CLOUD SERVICE HOSTING USER NOTICE

CLOUD SERVICE HOSTING USER NOTICE

Version Date: July 29, 2026

1. GENERAL PROVISIONS

1.1 In this Notice:

1.1.1 "the Company" or "we," "us," or "our" refers to Cloudigo Technology Limited, the service provider.

1.1.2 "you" or "your" refers to the customer accepting this Notice, the service recipient.

1.1.3 "Cloud Provider" refers to mainstream cloud service providers including but not limited to AWS (Amazon Web Services), Alibaba Cloud International, GCP (Google Cloud Platform), Byteplus, and others.

1.1.4 "LLM Services" means the large language model services accessed by us through cloud provider APIs on your behalf, including but not limited to AWS Bedrock, Azure OpenAI, Anthropic Claude, Google Vertex AI, and others, as actually utilized from time to time.

1.1.5 "LLM Provider" means the third-party service provider offering LLM Services, including but not limited to Anthropic, OpenAI, Meta, Google, Alibaba Cloud, Byteplus, DeepSeek, Zhipu AI and others. This list is provided for reference purposes only. We reserve the right to update the actual LLM Providers engaged from time to time.

1.1.6 "LLM Input Data" means any prompts, instructions, files, and other data in any form submitted by you or your authorized users to the LLM Services.

1.1.7 "LLM Output Content" means any text, code, images, and other content in any form generated and returned by the LLM Services based on the input data.

1.1.8 "Privacy Policy" means the Cloud Service Hosting – Data Intermediary Privacy Policy separately issued by the Company, the terms of which are incorporated by reference and form an integral part of this Notice.

1.2 This User Notice (this "Notice") applies to the cloud service resource account creation, configuration, permission management and other hosting services provided by us to you in relation to the Cloud Provider. The services do not include application-level debugging or customization of operating system internals.

1.3 By confirming acceptance of this Notice through the online page, you are deemed to have fully read, understood and agreed to all terms and conditions herein. You further confirm that you have read, understood and agreed to all terms of the Privacy Policy. This Notice shall become effective as of the date when the system successfully records your confirmation information and shall be legally binding on both parties.

1.4 Matters not covered by this Notice shall be notified to you by the Company in the form of supplementary notices, and such supplementary notices shall reflect updates to cloud provider rules and actual business needs. Supplementary notices shall form an integral part of this Notice.

2. AUTHORIZATION AND PERMISSION MANAGEMENT

2.1 You agree to grant the Company such account permissions as we reasonably determine are necessary for the Company to create and manage cloud service resources on your behalf. The methods of authorization include but are not limited to organization administrator IAM permissions and RAM permissions. All authorizations strictly adhere to the minimum permissions necessary for the performance of the hosting services, as well as the relevant restrictions imposed by the applicable cloud providers. For operations involving resource termination or core data migration, the Company shall obtain your specific confirmation via email or ticketing system before execution, except in cases of emergency troubleshooting (provided that a supplemental record is made within 24 hours thereafter).

Special Exception – Suspension Due to Non-Payment: Where your account balance is insufficient, your credit limit is exhausted, or you fail to pay cloud provider infrastructure fees within the agreed time, resulting in the Company facing the risk of advancing funds or the cloud provider initiating automatic suspension, the foregoing "prior confirmation" rule shall not apply. In such circumstances, the Company shall have the right to cooperate with the cloud provider in executing account suspension or resource release operations without obtaining separate item-by-item confirmation from you, and you have granted an irrevocable prior authorization to the Company for such actions through Section 4.3.4.

2.2 Special Authorization for LLM Calls:

2.2.1 You agree to grant us the authority to access and utilize LLM Services through cloud provider APIs on your behalf, for the purpose of providing the relevant functional services to you.

2.2.2 You acknowledge and agree that the use of LLM Services will result in your input data being transmitted to LLM Providers' servers for processing, and that such processing is subject to the LLM Providers' own terms of service and data processing agreements.

