Start Free Trial
Legal

Terms of Service

The terms governing access to and use of ghumSign — our role as a technology platform, how signatures and the Platform Witness Seal work, what documents are unsuitable, records retention, fees and refunds, liability, and how to raise a complaint.

Effective date: 1 September 2026Last updated: 1 September 2026

These Terms of Service (the "Terms") govern access to and use of ghumSign, including its website, applications, signing workflows, verification tools, records, and related services (together, the "Service"). The Service is operated by Ghum Nepal Innovation Pvt. Ltd., a company registered in Nepal under registration number 338594, with registered office at Kathmandu – 5, Kathmandu, PAN/VAT number 621160558.

By creating an account, purchasing or using the Service, initiating a transaction, or selecting "I agree," you accept these Terms. If you use the Service for an organization, you confirm that you have authority to bind that organization. If you do not agree, do not use the Service.

1. Important explanation of our role

Technology platform

The Service helps parties prepare, review, execute, transmit, receive, and retain electronic records. Depending on the selected workflow, it may also capture identity and authentication information, consent, time and date records, document hashes, delivery and receipt events, and other audit evidence.

We are not a certifying authority

Unless our website expressly states otherwise and displays a current license issued by Nepal's Controller, the Company is not a licensed or recognized Certifying Authority and does not issue Digital Signature Certificates. Any certificate used by the Company or a user is issued and governed by the relevant licensed or recognized Certifying Authority, its certificate policy, certification practice statement, subscriber agreement, and applicable law.

Party signatures and electronic assent

A party may execute a document through:

  • that party's own valid Digital Signature Certificate and private key, where the workflow supports it; or
  • another method of electronic assent, such as a confirmation, one-time password, or signature mark, where that method is lawful and accepted by all relevant parties.

An electronic assent method that does not use the signer's own valid certificate and private key is not represented by us as that signer's statutory "digital signature" under the Electronic Transactions Act, 2063 (2006). Each party is responsible for deciding, with legal advice where appropriate, whether the selected method satisfies the law governing the document.

Platform Witness Seal

After the required signing events are completed, the Service may use the Company's Digital Signature Certificate to apply a cryptographic signature to a separate audit certificate or evidence package containing the document hash and recorded workflow events (the "Platform Witness Seal"). If the Platform Witness Seal is displayed on the signed document, its cryptographic scope and label will identify it as the Company's platform-witness record.

The Platform Witness Seal:

  • authenticates the Company as the subscriber of the Company certificate;
  • confirms only that the Company's controlled system recorded the stated events and the stated document hash;
  • is not the signature of either contracting party;
  • does not convert a party's click, one-time password, typed name, or signature image into that party's statutory digital signature;
  • does not make the Company a party to, guarantor of, or surety for the underlying document; and
  • is not notarization, registration, attestation by a licensed notary, legal advice, or a guarantee that the document is valid, enforceable, properly stamped, admissible, or suitable for its intended purpose.

The Company's private key remains under the Company's exclusive technical and organizational control. Users do not receive, possess, download, or directly operate that private key. A user's authenticated instruction may trigger the Service's workflow, but only the Company-controlled signing system is authorized to apply the Platform Witness Seal for the limited purpose described above.

2. Eligibility and authority

You may use the Service only if you:

  • are at least 18 years old and legally capable of entering into the relevant transaction;
  • provide accurate, complete, and current information;
  • are not prohibited by law, court order, sanction, or regulatory restriction from using the Service; and
  • have authority to upload the document, invite each participant, disclose participant information to us, and execute or approve the document in the stated capacity.

If you sign for a company, partnership, public body, or other organization, you confirm that all required resolutions, mandates, delegations, licenses, and approvals are in place. We may request evidence of identity or authority and may refuse or pause a transaction if the evidence is inadequate or inconsistent.

3. Account security

You must keep your account credentials, authentication devices, one-time passwords, recovery codes, and any private key under your control confidential and secure. You must not share credentials or allow another person to sign or approve a record as if they were you.

Notify us immediately at admin@ghumnepalinnovation.com if you suspect unauthorized access, identity misuse, credential compromise, signing without authority, or an incorrect Platform Witness Seal. We may suspend access, preserve relevant records, notify affected parties, and take other steps reasonably required for security or legal compliance.

