. We will acknowledge a grievance within forty-eight (48) hours and endeavour to resolve it within thirty (30) days of receipt. If you are not satisfied with the resolution, you may approach the Data Protection Board of India constituted under the DPDP Act, 2023.

12. Lawful Basis & Consent. PSM processes personal data on the lawful bases of (a) the consent you provide by accepting these terms and using the Service, (b) the performance of the contract between you and PSM, and (c) compliance with legal obligations. By accepting, you consent to the collection, storage, and processing of your data as described in this Policy. SPDI (sensitive personal data) is processed only for the purposes stated here and with reasonable security practices as required by §43A of the IT Act, 2000.

13. Contact. Questions, deletion requests, and security reports: info@psmgroup.co.in · PSM Orechem (Sole Proprietorship), Jamshedpur, Jharkhand, India.

14. Governing Law. This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, the Information Technology Act, 2000, and the rules thereunder. The courts at Jamshedpur, Jharkhand have exclusive jurisdiction.

v3.0 — 6 June 2026