General Terms and Conditions of Use

These general terms and conditions of use (hereinafter referred to as these "Terms") establish the complete and legally binding agreement between you, whether an individual or an entity ("User", "Customer", "you", "your"), and DATA TOWER TRADE AND SERVICES LLC-FZ ("Data Tower", "Company", "we", "our", "us").

These Terms govern your access to and use of the Lampyre software and analytical platform, including its associated websites hosted at lampyre.io and account.lampyre.io, all related sub-domains, mobile applications, and any associated software, applications, and services such as Lampyre Desktop, Data Lookup, and the Lampyre API (collectively, the "Platform" or "LampyreTools").

By registering an account, purchasing a subscription, downloading software, browsing our websites, or otherwise accessing or using any part of the Platform in any capacity, you expressly acknowledge that you have read, understood, and agree to be bound by these Terms, along with our Privacy Policy, Child Digital Safety Policy and Acceptable Use Policy (collectively the "Operating Policies"), which are incorporated herein by reference and form an integral part of this agreement.

We reserve the right to modify, update, or change these Terms from time to time. The procedure for notifying you of such changes is set forth below. Your continued use of the Platform following the posting of any changes constitutes your irrevocable acceptance of the revised Terms.

1. Definitions and Interpretation

Acceptable Use Policy or AUP means the policy referenced in these Terms that sets forth the rules and restrictions governing your use of the Platform, as may be updated from time to time, which is available at lampyre.io/acceptable-use.

Affiliate means any entity that directly or indirectly controls, is controlled by, or is under common control with a party, where "control" means the possession of the power to direct or cause the direction of management or policies, whether through ownership of voting securities, by contract, or otherwise.

Confidential Information means all business or technical information disclosed by one party to the other, whether orally, in writing, or in any other form, including but not limited to: account credentials, product keys, customer data, results, technical specifications, API documentation, pricing information, trade secrets, know-how, and any information that a reasonable person would understand to be confidential under the circumstances. Confidential Information does not include information that: (a) was already known to the receiving party without an obligation of confidentiality; (b) is or becomes publicly available through no fault of the receiving party; (c) is independently developed by the receiving party without reference to the disclosing party's Confidential Information; or (d) is required to be disclosed by law or court order.

Customer Data means any data, information, or material uploaded, submitted, transmitted, or otherwise provided by or on behalf of the Customer to the Platform, including but not limited to queries, search terms, files, and documents.

Data Processing Agreement or DPA means the agreement attached as Appendix I to these Terms, governing the processing of personal data when the Customer acts as a Data Controller and Data Tower acts as a Data Processor.

Distributor means SNTT d.o.o., located at Ladja 28, 1215 Medvode, Slovenia, an authorized independent reseller of the Platform which is SNTT. B2B/B2G Customers may register a "Corp Account" through a Distributor. The Distributor is authorized to market and resell access to the Platform. Any separate agreements entered into between a Distributor and a B2B/B2G Customer govern their specific commercial relationship; however, such agreements shall not bind Data Tower nor supersede these Terms.

Data Tower's liability and responsibilities toward the Customer are exclusively defined by these Terms and relate solely to the functionality, security, availability, and data processing aspects of the Platform as provided by Data Tower.

The Distributor is solely responsible for its own commercial relationships, including any billing errors, overcharges, payment collection, local tax compliance, and any representations or warranties made by the Distributor to the Customer that exceed or conflict with these Terms.

Data Tower and the Distributor are independent contractors. Nothing herein creates any joint liability, agency, partnership, or joint venture between them toward the Customer. Any claim regarding commercial matters or the Distributor's conduct must be directed exclusively to the Distributor. Any claim regarding the core functionality, security, or data processing of the Platform shall be governed exclusively by these Terms, with Data Tower as the liable party only to the extent set forth in section 18.

Effective Date means the date on which you accept these Terms by registering an account, purchasing a subscription, or otherwise accessing or using the Platform.

Intellectual Property Rights means all copyrights, patents, trademarks, service marks, trade secrets, database rights, design rights, and any other proprietary rights recognized in any jurisdiction, whether registered or unregistered, including applications for registration thereof.

Lampyre means the software and analytical platform provided by Data Tower, including all related technologies, tools, and services offered under the Lampyre brand.

LampyreAPI means the application programming interface enabling programmatic data exchange and integration with external systems.

LampyreData Lookup means a web-based tool for quick data lookup from any browser or device.

LampyreDesktop means the installable software application provided under a specific license as part of the Platform, allowing more comprehensive data crawling and analysis with support for data visualization in different modes including table, graph, map, and timeline.

LampyreTools means collectively Lampyre Desktop, Lampyre Data Lookup, Web or Site, Lampyre API, and any other tools available or to be available to users in their Lampyre account.

License means the set of rights and obligations granted to the User with regard to the Lampyre Desktop software as part of a paid Subscription, assigned in writing and accepted by the User before accessing the Lampyre Desktop software.

Order Form means a binding document executed by the parties that references these Terms and specifies the scope, price, and terms for the provision of specific Services.

PDPL means UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.

Photon is the Platform's internal, non-monetary accounting unit used exclusively to pay for data requests. Photons are purchased in packages and have no cash value, cannot be exchanged for real currency, cryptocurrency, or any other external medium of exchange, and are consumed according to the rates published within the tools at the time each request is made.

Platform means collectively all Lampyre Tools, websites, and services provided by Data Tower.

Privacy Policy means Data Tower's privacy policy referenced in these Terms, as may be updated from time to time, which is available at lampyre.io/privacy.

