Xenia Cloud Terms

These Terms govern use of the Xenia platform and become binding only when incorporated by an executed Cover Page or Order Form.

1. The Agreement

The Xenia by Yo-Do Software Corp. Cloud Service Terms govern Merchant's use of the Xenia cloud-based platform (the "Cloud Service"). Merchant and Provider agree to these terms by executing a Cover Page that specifies Key Terms, Attachments, and any Additional Terms. Collectively, these terms, the Cover Page, and any Orders form the parties' agreement ("Agreement"). In case of conflicts, Section 20(e) (Order of Precedence) governs. Capitalized terms are defined in context or in Section 21 (Definitions).

2. Cloud Service

Subject to this Agreement, Merchant may use the Cloud Service for its own business purposes during each Subscription Term ("Permitted Use"). The Cloud Service enables Merchant to be discovered by visitors and residents, accept reservations and payments, sell gift cards, and manage transactions through a single integrated platform. Provider reserves the right to update or enhance the Cloud Service from time to time, provided that no modification will materially decrease the overall functionality of the Cloud Service during a Subscription Term.

3. Fees and Revenue Model

a. Merchant Fees. Except for the Gift Card Program Fee described in Section 3(d), Merchant is not charged any platform, subscription, or transaction fees for use of the Cloud Service. Xenia’s core platform — including universal cart, inter-business merchant bundles, and gift cards — operates on customer-paid platform fees only. Third-party payment processing costs are passed through to Merchant at cost as described in Section 5(c). Optional or additional services, if any, are governed by a separate agreement or addendum as described in this Section 3.

b. Customer-Side Platform Fees. Customers using the Cloud Service will pay a 5% platform fee on Transactions. This fee is charged to and paid by the customer and is not deducted from amounts owed to Merchant.

c. Gift Card Program. Gift cards purchased through the Cloud Service are sold at full face value, with no fee charged to the customer at purchase. When a gift card is redeemed at Merchant’s business, Merchant receives the full face value with no processing fee deducted at redemption. The associated processing fee of 5% plus $1.00 per gift card purchase is borne by participating businesses (or a Fee Payer) as described in Section 3(d). Gift card redemptions are settled under Section 5.

d. Gift Card Program Fee. The gift card processing fee of 5% plus $1.00 per gift card purchase is borne by the participating businesses rather than the customer, so that gift cards are sold and redeemed at full face value. Provider will aggregate the gift card processing fees incurred each calendar month across the gift card program in the applicable market and divide that total equally among all businesses participating in the gift card program during that month, regardless of the number of gift cards sold or redeemed at any individual business. Provider will invoice each participating business its equal share monthly in arrears, and the business authorizes Provider to charge the payment method on file for that amount. A Chamber of commerce, business association, or other party identified on the Cover Page may assume this obligation in place of the participating businesses (a “Fee Payer”), in which case Provider will invoice the Fee Payer. Participation in the gift card program is optional; a Merchant that does not participate is not charged the Gift Card Program Fee. Provider will include the calculation basis with each invoice.

e. Future Features. Provider may develop additional platform features beyond those described in this Agreement, including but not limited to active waitlists, in-application advertising tools, and advanced AI-powered features (collectively, "Additional Features"). Additional Features will be offered to Merchant under a separate addendum to this Agreement, which will specify the applicable terms, pricing, and any modifications to the fee structure set forth herein. Merchant's use of any Additional Feature is conditioned on execution of the applicable addendum. Nothing in this Agreement obligates Provider to develop any Additional Feature or obligates Merchant to adopt one.

f. Payment. Where fees are payable by Merchant under this Agreement or any addendum hereto, Merchant authorizes Provider to bill and charge Merchant's payment method on file for immediate payment. Late payments are subject to a charge of 1.5% per month or the maximum amount allowed by Law, whichever is less. All fees are non-refundable except as expressly set out in this Agreement.

g. Taxes. Fees are exclusive of taxes. Transaction taxes on Transactions processed through the Cloud Service are the responsibility of Provider as merchant of record and marketplace facilitator, as described in Section 3(h). Merchant is responsible for its own income, franchise, payroll, property, and similar taxes, and for any sales, use, GST, value-added, withholding, or similar taxes applicable to its sales made outside the Cloud Service. Provider is responsible for its own income tax.

