‍Effective Date: May 28, 2026

Deep Vector Inc. dba Loss Scan | 3433 NW Conrad Dr., Bend, Oregon 97703 | info@lossscan.com

1. OVERVIEW AND INCORPORATION

This Acceptable Use Policy ("Policy") governs the access to and use of the Loss Scan software platform, applications, APIs, AI-assisted processing systems, websites (including without limitation www.deepvector.com, www.lossscan.com, app.lossscan.com, app.lossscan.io, and any successor URLs, mobile or localized versions, and related domains and subdomains), and all related services (collectively, "Services") operated by Deep Vector Inc. dba Loss Scan ("Loss Scan," "we," "our," or "us").

This Policy is incorporated by reference into the Loss Scan Terms of Service Agreement ("Agreement") and all Order Forms. Capitalized terms used but not defined herein have the meanings given to them in the Agreement. In the event of a conflict between this Policy and the Agreement, the Agreement shall control. By accessing or using the Services, Customer and each Authorized User agree to comply with this Policy. Customer is responsible for ensuring that all Authorized Users are aware of and comply with this Policy.

2. PERMITTED USE

The Services are provided solely for Customer's lawful internal business purposes as described in the Agreement. All use of the Services must comply with: (a) this Policy; (b) the Agreement, including all applicable Order Forms; (c) the Documentation; and (d) all applicable federal, state, local, and international laws and regulations.

Loss Scan's AI-assisted processing technologies are operated within a privately controlled infrastructure and are designed for professional use in connection with Customer's legitimate business operations. Use of the Services is subject to any usage limits specified in the applicable Order Form.

3. PROHIBITED CONDUCT

Customer and each Authorized User shall not, and shall not permit any third party to, engage in any of the following:

3.1 Security and Infrastructure Integrity

• Probe, scan, test, or assess the vulnerability of any system, network, or infrastructure used in connection with the Services, whether or not belonging to Loss Scan.
• Tamper with, reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code, underlying algorithms, or architecture of the Services or any component thereof, except to the limited extent expressly permitted by applicable law notwithstanding this restriction.
• Circumvent, disable, bypass, or otherwise undermine any security, authentication, access control, or rate-limiting mechanism of the Services.
• Attempt to gain unauthorized access to the Services or any portion thereof, or to any account, system, network, or data connected to or used in conjunction with the Services.
• Introduce, upload, or transmit any virus, malware, ransomware, Trojan horse, worm, logic bomb, scripting exploit, or other malicious or disruptive code or content into the Services or any related infrastructure.
• Impose an unreasonably large or disproportionate load on the Services or related infrastructure, including by use of automated bots, spiders, scrapers, offline readers, or other automated request systems that generate request volumes beyond those reasonably generated by a human user, or that exceed the documented usage parameters for the applicable Service.
• Modify, disable, or interfere with the operation, integrity, or performance of the Services or related systems, networks, or data.
• Access or search the Services by any means other than through Loss Scan's publicly supported and documented interfaces.

3.2 Unauthorized Access and Identity

• Access the Services using another user's credentials, account, or identity without that user's explicit authorization and Loss Scan's prior written consent.
• Misrepresent your identity or affiliation, or disguise the origin of any data, content, or information submitted through the Services, including by spoofing, phishing, header manipulation, impersonation, or falsely implying any sponsorship, endorsement, or association with Loss Scan or any third party.
• Share login credentials or account access with individuals who are not Authorized Users under the applicable Order Form.
• Use the Services to access data or information belonging to or concerning any person or entity other than Customer and its Authorized Users, except as expressly authorized in writing by Loss Scan.

3.3 Data, Content, and Intellectual Property

• Submit, upload, post, share, or otherwise provide Customer Data or any other content through the Services that:

• infringes, misappropriates, or violates any third party's intellectual property rights, including patents, copyrights, trademarks, or trade secrets;
• violates any individual's privacy rights, including by collecting, processing, or disclosing personal information without appropriate legal authority or consent;
• you do not have the legal right to submit, including confidential, proprietary, or personal information you are not authorized to disclose;
• is fraudulent, deceptive, defamatory, libelous, threatening, obscene, pornographic, indecent, harassing, hateful, or otherwise unlawful or inappropriate; or
• encourages, facilitates, or constitutes illegal activity or tortious conduct.

• Use meta tags, hidden text, or other techniques that incorporate Loss Scan's or its suppliers' product names, trademarks, or other proprietary identifiers without authorization.
• Copy, reproduce, distribute, publicly display, or create derivative works of any portion of the Services, Documentation, or Loss Scan Technology without prior written consent.
• Scrape, harvest, or extract data from the Services other than through authorized API integrations or export features provided within the Services.

3.4 AI and Automated Processing

• Attempt to manipulate, deceive, or circumvent Loss Scan's AI models or automated processing systems, including by submitting fabricated, manipulated, or misleading data for the purpose of generating false outputs.
• Use the Services to train, benchmark, evaluate, or improve any external artificial intelligence or machine learning model, system, or product, including any competing product or service, without Loss Scan's prior written consent.
• Attempt to extract, replicate, or reconstruct Loss Scan's AI models, training data, inference logic, or processing pipelines through systematic querying, output analysis, or any other method.
• Represent AI-generated outputs from the Services as the product of independent human professional judgment, or submit such outputs as professional advice, regulatory filings, or legally binding determinations without appropriate human review and validation, as required by the Agreement.

