Terms & Conditions – Authorize Online^R

These Terms and Conditions (“Terms”) govern your access to and use of the AuthorizeOnline platform and related services (the “Platform” or “Service”) provided by INNsight.com, Inc. (“INNsight,” “we,” “us,” or “our”).

AuthorizeOnline is an all-in-one hospitality platform that includes credit card authorization, guest identification and ID scanning, mobile check-in, chargeback defense, fraud-prevention tools, Do Not Rent management, and cookie and consent management. By accessing or using the Platform, creating an account, deploying any AuthorizeOnline component, or submitting data through the Platform, you (“Client,” “you,” or “your”) agree to these Terms.

If you are entering into these Terms on behalf of a company or other legal entity (including a hotel, resort, or hospitality business), you represent that you have authority to bind that entity. If you do not agree, do not use the Platform.

1. The AuthorizeOnline Platform

AuthorizeOnline provides tools that may include, depending on the modules you enable:

• Credit card authorization — digital authorization forms, secure transmission, and storage of authorization records to support PCI DSS-aligned processes and chargeback defense;
• Guest identification and ID scanning — tools to capture, authenticate, and verify government-issued identification and related guest data;
• Mobile check-in — contactless check-in flows that may incorporate ID verification and payment authorization;
• Chargeback defense and fraud prevention — generation and retention of digital authorization and verification records, and tools intended to help you respond to disputes;
• Do Not Rent / high-risk guest management — access to shared or Client-specific lists and flagging tools;
• Cookie and consent management — banner, preference center, and consent-logging tools for your websites.

The Platform is a set of tools. Outcomes (including successful chargeback defense, fraud prevention, identity-verification accuracy, or regulatory compliance) depend on your configuration, data inputs, policies, and implementation. INNsight does not guarantee any particular result.

2. License and Acceptable Use

Subject to these Terms and payment of any applicable fees, INNsight grants you a limited, non-exclusive, non-transferable, revocable license to access and use the Platform solely for your internal business purposes in connection with properties and websites you own or control.

You shall not: (a) reverse engineer or attempt to extract source code except as permitted by law; (b) resell or sublicense the Platform; (c) use the Platform in violation of law or card-network rules; or (d) interfere with the security or integrity of the Platform or other clients’ data.

3. Client Responsibilities

You are solely responsible for:

• All guest-facing interactions, disclosures, and consents (including ID collection notices, payment authorizations, and cookie banners);
• Proper configuration and ongoing maintenance of every module you enable (authorization forms, ID scanning workflows, consent rules, Do Not Rent lists, and related settings);
• Ensuring that non-essential cookies and tracking technologies on your websites do not load before affirmative consent, and that your tag manager and third-party tools honor choices recorded by the Platform;
• The accuracy and legality of data you submit or collect through the Platform, including government ID images and payment information;
• Compliance with PCI DSS (to the extent applicable to you), card-network rules, the California Invasion of Privacy Act (CIPA), the California Consumer Privacy Act as amended by the CPRA, GDPR (where applicable), identity-verification laws, and all other laws governing your properties and websites;
• Your own chargeback representment decisions, fraud policies, and guest-screening criteria;
• Obtaining any internal legal or compliance approvals required for your use of the Platform.

INNsight provides tools and does not act as your payment processor, identity-verification guarantor, or legal compliance officer. You remain the merchant of record and the party responsible for your websites, guest data practices, and regulatory obligations.

4. Payment Card and Identity Data

Where you use credit-card authorization or ID-scanning features, you are responsible for providing required notices to guests and for complying with PCI DSS and applicable identity laws. INNsight implements technical and organizational measures designed to protect data in transit and at rest, but you acknowledge that no system is infallible. You shall not store sensitive authentication data in violation of PCI DSS. Digital authorization records generated by the Platform are made available to support your chargeback defense efforts; you are responsible for timely retrieval and submission of those records.

5. Privacy and Consent Tools

Use of the Platform is also subject to INNsight’s Privacy Policy and Cookie Policy. For the cookie-consent module, non-essential technologies are blocked only to the extent your configuration and implementation enforce the recorded choices. You are responsible for your own privacy and cookie disclosures on the websites where you deploy AuthorizeOnline, and for responding to data-subject and consumer requests relating to your properties and websites.

6. Fees and Payment

Fees are as set forth in an applicable order form, subscription, or online plan. All fees are non-refundable except as expressly stated. You are responsible for applicable taxes.

7. Intellectual Property

INNsight and its licensors retain all right, title, and interest in the Platform. You retain all rights in your data, guest records, and website content. You grant INNsight a limited license to process your and your guests’ data solely to provide, secure, and improve the Platform.

8. Confidentiality

Each party will protect the other’s non-public information with reasonable care and use it only to perform under these Terms. This obligation does not apply to information that is public, independently developed, or rightfully received from a third party without a duty of confidentiality.

