================================================================================ CREDVAULT INTELLIGENCE ENGINE (CIE) END USER LICENSE AGREEMENT ================================================================================ IMPORTANT — READ CAREFULLY BEFORE USING THIS SOFTWARE This End User License Agreement ("Agreement") is a legal agreement between you (either an individual or a single entity, "You") and CredVault Ltd. ("CredVault", "We", "Us"), a company incorporated in Kenya and operating globally, for the CredVault Intelligence Engine Command Line Interface software and associated services ("Software"). BY TYPING "I agree" OR PRESSING "Y" WHEN PROMPTED, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS AGREEMENT, UNDERSTAND IT, AND AGREE TO BE BOUND BY ITS TERMS. IF YOU DO NOT AGREE, DO NOT USE THE SOFTWARE. You may view this agreement at any time by running: cie eula ================================================================================ 1. GRANT OF LICENSE ================================================================================ CredVault Ltd. grants you a non-exclusive, non-transferable, revocable license to use the Software subject to the terms of this Agreement. This license permits you to: • Install and use the Software on any number of devices you own or control • Use the Software for research, development, and production purposes • Access CredVault services through the Software's authorized interfaces This license does NOT permit you to: • Redistribute, sublicense, or sell the Software or access to it • Remove or modify any copyright notices or license information • Use the Software in violation of applicable laws or regulations • Use the Software to build a competing product or service ================================================================================ 2. PERMISSIONS AND DATA COLLECTION ================================================================================ By using this Software, you acknowledge and consent to the following: FILE SYSTEM ACCESS: • Read files you explicitly provide (datasets, models, configurations) • Write to a local configuration directory for credentials and settings • Create temporary files during data processing operations • Access files within your designated workspace directories NETWORK ACCESS: • Connect to api.credvault.io via HTTPS (port 443) • Establish WebSocket connections for real-time data streaming • Check for Software updates via the npm registry • Communicate with CredVault backend services DATA COLLECTED AUTOMATICALLY: • Authentication credentials (email address, encrypted access tokens) • Usage analytics (commands executed, execution time, error logs) • System information (operating system, CLI version, Node.js version) • IP address (for security, fraud prevention, and access control) • Timestamps of operations (for audit and compliance purposes) DATA YOU EXPLICITLY PROVIDE: • Datasets uploaded for training and analysis • Model configurations and training parameters • Prediction inputs and inference requests • Robot and IoT device telemetry and sensor data • Workspace files and project configurations DATA WE DO NOT COLLECT: • Passwords (only encrypted tokens are stored locally) • Files outside your CIE workspace • Browsing history or activity in other applications • Personal files unrelated to CIE operations • Keyboard input outside of CIE commands ================================================================================ 3. DATA PRIVACY AND SECURITY ================================================================================ CredVault Ltd. is committed to protecting your data: ENCRYPTION: • All data in transit is encrypted using TLS 1.3 or higher • All data at rest is encrypted using AES-256-GCM • Authentication tokens are encrypted before local storage DATA ISOLATION: • Your data is isolated per tenant in a multi-tenant architecture • No user can access another user's data • Strict access controls enforce data boundaries at the database level DATA OWNERSHIP: • You retain full ownership of all data you upload • You may export your data at any time using: cie data list • You may delete your data at any time using: cie data delete • CredVault does not claim any intellectual property rights over your data THIRD-PARTY SHARING: • We do not sell your data to third parties • We do not share your data for advertising or marketing purposes • We share data only when legally required (e.g., valid court order or subpoena) • We notify you of data requests to the extent legally permitted ================================================================================ 4. COMPLIANCE ================================================================================ CredVault operates globally and in accordance with applicable data protection regulations across the jurisdictions in which we operate: KENYA DATA PROTECTION ACT (2019): • We are registered with the Office of the Data Protection Commissioner (ODPC) • Right