Purpose means the purpose of the Platform as described in these Terms, which is to provide users with tools to search, access, and analyze publicly available information and other data sources for lawful analytical purposes.

Results means the outcomes, findings, reports, data, and information generated by the Platform in response to Customer queries and requests, which are made available to the Customer through the Platform.

Service or Services means the software-as-a-service offerings provided by Data Tower, including access to the Platform and Lampyre Tools.

Service Provider means DATA TOWER TRADE AND SERVICES LLC-FZ or Data Tower.

Subscription means the contractual instrument granting you access to the Platform for a fixed term based on a selected plan, with different tiers offering varying levels of functionality and usage rights.

Subscription Term means the duration of your Subscription as specified in your account or in an applicable Order Form.

UAE Copyright Law means UAE Federal Decree-Law No. 38 of 2021 on Copyright and Neighboring Rights.

UAE Cybercrime Law means the UAE Federal Decree-Law No. 34 of 2021 on Combatting Rumors and Cybercrimes.

User / Customer means an individual or entity that accesses or uses the Platform, including both B2C and B2B/B2G Customers.

B2C Customers are individuals who register a "Private Account" directly through Lampyre website.

B2B/B2GCustomers are entities or individuals who register a "Corp Account" through our official B2B Distributor, SNTT d.o.o., located at Ladja 28, 1215 Medvode, Slovenia, who manages account relationships and marketing on our behalf.

Website or Site means the websites used to access the Company's products and services, hosted at lampyre.io and account.lampyre.io, and any associated sub-domains.

2. Purpose of the Platform and Nature of Data

You acknowledge that the Purpose of the Platform is to provide tools for searching, accessing, and analyzing information from a vast array of sources, including publicly available open sources, official third-party data providers, and datasets originating from data breaches or leaks. The Company expressly declares that it does not facilitate, encourage, or participate in the original act of breaching any system or illegally obtaining such data.

The Platform aggregates and processes data but does not create, verify, or endorse the accuracy, completeness, reliability, or legality of any data obtained.

You further acknowledge that by using the Platform, you are simulating manual research processes at scale, and you agree that you are responsible for your use of the Platform and for evaluating the appropriateness, legality, and reliability of any Results obtained through it. You represent and warrant that use of these Results shall be strictly for lawful, authorized investigative purposes and shall not violate the UAE Cybercrime Law.

The Company does not guarantee that the Platform will be 100% successful in identifying all relevant information or that Results will be free from errors or omissions.

You acknowledge that Lampyre is not responsible for identified sources, the content of sources, their truthfulness or accuracy, or their completeness, and that Lampyre does not verify sources or results. You must verify each source and transmitted information independently.

3. Comprehensive Obligations

The relationship between Data Tower and the Customer is governed by mutual obligations designed to ensure the proper functioning, security, and lawful use of the Platform, with each party assuming specific responsibilities.

3.1. Data Tower undertakes to perform the following obligations with due care and professional diligence:

(a) make the contracted Platform services and all applicable Lampyre Tools available to the Customer in accordance with these Terms and the specific parameters of the selected Subscription plan;

(b) use commercially reasonable efforts to maintain the security, functionality, availability, and performance of the Platform, subject to scheduled maintenance windows, emergency updates, and unforeseen technical issues beyond our reasonable control;

(c) provide technical support to the Customer during regular business hours to assist with bona fide issues related to the operation and proper use of the Platform, accessible via email at support@lampyre.io or through the web chat feature available within the User account;

(d) provide the Customer with reasonable advance notice of any material changes to the services, these Terms, or the pricing policy, in accordance with the procedures set forth in section 21 of these Terms;

(e) share relevant updates, advisories, and important information with the Customer regarding the Platform's features, security, and operation through the communication channels established in these Terms;

(f) implement and maintain appropriate technical and organizational security measures to protect the Platform and any data processed thereon, in accordance with industry standards and applicable data protection laws;

(g) process personal data in accordance with the instructions of the Customer when acting as a Data Processor, as further detailed in the Data Processing Agreement attached hereto as Appendix I; and

(h) maintain a written record of all categories of processing activities conducted on behalf of the Customer when required by applicable law.

3.2. The Customer undertakes to perform the following obligations and acknowledges that failure to do so may constitute a material breach of these Terms:

(a) ensure the availability of all necessary technical elements required for the proper functioning of the Platform on their end, including but not limited to reliable internet access with adequate bandwidth, compatible computers or devices meeting the minimum system requirements, and up-to-date operating systems and browsers as specified in the Platform's technical documentation published on the Website;

(b) acknowledge, understand, and strictly adhere to all operating conditions, technical instructions, usage guidelines, and other requirements for the effective and lawful operation of the services as communicated by Data Tower through the Platform, Website, or direct communications;

(c) implement, at its own expense, any components, updates, or technical upgrades reasonably required during the term of these Terms to maintain compatibility with new versions, updates, or enhanced features of the Platform as they are released;

(d) ensure that any individual accessing, administering, or taking actions on the Platform possesses adequate and verifiable authorization to act on behalf of the Customer, thereby absolving Data Tower of any and all disputes, claims, or liabilities arising from the unauthorized, negligent, or improper actions of the Customer's personnel, employees, contractors, or representatives;

(e) provide Data Tower with accurate, current, and timely information as may be reasonably requested for the performance of these Terms, including monthly updates on relevant usage metrics when required;

(f) respect and fulfill all the agreements, representations, warranties, and obligations outlined in this document and the Acceptable Use Policy, which is expressly incorporated herein by reference;

