Privacy Policy
Version 2.0 · Effective July 25, 2026
Shop Vault AI's Terms of Service and Privacy Policy are published as a single document. The full text is below, and a plain-text copy is available at /legal/shopvault_terms_and_privacy_v2.txt.
SHOPVAULT Terms of Service & Privacy Policy Effective Date: July 25, 2026 | Version 2.0 IMPORTANT — PLEASE READ CAREFULLY These Terms of Service and Privacy Policy (together, the “Agreement”) constitute a legally binding contract between you and ShopVault, Inc. (“ShopVault”, “we”, “us”, or “our”). By creating an account, clicking “I Agree”, or otherwise accessing or using the ShopVault platform, you agree to be bound by this Agreement. ShopVault is a business-to-business service. By accepting this Agreement you represent that you are entering into it for business or commercial purposes on behalf of a business or other legal entity, and that you have the authority to bind that entity. If you do not have such authority, or if you do not agree to all of these terms, you must not access or use the Service. THIS AGREEMENT CONTAINS A BINDING ARBITRATION CLAUSE AND CLASS ACTION WAIVER (SECTION 18) AND IMPORTANT DISCLAIMERS ABOUT AI-GENERATED OUTPUT AND SAFETY-CRITICAL USE (SECTIONS 2 AND 11). PLEASE REVIEW THOSE PROVISIONS CAREFULLY. Contents Part One — Terms of Service 1. Definitions 2. Service Description & Eligibility (Business Use Only) 3. Accounts & Authorized Users 4. Ownership of Customer Data 5. Data Storage & Processing 6. Data Use & Non-Sale 7. Data Control, Retention & Deletion 8. Billing, Fees & Subscriptions 9. Cancellation 10. Usage Limits & Upgrades 11. AI Features — Important Disclaimers 12. Security 13. Acceptable Use Policy 14. Intellectual Property 15. Warranty Disclaimer 16. Limitation of Liability 17. Indemnification 18. Dispute Resolution & Arbitration 19. Governing Law 20. Suspension & Termination 21. Modifications to this Agreement 22. General Provisions Part Two — Privacy Policy P1. Who We Are P2. Information We Collect P3. How We Use Your Information P4. Disclosure of Personal Information P5. Data Retention P6. Your Privacy Rights (U.S. multi-state, GPC, Canada) P7. Security of Personal Information P8. Cookies & Tracking Technologies P9. Children’s Privacy P10. Cross-Border Data Transfers P11. Third-Party Links & Services P12. Changes to this Privacy Policy P13. Contact — Privacy Officer Part One — Terms of Service 1. Definitions The following capitalized terms have the meanings set out below throughout this Agreement. Other capitalized terms are defined where they first appear. “Account” means the account you register with ShopVault to access and use the Service. “Agreement” means these Terms of Service and the Privacy Policy set out in Part Two, together with any Order Form, Enterprise Addendum, Data Processing Agreement, and any policies incorporated by reference. “AI Features” means the artificial intelligence and machine learning capabilities embedded in the Service that process, analyze, summarize, retrieve, or generate responses based on Customer Data, including retrieval-augmented generation. “Authorized User” means any individual you permit to access and use the Service under your Account, including your employees, contractors, and agents. “Confidential Information” means any non-public information disclosed by one party (the “Disclosing Party”) to the other (the “Receiving Party”), whether orally, in writing, or by access to systems, that is marked or identified as confidential or that a reasonable person would understand to be confidential given its nature and the circumstances of disclosure, including the Service’s non-public features, pricing, and technical information, and the Disclosing Party’s business and technical information. Confidential Information does not include information that: (a) is or becomes publicly available through no fault of the Receiving Party; (b) was rightfully known to the Receiving Party without confidentiality obligation before disclosure; (c) is rightfully received from a third party without confidentiality obligation; or (d) is independently developed by the Receiving Party without use of or reference to the Disclosing Party’s Confidential Information. “Customer” means the business or other legal entity that registers for and uses the Service. The Service is offered solely to Customers acting for business or commercial purposes. “Customer Data” means all documents, files, data, information, and other content that you upload, submit, or otherwise transmit to the Service. “Effective Date” means the date on which you first accept this Agreement by creating an Account or clicking “I Agree”. “Feedback” means any suggestions, ideas, feature requests, recommendations, comments, or other input you provide to ShopVault regarding the Service. “Order Form” means a written or electronic ordering document executed between you and ShopVault specifying the subscription plan, fees, and other commercial terms. “Output” means any AI-generated response, summary, analysis, answer, citation, or other content produced by the AI Features based on Customer Data or your queries. “Personal Information” means information that identifies, relates to, or could reasonably be linked to an identified or identifiable natural person, as further defined in Part Two (Privacy Policy). “Service” means the ShopVault AI-powered document and knowledge management platform, including all associated software, APIs, interfaces, and support services made available by ShopVault. “Subscription” means your authorized and paid access to the Service for a defined term under a selected plan. “Subscription Fee” means the recurring charges payable for your Subscription as set out in your selected plan or Order Form. “Subscription Term” means the duration of your Subscription, beginning on the Effective Date and continuing until cancelled or terminated. “Third-Party Services” means any third-party integrations, connectors, applications, models, data sources, storage or synchronization services (including cloud storage and drive-synchronization integrations), or other products or services that are not provided directly by ShopVault, whether or not accessed through or in connection with the Service. 2. Service Description & Eligibility 2.1 Service ShopVault is an AI-powered knowledge and document management platform. The Service allows Customers to upload, classify, extract, index, store, organize, and query documents and other content using artificial intelligence, including retrieval-augmented generation that draws on Customer Data. Outputs are generated for decision-support purposes only and are not guaranteed to be accurate, complete, current, or suitable for any specific purpose. You are solely responsible for evaluating and verifying any Output before relying on it. 2.2 Business Use Only; Eligibility The Service is offered solely for business and commercial purposes. The Service is not intended for, offered to, or directed at consumers acting for personal, family, or household purposes, and it is not a consumer product. By accessing or using the Service, you represent that you are using it for business or commercial purposes on behalf of a business or other legal entity. To use the Service you must: (a) be at least 18 years of age; (b) have the legal capacity and authority to enter into binding contracts on behalf of the entity you represent; (c) not be a person or entity barred from using the Service under the laws of the United States, Canada, or any other applicable jurisdiction; and (d) have authority to bind the entity on whose behalf you act to this Agreement. 2.3 Geographic Availability The Service is offered to Customers located in the United States and Canada. By using the Service, you represent that you are located in one of these jurisdictions. ShopVault makes no representation that the Service is appropriate or available for use in jurisdictions outside the United States and Canada. Access from other jurisdictions is at your own risk and you are responsible for compliance with local laws. 2.4 No Professional Advice The Service and any Output do not constitute legal, financial, medical, accounting, engineering, regulatory, code-compliance, or other professional advice. You should not rely on Output as a substitute for advice or sign-off from a qualified, and where applicable licensed, professional. ShopVault expressly disclaims any liability for decisions made based on Output. This Section 2.4 survives termination or expiration of this Agreement. 3. Accounts & Authorized Users 3.1 Account Registration To access the Service, you must register for an Account by providing accurate, complete, and current information. You agree to maintain and promptly update your Account information as necessary to keep it accurate and complete. ShopVault reserves the right to reject any Account registration or suspend any Account based on inaccurate or fraudulent information. 3.2 Account Credentials You are solely responsible for maintaining the confidentiality and security of your Account credentials, including usernames and passwords. You agree not to share your credentials with any third party other than Authorized Users, and to immediately notify ShopVault at support@shopvaultai.com of any unauthorized access to or use of your Account or any other security breach. 