to access your personal data • Right to rectification of inaccurate data • Right to erasure of your personal data • Right to data portability • Right to object to processing • Contact: privacy@credvault.io GDPR (General Data Protection Regulation — EU/EEA/UK): • Right to access your personal data • Right to rectification of inaccurate data • Right to erasure ("right to be forgotten") • Right to data portability • Right to object to processing • Contact: gdpr@credvault.io POPIA (Protection of Personal Information Act — South Africa): • Lawful processing of personal information • Right to access and correct personal information • Right to object to processing • Contact: privacy@credvault.io NDPR (Nigeria Data Protection Regulation): • Compliance with NITDA data protection guidelines • Right to access, correct, and delete personal data • Contact: privacy@credvault.io SOC 2 TYPE II: • Annual third-party security audits • Controls for security, availability, and confidentiality • Report available upon request to enterprise customers HIPAA: • Business Associate Agreements are available for qualifying healthcare customers upon request • Contact: legal@credvault.io for BAA inquiries ISO 27001: • Information security management practices aligned with ISO 27001 • Regular security assessments and continuous improvement ================================================================================ 5. USAGE TIERS AND BILLING ================================================================================ FREE TIER (30-day trial): • $30 in platform credits included • Full platform access during trial period • Data locked to read-only after trial expires • No payment method required to start STARTER — $5.00/month: • 1 seat · 2 GB storage · 500,000 API requests/month • 5 GB bandwidth · 10 compute hours · 5,000 AI inference calls • 1 active deployment · Community support • Hard limits — upgrade to continue when limits are reached TEAM — $29.00/month: • 5 seats included ($5.00/seat after that) • 50 GB storage · 5,000,000 API requests/month • 50 GB bandwidth · 100 compute hours · 50,000 AI inference calls • Unlimited deployments · 5 IoT/robot devices • Email support (24-hour response) • Annual billing: $278.00/year (save 20%) PAY-AS-YOU-GO — $0 base, billed monthly for actual usage: • Storage: $0.50 per GB per month • Compute: $2.50 per hour • API Requests: $0.50 per 100,000 calls • Bandwidth: $0.50 per GB transferred • AI Inference: $0.50 per 1,000 predictions • Seats: $10.00 per seat per month • Backups: $0.25 per GB per month BILLING: • Flat-rate plans charged monthly in advance • Pay-as-you-go billed monthly in arrears • Payments processed via Paystack • Accepted: Visa, Mastercard, bank transfer (dedicated virtual account) • Invoices available via: cie billing invoices • Billing inquiries: billing@credvault.io Current pricing: https://credvault.co.ke/pricing ================================================================================ 6. YOUR RIGHTS AND CONTROLS ================================================================================ DATA ACCESS AND EXPORT: • View all datasets: cie data list • View all models: cie models list • Export a model: cie models export DATA DELETION: • Delete a dataset: cie data delete • Contact support to request full account and data deletion PRIVACY CONTROLS: • Opt out of analytics: cie configure --analytics off • Opt out of update notifications: cie configure --updates off • Revoke all access tokens: cie logout ================================================================================ 7. RESTRICTIONS AND PROHIBITED USES ================================================================================ You may NOT use the Software to: TECHNICAL RESTRICTIONS: • Reverse engineer, decompile, or disassemble the Software • Modify, adapt, or create derivative works of the Software • Remove, alter, or obscure any copyright or proprietary notices • Attempt to bypass security measures or access controls • Probe, scan, or test system vulnerabilities without written authorization USAGE RESTRICTIONS: • Engage in any illegal activity or facilitate illegal acts • Violate any applicable laws, regulations, or third-party rights • Infringe on the intellectual property rights of others • Transmit malware, viruses, or any harmful code • Engage in fraudulent, deceptive, or misleading practices DATA RESTRICTIONS: • Upload data you do not have the legal right to use or process • Process personal data without proper legal basis or consent • Store or process data in violation of applicable privacy laws • Share credentials or access tokens with unauthorized parties ABUSE AND MISUSE: • Attempt to gain unauthorized access to CredVault systems or other accounts • Interfere with or disrupt service operations or infrastructure • Exceed rate limits or overload systems through automated abuse • Use the service to build a competing product or service • Resell or redistribute access to the service