5. Documents that may not be suitable

The Service must not be used for a document that the Electronic Transactions Act, 2063 excludes from its electronic-record regime, including, unless the law has been changed by a valid Nepal Gazette notice:

  • negotiable instruments;
  • wills;
  • deeds of mortgage, bonds, deeds of conveyance, partitions, or documents relating to transfer of title in immovable property;
  • documents demonstrating title or ownership in immovable property;
  • powers of attorney;
  • statements of claim, defense, counterclaim, or other documents used in court proceedings;
  • documents submitted in arbitration proceedings; or
  • any document that applicable law requires not to be retained or executed electronically.

You must also obtain specific legal advice before using the Service for a document that requires physical presence, independent witnesses, notarization, registration, payment of stamp duty, filing with a public authority, sector-specific approval, or a particular form of signature. We may publish additional restrictions in our Acceptable Use Policy or within a workflow.

We may reject, suspend, or remove a document or workflow that we reasonably believe is unlawful, excluded, unsafe, misleading, or outside the capabilities of the Service.

6. Digital certificates and private keys

Company certificate

The Company certificate details, issuing Certifying Authority, permitted uses, validity period, and relevant policy documents are available below. The Platform Witness Seal will be applied only while the Company certificate is valid and not known to be suspended, revoked, expired, or materially compromised.

Trust chain

NepalRootCA-2020

Root CA — Office of the Controller of Certification (OCC Nepal)

Valid until 9 January 2030

SHA-256: 00EE79C43B042FFF6E659EDF27D4203712E6B0EE15922A3FB3819B495DA15321

Radiant InfoTech Nepal CA 2020

Issuing Certifying Authority, licensed under OCC Nepal

Valid until 6 March 2027

SHA-256: F44278B3564C3D84CD8E38A1D90379D636957F3226E5660B7F4B59E143F59A24

These certificates are republished copies. Verify each fingerprint against the copy published by the Certifying Authority before installing a certificate into a trust store.

We will use reasonable security measures designed to retain control of the Company private key and prevent disclosure to anyone not authorized to affix the Company's digital signature. If the private key is disclosed or materially compromised, we will stop applying new Platform Witness Seals, promptly notify the issuing Certifying Authority, request suspension or revocation as required, and take reasonable incident-response steps.

User certificates

If you use your own Digital Signature Certificate, you are the subscriber responsible for its lawful use, security, accuracy, status, and permitted key usage. You must promptly notify your Certifying Authority of disclosure or compromise and must not use a suspended, revoked, expired, false, or unaccepted certificate.

Validation

The Service may check certificate chains and available suspension or revocation information at the time of signing or verification. Certificate status information may be delayed, unavailable, or later changed. A successful technical validation does not establish legal capacity, authority, free consent, or enforceability.

7. Electronic records and evidence

For each completed workflow, the Service may create an evidence package containing the final document, document hash, party and account identifiers, consent records, authentication events, timestamps, network and device information, delivery and receipt events, certificate information, validation results, and the Platform Witness Seal.

Unless we expressly state that a trusted timestamping service was used, displayed times are records from our systems and are not represented as an independent statutory timestamp.

We will use reasonable measures intended to keep retained records accessible for later reference, reproducible in the form in which they were generated, sent, received, or stored, and accompanied by available origin, destination, date, and time information. We retain completed transaction records for 5 years after completion or for any longer period required by law, legal hold, court order, tax rule, or written enterprise agreement. After the retention period, records may be deleted or anonymized as permitted by law.

You must download and securely retain the completed document and evidence package. We are not your exclusive archive unless a separate written archival service agreement expressly says so.

8. Customer content and participant responsibility

"Customer Content" means documents, information, instructions, names, contact details, signatures, and other materials submitted to the Service. As between you and us, you retain your rights in Customer Content. You grant us a limited, non-exclusive right to host, reproduce, process, transmit, cryptographically hash, sign the evidence package, and otherwise use Customer Content only to provide, secure, support, and comply with law in relation to the Service.

You are responsible for the legality, accuracy, completeness, and consequences of Customer Content and the underlying transaction. We do not negotiate, review, approve, or verify the legal sufficiency of the underlying document unless a separate written professional-services agreement expressly says so.