h. Sales Tax and Marketplace Facilitator. Provider acts as the merchant of record and, where applicable, as a marketplace facilitator for Transactions processed through the Cloud Service. Provider is responsible for determining, collecting, and remitting sales, use, and similar transaction taxes on those Transactions to the extent required of a marketplace facilitator under applicable Law, and for any related registration and filing obligations. Taxes collected by Provider at checkout are collected on behalf of the applicable taxing authority, are not revenue of Merchant, and are excluded from amounts settled to Merchant under Section 5. Merchant will: (i) provide accurate and current descriptions and tax categorization for its goods and services, and promptly update them when they change; (ii) provide any registration, exemption, or resale documentation Provider reasonably requests; (iii) promptly notify Provider of any change that affects the taxability of its offerings; and (iv) not separately collect transaction tax from a customer on a Transaction for which Provider has collected tax. Merchant represents that the information it provides under this Section is accurate. Provider is entitled to rely on that information in determining taxability.

i. Tax Records and Cooperation. Each party will retain records relating to Transaction taxes as required by applicable Law. Merchant will cooperate reasonably with Provider in connection with any audit, assessment, or inquiry by a taxing authority relating to Transactions processed through the Cloud Service, including by providing supporting records within a reasonable time. Merchant will reimburse Provider for any tax, interest, or penalty assessed against Provider to the extent it results from inaccurate or incomplete information Merchant supplied under Section 3(h).

j. Payment Disputes. If Merchant disputes an invoice in good faith, it will notify Provider within fifteen (15) business days, and the parties will seek to resolve the dispute over a fifteen (15)-day discussion period. Merchant is not required to pay disputed amounts during the discussion period but will timely pay all undisputed amounts. After the discussion period, either party may pursue available remedies.

4. Term and Renewal

a. Initial Subscription Term. Each Subscription Term will last for an initial twelve (12)-month period unless the Cover Page states otherwise.

b. Renewal. Following the Initial Subscription Term, this Agreement will automatically renew on a month-to-month basis unless either party provides written notice of non-renewal at least thirty (30) days prior to the end of the then-current term.

c. Term of Agreement. This Agreement starts on the Effective Date and continues until the end of all Subscription Terms, unless sooner terminated in accordance with its terms.

5. Transaction Settlement

a. Payment Processing. Payment acceptance and settlement are provided exclusively through Stripe, Inc. (“Stripe”) using Stripe Connect. To receive settlement, Merchant must create or connect a Stripe account and enter into and remain in good standing under Stripe’s Connected Account Agreement and other applicable Stripe terms (collectively, the “Stripe Terms”). Merchant’s Stripe account is Merchant’s responsibility, including its accuracy, maintenance, identity verification, and continued good standing. Merchant’s use of Stripe is governed by the Stripe Terms, which are between Merchant and Stripe and not part of this Agreement. Settlement timing, holds, reserves, and account actions imposed by Stripe are outside Provider’s control and do not constitute a breach of Provider’s obligations under this Agreement. Provider is not liable for the acts, omissions, availability, or account decisions of Stripe.

b. Merchant of Record. Because the Cloud Service offers a universal cart permitting a customer to purchase from multiple businesses in a single Transaction, Provider acts as the merchant of record for Transactions processed through the Cloud Service. Provider is responsible for processing refunds and for administering customer disputes and chargebacks in accordance with Section 6. Merchant may independently offer refunds, credits, or other accommodations to its own customers, and will promptly notify Provider of any refund it grants that affects amounts processed through the Cloud Service so that settlement can be adjusted.

c. Normal Transactions. Provider will settle amounts owed to Merchant from normal Transactions (excluding gift card redemptions) through Stripe or another payment processor on a schedule consistent with standard industry practices (typically daily or next-business-day settlement, subject to the payment processor’s terms and any applicable holds or reserves). Payment processing costs at the payment processor’s standard rates (currently 2.9% of the tax-inclusive amount of Merchant’s portion of the order, plus a $0.30 fixed fee per order) are deducted from amounts settled to Merchant as a pass-through at cost — the same rates Merchant would pay processing the sale through its own Stripe account. For an order that includes multiple merchants, the fixed fee is allocated among those merchants pro rata by their share of the order, so that the total deducted never exceeds the processing cost the payment processor actually charges. Provider bears the processing cost attributable to the Customer-Side Platform Fee.

d. Gift Card Redemptions. Gift card redemptions are settled separately with Merchant, at Provider’s election, through Stripe Treasury or by ACH through Provider’s ACH settlement service, on the following schedule:

i. Every Tuesday: all accrued gift card redemptions from 12:00 AM Friday through 11:59 PM Monday are settled; and

ii. Every Friday: gift card redemptions from 12:00 AM Tuesday through 11:59 PM Thursday are settled only if the balance accrued during that period exceeds $50.00. If that balance is $50.00 or less, it is not settled on Friday and instead carries forward to the following Tuesday settlement. Settlement dates falling on a holiday are processed on the next business day.