2.2.3 We do not represent or warrant that any LLM Provider offers "zero data retention" commitments or commit not to use customer data for model training purposes. We do not control the data processing practices of any LLM Provider, and we make no representation or warranty with respect to any LLM Provider's data usage policies. We also assume no liability for the data processing practices of any LLM Provider, as further set forth in Section 10.2 of the Privacy Policy.

2.2.4 If you have any objection to a particular LLM Provider's data processing policies, you shall notify us in writing before using the relevant features. You shall be solely liable for evaluating and selecting any alternative LLM Provider, and we make no representation or warranty with respect to any such provider's data processing policies. If you elect not to use any available alternative, you shall cease using the relevant features.

2.3 The Company shall only operate within the scope of permissions authorized by you and shall not sublicense or transfer such permissions to any third party, nor use such permissions for purposes unrelated to your business.

2.4 You shall properly safeguard your cloud provider master account credentials, MFA (multi-factor authentication) devices, LLM API Keys, AK/SK or other access credentials (if any), and other related information. Any resource loss or data breach caused by your own actions, including but not limited to master account compromise or failure to enable MFA, shall be solely and fully borne by you, and the Company's obligation in respect thereof shall be limited to notifying you in accordance with Section 13 of the Privacy Policy.

2.5 Legal Status of the Company as a Data Intermediary:

2.5.1 You confirm and agree that, in the course of providing the hosting services, the Company acts solely as a "data intermediary" in processing personal data. We process data solely in accordance with your instructions and are subject only to the PDPA as applicable to data intermediaries.

2.5.2 You, as the data controller, shall take full responsibility for compliance with all obligations under the PDPA. The specific division of obligations is set forth in Sections 5 and 11 of the Privacy Policy.

3. SPECIAL PROVISIONS ON ADAPTATION TO CLOUD PROVIDER RULES

All hosting services provided by the Company strictly comply with the official rules of each Cloud Provider. In the event of adjustments to cloud provider rules, the Company will notify you and assist you in adapting your permissions and access methods accordingly. The Company shall not be liable for any temporary service restrictions arising from adjustments to cloud provider rules. If, after receiving such notice, you fail to complete the necessary adaptation within a reasonable period (e.g., 7 business days), the Company shall not be liable for any service interruption or permission invalidation resulting therefrom.

4. RIGHTS AND OBLIGATIONS OF BOTH PARTIES

4.1 Your Rights and Obligations

4.1.1 You have the right to review the scope of permissions granted. If you wish to revoke all authorizations or terminate the hosting services, you shall provide written or email notice at least 5 business days in advance and cooperate with the Company to complete the resource handover confirmation. Prior to completion of the handover, you shall not unilaterally revoke critical authorizations; otherwise, any management deficiencies, configuration errors, or data loss arising therefrom shall be borne by you, and you shall indemnify the Company against any losses resulting therefrom.

4.1.2 You shall provide true, accurate and complete cloud provider registration information and supporting documents. If any such information changes, you shall notify the Company promptly, and in any event within 5 days of such change. Any cloud provider penalties or service interruptions resulting from inaccurate information shall be borne by you.

4.1.3 You shall be solely responsible for the infrastructure fees charged by cloud providers (e.g., cloud servers, storage, bandwidth, etc.) and the Company assumes no responsibility for the reasonableness, accuracy, or exchange rate fluctuations of such fees. The Company only charges fees for the hosting services as separately agreed between the parties.

4.1.4 You shall not request the Company to operate in violation of cloud provider rules or applicable laws and regulations of any relevant jurisdiction, nor shall you use the hosting services for any unlawful or infringing activities. You shall indemnify and hold harmless the Company from and against any claims, damages, losses, liabilities, costs and expenses (including legal fees) arising out of or in connection with your breach of this Section 4.1.4.