without written authorization VIOLATION CONSEQUENCES: • Immediate termination of your license and account access • Suspension or permanent deletion of your account • Civil legal action and recovery of damages • Referral to law enforcement where applicable ================================================================================ 8. INTELLECTUAL PROPERTY ================================================================================ CREDVAULT OWNERSHIP: • The Software and all related intellectual property are owned by CredVault Ltd. and protected by copyright, trademark, patent, and other applicable laws in Kenya and internationally • CredVault retains all rights not explicitly granted in this Agreement • The CredVault name, logo, and trademarks are the exclusive property of CredVault Ltd. YOUR OWNERSHIP: • You retain all rights to data you upload • You retain all rights to models you train using your data • You retain all rights to your pre-existing intellectual property FEEDBACK: • Any feedback, suggestions, or ideas you provide to CredVault may be used by CredVault without compensation or attribution to you • By providing feedback, you grant CredVault a perpetual, irrevocable, royalty-free license to use such feedback in any manner ================================================================================ 9. TERMINATION ================================================================================ TERMINATION BY YOU: • You may terminate this Agreement at any time by: - Uninstalling the Software: npm uninstall -g credvault-cie - Ceasing all use of the Software and its services - Contacting support@credvault.io to request account closure TERMINATION BY CREDVAULT: • We may terminate or suspend your access immediately if you: - Violate any terms of this Agreement - Engage in prohibited activities - Fail to pay applicable fees when due - Pose a security risk to our systems or other users EFFECT OF TERMINATION: • Your license to use the Software ends immediately upon termination • You must cease all use and delete all locally stored credentials • Your data will be retained for 30 days following termination, after which it will be permanently deleted • You may export your data before deletion using the CLI commands in Section 6 SURVIVAL: • Sections 8 (Intellectual Property), 10 (Disclaimer of Warranty), 11 (Limitation of Liability), 12 (Indemnification), and 13 (Governing Law) survive termination of this Agreement ================================================================================ 10. DISCLAIMER OF WARRANTY ================================================================================ THE SOFTWARE IS PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. CREDVAULT LTD. DOES NOT WARRANT THAT: • The Software will meet your specific requirements • The Software will operate uninterrupted, timely, secure, or error-free • Results obtained from the Software will be accurate or reliable • Any defects or errors in the Software will be corrected YOU ASSUME ALL RISK associated with the use of the Software, including responsibility for data backup and compliance with applicable laws. SOME JURISDICTIONS DO NOT ALLOW EXCLUSION OF IMPLIED WARRANTIES. THE ABOVE EXCLUSIONS MAY NOT APPLY TO YOU IN FULL. ================================================================================ 11. LIMITATION OF LIABILITY ================================================================================ TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL CREDVAULT LTD., ITS OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, OR AFFILIATES BE LIABLE FOR ANY: • INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES • LOSS OF PROFITS, REVENUE, DATA, GOODWILL, OR BUSINESS OPPORTUNITY • BUSINESS INTERRUPTION OR LOSS OF ANTICIPATED SAVINGS • COST OF SUBSTITUTE GOODS OR SERVICES ARISING FROM OR RELATED TO YOUR USE OR INABILITY TO USE THE SOFTWARE, EVEN IF CREDVAULT HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. MAXIMUM LIABILITY: • CredVault's total cumulative liability to you shall not exceed the greater of: (a) the total fees paid by you to CredVault in the twelve (12) months immediately preceding the claim, or (b) USD $100. SOME JURISDICTIONS DO NOT ALLOW LIMITATION OF LIABILITY. THE ABOVE LIMITATIONS MAY NOT APPLY TO YOU IN FULL. ================================================================================ 12. INDEMNIFICATION ================================================================================ You agree to indemnify, defend, and hold harmless CredVault Ltd. and its officers, directors, employees, agents, and affiliates from and against any and all claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising out of or related to: • Your use or misuse of the Software • Your violation of any term of this Agreement • Your violation of any applicable law or regulation • Your violation of any third-party rights • Any data you upload, process, or transmit through the Software ================================================================================ 13. GOVERNING LAW AND DISPUTE RESOLUTION ================================================================================ GOVERNING LAW: • This Agreement is governed by the laws of Kenya, without regard to its conflict of law provisions • Where you are located in a jurisdiction with mandatory consumer protection laws, those local protections apply in addition to this Agreement and are not waived by this clause JURISDICTION: • Any legal action not subject to arbitration shall be brought in the courts of Nairobi, Kenya • CredVault and you both consent to the jurisdiction of such courts ARBITRATION: • Disputes arising under this Agreement may be resolved through binding arbitration administered under the Nairobi Centre for International Arbitration (NCIA) rules, or by mutual agreement under another recognized arbitration body in the relevant jurisdiction • Each party shall bear its own costs and legal fees unless the arbitrator determines otherwise REGIONAL USERS: • Users in the European Union or United Kingdom may also have the right to bring claims before their local courts or data protection authority under applicable consumer and data protection law • Users in South Africa may refer disputes to the relevant ombud or regulatory authority under applicable South African law EXCEPTIONS TO ARBITRATION: • Either party may seek emergency injunctive or equitable relief in court CLASS ACTION WAIVER: • You agree to resolve all disputes on an individual basis and waive any right to participate in a class action, collective action, or representative proceeding, to the extent permitted by applicable law ================================================================================ 14. EXPORT AND CROSS-BORDER DATA COMPLIANCE ================================================================================ CredVault operates globally and transfers data across borders in compliance with applicable laws. You agree to comply with all applicable export and data transfer regulations in your jurisdiction. You represent and warrant that: • You will not use or transfer the Software in violation of any applicable export control or sanctions laws in your country or region • Where your jurisdiction requires specific data residency or cross-border transfer mechanisms (e.g., Standard Contractual Clauses under GDPR, or ODPC transfer rules under the Kenya Data Protection Act), you will notify us at legal@credvault.io so we can accommodate your requirements • You are not subject to sanctions or trade restrictions that would prohibit your use of the Software under applicable law ================================================================================ 15. UPDATES AND MODIFICATIONS TO THIS AGREEMENT ================================================================================ SOFTWARE UPDATES: • CredVault may release updates, patches, and new versions of the Software • You are encouraged to keep the Software up to date for security and functionality improvements • The CLI will notify you when updates are available AGREEMENT CHANGES: • CredVault reserves the right to modify this Agreement at any time • The current version of this Agreement is always available at: https://credvault.co.ke/legal/eula • Continued use of the Software after changes are posted constitutes your acceptance of the revised Agreement • For material changes, CredVault will provide notice via email or in-CLI notification where reasonably practicable ================================================================================ 16. ENTIRE AGREEMENT AND SEVERABILITY ================================================================================ This Agreement constitutes the entire agreement between you and CredVault Ltd. with respect to the Software and supersedes all prior or contemporaneous understandings, agreements, representations, and warranties, whether written or oral. If any provision of this Agreement is held to be invalid, illegal, or unenforceable under the laws of any applicable jurisdiction, that provision shall be modified to the minimum extent necessary to make it enforceable, and the remaining provisions shall continue in full force and effect. CredVault's failure to enforce any right or provision of this Agreement shall not constitute a waiver of that right or provision. ================================================================================ 17. CONTACT INFORMATION ================================================================================ CredVault Ltd. Website: https://credvault.co.ke ================================================================================ BY TYPING "I agree" OR PRESSING "Y" WHEN PROMPTED, YOU CONFIRM THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THE TERMS OF THIS AGREEMENT. IF YOU DO NOT AGREE, DO NOT USE THE SOFTWARE. ================================================================================