(g) confirm that any use and manipulation of the Platform is carried out by a natural person who is either employed by the Customer or a duly authorized professional collaborator, and the use of any type of robotic tool, automated script, bot, crawler, scraper, or any other automated means for accessing, interacting with, or extracting data from the Platform is strictly prohibited unless explicitly authorized in writing by Data Tower;

(h) refrain from transferring, assigning, sublicensing, or otherwise disposing of any rights and obligations acquired under these Terms to any third party, including subrogating its contractual position, without the express prior written permission of Data Tower, which may be granted or withheld in our sole discretion;

(i) avoid using the services for any activities that contravene applicable law, public morality, or public order, and refrain from employing the services for any unlawful, prohibited, fraudulent, or harmful purposes, including but not limited to those specified in the Acceptable Use Policy;

(j) be solely and exclusively responsible for independently verifying the accuracy, completeness, reliability, legality, and suitability for purpose of any results, data, or information obtained through the Platform before relying on them for any professional, commercial, legal, or other purpose;

(k) indemnify and hold Data Tower harmless from any claims, damages, liabilities, costs, and expenses arising from the Customer's breach of any obligation under these Terms or applicable law; and

(l) provide Data Tower with prompt written notice of any actual or suspected breach of security, unauthorized access, or any other event that could compromise the integrity or security of the Platform or the data contained therein.

4. Electronic Communications and Marketing Consents

The Customer agrees to receive electronic communications from Data Tower related to the operation, security, administration, and promotion of the Platform and its features.

These communications are essential for the effective management of the Customer's account, the security of the Platform, and the Customer's successful interaction with the services.

They may include, but are not limited to, emails, in-app notifications, and push notifications concerning critical updates to the Platform, changes to services or these Terms, security alerts and fraud prevention activities, payment confirmations and reminders, account administration messages, and promotional offers on Subscriptions or Photon packages.

For all Customers, these Terms constitute an explicit and affirmative consent to receive such operational, administrative, and promotional communications as part of the business relationship.

The Customer acknowledges that while they may have options to manage certain preferences for non-essential communications through their account settings, administrative, security-related, and essential service messages are necessary for the provision of the service and cannot be unsubscribed from.

Where the Customer is established in the European Union, the Company's use of electronic communications shall be conducted in accordance with the EU General Data Protection Regulation (GDPR) and the ePrivacy Directive. Customers shall have the right to opt out of receiving any non-essential or marketing communications at any time via the unsubscribe mechanism provided in such communications or through their account settings.

5. Account Registration, Eligibility, and Security Obligations

By using our Platform, you represent and warrant that you are at least 18 years of age and possess the legal capacity to enter into binding agreements.

If you are under 18, you must immediately cease all use of the Platform.

By registering an account, you acknowledge you have reviewed and agree to be bound by Terms of Use and all Operational Policies. Users are strictly prohibited from using the Platform to collect, process, or share personal data of children under 13 without verifiable parental consent. Consistent with our Operational Polices, Users must immediately flag any content that exploits or harms minors. We reserve the right to report such activities to the Telecommunications and Digital Government Regulatory Authority (TDRA) and other competent authorities.

To access most features and functionalities, you must register for an account by providing accurate, current, and complete information as requested in the registration form, including your email address, a secure password, and your country of residence.

You are solely responsible for the accuracy and completeness of this information, and your country selection is generally permanent; any changes to this selection require contacting our support team and may be subject to verification.

Please note that all Users registered at our Website may participate in our Lampyre Referral Program. Participation is voluntary and requires separate acceptance of the Referral Program Terms and Conditions available in the user's account dashboard. The Referral Program Terms constitute a separate agreement and become effective only upon such acceptance.

You bear the sole and exclusive responsibility for maintaining the confidentiality and security of your account credentials, including your password, login details, username, and any software product keys or activation codes issued to you.

You are strictly prohibited from sharing, selling, renting, leasing, lending, or otherwise distributing your account credentials to any third party, or from allowing any third party to access your account through shared logins, VPN access, remote desktop software, or any other means.

You accept full and unconditional liability for all activities that occur under your account, regardless of whether such activities were authorized by you, and you agree to notify us immediately of any unauthorized use or security breach.

For account recovery or identity verification, we may require you to provide proof of identity, which can include requesting a government-issued ID, proof of ownership of the registered email address, confirmation of past transactions, or answers to security questions.

Should an account be compromised due to a security failure directly attributable to the Company's gross negligence or willful misconduct, your sole and exclusive remedy is limited to a service credit equal to the cost of your most recent monthly subscription payment, and we shall not be liable for any indirect or consequential damages arising from such breach.

Conversely, we are not liable for any losses, damages, claims, or unauthorized transactions resulting from your failure to secure your account credentials, and you agree to indemnify and hold us harmless from any claims arising from such unauthorized access.

6. Subscriptions, Photons, Auto-Renewal, Payments, and Financial Terms

Access to paid features and advanced functionalities of the Platform is conditional upon the purchase of a Subscription.

Subscription plans, along with their associated features, limitations, usage rights, and current pricing, are detailed on our pricing page available at lampyre.io/pricing, which is incorporated herein by reference.

All data requests made through the Platform are priced in Photons, with the exact cost clearly and conspicuously indicated within the respective tools prior to sending any request, allowing the Customer to make informed decisions.

The pricing for requests via API can be found beside each request description in the API documentation.

Photons are purchased in packages and have no cash value; they cannot be exchanged, refunded, or redeemed for real money, cryptocurrency, or any other external medium of exchange, and are consumed according to the rates published at the time of each request.