4.1.5 You acknowledge and agree that cloud provider infrastructure fees may be settled in US Dollars or other foreign currencies. You are solely liable for monitoring exchange rates and ensuring that your account balance is sufficient to cover all charges, including any shortfall arising from exchange rate fluctuations. The Company shall have no obligation to notify you of any such fluctuations or their impact on your fees. Final charges shall be determined by the cloud provider's invoice and shall be final and binding on you.

4.1.6 Representations and Warranties Regarding LLM Input Data:

You represent and warrant that:

4.1.6.1 Your LLM Input Data does not contain any unauthorized personal data, trade secrets, source code, API keys, database credentials, or other sensitive information;

4.1.6.2 If your LLM Input Data contains personal data, you have obtained all necessary authorizations from the relevant data subjects to permit such data to be transmitted to and processed by the LLM Providers;

4.1.6.3 You shall not use the LLM Services for any unlawful, infringing, or fraudulent activities, or in any manner that violates the LLM Providers' acceptable use policies; and

4.1.6.4 You shall indemnify, defend, and hold us harmless from and against any and all claims, damages, losses, liabilities, costs, and expenses (including legal fees) arising out of or in connection with your breach of this Section 4.1.6.

4.2 The Company's Rights and Obligations

4.2.1 The Company has the right to adjust the specific content of the hosting services in response to mandatory cloud provider rule updates or necessary policy adjustments for enhancing the security of the hosting services and will provide you with prior notice of such adjustments.

4.2.2 The Company shall adopt industry-standard security measures to protect the security of your accounts, which may include, where the Company deems appropriate in its reasonable discretion, periodic rotation of AK/SK, enabling operational log auditing, and restricting operational IP ranges. Specific security measures are detailed in Section 6 of the Privacy Policy.

4.2.3 The Company shall keep your business data and cloud resource configuration information strictly confidential in accordance with Section 14 of the Privacy Policy and shall not disclose them to any third party, except as required by laws or regulations, or with your prior written consent.

4.2.4 The Company may, in its sole discretion, respond to your requests within its then-current operational capability. No guaranteed response time or service level shall apply unless separately agreed in writing.

4.3 Non-Payment Handling Procedures

4.3.1 Early Warning Notice: When your account balance is about to be exceeded, the Company will send an insufficient balance warning notice to you via email and in-system messages.

4.3.2 Replenishment Grace Period: You shall complete the replenishment or submit the payment voucher within 3 business days after receiving the warning notice.

4.3.3 Suspension Execution:

If the grace period expires and you still have not replenished your account, the Company has the right to suspend access to the cloud service resources until the outstanding fees are settled.

If the grace period expires and more than 7 calendar days have passed without replenishment, the cloud provider may release (delete) the underlying resources. Any data loss resulting from the cloud provider's forced release of resources due to your failure to replenish your account in a timely manner shall be solely and fully borne by you, and the Company shall not bear any compensation liability.

4.3.4 Pre-Authorization for Non-Payment Suspension:

By clicking "Confirm Authorization," checking "I have read and agree," or completing other online contracting processes to accept this Notice, you are deemed to have fully understood and agreed to the foregoing non-payment handling procedures (including early warning notices, grace periods, and suspension execution). Such consent is irrevocable.

You confirm that, after receiving the insufficient balance warning notice from the Company, if you fail to complete the full replenishment within the agreed grace period, you shall be deemed to have given consent to the Company's cooperation with the cloud provider in executing account suspension or resource release operations. Such consent is irrevocable. In such circumstances, the Company is not required to obtain separate written or electronic confirmation from you for each individual operation, and the system will automatically execute in accordance with this provision.

4.3.5 Company's Right to Delete Data on Non-Cooperation:

You confirm that, under no circumstances (including but not limited to non-payment, service termination, or during disputes), shall the Company's data return or deletion obligations under Section 7 of the Privacy Policy be indefinitely suspended due to your non-payment. If you fail to cooperate with the data return within 30 days after service termination, the Company shall have the right, without further notice, to securely delete the relevant data in accordance with Section 7.2 of the Privacy Policy, and the Company shall not bear any liability for any data loss arising therefrom.