e. Transaction Summary. Provider will provide Merchant with a weekly transaction summary itemizing all Transactions settled during the applicable period.

f. Settlement Disputes. Merchant must notify Provider in writing within fifteen (15) business days of receipt of a transaction summary if Merchant believes a settlement amount is incorrect. Provider will investigate and respond within five (5) business days of receiving a dispute notice. Settlement amounts not disputed within fifteen (15) business days shall be deemed accepted.

6. Chargebacks and Fraud

a. Allocation of Disputes. As merchant of record, Provider administers all chargebacks, reversals, and customer disputes relating to Transactions processed through the Cloud Service. Economic responsibility is allocated as follows: (a) Merchant bears the loss for disputes arising from Merchant’s acts or omissions, including goods or services not delivered, not rendered, or not as described, and Merchant’s failure to honor a reservation, purchase, or gift card; and (b) Provider bears the loss for disputes arising from card fraud, unauthorized use of a payment credential, or failures of the payment processing or checkout systems Provider controls. Where a dispute arises from the acts or omissions of both parties, the loss will be allocated in proportion to each party’s responsibility. Where Merchant bears the loss, Provider may deduct the disputed amount, plus any associated network fees, from Merchant’s next scheduled settlement or invoice it to Merchant.

b. Dispute Notice and Cooperation. Provider will notify Merchant of any chargeback or dispute allocated to Merchant within three (3) business days of Provider’s receipt of notice from the applicable payment processor. Merchant will cooperate fully and promptly with Provider in the dispute process, including providing documentation of the underlying Transaction, fulfillment records, and communications with the customer, within the timeframes Provider reasonably requires to meet network deadlines. Provider will use commercially reasonable efforts to contest disputes it reasonably believes are without merit.

c. Fraud Prevention. Merchant agrees to implement reasonable measures to prevent fraudulent Transactions. Provider reserves the right to suspend processing for Merchant's account if Provider reasonably determines that Merchant's account presents an elevated fraud or chargeback risk, pending investigation and resolution.

7. Support and SLA

a. Support. Provider will provide support for the Cloud Service on a twenty-four (24) hour, seven (7) day per week basis. Provider will respond to critical support requests (platform unavailability or transaction processing failures) within two (2) hours, and to general support requests within one (1) business day.

b. SLA. Provider will use commercially reasonable efforts to make the Cloud Service available 99.9% of the time in each calendar month, excluding scheduled maintenance and downtime caused by Force Majeure Events or circumstances outside Provider's reasonable control.

c. Insurance. During the Subscription Term and for six (6) months after, Provider will carry commercial insurance policies with coverage limits that meet the following minimums: (i) worker’s compensation insurance as required by applicable Law; and (ii) cyber liability insurance with a minimum limit of at least $1,000,000.00 for each occurrence and at least $2,000,000.00 in the aggregate. Upon request, Provider will give Merchant a certificate of insurance evidencing policies that meet these minimums. Provider’s insurance policies will not be considered evidence of Provider’s liability.

d. Scheduled Maintenance. Provider will provide at least forty-eight (48) hours advance notice of scheduled maintenance reasonably expected to result in Cloud Service unavailability and will use commercially reasonable efforts to schedule maintenance during off-peak hours.

8. Warranties

a. Mutual Warranties. Each party represents and warrants that:

i. it has the legal power and authority to enter into this Agreement; and

ii. it will use industry-standard measures to avoid introducing Viruses into the Cloud Service.

b. Additional Provider Warranties. Provider warrants that:

i. the Cloud Service will perform materially as described in the Documentation and Provider will not materially decrease the overall functionality of the Cloud Service during a Subscription Term (the "Performance Warranty"); and

ii. any Professional Services will be provided in a professional and workmanlike manner (the

"Professional Services Warranty").

c. Warranty Remedy. Provider will use reasonable efforts to correct a verified breach of the Performance Warranty or Professional Services Warranty reported by Merchant. If Provider fails to do so within thirty (30) days after Merchant's warranty report ("Fix Period"), either party may terminate the affected Order, and Provider will refund any pre-paid, unused fees for the terminated portion of the Subscription Term. Merchant must report a breach within thirty (30) days of discovering the issue ("Claim Period"). These procedures are Merchant's exclusive remedies and Provider's sole liability for breach of either warranty.

d. Disclaimers. Except as expressly set out in this Agreement, each party disclaims all warranties, whether express, implied, statutory or otherwise, including warranties of merchantability, fitness for a particular purpose, title and noninfringement. These disclaimers apply to the full extent permitted by Law.