The initial purchase of any Subscription activates the auto-renewal feature by default, which is designed to provide uninterrupted access to the Services.

This feature automatically charges your selected payment method for a subsequent term of the same Subscription upon its expiration, using the payment details you have provided.

You may disable auto-renewal at any time through the "Subscriptions" or "Payment Plans" section of your account dashboard. However, due to inherent limitations and architectural constraints in our payment processing systems and internal account management infrastructure, once you disable auto-renewal for a specific product or subscription instance, you may be required to purchase a new Subscription in order to continue using the Services for that same product instance; should you wish to continue using the service after the current paid term ends, you must manually initiate a new purchase through the Platform.

We reserve the right to change Subscription prices and Photon costs at any time.

Any price changes will only apply prospectively to future Subscription renewal periods or future Photon purchases; the price paid for an active Subscription period and any previously purchased Photons are fixed and will not be retroactively increased.

Please note that request results obtained through Lampyre Data Lookup and Web tools are available in your account only for Two (2) months starting from the day they were obtained, with an expiration countdown appearing two weeks before deletion.

You should export these results to your device to save them.

All payments are processed through external payment systems, and we do not store your full bank card information, although we may receive limited payment information from our payment processors.

7. Lampyre Desktop Software License. Terms and Restrictions

Subject to your full compliance with these Terms and the timely payment of all applicable fees, Data Tower grants you a non-exclusive, non-transferable, revocable, and limited personal License to download, install, and use the Lampyre Desktop software solely for your internal analytical and business purposes, strictly within the limits and parameters of your purchased Subscription plan.

The License is personal to you and the entity you represent, and no sublicensing rights are conferred.

You may create a single backup copy of the software for archival and disaster recovery purposes only

You are strictly and unequivocally prohibited from engaging in any of the following activities with respect to the software:

a. selling, sublicensing, renting, leasing, lending, distributing, or commercially exploiting the software in any form or by any means;

b. modifying, adapting, translating, disassembling, decompiling, reverse-engineering, or creating derivative works based upon the software, in whole or in part;

c. bypassing, disabling, tampering with, or otherwise interfering with any licensing, authentication, or security mechanisms embedded in the software;

d. using the software for any unlawful, fraudulent, or unauthorized purpose, including but not limited to data scraping in violation of laws, mass surveillance activities, cybersecurity breaches, hacking attempts, or any use that violates applicable export controls, sanctions, or financial regulations;

e. providing access to your license key, product key, or activation credentials to any third party;

f. removing, altering, or obscuring any proprietary notices, copyright notices, or trademarks contained in the software; or

g. using the software in any manner that could damage, disable, overburden, or impair the Platform or interfere with any other party's use of the Platform.

The License term is coterminous with your active Subscription period; upon termination or expiration of your Subscription for any reason, the License is immediately and automatically revoked, the product key is deactivated, and you must cease all use of the software and uninstall all copies from your systems. Any remaining Photons associated with the expired license may still be used via Lampyre Data Lookup or Web tools.

8. Results and Ownership of Outputs

Upon completion of your queries and requests through the Platform, the findings and insights will be generated into Results.

The Results are your Customer Data and, to the extent permitted by applicable law, shall be owned by you. However, this ownership does not transfer to you any Intellectual Property Rights in the underlying Lampyre Tools, software, algorithms, methodologies, databases, or any other technology embedded in or used to generate such Results.

All such underlying Intellectual Property Rights remain the sole and exclusive property of Data Tower and its licensors. You may use the Results only for your internal lawful purposes and not for any commercial redistribution without our express written consent.

Results obtained through Lampyre Data Lookup and Web tools will be retained for a period of Two (2) months in the Service platform, after which they are automatically and permanently deleted. It is your sole responsibility to export any results you wish to preserve.

Data Tower has the right to store and freely use anonymized and aggregated data generated from your use of the Service even after such a period of time, provided that such data cannot reasonably identify you or any specific individual.

9. Feedback and Suggestions

If you submit any feedback, suggestions, ideas, enhancements, or recommendations regarding the Platform ("Feedback") to Data Tower, whether through support channels, webinars, surveys, or otherwise, you hereby irrevocably assign and transfer to Data Tower all rights, title, and interest in and to such Feedback.

Data Tower shall be free to use, implement, modify, and commercialize any Feedback without any obligation of compensation, attribution, or confidentiality to you, and you waive any moral rights you may have in such Feedback. All Feedback will constitute Confidential Information of Data Tower.

10. Prohibited Conduct, Acceptable Use, and Geographic Restrictions

You agree to use the Platform only for lawful purposes and in full compliance with all applicable local, national, and international laws, regulations, and ordinances, including but not limited to data protection and privacy laws, intellectual property laws, and anti-spam laws.

You specifically agree not to, and shall not permit any third party to:

• create multiple Lampyre accounts without a legitimate and justifiable technical need;

• create Lampyre accounts using other people's personal data;

• make any unauthorized attempts to access, probe, or test the vulnerability of our systems, networks, or infrastructure, including DDoS attacks, hacking, penetration testing, or vulnerability scanning;

• use any automated means, such as bots, scripts, crawlers, scrapers, or other automated devices or processes, to harvest data, extract information, bypass security measures, or access the Platform;

• send spam, unsolicited commercial communications, or other unwanted messages on behalf of Data Tower or using the Platform;

• distribute any malware, viruses, trojans, worms, time bombs, keyloggers, adware, or any other malicious code or programs disguised as or embedded within files generated by Lampyre products;

• use the Platform in any way that infringes upon the intellectual property rights, privacy rights, publicity rights, or other legal rights of any third party;

• use the Platform for any fraudulent or deceptive purpose or in connection with any criminal activity;

• interfere with or disrupt the integrity or performance of the Platform or the data contained therein;

• bypass any licensing features or attempt to obtain the source code underlying the products and services; or

• use the design of our products and sites for commercial purposes without written permission.