9. Privacy and confidentiality

Our collection and use of personal information are described in our Privacy Notice at Privacy page, which forms part of these Terms. The Privacy Notice must identify the information collected, purposes and legal basis, recipients and service providers, retention, security measures, cross-border processing if any, and available rights and complaint channels.

We will treat Customer Content and personal information as confidential and will not disclose them except:

  • as instructed or authorized by the relevant user or organization;
  • to participants in the transaction as necessary to complete it;
  • to service providers and Certifying Authorities bound by appropriate duties;
  • to investigate fraud, abuse, security incidents, or disputes;
  • when required by applicable law, court order, or a competent authority; or
  • to protect lawful rights, safety, and the integrity of the Service.

You must not upload personal information that is unnecessary for the transaction. You must have a lawful basis and all required notices and consents for any personal information you provide, including identity documents, biometric information, sensitive information, and information about another person.

10. Acceptable use

You must not use the Service to:

  • impersonate another person or misrepresent identity, authority, certificate status, or the meaning of the Platform Witness Seal;
  • sign, alter, transmit, or access a document without authority;
  • commit fraud, forgery, coercion, money laundering, evasion, harassment, or any other unlawful act;
  • upload unlawful, malicious, infringing, deceptive, or harmful content;
  • use a false, suspended, revoked, expired, compromised, or improperly obtained certificate;
  • bypass access controls, probe security, introduce malware, interfere with availability, or reverse engineer protected parts of the Service except where law permits;
  • collect another person's data without a lawful purpose; or
  • represent that the Company is a Certifying Authority, notary, lawyer, registrar, government office, party, or guarantor when it is not.

We may preserve evidence and report suspected unlawful activity to a competent authority where permitted or required by law.

11. Service information, fees, cancellation, and refunds

Before purchase, we will display the nature and scope of the Service, final price including applicable tax, additional charges, payment method, expected delivery or completion time, material limitations, cancellation conditions, refund conditions, and grievance mechanism in a clear and accessible manner.

The current fee and refund schedule is available at Pricing page. Unless mandatory law provides otherwise:

  • you may cancel an order without charge before we begin identity verification or create the signing workflow;
  • after a workflow has started, fees for completed identity, certificate-validation, messaging, or signing events may be non-refundable if clearly disclosed before purchase;
  • if the Service materially differs from the disclosed description or fails because of our fault, you may request re-performance or a refund for the affected Service; and
  • approved refunds will be made to the original payment method within 15 business days.

Nothing in these Terms limits a return, refund, compensation, or other right that cannot lawfully be excluded under Nepal's Electronic Commerce Act, 2081, Consumer Protection Act, 2075, or other applicable law. We will issue an invoice or receipt and retain payment records as required by law.

12. Availability, changes, and suspension

We aim to provide the Service with reasonable care but do not promise uninterrupted or error-free operation. Maintenance, telecommunications failure, power failure, certificate-repository outage, cyberattack, force majeure, or events outside reasonable control may delay or interrupt a workflow.

We may suspend or restrict access when reasonably necessary to protect users, keys, records, or systems; respond to suspected fraud or unlawful activity; comply with law or a competent authority; address non-payment; or investigate a breach of these Terms. Where practicable and lawful, we will notify affected users and provide a way to retrieve completed records.

13. Third-party services

The Service may depend on Certifying Authorities, identity-verification providers, messaging providers, cloud hosting, payment processors, certificate repositories, or other third parties. Their terms and privacy practices may also apply. We are responsible for our own obligations but do not control an independent third party's systems or decisions, including issuance, suspension, or revocation of a certificate.

14. Warranties and disclaimers

We warrant that we will provide the Service with reasonable care and use reasonable measures designed to protect the Company private key and retained records. Except for this express warranty and any right or warranty that cannot lawfully be excluded, the Service is provided "as available."

We do not warrant that:

  • every electronic signature or assent method is valid for every document or jurisdiction;
  • a participant's stated identity, capacity, authority, understanding, or free consent is correct merely because authentication checks passed;
  • any underlying agreement is lawful, fair, enforceable, properly stamped, registered, filed, or admissible;
  • the Platform Witness Seal is equivalent to a party signature, independent witness, notarization, registration, or government approval; or
  • certificate status, third-party data, or delivery information will always be complete or immediately available.