9. Merchant Obligations and Usage Rules

a. Compliance. Merchant will (i) comply with all applicable federal, state, and local laws and regulations; (ii) provide accurate, complete, and current business information, descriptions, photos, and pricing for listing on the Cloud Service, and promptly update such information as needed; and (iii) honor all reservations, purchases, and gift cards made through the Cloud Service.

b. High Risk Activities and Sensitive Data. Merchant:

i. will not use the Cloud Service for High Risk Activities;

ii. will not submit Sensitive Data to the Cloud Service; and

iii. acknowledges that the Cloud Service is not designed for use prohibited in this Section 9(b).

c. Restrictions. Merchant will not and will not permit anyone else to: (i) sell, sublicense, distribute or rent the Cloud Service (in whole or part) or use the Cloud Service to provide a hosted or managed service to others; (ii) reverse engineer, decompile or seek to access the source code of the Cloud Service; (iii) copy, modify, create derivative works of or remove proprietary notices from the Cloud Service; (iv) conduct security or vulnerability tests of the Cloud Service, interfere with its operation or circumvent its access restrictions; or (v) use the Cloud Service to develop a competing product.

d. Notification of Security Incidents. Merchant will promptly notify Provider of any suspected unauthorized access to Merchant's Cloud Service account or any known security incident affecting Transactions.

10. Data

a. Use of Merchant Data. Provider will access and use Merchant Data to provide, maintain, and improve the Cloud Service under this Agreement and as otherwise expressly permitted in this Section 10. Provider will not disclose Merchant Data to third parties except as permitted in this Agreement.

b. Security. Provider will use commercially reasonable administrative, technical, and physical safeguards designed to protect Merchant data against unauthorized access, use, or disclosure.

c. Usage Data. Provider may collect Usage Data and use it to operate, improve, and support the Cloud Service and for other lawful business purposes, including benchmarking and reporting. Provider will not disclose Usage Data externally unless it is (i) deidentified so that it does not identify Merchant, its customers, or any other person and (ii) aggregated with data across other merchants.

d. Aggregated Data. Provider may create Aggregated Data from Merchant Data, Transaction data, and Usage Data, and may use, reproduce, publish, license, distribute, and sell Aggregated Data for any lawful business purpose, including analytics products, market research, and reporting furnished to third parties such as government agencies, tourism and economic development organizations, and enterprise customers. Provider owns all Aggregated Data. In creating and disclosing Aggregated Data, Provider will: (i) deidentify data in accordance with applicable Law and recognized industry standards; (ii) not attempt to re-identify any individual or merchant, and will contractually require recipients of Aggregated Data not to attempt re-identification; (iii) not disclose Aggregated Data in any form that reveals the identity, sales volume, revenue, pricing, or performance of any individual merchant; (iv) apply a minimum aggregation threshold so that no disclosed data point is derived from fewer than five (5) merchants; and (v) remain responsible for its own compliance with applicable Law in connection with any sale or licensing of Aggregated Data. Provider will not sell Personal Data. Notwithstanding Section 15 (Confidentiality) and the definition of Confidential Information, Aggregated Data and Usage Data are not Merchant’s Confidential Information.

e. Model Training and Product Development. Provider may use Merchant Data, Transaction data, and Usage Data to develop, train, test, tune, evaluate, and improve Provider’s models, algorithms, features, and services, including the artificial intelligence features of the Cloud Service. Provider will not use Merchant Data in any manner that would disclose Merchant Data or Personal Data to another customer or to any third party, and outputs generated by such models and made available to third parties will not contain Merchant Data or Personal Data. Provider owns all models, algorithms, and improvements developed under this Section.