You agree to comply with all applicable export and import control laws and regulations, including those of the United Arab Emirates. Any breach of this section will result in immediate account termination and potential reporting to UAE Federal authorities.

You represent and warrant that you are not located in, under the control of, or a national or resident of any country that is subject to comprehensive sanctions, including but not limited to Belarus, Cuba, Iran, North Korea, Syria, Russia, and Venezuela; or identified on the UAE Local Terrorist List or the UN Consolidated List.

You shall not access or use the Platform in violation of any such laws.

11. User Representations and Warranties Regarding Lawful Use

You represent and warrant to Data Tower that:

• your use of the Platform and any data obtained therefrom will be solely for lawful purposes and in full compliance with all applicable laws, including data protection, privacy, and intellectual property laws;

• by making a request via any Lampyre Tool, you confirm that you have grounds for processing personal data in accordance with article 4 of the PDPL or equivalent provisions of applicable data protection laws;

• you have all necessary rights, consents, permissions, and legal bases to use, process, query, upload, and share any data you submit to or process through the Platform;

• you will not use the Platform to target, stalk, harass, discriminate against, or violate the rights of any individual or group;

• you will not use the Platform to conduct surveillance or intelligence activities that violate applicable laws;

• you will not use the Platform to investigate or compile information on any person in violation of their reasonable expectations of privacy; and

• you will indemnify and hold Data Tower harmless from any claims arising from your breach of these representations and warranties.

Data Tower does not control, monitor, or determine the legality of data sources accessed through the Platform and makes no representation that any such data complies with applicable laws in any jurisdiction.

You are solely responsible for ensuring that your access to and use of any data obtained through the Platform complies with all applicable data protection, privacy, and other laws and regulations.

12. Data Processing, User Responsibilities, Data Subject Rights, and Data Retention

You acknowledge and agree that Lampyre aggregates and processes data from a vast and diverse array of external sources, including publicly available open sources, official third-party data providers with whom we maintain commercial relationships, and datasets originating from data breaches or leaks, which are clearly identified as originating from "dark web" or similar sources.

The Company does not verify, endorse, guarantee, or warrant the accuracy, completeness, reliability, truthfulness, legality, or suitability for any purpose of any data obtained through the Platform.

You bear the sole and exclusive responsibility for evaluating, verifying, and determining the suitability, accuracy, and lawfulness of using any information obtained.

By submitting any query or request through the Platform, you confirm and warrant that you have a valid legal ground for processing any personal data you may obtain, access, or encounter, as required by all applicable data protection laws, including but not limited to the PDPL and the EU General Data Protection Regulation (GDPR) where applicable.

The Customer, acting as the Data Controller, represents that they have a valid legal basis under article 4 of the UAE PDPL for all processing activities. If the Results contain sensitive personal data (as defined by UAE law, including biometric, health, or religious data), the Customer warrants they have obtained express consent or meet a specific legal exemption. Data Tower, as the Processor, shall only process such data as strictly necessary to provide the Services.

You assume all obligations of a "Controller" or similar role under relevant data protection laws and agree to indemnify and hold Data Tower harmless from any claims, damages, penalties, fines, or liabilities arising from your failure to comply with such laws.

Regarding data retention, results obtained through Lampyre Data Lookup and Web tools are stored in your account for a limited period of Two (2) months from the date of the original request, after which they are automatically and permanently deleted from our systems without further notice.

Notifications of impending deletion will appear within the account interface two weeks prior to the scheduled deletion date. It is your sole and exclusive responsibility to export, download, or otherwise preserve any results you wish to retain beyond this period.

The Company has no obligation to retain data beyond this period and expressly disclaims any and all liability for any loss of data, regardless of the cause.

Should Data Tower receive a direct request from a data subject concerning their personal data that is within your control, we will refer the data subject to you, as the Controller of that data, and we will cooperate with you as reasonably necessary to facilitate a response, provided we are legally permitted to do so.

The Platform provides access to data that exists in external sources, including publicly available information and third-party databases. Data Tower has no control over, and no ability to modify or delete, any data that resides in these external sources. Any request to delete data from an external source must be directed to the owner or controller of that source.

If a data subject requests the deletion of personal data that appears in Results obtained through the Platform, the Customer, as the Controller, is responsible for responding to such request. Data Tower will, upon the Customer's request and where technically feasible, delete or anonymize any Results stored within the Customer's account on the Platform, provided that such deletion does not affect the underlying data in external sources.

The Company expressly disclaims any and all liability arising from the inability to delete data from external sources.

To the extent the Distributor processes any personal data independently (e.g., for its own billing, CRM, or marketing purposes), the Distributor acts as a separate and independent data controller. Data Tower has no control over, and accepts no liability for, the Distributor's compliance with data protection laws (including, with respect to the Distributor's own independent processing, the GDPR and applicable Slovenian law) in such capacity. For the avoidance of doubt, the Distributor does not assume direct obligations under the UAE PDPL by virtue of this agreement. The Customer acknowledges that any data protection claims arising from the Distributor's independent processing shall be brought exclusively against the Distributor.

13. Confidentiality, Non-Disclosure, and Protection of Information

The Parties agree to maintain absolute and rigorous confidentiality regarding all information and documentation exchanged between them, as well as any information obtained, directly or indirectly, related to the business, operations, technology, or activities of either Party.