9. Disclaimers

THE PLATFORM IS PROVIDED “AS IS” AND “AS AVAILABLE.” INNSIGHT DISCLAIMS ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT. INNSIGHT DOES NOT WARRANT THAT THE PLATFORM WILL PREVENT ALL CHARGEBACKS OR FRAUD, THAT ID VERIFICATION WILL BE ERROR-FREE, THAT ANY CONFIGURATION WILL SATISFY CIPA, CCPA/CPRA, PCI DSS, OR OTHER LEGAL REQUIREMENTS, OR THAT THE PLATFORM WILL BE UNINTERRUPTED OR ERROR-FREE. YOU ARE SOLELY RESPONSIBLE FOR YOUR COMPLIANCE AND FOR ALL GUEST AND PAYMENT OUTCOMES.

10. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, INNSIGHT’S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THESE TERMS OR THE PLATFORM SHALL NOT EXCEED THE AMOUNTS PAID BY YOU TO INNSIGHT FOR THE PLATFORM IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM (OR ONE HUNDRED U.S. DOLLARS IF NO FEES WERE PAID). IN NO EVENT SHALL INNSIGHT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR CHARGEBACK AMOUNTS, WHETHER ARISING IN CONTRACT, TORT, OR OTHERWISE, EVEN IF ADVISED OF THE POSSIBILITY.

11. Client Indemnification

You shall defend, indemnify, and hold harmless INNsight and its officers, directors, employees, and agents from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable attorneys’ fees) arising out of or related to: (a) your websites, properties, guest interactions, or data practices; (b) your configuration, implementation, or use of any Platform module; (c) any payment authorization, chargeback, fraud claim, or identity-verification issue involving a guest of yours; (d) any allegation that your website, tracking technologies, ID collection, or data practices violate CIPA, CCPA/CPRA, PCI DSS, card-network rules, or other laws; (e) your failure to provide required notices or obtain required consents; or (f) your breach of these Terms.

INNsight will provide prompt notice of any claim (provided that failure to give prompt notice relieves you of your obligations only to the extent you are materially prejudiced) and reasonable cooperation. You may not settle any claim that imposes an obligation on INNsight or admits fault by INNsight without INNsight’s prior written consent.

12. Term and Termination

These Terms remain in effect while you use the Platform. Either party may terminate for material breach if the breach remains uncured for thirty (30) days after written notice. Upon termination, your license ends. Sections that by their nature should survive (including indemnification, limitation of liability, disclaimers, and dispute resolution) will survive termination.

13. Dispute Resolution, Arbitration, and Class Action Waiver

Any dispute, claim, or controversy arising out of or relating to these Terms or the Platform shall be resolved by binding individual arbitration administered by the American Arbitration Association under its Commercial Arbitration Rules. The arbitration shall take place in San Francisco County, California, or by video or telephone conference if the parties agree. The arbitrator’s award shall be final and binding, and judgment on the award may be entered in any court of competent jurisdiction.

YOU AND INNSIGHT AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, OR REPRESENTATIVE PROCEEDING. The arbitrator may not consolidate more than one person’s claims and may not preside over any form of class or representative proceeding.

Either party may seek injunctive or other equitable relief in a court of competent jurisdiction to prevent actual or threatened infringement or misappropriation of intellectual property rights or unauthorized use of the Platform. If the class-action waiver is found unenforceable as to a particular claim, then only that claim may proceed in court; the remainder of this arbitration agreement shall continue in effect.

These Terms are governed by the laws of the State of California and the United States, without regard to conflict-of-law principles. Subject to the arbitration agreement above, exclusive jurisdiction and venue lie in the state or federal courts located in San Francisco County, California.

14. Miscellaneous

These Terms, together with any applicable order form and the referenced Privacy Policy and Cookie Policy, constitute the entire agreement between you and INNsight regarding the Platform and supersede all prior or contemporaneous agreements on the subject matter. If any provision of these Terms is held unenforceable, it shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall remain in full effect. INNsight’s failure to enforce any right or provision is not a waiver of that right or provision.

You may not assign these Terms without INNsight’s prior written consent. INNsight may assign these Terms in connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of its assets. Notices under these Terms shall be sent to the addresses set forth below (or to any updated address a party provides in writing) and shall be deemed given when delivered.

15. Contact

Supporting offices (these offices have no authority to bind INNsight or enter into contracts on its behalf):

• Mumbai: 310 Quantum Towers, Ram Baug, Mumbai, Maharashtra, India
• Ahmedabad: 1003-1004, 10th Floor, 323 Corporate Park, Near Girish Coldrink, CG Road, Navrangpura, Ahmedabad – 380009, Gujarat, India