f. AI Data Rights and Licensed Access. Provider may crawl, index, compile, and use business catalog, product, service, pricing, and location data, including data relating to businesses that are not Merchants (“Business Data”), together with the outputs, answers, and results generated by the Cloud Service’s artificial intelligence features (collectively, “AI Outputs”), to operate, improve, and monetize the Cloud Service, including its AI-powered discovery features. Provider reserves all rights in the compiled Business Data, the AI Outputs, and the associated indices and models. For clarity, Merchant retains all rights in the original data it provides, and nothing in this Section restricts Merchant’s use of its own data, including with its own artificial intelligence tools; this Section governs Provider’s compiled Business Data and AI Outputs. Except for a limited preview layer that Provider may make publicly discoverable (for example, an indication that responsive data exists), no person or entity may access, extract, scrape, harvest, ingest, or use Provider’s Business Data or AI Outputs — in whole or in part, and whether by automated means or otherwise — to train, fine-tune, ground, retrieve-augment, or otherwise operate any third-party artificial intelligence or machine-learning system, except under a separate written license from Provider. Provider may offer such access on commercial terms through a licensed interface. Any access to Provider’s Business Data or AI Outputs beyond the preview layer without a valid license from Provider is unauthorized. This Section does not limit Merchant’s ordinary use of the Cloud Service for its own business or an end user’s ordinary personal use of the discovery features.

g. Privacy and Data Protection. Each party will comply with the data protection and privacy Laws applicable to it in connection with the processing of Personal Data under this Agreement. The parties will adhere to any Data Protection Addendum identified on the Cover Page. Merchant is responsible for providing any notices to, and obtaining any consents from, its own customers required in connection with Merchant’s collection and use of their data. Provider maintains a publicly available privacy notice describing its collection and use of consumer data through the Cloud Service.

h. Data Ownership. Merchant retains ownership of Merchant Data. Provider retains ownership of all Cloud Service technology and systems, Usage Data, Aggregated Data, and the models, algorithms, and improvements developed under Section 10(e).

i. Data Export and Deletion. Upon termination or expiration of this Agreement, Provider will provide Merchant with an export of its transaction data within thirty (30) days of Merchant's written request. Within sixty (60) days of termination, Provider will delete Merchant data except as required by its standard backup or record retention policies or by Law.

11. Suspension

a. Suspension. Provider may suspend Merchant's access to the Cloud Service and related services due to a Suspension Event, but where practicable will give Merchant prior notice so that Merchant may seek to resolve the issue and avoid suspension. Provider is not required to give prior notice in exigent circumstances or for a suspension made to avoid material harm or violation of Law. Once the Suspension Event is resolved, Provider will promptly restore Merchant's access.

b. Suspension Event. “Suspension Event” means

i. Merchant's account is thirty (30) or more days overdue.

ii. Merchant is in breach of Section 9 (Merchant Obligations and Usage Rules).

iii. Merchant's chargeback rate exceeds levels deemed acceptable by Provider's payment processor, or

iv. Merchant's use of the Cloud Service risks material harm to the Cloud Service or others, or

v. Merchant extracts or transmits Provider’s Business Data or AI Outputs to any third-party artificial intelligence or machine-learning system in violation of Section 10 (for the avoidance of doubt, this does not include Merchant’s use of its own data).

12. Term and Termination

a. Termination for Convenience. Either party may terminate this Agreement at the end of the Initial Subscription Term or any renewal period by providing at least thirty (30) days prior written notice. In addition, Merchant may terminate this Agreement for convenience at any time upon thirty (30) days prior written notice to Provider, in which case Provider will settle any outstanding Transactions and provide a final transaction summary in accordance with Section 12(c).

b. Termination for Cause. Either party may terminate this Agreement (including all Subscription Terms) if the other party (i) fails to cure a material breach within thirty (30) days after written notice, (ii) ceases operation without a successor, or (iii) seeks protection under bankruptcy, receivership, or comparable proceeding, or such a proceeding is instituted against that party and not dismissed within sixty (60) days. Provider may terminate immediately upon written notice if Merchant engages in fraudulent activity, submits false information, or materially misuses the Cloud Service.

c. Effect of Termination. Upon termination or expiration, Provider will settle any outstanding Transactions within the next applicable settlement cycle and provide a final transaction summary. Merchant's right to use the Cloud Service will cease. Sections 6, 10(c), 10(d), 10(e), 10(f), 10(i), 13, 14, 15, 16, 17, 18, 20, and 21 survive termination or expiration.