Confidential Information shall include, but is not limited to, the Customer's account data, any data they process or upload via the Platform, login credentials, query histories, analysis results, proprietary information, trade secrets, the technical specifications and non-public APIs of the Lampyre Platform, the terms and conditions of these Terms, pricing information, and any non-public business, financial, or technical information.

The obligations of confidentiality shall survive the termination or expiration of these Terms for a period of Two (2) years from the date of termination.

Data Tower shall ensure that any employees, contractors, consultants, or subcontractors with access to Confidential Information are bound by written confidentiality obligations at least as restrictive as those contained herein and have executed appropriate non-disclosure agreements prior to being granted access.

Data Tower shall be liable for any breach of confidentiality caused by its employees or subcontractors, subject to the limitations of liability set forth in these Terms.

In the event of any unauthorized disclosure or misuse of Confidential Information, the disclosing party may seek all available legal and equitable remedies, including injunctive relief. The receiving party shall promptly notify the disclosing party of any actual or suspected breach of confidentiality.

14. Security Obligations and Breach Notification

Data Tower shall maintain appropriate technical and organizational security measures to protect the Platform and any Customer Data processed thereon, in accordance with industry standards and applicable laws.

Please note that Data Tower does not access, collect, or store any data processed via Lampyre Desktop, as all user-generated data remains private and its security is the sole responsibility of the user.

For data processed through other Lampyre Tools, in the event of a security breach that compromises the confidentiality, integrity, or availability of Customer Data, Data Tower shall notify the affected Customer without undue delay, and in any event no later than Seventy Two (72) hours after becoming aware of such breach.

Such notification shall include, to the extent available:

• a description of the nature of the breach;

• the categories and approximate number of data subjects and records concerned;

• the likely consequences of the breach; and

• the measures taken or proposed to address the breach.

Data Tower shall also provide timely updates and cooperate with the Customer to remediate the breach.

The Customer agrees to notify Data Tower immediately of any actual or suspected security breach related to their account or use of the Platform.

In the event of a personal data breach caused by Data Tower that affects Customer Data, our total aggregate liability shall be limited as set forth in section 18. As part of our breach response, we shall:

• provide prompt notification as specified above;

• cooperate with the Customer to investigate and remediate the breach;

• take all reasonable steps to mitigate any adverse effects; and

• upon request, provide reasonable assistance to the Customer in notifying affected data subjects and supervisory authorities, where such notification is required by applicable law.

Notwithstanding the foregoing, the Customer acknowledges that due to our architectural design (including the use of UUIDs and separation of data), the risk of mass data compromise is minimized, and the Customer remains solely responsible for the security of any data they export or store outside the Platform.

Data Tower shall implement technical and organizational security measures aligned with recognized industry standards to protect the Platform. In the event of a confirmed personal data breach affecting Customer Data, Data Tower shall notify the Customer promptly within reasonable time of discovery. The Company shall regularly evaluate the effectiveness of these security measures to ensure the ongoing confidentiality and integrity of the Platform.

15. Third-Party Links, Services, and Content

Our Platform may contain hyperlinks, banners, embedded content, or references directing you to third-party websites, services, resources, or content.

These links are provided solely for your convenience and informational purposes and do not constitute any endorsement, approval, sponsorship, or affiliation by Data Tower with respect to such third parties.

We have no control over, and assume no responsibility or liability for, the content, accuracy, privacy practices, security, availability, legality, or any other aspect of any third-party sites or services. You acknowledge and agree that you access any such third-party links entirely at your own risk, and you should review the applicable terms of use and privacy policies of any third-party sites before interacting with them or providing any personal information.

We expressly disclaim all liability for any loss, damage, cost, or harm arising from your use of or reliance on any third-party content, goods, or services.

16. Intellectual Property Rights and Ownership

The Platform, including all software, source code, object code, algorithms, design, text, graphics, logos, icons, images, audio clips, video clips, documentation, and all other materials comprising the Platform, is the sole and exclusive property of Data Tower and is protected by the UAE Copyright Law.

To the extent the Customer provides Feedback or suggestions, the Customer hereby grants Data Tower an irrevocable, world-wide, royalty-free license to use such Feedback. The Customer expressly waives any moral rights (including the right of attribution or integrity) to the extent permitted under articles 9 and 10 of the UAE Copyright Law.

These Terms grant you no intellectual property rights, title, or interest in or to the Platform, except for the limited, revocable License expressly set forth herein with respect to Lampyre Desktop.

You may not remove, alter, cover, or obscure any copyright, trademark, service mark, or other proprietary rights notices contained in or on the Platform.

Any unauthorized use, reproduction, modification, distribution, transmission, display, or creation of derivative works of any Data Tower intellectual property is strictly prohibited and may result in legal action.

All rights not expressly granted herein are reserved by Data Tower.

17. Disclaimer of Warranties

To the maximum extent permitted by the applicable laws of the Dubai International Financial Centre, the Platform and all content, software, data, and services provided through it are provided on an "as is" and "as available" basis, without any warranties of any kind, either express or implied. data tower expressly disclaims all implied warranties, including but not limited to warranties of merchantability, fitness for a particular purpose, title, quiet enjoyment, quality, accuracy, and non-infringement. without limiting the foregoing, we do not warrant that:

a. the Platform will be uninterrupted, secure, error-free, or free of viruses or other harmful components;

b. the Platform will meet your requirements or expectations;

c. any results, data, or information obtained through the Platform will be accurate, complete, reliable, current, or error-free;

d. the Platform will be successful in identifying all relevant information; or

e. any defects or errors in the platform will be corrected. no advice or information, whether oral or written, obtained by you from us or through the Platform shall create any warranty not expressly stated in these terms.