3.3 Authorized Users You may grant access to the Service to Authorized Users. You are solely responsible and liable for: (a) all acts and omissions of your Authorized Users; (b) ensuring that Authorized Users comply with this Agreement; and (c) all Customer Data submitted by your Authorized Users. Your agreement with each Authorized User must be no less protective of ShopVault’s rights than this Agreement. 3.4 Account Activity You are responsible and liable for all activity that occurs under your Account, whether or not authorized by you. ShopVault shall not be liable for any loss or damage arising from your failure to maintain the security of your Account credentials. 3.5 One Account Per Entity Each legal entity may maintain only one active Account unless ShopVault expressly permits otherwise in writing. 4. Ownership of Customer Data 4.1 Your Ownership As between you and ShopVault, you retain all right, title, and interest in and to your Customer Data. This Agreement does not transfer any ownership of Customer Data to ShopVault. ShopVault does not claim ownership of Customer Data. 4.2 License Grant to ShopVault You grant ShopVault a limited, non-exclusive, worldwide, royalty-free license to access, use, process, copy, transmit, store, and display your Customer Data solely to the extent necessary to: (a) provide and maintain the Service; (b) develop, improve, and protect the Service solely as and to the extent permitted under Sections 5.4 and 6.3 (that is, in aggregated and fully anonymized form only, and never to train AI models on Customer Data); (c) comply with applicable law and legal obligations; (d) enforce this Agreement; and (e) respond to your support requests. 4.3 Representations Regarding Customer Data You represent and warrant that: (a) you have all rights, licenses, consents, and permissions necessary to submit Customer Data to the Service and to grant the license in Section 4.2; (b) your Customer Data does not and will not infringe, misappropriate, or violate the intellectual property rights, privacy rights, or other rights of any third party; (c) your Customer Data does not contain content that is unlawful, defamatory, obscene, or otherwise in violation of applicable law; and (d) your Customer Data does not contain any malware, viruses, or other harmful code. 4.4 Output Ownership As between you and ShopVault, and effective upon generation, ShopVault assigns to you all right, title, and interest in and to Output generated specifically in response to your queries. This assignment is not conditioned on your payment or ongoing compliance; however, your right to access and use the Service to generate further Output remains subject to your compliance with this Agreement and payment of applicable Subscription Fees. You acknowledge that Output may not be unique to you — other users may receive similar or identical Output — and ShopVault makes no warranty of exclusivity with respect to Output. This Section 4.4 survives termination or expiration of this Agreement. 5. Data Storage & Processing 5.1 Infrastructure Customer Data is stored on secure, commercially reputable third-party cloud infrastructure located in the United States and Canada. ShopVault takes reasonable steps to ensure that its infrastructure providers maintain appropriate security standards. 5.2 AI Processing Customer Data may be processed by the AI Features to generate Outputs in response to your queries. This processing occurs within ShopVault’s controlled technical environment and through third-party AI model providers engaged by ShopVault. ShopVault contractually and, where applicable, through configuration (such as zero-data-retention or no-logging settings and enterprise service tiers) requires that the third-party AI model providers it engages do not use Customer Data to train their own models and process Customer Data only to provide services to ShopVault, in each case to the extent provided under ShopVault’s agreements with, and the configuration options made available by, those providers. A current list of subprocessors, including AI model providers, is available by request to support@shopvaultai.com. 5.3 Geographic Processing Customer Data is processed primarily within the United States and Canada. Where processing occurs outside these jurisdictions (for example, by a cloud infrastructure provider operating redundant systems), ShopVault maintains appropriate contractual safeguards to protect Customer Data in accordance with applicable law. 5.4 No AI Training on Customer Data ShopVault does not use Customer Data to train, fine-tune, or otherwise develop its own AI models, and does not authorize any third-party AI model provider it engages to use Customer Data to train, fine-tune, or develop that provider’s models, except to the extent an individual Customer directs otherwise in writing. Customer Data submitted to the Service is used solely to provide the Service to you. ShopVault may, however, use Customer Data in aggregated and fully anonymized form — such that it cannot be re-identified or linked to you or your business — to develop, improve, and refine the Service. The representations in this Section 5.4 survive termination or expiration of this Agreement as to representations made during the Subscription Term. 6. Data Use & Non-Sale 6.1 Permitted Uses ShopVault uses Customer Data and Personal Information only for the following purposes: (a) operating, maintaining, and improving the Service; (b) responding to your queries and support requests; (c) billing and account management; (d) security monitoring and fraud prevention; (e) complying with legal obligations; and (f) communicating with you about the Service, including service announcements, updates, and security alerts. 6.2 No Sale of Customer Data ShopVault does not sell, rent, lease, or otherwise transfer Customer Data or Personal Information to third parties for monetary consideration or any other valuable consideration. ShopVault does not share Customer Data or Personal Information with third parties for their own marketing or advertising purposes. 6.3 Aggregated Data ShopVault may generate and use anonymized, aggregated, and de-identified data derived from Customer Data and usage of the Service for purposes of analyzing and improving the Service, producing industry benchmarks, and developing new features. Such data cannot be used to identify you or your Authorized Users. 6.4 Feedback If you provide Feedback to ShopVault — including suggestions, ideas, feature requests, or comments — you hereby assign to ShopVault all right, title, and interest in and to such Feedback, including all intellectual property rights therein. ShopVault may use, incorporate, modify, sublicense, and commercialize Feedback for any purpose without restriction and without any obligation, attribution, or compensation to you. This Section 6.4 survives termination or expiration of this Agreement. 7. Data Control, Retention & Deletion 7.1 Your Right to Delete You may delete Customer Data from within the Service at any time using the tools and interfaces provided. Deleted data is removed from your active environment within 24 hours of deletion. 7.2 Retention During Subscription ShopVault retains Customer Data for the duration of your Subscription Term and for 30 days following termination or expiration of your Subscription (the “Retention Period”), during which time you may export your Customer Data using the export tools provided in the Service. 7.3 Post-Termination Deletion Following expiration of the Retention Period, ShopVault will delete all Customer Data from its active systems within 30 days. Backup copies of Customer Data may persist in encrypted archive storage for up to 90 days from the date of termination or deletion, following which they will be permanently deleted. ShopVault cannot recover Customer Data once permanently deleted. This Section 7.3 survives termination or expiration of this Agreement. 7.4 Exceptions to Deletion Notwithstanding the foregoing, ShopVault may retain Customer Data or Personal Information where: (a) required or permitted by applicable law, including any legal hold, litigation, regulatory obligation, or audit requirement; (b) required to resolve disputes or enforce this Agreement; or (c) required to maintain system integrity and security logs (in which case such data is retained in a limited, access-controlled environment for no longer than 12 months). 7.5 Data Export ShopVault provides data export functionality that allows you to export Customer Data in an industry-standard format (e.g., JSON, CSV, or PDF, depending on document type). You are encouraged to exercise the export option prior to cancelling your Subscription. 8. Billing, Fees & Subscriptions 8.1 Subscription Plans ShopVault offers the Service on a recurring Subscription basis. The features, limits, and Subscription Fees applicable to each plan are set out on the Service’s billing settings page shopvaultai.com/settings/billing and may be updated from time to time in accordance with Section 8.5. Your Subscription plan and Subscription Fees are confirmed at the time of registration or order. 