13. Intellectual Property

a. Reserved Rights. Neither party grants the other any rights or licenses not expressly set out in this Agreement. Except for Provider's express rights in this Agreement, Merchant retains all intellectual property and other rights in its trademarks, content, and customer data. Except for Merchant's express rights in this Agreement, Provider and its licensors retain all intellectual property and other rights in the Cloud Service and related technology. Without limiting the foregoing, Provider expressly reserves all rights to crawl, index, and use Business Data and AI Outputs (as defined in Section 10) for artificial intelligence and machine-learning purposes, and no such rights are granted to Merchant or any third party except under a separate written license from Provider. This does not restrict Merchant’s use of its own data.

b. License to Merchant Content. Merchant grants Provider a non-exclusive, royalty-free license to display, reproduce, and distribute its content on the Cloud Service solely during the term of this Agreement and solely for the purpose of operating the Cloud Service.

c. Feedback. If Merchant gives Provider feedback regarding improvement or operation of the Cloud Service, Provider may use the feedback without restriction or obligation. All feedback is provided "AS IS" and Provider will not publicly identify Merchant as the source without Merchant's permission.

14. Third-Party Platforms

Merchant may choose to enable integrations or exchange data with Third-Party Platforms. Merchant's use of a Third-Party Platform is governed by its agreement with the relevant provider, not this Agreement, and Provider is not responsible for Third-Party Platforms or how their providers use Merchant data.

15. Confidentiality

a. Obligations. Each party agrees to keep confidential any Confidential Information disclosed by the other party in connection with this Agreement and to use such Confidential Information only for purposes of performing under this Agreement. Each party will protect the other's Confidential Information with at least the same degree of care it uses to protect its own confidential information, but in no event less than reasonable care.

b. Exceptions. Confidential Information does not include information that: (i) is or becomes publicly known through no fault of the receiving party; (ii) was rightfully known to the receiving party prior to disclosure; or (iii) is independently developed by the receiving party without use of the disclosing party's Confidential Information.

c. Required Disclosures. If legally required to disclose Confidential Information, the receiving party will (where permitted by Law) promptly notify the disclosing party to allow it to seek a protective order and will cooperate reasonably with such efforts.

d. Survival. Confidentiality obligations survive termination of this Agreement for two (2) years.

16. Limitations of Liability

a. General Cap. Each party's entire liability arising out of or related to this Agreement will not exceed the General Cap.

b. Consequential Damages Waiver. Neither party will have any liability arising out of or related to this Agreement for indirect, special, incidental, reliance or consequential damages or damages for loss of use, lost profits or interruption of business, even if informed of their possibility in advance.

c. Exceptions and Enhanced Cap. Sections 16(a) and 16(b) will not apply to Enhanced Claims or Uncapped Claims. For all Enhanced Claims, each party's entire liability will not exceed the Enhanced Cap.

d. Nature of Claims. The waivers and limitations in this Section 16 apply regardless of the form of action, whether in contract, tort (including negligence), strict liability or otherwise and will survive and apply even if any limited remedy fails of its essential purpose.

e. Liability Definitions. The following definitions apply unless modified on the Cover Page.

"Enhanced Cap" means three times (3x) the General Cap.

"Enhanced Claims" means Provider's breach of Section 10(b) (Security) or either party's breach of any Data Protection Addendum adhered to under Section 10(g) (Privacy and Data Protection).

"General Cap" means the greater of: (i) $10,000; or (ii) amounts paid or payable by Merchant to Provider under this Agreement in the twelve (12) months immediately preceding the first incident giving rise to liability.

"Uncapped Claims" means (i) the indemnifying party's obligations under Section 17 (Indemnification), (ii) either party's infringement or misappropriation of the other party's intellectual property rights, (iii) Merchant's dispute liability under Section 6(a), (iv) any breach of Section 15 (Confidentiality) other than breaches related to Merchant Data, and (v) liabilities that cannot be limited by Law.

17. Indemnification

a. Indemnification by Provider. Provider, at its own cost, will defend Merchant from and against any Provider-Covered Claims and will indemnify and hold harmless Merchant from and against any damages or costs awarded against Merchant (including reasonable attorneys' fees) or agreed in settlement by Provider resulting from Provider-Covered Claims.

b. Indemnification by Merchant. Merchant, at its own cost, will defend Provider from and against any Merchant-Covered Claims and will indemnify and hold harmless Provider from and against any damages or costs awarded against Provider (including reasonable attorneys' fees) or agreed in settlement by Merchant resulting from Merchant-Covered Claims.

c. Indemnification Definitions.

"Merchant-Covered Claim" means a third-party claim arising from Merchant's breach or alleged breach of Section 9(a) (Compliance) or Section 9(b) (High Risk Activities and Sensitive Data).