You assume all risk for any damage to your computer system or loss of data that Results from obtaining any content from the Platform.

You acknowledge that by using the platform you are aware of and take full responsibility for any consequences thereof.

18. Limitation of Liability

To the maximum extent permitted by the applicable laws of the Dubai International Financial Centre and applicable UAE Federal Laws, in no event shall data tower, its affiliates, directors, officers, employees, agents, or licensors be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including without limitation, loss of profits, revenue, data, use, goodwill, or other intangible losses, arising out of or relating to your access to or use of, or inability to access or use, the platform or any content provided therein, whether based on warranty, contract, tort (including negligence), statute, or any other legal theory, and whether or not we have been advised of the possibility of such damages.

Our total aggregate liability to you for any and all claims arising out of or relating to these terms or your use of the platform shall not exceed the total amount paid by you to Data Tower for the subscription during the Twelve (12) months immediately preceding the event giving rise to the liability.

This limitation applies to each incident and the cumulative total of all incidents within that twelve-month period. the foregoing limitations shall apply notwithstanding any failure of essential purpose of any limited remedy. certain jurisdictions do not allow the exclusion or limitation of certain damages, so some of the above exclusions and limitations may not apply to you.

Nothing in these Terms shall exclude or limit liability for fraud, fraudulent misrepresentation, or willful misconduct, or any liability that cannot be excluded or limited under applicable law.

Data Tower shall have zero liability for the accuracy, legality, or truthfulness of external data, or for any legal consequences arising from your decision to process such data in violation of the UAE Cybercrime Law.

Notwithstanding the foregoing, the limitations of liability in this Section shall not apply to damages arising from gross negligence or willful misconduct, or any other liability that cannot be excluded or limited under mandatory applicable law in the jurisdiction where the Customer is established.

For the avoidance of doubt, any liability of Data Tower under these Terms arises solely from its role as the provider of the Platform and is limited as set forth in this section 18. Data Tower is not responsible for:

(a) any commercial terms, invoicing practices, payment collection, or tax advice provided by the Distributor;

(b) any separate agreements between the Customer and the Distributor;

(c) any representations, warranties, or commitments made by the Distributor that are not expressly stated in these Terms;

(d) any failure by the Distributor to remit payments, process refunds, or handle customer service matters related to billing; or

(e) any breach of data protection obligations caused by the Distributor's own processing activities outside the Platform.

Notwithstanding the foregoing, Data Tower remains fully responsible for the functionality, security, availability, and data processing of the Platform itself in accordance with these Terms. Any claims by the Customer related to the Distributor's commercial conduct shall be directed exclusively to the Distributor. This allocation of responsibility does not create any joint liability.

19. Suspension, Termination, Cure Rights, and Refund Policy

Data Tower reserves the right to suspend your access to the Platform or your account immediately, without prior notice, if: (a) you materially breach these Terms or the Acceptable Use Policy; (b) your use of the Platform poses a security risk, could adversely impact our systems or other customers, or could subject us or any third party to liability; or (c) you are in default of your payment obligations.

Any suspension under this section will be limited to the minimum extent necessary to address the underlying cause, and we will reinstate your access promptly once the cause is remedied to our reasonable satisfaction.

The Customer may terminate these Terms if the Platform becomes materially unavailable for a period exceeding Five (5) consecutive business days due to a fault directly and solely attributable to Data Tower, and such unavailability is not remedied within a further Five (5) business days after the Customer provides written notice thereof.

In such event, the Customer shall be entitled to a pro-rata refund of any prepaid fees for the unused portion of the Subscription Term.

Except as expressly provided in our Refund Policy available at lampyre.io/refund-policy, all payments for Subscriptions and Photon packages are non-refundable and non-transferable.

If your Subscription is cancelled due to a breach by you, you are not entitled to any refund for any prepaid amounts, including for any unused Photons.

Refunds, where applicable, are issued for the full amount paid for a Subscription and not for the residual value of unused Photons.

Upon termination of these Terms for any reason:

• your right to access and use the Platform will immediately cease;

• we will deactivate your account, login credentials, and any product keys;

• you remain responsible for all fees and amounts accrued up to the date of termination; and

• the provisions of these Terms that by their nature should survive termination, including but not limited to those relating to confidentiality, intellectual property, limitation of liability, indemnification, and governing law, shall remain in full force and effect.

20. Modification of Services and Platform Evolution

We reserve the right to modify, update, enhance, or otherwise change the Platform and its features at any time to align with technical evolution, security requirements, operational improvements, or changes in applicable laws and regulations.

We may release new versions, updates, or patches for our software, but we are not obligated to maintain or provide ongoing support for older versions. It is your responsibility to ensure that your systems remain compatible with updated versions.

If any such modification constitutes a material adverse change to the functionality of the Platform, we will provide you with at least Fourteen (14) days' advance notice, and you may terminate your Subscription as provided in section 19.

21. Modification of Terms

Data Tower reserves the right to modify, update, or change these Terms from time to time. Any such modifications will be posted on our websites and, where required by applicable law, communicated to Customers directly.