3.5 Communications and Commercial Misuse

• Use the Services to generate, send, or facilitate unsolicited commercial communications, advertising, spam, or bulk messaging of any kind.
• Use the Services in any manner that causes or risks causing Loss Scan to be registered on any email blocklist, DNS blocklist, or similar reputation-based restriction list, or that otherwise impairs Loss Scan's ability to deliver communications on its own behalf or on behalf of its customers.
• Solicit Authorized Users or other users of the Services for commercial purposes unrelated to Customer's authorized use under the Agreement.
• Promote, advertise, or market third-party products or services through the Services without appropriate authorization from both the applicable third party and Loss Scan.
• Resell, sublicense, or otherwise make the Services available to third parties, except as expressly authorized in the Agreement.

3.6 Legal Compliance

• Use the Services for any purpose that violates applicable federal, state, local, or international law or regulation, including without limitation data privacy laws, export control laws, anti-money laundering statutes, and trade sanctions.
• Use the Services to stalk, harass, bully, threaten, or otherwise harm any individual or group.
• Use the Services to violate the privacy of others, or to collect, process, or disclose personal information of other individuals without a lawful basis.
• Use the Services in any jurisdiction, or on behalf of any person or entity, subject to applicable trade sanctions or export control restrictions, in violation of Loss Scan's export compliance obligations under the Agreement.
• Encourage, assist, or permit any other person or entity to engage in any of the conduct prohibited under this Policy.

4. CUSTOMER DATA STANDARDS

In addition to the representations and obligations set forth in the Agreement, Customer represents and warrants on a continuing basis that all Customer Data submitted to the Services:

• has been collected, processed, and transferred in compliance with all applicable data privacy and security laws, including any requirements for individual notice, consent, or authorization;
• does not contain sensitive categories of personal information (including without limitation Social Security numbers, financial account credentials, health or medical records, or government-issued identification numbers) unless Customer has implemented appropriate technical and organizational safeguards and has obtained any legally required consents or authorizations for such processing;
• is submitted only through authorized interfaces and in accordance with the Documentation; and
• does not include data that Customer knows or has reason to believe is the subject of pending or anticipated litigation, regulatory investigation, or law enforcement inquiry that would prohibit or restrict its processing, unless Customer has obtained appropriate legal advice authorizing such submission.

Customer acknowledges that Loss Scan's AI-assisted systems process Customer Data within Loss Scan's private, closed infrastructure and that no Customer Data is transmitted to publicly available consumer AI platforms. Notwithstanding the foregoing, Customer remains solely responsible for ensuring the accuracy, legality, and appropriateness of all Customer Data submitted to the Services.

5. BENCHMARKING AND DATA PARTICIPATION

Participation in any benchmarking program, industry research initiative, or anonymized data-sharing pool is strictly voluntary. Loss Scan will not include Customer Data in any benchmarking dataset or shared data pool without Customer's separate, affirmative opt-in consent, as further described in Section 3.5 of the Agreement and governed by a separately executed data participation addendum. Nothing in this Policy requires or implies Customer's participation in any such program.

6. ENFORCEMENT AND REMEDIES

Loss Scan reserves the right, in its sole discretion and without prior notice or liability, to investigate any suspected violation of this Policy and to take any action Loss Scan deems appropriate, including:

• temporarily or permanently suspending or terminating Customer's or any Authorized User's access to the Services, consistent with Section 6.5 of the Agreement;
• removing, disabling, or restricting access to any Customer Data or content that violates this Policy;
• reporting suspected illegal activity to appropriate law enforcement or regulatory authorities; and
• pursuing any other legal or equitable remedies available to Loss Scan under the Agreement or applicable law.

Enforcement actions under this Policy do not limit Loss Scan's right to pursue any other remedies available under the Agreement, including claims for damages, injunctive relief, or indemnification. A failure by Loss Scan to enforce any provision of this Policy on any occasion shall not constitute a waiver of Loss Scan's right to enforce such provision in the future.

Loss Scan's suspension rights under this Policy are in addition to and do not replace or limit Loss Scan's termination rights under Section 7 of the Agreement. In cases of egregious or repeated violations, Loss Scan may terminate the Agreement for cause pursuant to Section 7.2 without first invoking its suspension rights.

7. REPORTING VIOLATIONS

If Customer becomes aware of any use of the Services in violation of this Policy, including by any Authorized User, Customer shall promptly notify Loss Scan at info@lossscan.com. Loss Scan takes all reports of Policy violations seriously and will investigate and respond as appropriate. Customer's obligation to report violations is in addition to, and does not limit, Customer's obligations and liability under the Agreement.

8. UPDATES TO THIS POLICY

Loss Scan may update this Policy from time to time to reflect changes in the Services, applicable law, or industry standards. Loss Scan will provide reasonable advance notice of material changes to this Policy through the Services or by written notice to Customer in accordance with the notice provisions of the Agreement. Customer's continued use of the Services following the effective date of any updated Policy constitutes acceptance of such changes. The most current version of this Policy will be made available through the Services and supersedes all prior versions.

9. CONTACT

Questions regarding this Policy should be directed to:

‍

Deep Vector Inc. dba Loss Scan

3433 NW Conrad Dr., Bend, Oregon 97703

Attention: Legal Department

Email: info@lossscan.com

This Acceptable Use Policy is incorporated into and forms part of the Loss Scan Terms of Service Agreement. Capitalized terms not defined herein have the meanings given in the Agreement. Last Updated: May 28, 2026.

‍