"Provider-Covered Claim" means a third-party claim that the Cloud Service, when used by Merchant as authorized in this Agreement, infringes or misappropriates a third party's intellectual property rights.

d. Procedures. The indemnifying party's obligations are subject to receiving from the indemnified party: (i) prompt notice of the claim, (ii) the exclusive right to control the claim's investigation, defense and settlement, and (iii) reasonable cooperation at the indemnifying party's expense. The indemnifying party may not settle a claim requiring the indemnified party to admit fault without the indemnified party's prior approval. The indemnified party may participate with its own counsel at its own expense.

e. Mitigation. In response to an infringement or misappropriation claim, Provider may: (i) procure rights for Merchant's continued use of the Cloud Service, (ii) replace or modify the allegedly infringing portion without reducing overall functionality, or (iii) terminate the affected Order and refund any pre-paid, unused fees for the terminated portion of the Subscription Term.

18. Dispute Resolution

a. Informal Resolution. Before initiating formal proceedings, the parties agree to attempt to resolve any dispute through good-faith negotiation for thirty (30) days following written notice from either party describing the dispute.

b. Governing Law and Venue. This Agreement is governed by the laws of the State of New York, without regard to its conflict of law principles. Any dispute not resolved informally shall be submitted to a court of competent jurisdiction in New York County, New York, and each party consents to such jurisdiction.

19. Force Majeure

Neither party is liable for a delay or failure to perform this Agreement due to a Force Majeure Event. If a Force Majeure Event materially adversely affects the Cloud Service for fifteen (15) or more consecutive days, either party may terminate the affected Order upon notice and Provider will refund any pre-paid, unused fees for the terminated portion of the Subscription Term. This Section does not limit Merchant's obligation to pay fees already owed.

20. General Terms

a. Entire Agreement. This Agreement, together with all applicable Cover Pages and Orders, constitutes the entire agreement between the parties with respect to its subject matter and supersedes all prior agreements, representations, and understandings.

b. Amendments — Material Changes. Any amendment to these terms that materially affects Merchant's rights or obligations requires a written instrument signed by both parties or a new Cover Page.

c. Amendments — Operational Changes. With notice to Merchant, Provider may modify support policies, SLA, or security measures to reflect new features or changing practices, but modifications may not be retroactive or materially decrease Provider's overall obligations during a Subscription Term.

d. Updates to these Terms. Provider may update these Terms from time to time. The current version will always be available at https://yo-do.com/legal/xenia-cloud-terms, identified by version number and

"last updated" date. Material changes to these Terms are governed by Section 20(b) and require a written instrument signed by both parties or a new Cover Page; for material changes affecting an active Subscription Term, Provider will provide thirty (30) days prior notice to Merchant. Non-material updates take effect upon posting, and Merchant’s continued use of the Cloud Service after such non-material update takes effect constitutes acceptance of the updated Terms. The version in effect for a given Merchant is the version incorporated by that Merchant’s executed Cover Page, as amended in accordance with these Terms. For merchants enrolling after an update, the version posted at the time of enrollment governs.

e. Order of Precedence. In the event of a conflict between these Xenia by Yo-Do Software Corp. Cloud Terms and a Cover Page or Order, the Cover Page or Order controls with respect to that specific engagement. An Order does not modify any other part of the Agreement unless it specifically identifies the provisions it supersedes.

f. Waivers and Severability. Waivers must be signed by the waiving party's authorized representative and cannot be implied from conduct. If any provision is held invalid, illegal, or unenforceable, it will be limited to the minimum extent necessary so the rest of the Agreement remains in effect.

g. Assignment. Neither party may assign this Agreement without the prior written consent of the other, except that Provider may assign this Agreement in connection with a merger, acquisition, or sale of all or substantially all of its assets upon written notice to Merchant.

h. Subcontractors. Provider may use subcontractors and permit them to exercise its rights and fulfill its obligations, but Provider remains responsible for their compliance with this Agreement and for its overall performance.

i. Independent Contractors. The parties are independent contractors, not agents, partners, or joint venturers.

j. No Third-Party Beneficiaries. There are no third-party beneficiaries to this Agreement.

k. Notices. All notices must be in writing and delivered by email with confirmation of receipt, overnight courier, or certified mail to the addresses set forth on the Cover Page.

l. Counterparts. This Agreement may be executed in counterparts, each deemed an original. Electronic signatures are valid and binding.

m. Export. Each party will comply with all export and import Laws in performing this Agreement and represents that it is not listed on any U.S. government list of prohibited parties or located in a country subject to a U.S. government embargo.

21. Definitions

"Agreement" has the meaning given in Section 1 (The Agreement).