8.2 Automatic Renewal Your Subscription renews automatically at the end of each Subscription Term (monthly or annual, as selected) at the then-current Subscription Fee unless you cancel prior to the renewal date in accordance with Section 9. By subscribing, you authorize ShopVault to charge your designated payment method automatically upon each renewal. 8.2(a) Pre-Purchase Disclosure Before you complete a purchase, ShopVault will present the automatic-renewal terms — including the recurring nature of the charges, the renewal frequency, the amount (or a description of how it is determined), and how to cancel — in a clear and conspicuous manner in visual proximity to the mechanism by which you accept and submit your order, and will obtain your affirmative consent to those automatic-renewal terms. 8.2(b) Post-Purchase Acknowledgment After you subscribe, ShopVault will send an acknowledgment to your Account email address that includes the automatic-renewal terms, the amount and frequency of the recurring charge, and clear instructions for how to cancel. You may cancel online through the same means used to subscribe, as described in Section 9. 8.3 Payment All Subscription Fees are due in advance. You must provide a valid payment method (credit card or other method accepted by ShopVault) and maintain accurate and complete billing information. ShopVault uses third-party payment processors and does not store full payment card information on its own systems. You authorize ShopVault’s payment processors to charge the Subscription Fee to your payment method on each renewal date. 8.4 Taxes Subscription Fees are exclusive of all applicable sales, use, goods and services, value-added, withholding, and similar taxes and levies. You are responsible for all such taxes in connection with your Subscription, other than taxes on ShopVault’s net income. Where required by law, ShopVault will collect and remit applicable taxes and include such amounts on your invoice. 8.5 Price Changes ShopVault may change Subscription Fees at any time upon at least 30 days’ advance written notice to you by email to the address on file with your Account. Any price change will take effect at the start of your next Subscription Term following the date of notice. If you do not agree to a price change, you may cancel your Subscription before the next renewal date in accordance with Section 9. Your continued use of the Service after a price change takes effect constitutes your acceptance of the new Subscription Fee. 8.6 Late Payments & Suspension If any Subscription Fee is not paid when due, ShopVault may, at its sole discretion and upon notice to you: (a) charge interest on the overdue amount at a rate of 1.5% per month (or the maximum rate permitted by applicable law, whichever is less); and/or (b) suspend your access to the Service until full payment is received. ShopVault’s right to charge interest does not limit any other rights or remedies available to it. 8.7 Non-Refundable Fees Except as expressly stated in this Agreement or required by applicable law, all Subscription Fees are non-refundable. ShopVault will not provide refunds or credits for any partial Subscription Terms or unused Service time, including in cases where you cancel your Subscription mid-term. Where required by applicable law (including applicable Canadian provincial law), statutory refund rights are not limited by this Section. 8.8 Free Trials ShopVault may offer free trials of the Service for a limited period. Where a free trial converts to a paid Subscription, ShopVault will present the conversion terms clearly and conspicuously before conversion and, at least three (3) days before the trial converts to a paid plan, send a reminder to your Account email address stating that the trial is ending, the amount and frequency of the charge that will begin, and how to cancel. At the end of the trial period, your Subscription will automatically convert to a paid plan unless you cancel before the trial expires. ShopVault reserves the right to modify or terminate free trial offers at any time. Free trials are offered once per Customer and may not be combined with other promotions. 9. Cancellation 9.1 Customer Right to Cancel You may cancel your Subscription at any time by: (a) using the cancellation function within your Account settings, accessible through the same means used to subscribe; or (b) contacting ShopVault at support@shopvaultai.com with written cancellation notice. Cancellation takes effect at the end of the then-current Subscription Term. 9.2 Effect of Cancellation Upon cancellation: (a) your Subscription will not renew for any subsequent Subscription Term; (b) you will retain access to the Service until the end of the current paid Subscription Term; (c) no refund will be issued for any unused portion of the current Subscription Term, except as required by applicable law; and (d) your Customer Data will be subject to the retention and deletion provisions of Section 7. 9.3 Statutory Cancellation Rights (Canada) Customers located in jurisdictions within Canada where statutory cooling-off or cancellation rights apply (including under applicable provincial consumer protection legislation) retain all such rights and they are not excluded or limited by this Agreement. If any such statutory right applies to you and you wish to exercise it, please contact us at support@shopvaultai.com within the applicable statutory period. 10. Usage Limits & Upgrades 10.1 Plan Limits Each Subscription plan includes limits on the number of documents, queries, Authorized Users, and storage capacity, as set out in the applicable plan description on the Service’s billing settings page shopvaultai.com/settings/billing. You agree to use the Service within the limits of your selected plan. 10.2 Exceeding Limits If you exceed your plan limits, ShopVault may: (a) restrict or throttle your access to the Service; (b) prompt you to upgrade to a higher-tier plan; or (c) charge additional usage fees at rates disclosed in your plan or Order Form. ShopVault will provide you with reasonable notice prior to imposing additional charges. 10.3 Upgrades You may upgrade your plan at any time. Upgraded plan terms take effect immediately upon purchase, and any difference in Subscription Fee is charged on a prorated basis for the remainder of the current Subscription Term. 11. AI Features — Important Disclaimers 11.1 Nature of AI Output The AI Features use machine learning models, together with retrieval of your uploaded Customer Data, to generate Outputs based on Customer Data and your queries. Artificial intelligence and machine learning are rapidly evolving fields. AI-generated Outputs may be inaccurate, incomplete, or otherwise incorrect. ShopVault does not guarantee the accuracy, reliability, completeness, currentness, or fitness for any purpose of any Output. 11.2 Retrieval-Augmented Generation — Product-Specific Limitations The Service is a retrieval-augmented product: Output is generated by retrieving from the documents you upload and then summarizing or answering based on that retrieved material. Because of how the Service works, Output may, among other things: (a) attribute an answer to the wrong source, or cite the wrong document or the wrong section of a document; (b) fail to retrieve relevant content that is in fact present in your uploaded documents, so that a correct answer is omitted; (c) return an excerpt that omits surrounding context, including safety-critical context, warnings, prerequisites, or exceptions; (d) misinterpret the intent of a query and answer a different question than the one you meant to ask; or (e) reflect errors, gaps, or inconsistencies that exist in the Customer Data itself. You are responsible for confirming, against the underlying source documents, that any Output is complete and correct for your intended use. 11.3 User Responsibility You are solely responsible for evaluating, reviewing, and verifying all Output against the underlying source material before relying on it for any purpose, including business decisions, professional advice, regulatory compliance, or code-compliance matters. ShopVault is not liable for any loss, harm, or damage arising from your reliance on any Output without independent verification. 11.4 Safety-Critical and Trade Decisions You acknowledge that the Service is used in trades and other settings where a wrong answer can cause injury, death, property damage, code violations, or regulatory liability. You must not rely on Output as the basis for any life-safety or safety-critical decision without the independent judgment of a qualified and, where required, licensed professional. This includes, without limitation, decisions involving gas systems, electrical and high-voltage work, refrigerant handling, structural or load-bearing work, potable water systems, fire and life-safety systems, hazardous materials, and any work requiring a permit, code-compliance verification, licensed sign-off, or manufacturer authorization. Output is decision-support information only and is not a substitute for such judgment, verification, or authorization. 