15. Liability

Nothing in these Terms excludes or limits liability that cannot lawfully be excluded, including liability arising from fraud, willful misconduct, gross negligence, breach of mandatory consumer rights, or any specific liability imposed by applicable law.

Subject to that rule, neither party is liable to the other for indirect or consequential loss, loss of profit, loss of opportunity, or loss caused by the other party's unlawful content, lack of authority, failure to review a document, insecure credentials, or use of an excluded or unsuitable document.

For claims that may lawfully be limited, the Company's total aggregate liability arising from the affected Service will not exceed the greater of: (a) the fees paid for that Service during the twelve months before the event giving rise to the claim; or (b) NPR 25,000. This limit does not apply to loss directly caused by our unauthorized application of the Platform Witness Seal or our failure to take legally required action after confirmed compromise of the Company private key.

You remain responsible to the other parties for the underlying transaction and for your Customer Content, instructions, representations, authority, and selected signing method.

16. Indemnity for business users

If you use the Service in the course of business, you will indemnify the Company against third-party claims and reasonable costs caused by your unlawful Customer Content, impersonation, lack of authority, misuse of another person's certificate or data, or material breach of these Terms. This clause does not apply to the extent the claim was caused by the Company, and it does not reduce any non-waivable consumer right.

17. Intellectual property

The Service, software, interface, documentation, branding, and related intellectual property belong to the Company or its licensors. We grant you a limited, revocable, non-exclusive, non-transferable right to use the Service for lawful transactions under these Terms. This does not transfer ownership of Customer Content or the parties' underlying documents.

18. Complaints and grievance handling

You may submit a complaint through email to admin@ghumnepalinnovation.com, by telephone at +977-9768990995, 9714535041, 9714535042, or in person or by post to:

Grievance Officer/Unit: Complaint Desk

Address: Ghum Nepal Innovation Pvt. Ltd., Kathmandu – 5, Kathmandu

Service hours: 10 AM – 6 PM

We will register the complaint and promptly provide a complaint reference. We will investigate and issue a written decision, or a written explanation if it cannot be resolved, within 15 days after receipt, subject to any lawful request for necessary additional information. This process does not prevent you from using any remedy available under applicable law.

19. Termination

You may stop using the Service at any time, subject to accrued fees and the terms governing active workflows. We may terminate or suspend an account for material or repeated breach, unlawful use, security risk, legal requirement, or prolonged non-payment.

Termination does not affect completed documents, accrued rights, payment obligations, required record retention, confidentiality, dispute clauses, or provisions that by their nature should survive. We will provide access to completed records as required by law and the applicable retention policy.

20. Notices and electronic communications

You consent to receive contractual notices, transaction records, invoices, security alerts, and other communications electronically at the contact details in your account. You must keep those details current. A notice is treated as received when delivered to the designated information system or as otherwise required by applicable law; a failed delivery notice may delay effectiveness.

Notices to the Company must be sent to admin@ghumnepalinnovation.com.

21. Changes to these Terms

We may update these Terms for legal, security, operational, or Service changes. We will publish the updated Terms with a new "Last updated" date and give reasonable advance notice of a material change. A change will not retroactively alter a completed transaction unless required by law or agreed by the affected parties.

22. Governing law and disputes

These Terms and the Service are governed by the laws of Nepal. The parties will first attempt in good faith to resolve a dispute through the grievance process. Subject to any mandatory consumer forum, tribunal, or jurisdiction that cannot be changed by contract, the courts of Kathmandu, Nepal will have jurisdiction.

Nothing in this clause prevents a party from seeking urgent protective relief, reporting suspected crime, requesting certificate suspension or revocation, or approaching a competent regulator or consumer authority.

23. General terms

If a provision is unenforceable, it will be limited or removed only to the minimum extent necessary, and the remaining provisions will continue. A failure to enforce a provision is not a waiver. You may not transfer your account or these Terms without our written consent; we may transfer these Terms as part of a lawful merger, restructuring, or sale if user rights are not materially reduced. These Terms, the Privacy Notice, the displayed order details, and any signed enterprise agreement form the agreement between you and us regarding the Service. A separately signed agreement prevails to the extent of a direct conflict.

Ready to stop printing contracts?

Start your 60-day free trial. No credit card required. Your account is live straight away.