5. CONFIDENTIALITY

5.1 Both parties shall keep confidential the other party's commercial secrets, technical information, cloud account information, LLM Input Data and LLM Output Content, business data, and other information learned during the performance of this Notice. Neither party shall disclose or use such information to any third party without the other party's prior written consent; provided, however, that disclosure made in response to lawful requests from regulatory authorities or judicial bodies, after notifying the other party (except in emergency situations), shall not be deemed a breach of this provision. Disclosure by the Company to sub-processors (i.e., Cloud Providers and LLM Providers) to the extent necessary for performing the Hosting Services shall not be deemed a breach of this confidentiality obligation.

5.2 The confidentiality obligations under this Section V shall remain in effect from the effective date of this Notice until five (5) years after the termination of this Notice; provided, however, that with respect to core secrets involving cloud account information, AK/SK, and business data, the confidentiality obligations shall continue in full force and effect until such information enters the public domain.

6. RISK ALLOCATION AND DISCLAIMERS

6.1 Non-operational failures of cloud provider underlying hardware, networks, power, system crashes, and the like are covered by the cloud service providers' own service level agreements. Any business losses incurred by you due to cloud provider service interruptions, network failures, or force majeure events shall be handled by the Company solely through assistance in filing claims, and the Company shall not bear any ultimate compensation liability.

6.2 Any losses resulting from your failure to properly safeguard master account information, disclosure of authorized permissions, or provision of false qualification information shall be borne by you.

6.3 To the extent permitted by applicable law, the Company shall be liable only for direct losses caused by its own willful misconduct or gross negligence. Under no circumstances shall the Company be liable for any indirect, incidental, or consequential damages, including but not limited to loss of anticipated profits, loss of goodwill, or third-party claims. For the avoidance of doubt, business interruption losses shall be deemed indirect losses. In any event, the Company's aggregate cumulative compensation liability to you shall not exceed, in respect of any single incident, the total service fees actually paid by you to the Company within the three (3) months immediately preceding the occurrence of such incident, provided that the Company's aggregate cumulative liability to you under this Notice shall in no event exceed the total service fees actually paid by you to the Company within the six (6) months immediately preceding the occurrence of the dispute. This limitation of liability shall also apply to any breach by the Company of its obligations under the Privacy Policy.

6.4 The Company shall not be liable for any service restrictions arising from adjustments to cloud provider rules or upgrades to risk control policies. You shall be solely responsible for complying with any such adjustments or upgrades. Upon your written request, the Company shall provide you with then-available information regarding such adjustments or upgrades, but shall have no obligation to take any active role in any appeal or adaptation process. Any appeal or adaptation shall be conducted by you at your own risk and expense.

6.5 Special Disclaimers for LLM Services:

6.5.1 LLM Services generate output content through artificial intelligence models and are provided on an "AS IS" and "AS AVAILABLE" basis. We make no warranties of any kind, express or implied, regarding the accuracy, completeness, legality, reliability, or usefulness of any LLM Output Content.

6.5.2 We shall not be liable for any third-party claims arising out of or in connection with LLM Output Content, including but not limited to claims of intellectual property infringement, defamation, or trade secret misappropriation. You shall assess and bear all such risks at your own discretion.

6.5.3 LLM Services may be temporarily or permanently interrupted due to technical failures, policy changes, service discontinuation, or other reasons attributable to the LLM Providers. We shall have no obligation to notify you of any such interruption or to assist in transitioning to any alternative solution. You are solely liable for monitoring the availability of the LLM Services and for implementing any alternative arrangements you deem appropriate.

6.5.4 We shall not be liable for any data processing practices of LLM Providers (including but not limited to data storage, data usage, or data breaches). You acknowledge that all risks associated with the accuracy, legality, and suitability of the data processing practices of LLM Providers, shall be borne by you at your own discretion. For further disclaimers, see Sections 10.2 and 16 of the Privacy Policy.