11.5 No Professional Substitution Output does not constitute and must not be used as a substitute for advice or sign-off from qualified legal, financial, medical, engineering, regulatory, or other licensed professionals. Always seek qualified professional advice for matters that require it. 11.6 Material AI Model Changes ShopVault may change, upgrade, or replace the AI models (including retrieval, embedding, and generation models) underlying the Service. Where such a change is within ShopVault’s control and is reasonably expected to materially affect Output behavior for existing indexed content, ShopVault will use commercially reasonable efforts to provide at least 30 days’ advance notice by email and/or in-application notice. This notice obligation does not apply to changes required for security, legal, or provider-forced reasons, or to changes ShopVault reasonably determines are not material to Output behavior. 11.7 No Training on Customer Data As stated in Section 5.4, ShopVault does not use your Customer Data to train its AI models. The AI Features are powered by pre-trained models, and your data is used solely to generate Outputs for you. This Section 11 survives termination or expiration of this Agreement. 12. Security 12.1 ShopVault’s Security Obligations ShopVault implements and maintains commercially reasonable administrative, physical, and technical safeguards designed to protect Customer Data against unauthorized access, disclosure, alteration, or destruction. These safeguards include, without limitation: encryption of Customer Data in transit and at rest; access controls and authentication requirements; regular security assessments; and incident response procedures. 12.2 No Absolute Security No security system is impenetrable. ShopVault does not guarantee that Customer Data will be free from unauthorized access, disclosure, alteration, or destruction in all circumstances. 12.3 Your Security Obligations You are responsible for: (a) maintaining the security of your Account credentials and those of your Authorized Users; (b) implementing appropriate security controls on your own systems and devices used to access the Service; (c) promptly notifying ShopVault of any suspected unauthorized access; and (d) not uploading to the Service any content that contains malware, viruses, or other harmful code. 12.4 Data Breach Notification In the event ShopVault confirms a security breach that has materially compromised Customer Data, ShopVault will notify affected Customers without undue delay and, in any event, within seventy-two (72) hours of confirming such a breach, and otherwise in compliance with applicable breach-notification obligations under U.S. and Canadian law. Such notification will include, to the extent then known, a description of the nature of the breach, the types of data affected, and the steps ShopVault is taking to address it. Notifications will be sent to your Account email address and, for security matters, may also be coordinated through support@shopvaultai.com. 13. Acceptable Use Policy 13.1 Permitted Use The Service may be used only for lawful purposes and in accordance with this Agreement. You agree to use the Service in a manner that does not harm ShopVault, other users, or third parties. 13.2 Prohibited Conduct You agree not to use the Service to: violate any applicable federal, state, provincial, or local law or regulation, including export control and sanctions laws; infringe, misappropriate, or violate the intellectual property, privacy, or other rights of any third party; upload, transmit, or process content that is unlawful, defamatory, obscene, harassing, threatening, fraudulent, or abusive; upload, transmit, or distribute any malware, viruses, worms, ransomware, spyware, or other malicious or harmful code; engage in unauthorized access to or interference with ShopVault’s systems, networks, or those of any third party; reverse engineer, decompile, disassemble, or attempt to derive the source code of the Service or any component thereof; use Output as training or fine-tuning data for any artificial intelligence or machine learning model, or use the Service in a manner designed to extract, replicate, or reverse-engineer the underlying AI models, embeddings, or retrieval algorithms, in each case for the purpose of developing a competing product or service; engage in automated data scraping, crawling, or extraction from the Service without ShopVault’s express written consent; impersonate any person or entity or misrepresent your affiliation with any person or entity; submit Customer Data containing another person’s Personal Information without that person’s lawful consent or another lawful basis; use the Service in any manner that could damage, disable, overburden, or impair the Service or ShopVault’s infrastructure; resell, sublicense, or transfer access to the Service to any third party except as expressly permitted under this Agreement; circumvent, disable, or interfere with any security, access control, or usage limit feature of the Service; or rely on Output as the basis for a life-safety or safety-critical trade decision, or as a substitute for code-compliance verification, permit-application content, or manufacturer authorization, in each case without the independent judgment of a qualified and, where required, licensed professional (see Section 11.4). 13.3 Permitted Evaluation For clarity, nothing in Section 13.2 prohibits good-faith benchmarking, competitive evaluation, testing, or academic research regarding the Service, provided that you do not use Output as training or fine-tuning data for a competing AI model and do not attempt to extract, replicate, or reverse-engineer the underlying models or retrieval algorithms. 13.4 Monitoring & Enforcement ShopVault reserves the right, but is not obligated, to monitor use of the Service for compliance with this Acceptable Use Policy. ShopVault may remove or disable access to Customer Data that violates this Agreement and may suspend or terminate your Account in accordance with Section 20. 14. Intellectual Property 14.1 ShopVault IP The Service, including all software, algorithms, AI models, interfaces, documentation, trademarks, logos, and other content created by or for ShopVault, is the exclusive property of ShopVault and its licensors and is protected by United States, Canadian, and international intellectual property laws. This Agreement does not grant you any right, title, or interest in the Service or ShopVault’s intellectual property, other than the limited right to access and use the Service during the Subscription Term as set out in this Agreement. 14.2 License to Use the Service Subject to your compliance with this Agreement and timely payment of all Subscription Fees, ShopVault grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to access and use the Service during the Subscription Term solely for your internal business purposes. 14.3 Restrictions You may not: (a) copy, reproduce, distribute, or create derivative works of the Service or any component thereof; (b) use the Service to develop a competing product or service, except as permitted under Section 13.3; (c) remove or alter any proprietary notices, labels, or markings on the Service; or (d) grant any third party access to the Service except as permitted for Authorized Users. 14.4 Feedback As set out in Section 6.4, Feedback you provide is assigned to ShopVault. ShopVault may incorporate Feedback into the Service without any obligation to you. 14.5 DMCA / Copyright ShopVault respects the intellectual property rights of others. If you believe that Customer Data hosted in the Service infringes your copyright, please send a notice compliant with the Digital Millennium Copyright Act to ShopVault’s designated copyright agent at support@shopvaultai.com. Repeat infringers may have their Accounts terminated. 15. Warranty Disclaimer THE SERVICE, INCLUDING ALL AI FEATURES AND OUTPUT, IS PROVIDED ON AN “AS IS” AND “AS AVAILABLE” BASIS. TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, SHOPVAULT AND ITS AFFILIATES, LICENSORS, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, SUPPLIERS, AND SERVICE PROVIDERS (COLLECTIVELY, “SHOPVAULT PARTIES”) EXPRESSLY DISCLAIM ALL WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING WITHOUT LIMITATION: ANY IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, OR NON-INFRINGEMENT; ANY WARRANTY THAT THE SERVICE WILL BE UNINTERRUPTED, ERROR-FREE, VIRUS-FREE, SECURE, OR AVAILABLE AT ANY PARTICULAR TIME OR LOCATION; ANY WARRANTY THAT ANY OUTPUT WILL BE ACCURATE, RELIABLE, COMPLETE, CURRENT, CORRECTLY SOURCED OR CITED, OR FREE FROM ERRORS OR OMISSIONS; ANY WARRANTY THAT DEFECTS OR ERRORS IN THE SERVICE WILL BE CORRECTED; ANY WARRANTY AS TO THE RESULTS THAT MAY BE OBTAINED FROM USE OF THE SERVICE. NO ADVICE OR INFORMATION, WHETHER ORAL OR WRITTEN, OBTAINED FROM SHOPVAULT OR THROUGH THE SERVICE WILL CREATE ANY WARRANTY NOT EXPRESSLY STATED IN THIS AGREEMENT. SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES. TO THE EXTENT THAT APPLICABLE LAW (INCLUDING APPLICABLE CANADIAN PROVINCIAL LAW) DOES NOT ALLOW THE DISCLAIMER OR EXCLUSION OF CERTAIN WARRANTIES, SUCH WARRANTIES ARE LIMITED IN DURATION TO THE MINIMUM PERIOD REQUIRED BY LAW. 16. Limitation of Liability 16.1 Exclusion of Consequential Damages TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT WILL ANY SHOPVAULT PARTY BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES OF ANY KIND, INCLUDING WITHOUT LIMITATION: LOSS OF PROFITS, REVENUE, OR BUSINESS OPPORTUNITIES; LOSS OR CORRUPTION OF DATA OR CUSTOMER DATA; LOSS OF GOODWILL OR REPUTATION; COST OF SUBSTITUTE GOODS, SERVICES, OR TECHNOLOGY; ANY DAMAGES ARISING FROM YOUR RELIANCE ON ANY OUTPUT WITHOUT INDEPENDENT VERIFICATION; ANY DAMAGES ARISING FROM UNAUTHORIZED ACCESS TO OR ALTERATION OF YOUR CUSTOMER DATA; IN EACH CASE WHETHER BASED ON CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, STATUTE, OR ANY OTHER LEGAL OR EQUITABLE THEORY, AND WHETHER OR NOT SHOPVAULT HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. 