"Aggregated Data" means data and insights derived from Merchant Data, Transaction data, or Usage Data that Provider has deidentified and aggregated across multiple merchants so that it does not identify, and cannot reasonably be used to identify, Merchant, any individual merchant, any consumer, or any other natural person.

"Business Data" means business catalog, product, service, pricing, and location data compiled by Provider, including data relating to businesses that are not Merchants. Where Business Data is also Merchant Data, both this term and the provisions governing Merchant Data apply.

"AI Outputs" means the outputs, answers, and results generated by the Cloud Service’s artificial intelligence features, as further described in Section 10.

"Cloud Service" means Provider's proprietary Xenia cloud-based platform, as identified in the relevant Order and as modified from time to time. The Cloud Service includes the Provider Software and Documentation but not Professional Services deliverables or Third-Party Platforms.

"Confidential Information" means information disclosed by or on behalf of one party (as discloser) to the other party (as recipient) under this Agreement, in any form, which (a) the discloser identifies as "confidential" or

"proprietary" or (b) should be reasonably understood as confidential or proprietary due to its nature and the circumstances of its disclosure. Provider's Confidential Information includes technical or performance information about the Cloud Service, and Merchant's Confidential Information includes Merchant Data.

"Cover Page" means a Xenia by Yo-Do Software Corp. cover page or Order Form that (a) incorporates these Cloud Service Terms by reference, (b) specifies Key Terms and any Additional Terms, and (c) is signed by Merchant and accepted by Provider by countersignature or by providing access to the Cloud Service.

"Documentation" means Provider's standard usage documentation for the Cloud Service.

"Enhanced Cap" is defined in Section 16(e).

"Enhanced Claims" is defined in Section 16(e).

"Force Majeure Event" means an unforeseen event beyond a party's reasonable control, such as a strike, blockade, war, pandemic, act of terrorism, riot, third-party internet or utility failure, refusal of government license, or natural disaster, where the affected party takes reasonable and customary measures to avoid or mitigate such event's effects.

"General Cap" is defined in Section 16(e).

"High Risk Activities" means activities where use or failure of the Cloud Service could lead to death, personal injury, or environmental damage, including life support systems, emergency services, nuclear facilities, autonomous vehicles, or air traffic control.

"Key Terms" means Effective Date, Governing Law, Subscription Term, fee structure, and other terms specified by the parties as "Key Terms" on the Cover Page.

"Laws" means all laws, regulations, rules, court orders, or other binding requirements of a government authority that apply to a party.

"Merchant" means the party identified as "Merchant" on the Cover Page.

"Merchant Data" means any data, content, or materials that Merchant or its personnel submit to or generate in Merchant’s Cloud Service account, together with records of Transactions processed through the Cloud Service on Merchant’s behalf, including business, catalog, pricing, and customer transaction data.

"Gift Card Program Fee" is defined in Section 3(d).

"Fee Payer" means a Chamber of commerce, business association, or other party identified on the Cover Page that has agreed to assume the Gift Card Program Fee obligation in place of participating businesses.

"Merchant-Covered Claim" is defined in Section 17(c).

"Order" means an order for Merchant's access to the Cloud Service or related services that is executed by the parties and references this Agreement.

"Personal Data" means Merchant Data relating to an identified or identifiable natural person.

"Professional Services" means training, migration, or other professional services that Provider furnishes to Merchant related to the Cloud Service.

"Provider" means Yo-Do Software Corp., a corporation organized under the laws of the State of New York.

"Provider-Covered Claim" is defined in Section 17(c).

"Sensitive Data" means (a) patient, medical or other protected health information regulated by HIPAA, (b) credit, debit, bank account or other financial account numbers, (c) social security numbers, driver's license numbers or other government ID numbers, and (d) special categories of data enumerated in EU Regulation 2016/679, Article 9(1) or any successor legislation.

"Subscription Term" means the term for Merchant's use of the Cloud Service as identified on the Cover Page or in an Order.

"Suspension Event" is defined in Section 11.

"Third-Party Platform" means any product, add-on or platform not provided by Provider that Merchant uses with the Cloud Service.

"Transaction" means any sale, reservation, payment, or gift card purchase or redemption processed through the Cloud Service on behalf of Merchant.

"Uncapped Claims" is defined in Section 16(e).

"Usage Data" means Provider's technical logs, data and learnings about Merchant's use of the Cloud Service, excluding Merchant Data.

"Virus" means viruses, malicious code, or similar harmful materials.