For B2C Customers:

(a) material changes to these Terms will be communicated to you via email or through your account dashboard no less than Thirty (30) days prior to their effective date, in accordance with the UAE Federal Law No. 15 of 2020 on Consumer Protection and its Executive Regulations (Cabinet Decision No. 66 of 2023);

(b) if you do not agree to the revised Terms, you have the right to terminate your account and cease using the Platform before the changes take effect;

(c) your continued use of the Platform after the effective date constitutes your acceptance of the revised Terms;

(d) non-material changes, including but not limited to corrections of typographical errors, clarifications, administrative updates, or changes that do not materially affect your rights, may take effect immediately without prior notice.

For B2B/B2G Customers: Changes to these Terms shall be posted on the Company's Website. For material changes that adversely affect the Customer's rights, Data Tower will provide at least 14 days' advance notice via the User account or email. Continued use of the Platform after the effective date of such changes constitutes acceptance. If the Customer does not agree to a material change, they may terminate their account prior to the effective date without penalty.

22. Governing Law, Dispute Resolution, and Jurisdiction

These Terms and any dispute, controversy, claim, or difference of any kind whatsoever arising out of or in connection with them, including any non-contractual disputes or claims, shall be governed by and construed in accordance with the laws of the Dubai International Financial Centre.

The parties irrevocably submit to the jurisdiction of the DIFC courts for the resolution of all disputes arising under or in connection with these Terms. For the avoidance of doubt, the DIFC courts shall apply the laws of the Dubai International Financial Centre as the governing law of these Terms.

This dispute resolution clause does not prevent either party from seeking injunctive or other equitable relief in any court of competent jurisdiction to protect its intellectual property rights or confidential information.

23. Assignment

We may assign or transfer our rights and obligations under these Terms, in whole or in part, to an affiliate, subsidiary, or successor in interest without your consent, provided such transfer does not materially diminish your rights. You may not assign or transfer any of your rights or obligations under these Terms without our prior written consent, and any attempted assignment in violation hereof shall be void.

24. Relationship of Parties

Nothing in these Terms shall be deemed to establish any partnership, joint venture, employment, or agency relationship between the parties. Each party is an independent contractor.

25. Notices

Any notice or other communication under these Terms shall be in writing and shall be sent by email to the contact email address associated with your account (for you) or to support@lampyre.io (for Data Tower).

Notices shall be deemed effectively given upon sending, unless the sender receives an automated message of non-delivery.

We may also provide you with notices by posting them on the Website or through the Platform interface.

26. Contact Information and Inquiries

For any questions, comments, concerns, or inquiries regarding these Terms, the Platform, or our services, you may contact us: via email at support@lampyre.io; through the web chat feature in your account; by using the contact form at lampyre.io/contact-us.

DATA TOWER TRADE AND SERVICES LLC-FZ

Our legal address: Meydan Grandstand, 6th floor, Meydan Road, Nad Al Sheba, Dubai, the UAE.

Company registration license: 2424752.01

E-mail: support@lampyre.io

We will make reasonable efforts to respond to all inquiries in a timely manner.

APPENDIX I: DATA PROCESSING AGREEMENT (DPA)

1. Purpose and Scope

This Data Processing Agreement forms an integral part of the General Terms and Conditions of Use between Data Tower and the Customer, and is governed by UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (PDPL).

The terms "Personal Data", "Data Subject", "Controller", and "Processor" shall have the meanings ascribed to them in Article 1 of the PDPL.

The Services requested by the Customer through the Platform may entail access to and processing by Data Tower ("Data Processor") of personal data contained in systems owned or controlled by the Customer ("Data Controller").

This Data Processing Agreement sets forth the rights and obligations of the parties concerning the protection of personal data processed by the Data Processor on behalf of the Data Controller.

The purpose of the processing is to provide the Platform and Lampyre Tools to the Data Controller in accordance with the Terms.

The types of data subjects affected include the Data Controller's customers, employees, suppliers, and any other individuals whose personal data is processed through the Platform.

The categories of personal data processed may include identifying data, personal characteristics, employment details, financial information, transaction data, and login credentials, as determined and controlled by the Data Controller.

2. Obligations of the Data Processor

The Data Processor undertakes to:

(a) process personal data exclusively for the purposes outlined in these Terms and in accordance with the documented instructions of the Data Controller;

(b) if any instructions contravene applicable data protection laws, promptly notify the Data Controller;

(c) maintain a written record of all processing activities conducted on behalf of the Controller;

(d) refrain from disclosing data to third parties unless expressly authorized or required by law;

(e) ensure that any subcontracting is subject to prior written authorization and that the Processor remains fully liable for subcontractor performance;

(f) maintain strict confidentiality and ensure all authorized personnel commit to confidentiality;

(g) implement appropriate technical and organizational security measures;

(h) notify the Data Controller of any personal data breach without undue delay, and in any event within Seventy Two (72) hours;

(i) assist the Controller in responding to data subject requests;

(j) assist with data protection impact assessments where required;

(k) upon termination, at the Controller's choice, delete or return all personal data; and

(l) make available all information necessary to demonstrate compliance with this Data Processing Agreement.

3. Obligations of the Data Controller

The Data Controller undertakes to:

• implement appropriate measures to ensure and demonstrate compliance with applicable data protection laws;

• obtain and maintain all necessary consents and legal bases for processing;

• comply with all duties to inform data subjects under applicable laws;

• ensure that processing is lawful, fair, and transparent;

• provide the Data Processor with clear, documented, and lawful instructions;

• adhere to the principle of data minimization;

• conduct any required prior consultations with supervisory authorities; and

• respond promptly to any queries from the Data Processor regarding data processing activities.

IN WITNESS WHEREOF, these Terms, including Appendix I, are executed and shall become effective as of the date of acceptance by the Customer.