16.2 Aggregate Liability Cap SUBJECT TO SECTION 16.3, AND TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, SHOPVAULT’S TOTAL AGGREGATE LIABILITY TO YOU FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THIS AGREEMENT OR YOUR USE OF THE SERVICE — WHETHER BASED ON CONTRACT, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY, STATUTE, OR ANY OTHER LEGAL THEORY — WILL NOT EXCEED THE GREATER OF: (A) THE TOTAL SUBSCRIPTION FEES ACTUALLY PAID BY YOU TO SHOPVAULT IN THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE DATE THE CLAIM FIRST AROSE; OR (B) USD $100.00. MULTIPLE CLAIMS DO NOT EXPAND THIS CAP. IF YOU ARE RECEIVING THE SERVICE UNDER A FREE TRIAL AND NO SUBSCRIPTION FEES HAVE BEEN PAID, THIS CAP IS USD $100.00. 16.3 Exclusions from the Cap and from the Damages Exclusion The limitations in Sections 16.1 and 16.2 do not apply to, and the following are excluded from the liability cap in Section 16.2: either party’s indemnification obligations under Section 17; a party’s gross negligence, willful misconduct, or fraud; either party’s breach of its confidentiality obligations with respect to the other party’s Confidential Information; ShopVault’s breach of the no-training representation in Section 5.4; your breach of your payment obligations; and liability that cannot be limited or excluded under applicable law. In addition, and notwithstanding Section 16.2, ShopVault’s total aggregate liability for a data breach affecting Customer Data caused by ShopVault’s negligence will not exceed two (2) times the total Subscription Fees paid by you in the twelve (12) months immediately preceding the event giving rise to the claim (the “Data-Breach Super-Cap”). The Data-Breach Super-Cap does not apply to matters described in the bullet points above that are themselves uncapped. 16.4 Essential Basis The parties acknowledge that the limitations of liability set out in this Section 16 reflect a reasonable and fair allocation of risk between the parties and form an essential basis of the bargain. These limitations apply notwithstanding any failure of essential purpose of any limited remedy. 16.5 Canadian Rights Nothing in this Section 16 limits or excludes any liability that cannot be lawfully limited or excluded under applicable law in any Canadian province where you are located. To the extent that applicable provincial legislation prohibits the limitation or exclusion of certain types of liability, such exclusions or limitations do not apply to you to the extent so prohibited. 17. Indemnification 17.1 Your Indemnification Obligations To the fullest extent permitted by applicable law, you agree to defend, indemnify, and hold harmless the ShopVault Parties from and against any and all claims, demands, actions, proceedings, losses, liabilities, damages, settlements, judgments, costs, and expenses (including reasonable attorneys’ fees) (“Claims”) brought by any third party arising out of or relating to: your Customer Data, including any claim that your Customer Data infringes, misappropriates, or violates the intellectual property rights, privacy rights, or other rights of any third party; your breach of this Agreement, including any representation, warranty, or obligation contained herein; your violation of any applicable law or regulation; your use of the Service in a manner not permitted by this Agreement, including any reliance on Output in violation of Section 11.4; any claim by an Authorized User arising from or related to your acts or omissions; or any gross negligence or willful misconduct by you or your Authorized Users. 17.2 ShopVault’s IP Indemnification ShopVault will defend you against any third-party claim alleging that (a) the Service itself (excluding Customer Data and Third-Party Services), or (b) Output, to the extent the alleged infringement arises from the underlying AI model or its training data rather than from Customer Data, directly infringes a United States or Canadian copyright, patent, or trademark, provided that: (i) you promptly notify ShopVault in writing of the claim; (ii) you grant ShopVault sole control of the defense and any settlement negotiations (which shall not include an admission of liability by you or a settlement requiring payment by you without your prior written consent); and (iii) you provide ShopVault with all reasonable cooperation and assistance at ShopVault’s expense. ShopVault will pay any final judgment or approved settlement arising from a covered claim. If ShopVault reasonably believes the Service or Output may become the subject of such a claim, ShopVault may, at its option: (1) obtain the right for you to continue using the Service; (2) modify the Service to be non-infringing; or (3) terminate your Subscription and refund any pre-paid Subscription Fees covering the unused portion of the then-current Subscription Term. ShopVault’s obligations under this Section 17.2 with respect to Output described in clause (b) are subject to the Section 16.2 liability cap or, if the parties prefer, a separate Output-IP sub-cap of 2x (two times) the annual subscrition, except to the extent an exclusion in Section 16.3 applies. ShopVault will use commercially reasonable efforts to pass through to you any indemnity protections that its AI model providers make available for model-caused Output infringement, to the extent permitted by those providers’ terms. 17.3 Exclusions from IP Indemnity ShopVault’s IP indemnification obligation in Section 17.2 does not apply to any claim arising from: (a) modification of the Service or Output by anyone other than ShopVault; (b) your use of the Service or Output in combination with hardware, software, data, or services not provided by ShopVault; (c) your use of the Service in violation of this Agreement; (d) Customer Data; (e) Output to the extent the alleged infringement arises from, or is substantially derived from, Customer Data (rather than from the underlying AI model or its training data); or (f) Third-Party Services. 17.4 Indemnification Procedure The party seeking indemnification (the “Indemnified Party”) must: (a) promptly notify the indemnifying party (the “Indemnifying Party”) in writing of any Claim, with notices to ShopVault sent to support@shopvaultai.com (failure to provide prompt notice does not relieve the Indemnifying Party of its obligations except to the extent it is materially prejudiced by the delay); (b) grant the Indemnifying Party sole control of the defense and settlement of the Claim; and (c) provide all reasonable cooperation and information requested by the Indemnifying Party at the Indemnifying Party’s expense. The Indemnified Party may participate in the defense at its own expense with counsel of its own choosing. 18. Dispute Resolution & Arbitration 18.1 Informal Resolution Before initiating any formal legal proceeding, you agree to first attempt to resolve any dispute, claim, or controversy arising out of or relating to this Agreement or the Service (a “Dispute”) informally by providing written notice to ShopVault at support@shopvaultai.com describing the nature and basis of the Dispute and the relief sought. ShopVault will likewise attempt to resolve any Dispute with you informally by providing written notice to your Account email address. The parties will attempt in good faith to resolve the Dispute within 60 days of the initial notice (the “Informal Resolution Period”). If the Dispute is not resolved within the Informal Resolution Period, either party may initiate binding arbitration as described below. 18.2 Binding Arbitration Except as set out in Sections 18.5 and 18.6, if informal resolution is unsuccessful, any Dispute will be finally resolved by binding arbitration administered by JAMS (Judicial Arbitration and Mediation Services) under its then-current Comprehensive Arbitration Rules and Procedures, which are incorporated into this Agreement by reference and are available at www.jamsadr.com. The arbitration will be conducted: (a) in Maricopa County, Arizona, unless the parties mutually agree to a different location; (b) before a single arbitrator selected in accordance with JAMS rules; (c) in the English language; and (d) on a confidential basis. The arbitrator’s decision will be final and binding and may be entered as a judgment in any court of competent jurisdiction. 