7. AMENDMENT AND TERMINATION

7.1 The Company has the right to amend this Notice in response to changes in cloud provider rules or business development needs. The amended Notice will be communicated to you via email, in-system notifications, or other means. If you do not raise a written objection within seven (7) calendar days after receiving such notice, you shall be deemed to have accepted the amendments. If you raise an objection, the parties shall negotiate in good faith. If no agreement is reached through negotiation, you have the right to terminate this Notice early without incurring any liability for breach of contract, provided that such termination shall not relieve you of any obligations accrued prior to the effective date of such termination (including but not limited to outstanding fees and any liabilities arising from your breach of this Notice), and shall not affect the survival of any provisions of the Privacy Policy which by their terms are intended to survive termination, and the Company shall cooperate in completing the data return subject to your full settlement of all outstanding fees.

7.2 You may terminate the hosting services by providing written notice to the Company at least 3 business days in advance. The Company shall cooperate in completing permission revocation and resource handover. Specific arrangements for data return and deletion shall be governed by Section 7 of the Privacy Policy. If you have any outstanding fees (including cloud provider infrastructure fees and hosting service fees), the Company has the right to suspend the permission revocation and data handover process until all such fees are settled. Any data loss resulting from the cloud provider's suspension of resources due to non-payment shall be borne by you.

7.3 If you violate any provision of this Notice, cloud provider rules, or applicable laws or regulations of any relevant jurisdiction, the Company has the right to terminate the services immediately, revoke all authorized permissions, and shall not be liable for any breach of contract. Except in cases involving illegality, fraud, or material infringement of third-party rights, the Company shall grant you a cure period of 3 calendar days prior to termination.

8. DISPUTE RESOLUTION

8.1 Governing Law

8.1.1 The formation, performance, interpretation, and dispute resolution of this Notice shall be governed by the laws of the Republic of Singapore[W1] .

8.1.2 The validity, interpretation, and performance of the arbitration clause contained in this Notice shall be governed by the laws of the Republic of Singapore.

8.2 Arbitration

8.2.1 Any dispute arising out of or in connection with this Notice, including any question regarding its existence, validity, or termination, shall be referred to and finally resolved by arbitration administered by the Singapore International Arbitration Centre ("SIAC") in accordance with the Arbitration Rules of the Singapore International Arbitration Centre for the time being in force (including the provisions on streamlined procedure and expedited procedure), which rules are deemed to be incorporated by reference in this Section VIII.

8.2.2 The seat of the arbitration shall be the Republic of Singapore. The arbitral tribunal shall consist of one or three arbitrators, who shall be appointed from the panel of arbitrators of the Singapore International Arbitration Centre.

8.2.3 The language of the arbitration shall be English. The arbitral tribunal may require the parties to provide English translations of any evidentiary materials submitted in languages other than English.

8.2.4 The arbitral award shall be final and binding on both parties. The parties agree that the arbitral award may be recognized and enforced in any competent courts of the contracting states pursuant to the Convention on the Recognition and Enforcement of Foreign Arbitral Awards (the "New York Convention").

9. MISCELLANEOUS

Special Notice: You acknowledge and confirm that the underlying availability of cloud services is independently guaranteed by each Cloud Provider (AWS (Amazon Web Services), Alibaba Cloud, GCP (Google Cloud Platform), etc.). The Company is only responsible for its own operational conduct, as specifically set forth in Section VI of this Notice.

By clicking the "Confirm Acceptance" button or checking the "I have read and agree" option, you shall be deemed to have:

9.1 carefully read and fully understood all terms and conditions of this Notice (including the Privacy Policy incorporated by reference);

9.2 voluntarily granted the Company the corresponding cloud service account permissions and accepted the pre-authorization arrangements for non-payment suspension; and

9.3 acknowledged that the account ID, timestamp, and IP address of this confirmation operation will be automatically recorded by the system, and such electronic records shall have the same legal effect as a written signature and seal.