18.3 Arbitration Costs For claims under USD $10,000, ShopVault will pay all JAMS filing, administrative, and arbitrator fees, unless the arbitrator finds your claim frivolous. For claims of USD $10,000 or more, the allocation of arbitration costs will be governed by JAMS rules. Each party bears its own attorneys’ fees unless the arbitrator awards fees based on applicable law or a finding that a claim was frivolous. 18.4 Class Action Waiver TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, YOU AND SHOPVAULT AGREE THAT EACH MAY BRING CLAIMS AGAINST THE OTHER ONLY IN YOUR OR ITS INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, CONSOLIDATED, COLLECTIVE, OR REPRESENTATIVE PROCEEDING. NEITHER PARTY WAIVES ITS RIGHT TO PARTICIPATE IN A GOVERNMENT AGENCY CLASS ACTION OR ENFORCEMENT PROCEEDING. 18.5 Opt-Out Right You may opt out of the arbitration agreement in this Section 18 by sending written notice of your decision to support@shopvaultai.com within 30 days of the date you first accept this Agreement. Your notice must include your name, Account email address, and a statement that you wish to opt out of arbitration. If you opt out, neither party may compel arbitration, and disputes will be resolved in court as provided in Section 18.6. Opting out of arbitration does not affect any other provision of this Agreement. 18.6 Exceptions & Court Jurisdiction Notwithstanding Section 18.2, either party may: (a) bring an action in small claims court for Disputes within that court’s jurisdictional limits; and (b) seek emergency injunctive or other equitable relief from a court of competent jurisdiction to prevent actual or threatened infringement, misappropriation, or violation of intellectual property rights, confidentiality obligations, or data security without first engaging in the Informal Resolution Period or arbitration. For any dispute not subject to arbitration, the parties consent to exclusive jurisdiction and venue in the state and federal courts located in Maricopa County, Arizona, and waive any objection to such jurisdiction on grounds of inconvenient forum. 18.7 Canadian Users If you are located in Canada and mandatory arbitration provisions are unenforceable under applicable provincial law, the foregoing arbitration and class action waiver provisions will not apply to you to the extent prohibited by law. In such cases, disputes will be resolved in a court of competent jurisdiction in the province of your residence, applying the law of that province. 18.8 Severability of Arbitration Clause If the class action waiver in Section 18.4 is found unenforceable as to a particular claim, then that particular claim (and only that claim) will be severed from arbitration and may proceed in a court of competent jurisdiction as provided in Section 18.6, while all other claims and Disputes will remain subject to arbitration under this Section 18. The remaining provisions of this Section 18 and of this Agreement will continue in full force and effect. This construct replaces any all-or-nothing approach to the enforceability of this Section 18. 19. Governing Law This Agreement is governed by and construed in accordance with the laws of the State of Arizona, United States, without regard to its conflict of law principles. Notwithstanding the foregoing, for Customers located in Canada, the laws of the applicable Canadian province where the Customer is located will apply to the extent required by mandatory consumer protection or other legislation that cannot be displaced by contract. The United Nations Convention on Contracts for the International Sale of Goods does not apply to this Agreement. 20. Suspension & Termination 20.1 Termination by Customer You may terminate this Agreement at any time by cancelling your Subscription in accordance with Section 9. 20.2 Suspension by ShopVault ShopVault may immediately suspend your access to all or any part of the Service without prior notice if: (a) ShopVault reasonably believes that you or any Authorized User are in material breach of this Agreement, including the Acceptable Use Policy; (b) your Account presents a security risk, or continued access could harm ShopVault’s systems, other customers, or third parties; (c) you fail to pay Subscription Fees when due and do not remedy such failure within 5 business days of notice; or (d) ShopVault is required to do so by law or a regulatory authority. ShopVault will provide prompt notice of any suspension and its reasons where it is lawful and practicable to do so. 20.3 Termination for Cause Either party may terminate this Agreement upon written notice if the other party materially breaches this Agreement and, where the breach is capable of remedy, fails to cure the breach within 30 days after receiving written notice identifying the breach in reasonable detail. Breaches of the Acceptable Use Policy (Section 13), Sections 4.3, 14.3, 17, or 22.8 that cannot reasonably be cured are deemed material breaches warranting immediate termination without a cure period. 20.4 Termination for Convenience by ShopVault ShopVault may terminate this Agreement for any reason upon 60 days’ written notice to you. In such case, ShopVault will refund any pre-paid Subscription Fees covering the period after the effective date of termination on a prorated basis. 20.5 Effect of Termination Upon termination or expiration of this Agreement for any reason: (a) all licenses granted to you under this Agreement immediately terminate; (b) you must cease all use of the Service and delete any local copies of ShopVault software; (c) Customer Data will be subject to the retention and deletion procedures in Section 7; (d) all accrued payment obligations survive termination; and (e) any provision of this Agreement that by its nature should survive will survive, including Sections 1, 2.1, 2.4, 4.4, 5.4 (as to representations made during the Subscription Term), 6.4, 7.3, 11, 14, 15, 16, 17, 18, 19, and 22. 21. Modifications to this Agreement 21.1 Right to Modify ShopVault reserves the right to modify this Agreement at any time. When ShopVault makes material changes to this Agreement, it will provide you with at least 30 days’ prior written notice by: (a) email to the address associated with your Account; and/or (b) a prominent in-application notification. 21.2 Effect of Changes If you do not agree to the modified Agreement, you may cancel your Subscription before the effective date of the changes. Your continued use of the Service after the effective date of any modified Agreement constitutes your acceptance of the changes. If a court finds that a modified provision is unenforceable, that finding does not invalidate the remainder of the Agreement. 21.3 Minor Changes ShopVault may make minor, non-material changes (such as corrections of typographical errors, updates to contact details, or clarifications that do not reduce your rights) at any time without prior notice. The current version of this Agreement is always available at shopvaultai.com/settings/account. 22. General Provisions 22.1 Entire Agreement This Agreement, together with any Order Form, Enterprise Addendum, Data Processing Agreement, and any policies incorporated by reference, constitutes the entire agreement between you and ShopVault regarding the Service and supersedes all prior and contemporaneous negotiations, representations, warranties, and agreements, whether oral or written, relating to the subject matter hereof. 22.2 Severability If any provision of this Agreement is held by a court or arbitrator of competent jurisdiction to be invalid, illegal, or unenforceable, that provision will be modified to the minimum extent necessary to make it enforceable, or severed if modification is not possible. The remaining provisions of this Agreement will remain in full force and effect. 22.3 Waiver No failure or delay by either party in exercising any right, power, or remedy under this Agreement will operate as a waiver of that right. No single or partial exercise of any right, power, or remedy will preclude any other or further exercise thereof or the exercise of any other right, power, or remedy. 22.4 Assignment You may not assign or transfer any of your rights or obligations under this Agreement (by operation of law or otherwise) without ShopVault’s prior written consent. ShopVault may assign or transfer this Agreement or any of its rights or obligations hereunder, in whole or in part, without restriction and without notice to you, including in connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of its assets. Any attempted assignment in violation of this Section is void. 22.5 Force Majeure ShopVault will not be liable to you for any failure or delay in performance of its obligations under this Agreement to the extent caused by circumstances beyond its reasonable control, including acts of God, natural disasters, pandemic, war, terrorism, labor disputes, governmental actions, internet outages, or failures of third-party infrastructure providers, provided that ShopVault uses commercially reasonable efforts to minimize the impact of and resume performance following such events. 22.6 Notices All legal notices under this Agreement must be in writing. Notices to ShopVault must be sent by email to support@shopvaultai.com with written confirmation by mail to ShopVault’s registered agent for service: Christopher Bendos, 6501 E. Greenway Pkwy Ste 103-457 Scottsdale, AZ 85254. Notices to you will be sent to your Account email address. Notices sent by email are deemed received on the next business day following transmission. Notices by mail are deemed received 5 business days following dispatch. 22.7 Relationship of the Parties The parties are independent contractors. Nothing in this Agreement creates a partnership, joint venture, agency, employment, or franchise relationship between you and ShopVault. Neither party has authority to bind the other in any respect. 22.8 Export Compliance You agree to comply with all applicable export control laws and regulations of the United States, Canada, and any other applicable jurisdiction in connection with your use of the Service. You represent that you are not located in, and will not export, re-export, or transfer the Service to, any country, territory, or person subject to U.S. or Canadian export restrictions. 22.9 Confidentiality Each party will protect the other party’s Confidential Information using at least the same degree of care it uses to protect its own confidential information of a similar nature, and in no event less than reasonable care, and will use the other party’s Confidential Information only as necessary to exercise its rights and perform its obligations under this Agreement. This Section 22.9 does not limit the license and data-use rights expressly granted elsewhere in this Agreement. 22.10 Headings Section headings are for convenience only and do not affect the interpretation of this Agreement. 22.11 Language The parties have requested that this Agreement and all related documents be drafted in English. Les parties ont demandé que la présente convention et tous les documents connexes soient rédigés en anglais. (Canadian French — as required in certain Canadian provinces.) 22.12 Contact Information ShopVault, Inc. Christopher Bendos, 6501 E. Greenway Pkwy Ste 103-457 Scottsdale, AZ 85254serted] Legal inquiries: support@shopvaultai.com Privacy inquiries: support@shopvaultai.com Security / vulnerability reports: support@shopvaultai.com DMCA / copyright: support@shopvaultai.com General support: support@shopvaultai.com Website: www.shopvaultai.com Part Two — Privacy Policy Effective Date: July 25, 2026 | Version 2.0 This Privacy Policy applies to all business Customers and their Authorized Users of the ShopVault Service located in the United States and Canada. It describes how ShopVault collects, uses, stores, discloses, and protects Personal Information in connection with the Service. The Service is offered for business and commercial purposes only and is not directed to consumers acting for personal, family, or household purposes. If you are a Customer and have executed a separate Data Processing Agreement (DPA) with ShopVault, the terms of that DPA govern our processing of Personal Information on your behalf to the extent of any conflict. P1. Who We Are ShopVault, Inc. (“ShopVault”, “we”, “us”, or “our”) is the data controller (or equivalent) for Personal Information collected through the Service. ShopVault is incorporated under the laws of the State of Arizona and operates the ShopVault AI-powered document management platform. The individual responsible for personal information protection (including for purposes of PIPEDA and Quebec Law 25) is: Christopher Bendos, owner, email: support@shopvaultai.com, and (602) 492-4428. P2. Information We Collect P2.1 Information You Provide Directly Account Information: When you register, we collect your name, email address, company name, password, billing information, and other information you choose to provide. Customer Data: Documents, files, and other content that you upload to the Service. This may include Personal Information about you or third parties contained within uploaded documents. Communications: When you contact us for support or communicate with us via email or other channels, we collect the content of those communications and your contact details. Payment Information: We collect billing address and payment card details, which are processed by our third-party payment processor. ShopVault does not store full payment card numbers. Feedback and Surveys: Feedback, survey responses, or other information you voluntarily provide. P2.2 Information Collected Automatically Usage Data: Information about how you interact with the Service, including pages visited, features used, queries submitted, time spent, and error logs. Device and Technical Data: IP address, browser type and version, operating system, device identifiers, and referring URLs. Log Data: Server logs capturing access times, pages requested, account activity, and system events. Cookies and Similar Technologies: We use cookies and similar tracking technologies to operate the Service, remember your preferences, analyze usage, and authenticate your session. See Section P8 for details. P2.3 Information from Third Parties We may receive information about you from third-party authentication providers (e.g., Google or Microsoft SSO, if offered), payment processors, and publicly available sources, which we combine with the information we hold. P3. How We Use Your Information We use Personal Information for the following purposes, relying on the legal bases identified: Service Delivery: To provide, operate, maintain, and support the Service, process queries through AI Features, and generate Outputs. Legal basis: performance of contract. Account Management: To manage your Account, authenticate your identity, process payments, and communicate with you about your Account. Legal basis: performance of contract. Security: To detect and prevent fraud, abuse, unauthorized access, and other security threats. Legal basis: legitimate interests. Service Improvement: To analyze aggregated, anonymized usage patterns and develop new features and improve the Service. We do not use identifiable Customer Data for this purpose. Legal basis: legitimate interests. Legal Compliance: To comply with applicable law, respond to legal process, and enforce our rights. Legal basis: legal obligation or legitimate interests. Communications: To send service-related notices, security alerts, and (with your consent where required) marketing communications. Legal basis: legitimate interests or consent. AI Features Processing: To process Customer Data through AI Features to generate Outputs for you. This processing is performed solely to provide the Service and does not result in use of your data to train AI models. Legal basis: performance of contract. P4. Disclosure of Personal Information P4.1 No Sale of Personal Information ShopVault does not sell, rent, or trade Personal Information to or with third parties for monetary or other valuable consideration. ShopVault does not share Personal Information with third parties for their own advertising or marketing purposes. P4.2 Service Providers and Subprocessors We share Personal Information with trusted third-party service providers and subprocessors that process it on our behalf solely for the purposes described in this Privacy Policy, including: cloud hosting and infrastructure providers; payment processors; customer support platforms; email delivery providers; security and analytics providers; and AI model providers used to power AI Features. All such providers are contractually bound to process Personal Information only as directed by ShopVault and in compliance with applicable privacy law. A current list of subprocessors is available at by request at support@shopvaultai.com. P4.3 Business Transfers If ShopVault is involved in a merger, acquisition, sale of assets, financing, or insolvency proceeding, Personal Information may be transferred as part of that transaction. We will notify you by email or prominent in-application notice if your Personal Information is transferred and becomes subject to a materially different privacy policy. P4.4 Legal Process and Safety We may disclose Personal Information if we believe in good faith that such disclosure is necessary to: (a) comply with applicable law, regulation, or valid legal process (such as a court order or subpoena); (b) protect the rights, property, or safety of ShopVault, its users, or the public; or (c) detect, prevent, or otherwise address fraud, security, or technical issues. P4.5 With Your Consent We may share Personal Information with third parties for any other purpose with your prior explicit consent. P5. Data Retention We retain Personal Information for as long as necessary to fulfill the purposes for which it was collected, as described in this Privacy Policy, and as required or permitted by applicable law. Specific retention periods include: Account Information: Retained for the duration of your Subscription Term and for up to 3 years after Account closure, for the purposes of legal claims, audit, and compliance. Customer Data: As set out in Section 7 of the Terms of Service (30-day Retention Period post-termination; full deletion within 90 days of termination). Usage and Log Data: Retained for up to 12 months for security and fraud prevention purposes. Payment Records: Retained for 7 years as required by applicable tax and financial record-keeping law. Communications: Retained for up to 3 years for dispute resolution and audit purposes. Where a legal hold or regulatory obligation requires us to retain information beyond the above periods, we retain it for the period required by that obligation. P6. Your Privacy Rights P6.1 Rights Available to All Users Subject to applicable law, you have the following rights with respect to your Personal Information: Right to Access: to request confirmation of whether we process your Personal Information and to receive a copy of the Personal Information we hold about you. Right to Correction: to request correction of inaccurate or incomplete Personal Information. Right to Deletion: to request deletion of your Personal Information, subject to certain exceptions (e.g., where retention is required by law or to resolve disputes). Right to Restriction: to request that we restrict processing of your Personal Information in certain circumstances. Right to Data Portability: to receive your Personal Information in a structured, commonly used, machine-readable format. Right to Object: to object to processing based on our legitimate interests. Right to Withdraw Consent: where processing is based on your consent, to withdraw that consent at any time (withdrawal does not affect the lawfulness of processing before withdrawal). P6.2 Unified U.S. State Privacy Rights Because U.S. state privacy laws are expanding, ShopVault provides the following rights to all U.S. users regardless of state of residence, to the extent applicable to the Personal Information we process: (a) the right to know and access the categories and specific pieces of Personal Information we collect, use, and disclose; (b) the right to correct inaccurate Personal Information; (c) the right to delete Personal Information; (d) the right to data portability; (e) the right to opt out of the “sale” or “sharing” of Personal Information and of targeted advertising (note: ShopVault does not sell or share Personal Information or engage in targeted advertising); (f) the right to limit the use and disclosure of sensitive Personal Information; and (g) the right not to be subject to discrimination for exercising these rights. These rights are provided consistent with the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA/CPRA), the Colorado Privacy Act (CPA), the Virginia Consumer Data Protection Act (VCDPA), the Connecticut Data Privacy Act (CTDPA), the Texas Data Privacy and Security Act (TDPSA), the Oregon Consumer Privacy Act (OCPA), the Delaware Personal Data Privacy Act, and analogous state laws as they come into force. To exercise these rights, contact us at support@shopvaultai.com. P6.3 Universal Opt-Out / Global Privacy Control Where required by applicable law (including the CCPA/CPRA, CPA, CTDPA, and OCPA), ShopVault recognizes and honors opt-out preference signals sent through a universal mechanism such as Global Privacy Control (GPC). Because ShopVault does not sell or share Personal Information or engage in targeted advertising, such signals do not change our practices, but we will treat any such signal as a valid opt-out request to the extent one is applicable. P6.4 Canadian Residents (PIPEDA and Provincial Law) Canadian residents have rights under the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation (including PIPA in Alberta and British Columbia, and the Act respecting the protection of personal information in the private sector in Quebec). These rights include the right to access and request correction of your Personal Information held by ShopVault. Residents of Quebec have additional rights under Law 25, including the right to de-indexing and the right to data portability. The individual responsible for personal information protection is identified in Section P1 and at Section P13. To exercise your rights, contact our Privacy Officer at support@shopvaultai.com. P6.5 Exercising Your Rights To exercise any of the rights above, please submit a verifiable request to support@shopvaultai.com. We will respond within the timeframes required by applicable law (generally 30–45 days, with extensions as permitted). We may need to verify your identity before processing your request. We will not discriminate against you for exercising your privacy rights. P7. Security of Personal Information ShopVault maintains administrative, physical, and technical safeguards designed to protect Personal Information against unauthorized access, disclosure, alteration, and destruction. These measures include: TLS encryption for data in transit; AES-256 encryption for data at rest; access controls and multi-factor authentication; regular vulnerability assessments; and employee privacy and security training. In the event of a confirmed breach materially affecting Personal Information, we will notify affected Customers consistent with Section 12.4 of the Terms of Service (within 72 hours of confirmation) and as otherwise required by applicable law. While we use commercially reasonable security measures, no method of transmission or storage is 100% secure, and we cannot guarantee the absolute security of Personal Information. P8. Cookies & Tracking Technologies ShopVault uses cookies and similar tracking technologies (such as pixels and local storage) on our website and within the Service. We use: Essential / Strictly Necessary Cookies: required for the Service to function (e.g., authentication tokens, session management). These cannot be disabled. Functional Cookies: to remember your preferences and settings. Analytics Cookies: to analyze usage of the Service and improve its performance. You may control non-essential cookies through your browser settings. Where applicable, we honor Global Privacy Control signals as described in Section P6.3. Disabling certain cookies may affect the functionality of the Service. P9. Children’s Privacy The Service is a business-to-business product, is not directed to or intended for use by individuals under the age of 18, and is not intended for consumers acting for personal, family, or household purposes. ShopVault does not knowingly collect Personal Information from children under 18. If we become aware that we have inadvertently collected Personal Information from a child under 18, we will take prompt steps to delete such information. If you believe we have collected information from a child, please contact us at support@shopvaultai.com. P10. Cross-Border Data Transfers ShopVault processes Customer Data and Personal Information primarily within the United States and Canada. Where Personal Information is transferred between the United States and Canada, such transfers are made in compliance with PIPEDA and applicable provincial law. Where ShopVault uses service providers that process data outside the United States or Canada (for example, in data centers operated by global cloud providers), ShopVault ensures appropriate safeguards are in place, including contractual data processing agreements that require the service provider to maintain equivalent levels of data protection. P11. Third-Party Links & Services The Service may contain links to third-party websites, integrations, or Third-Party Services that are not operated by ShopVault. ShopVault is not responsible for the privacy practices or content of such third-party services. We encourage you to review the privacy policies of any third-party services you access through or in connection with the Service. P12. Changes to this Privacy Policy ShopVault may update this Privacy Policy from time to time. If we make material changes, we will notify you by email to your Account email address and/or by a prominent notice within the Service at least 30 days before the changes take effect. Your continued use of the Service after the effective date of any updated Privacy Policy constitutes your acceptance of the changes. The current Privacy Policy is always available at shopvaultai.com/settings/account. P13. Contact — Privacy Officer If you have any questions, concerns, or complaints regarding this Privacy Policy or our handling of your Personal Information, please contact ShopVault’s Privacy Officer: Privacy Officer — ShopVault, Inc. Christopher Bendos, Owner Privacy email: support@shopvaultai.com Phone: Christopher Bendos, Owner (602) 492-4428 Mailing address: 6501 E. Greenway Pkwy Ste. 103-457 Scottsdale, AZ 85254 Canadian Residents: You may also contact the Office of the Privacy Commissioner of Canada or your applicable provincial privacy commissioner if you believe your privacy rights have been violated. Website: shopvaultai.com BY ACCESSING OR USING THE SHOPVAULT SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO BE BOUND BY THIS AGREEMENT. ShopVault. | shopvaultai.com | Version 2.0 | Effective: July 25, 2026