Terms and Conditions

Last updated [Date:17-06-2024]

These Terms and Conditions constitute a legally binding agreement made between you and Origami (Represented as “we,” “us” or “our”) website origami.ms, regarding the uses of your free and paid services, software, and websites, provided by Origami and it includes any data, files, information, usernames, images, graphics, profiles, audio, and video clips, sounds, musical works, works of authorship, applications, links, created tasks and associated information, text, files and other content or materials (together, the “Content”) uploaded, downloaded, or appearing on our website or our Saas app.

The way we collect and use your data is disclosed in these Terms and Conditions. To the extent your data includes personal data, the Privacy Policy governs where we are the controller, for example, in our business relationship with you or in the operation of the Services. The Data Processing Addendum attached herein as Exhibit A (“the “DPA”) governs where we are a processor, processing data on your behalf. The DPA is hereby incorporated as part of these Terms and Conditions.

When you access our service, it will be treated as if you have read, understood, and agreed to be bound by all of these Terms and Conditions, the DPA and our Privacy Policy. When you use our Service on behalf of any organization or entity (“Organization”), then it will be treated that you are agreeing to these Terms on behalf of that organization and you represent and warrant that you have the jurisdiction to bind the Organization to these Terms. In that case, “you” and “your” refers to that Organization.

Our Terms and Conditions, DPA and Privacy Policy affect your legal rights and obligations and If you do not agree to be bound by all of these, Terms and Conditions, then you are explicitly prohibited from using the Site and you must close down your use immediately.

General Conditions

1. We reserve the right to terminate or cease your account, providing you with all or part of our service at any time liability to you for any reason, including but not limited to, if we have enough grounds to believe that:

(i) You are not following our Terms

(ii) You are committing risky or possible illegal exposure to our service;

(iii) You have a free account that is inactive for 60 days or you have a trial account of 30 days old and after the trial period, you didn’t add the payment method yet.
or

(iv) the regulation of our Services to you is no longer commercially stable.

We will notify you about our activities regarding termination, when you try to access your account, by email, phone, or any other means to contact. If you suspend or terminate your account then your content and other data will not be accessible through your account.

2. After termination of your account, all the services and rights provided to you will be ceased immediately.

3. We reserve the sole discretionary power, to change these terms or our services from time to time. Unless we make a change for legal or administrative reasons, we will provide notice before enforcing the updated terms. You unify that we may notify you about the updated terms by publishing these on the service or on our website and it will come into force after updating immediately.

Therefore we encourage you to review these updated terms before using the existing and new service. The updated terms will come into force immediately after posting and will apply to your use of service. The Updated Terms will come into force immediately after posting in our website, or such later date as may be specified in the Updated Terms, and will apply to your use of the Service. These Terms will govern any disputes arising before the effective date of the Updated Term.

4. Origami reserves all the rights and access to the service.

5. You hereby empower us, directly or via the third party to verify your identity or any data if necessary. It includes asking you to confirm ownership of your email address, further information or documentation about your account usage or identity, or wireless/cellular phone number or financial documents, and verifying your data against third party databases or through other sources. This is our verification process and we may charge a fee to complete this verification process.

6. We may, but have no ought to, remove, edit, block, and/or monitor Content or accounts containing Content that we determine in our sole conscience violates these Terms.

7. You consent that you are responsible for the data charges you bind through the use of the service.

8. By creating your account, you agree that our service may send you the informational and promotional text (SMS) messages as part of our business operation of your use of the Services. However, there will be an option to opt-out but it is not recommended, cause you may miss an important notification.

9. We forbid scraping, caching, crawling, or any other activities regarding accessing any content on the service through any automated means.

10. For some special circumstances ( errors, bugs, or this type of other issues), our employees or developers may access your data or content to diagnose an issue.

11. However, you can accept assistance without granting permission to your account and you will need to make a request to our support team and your request will be honored to the extent possible.

12. To maintain our internal operation we may transfer, store, or process your content in any other country where our agents work for us. By using our service you agree with us about such kinds of practices.

Your User Account and Content

1. Your provided information should be authentic while creating your Origami account.

2. You need to ensure the safeguard of your password and monitor all the activities of your account. You should inform us immediately if you see any unusual activity in your account.

3. Without other user’s consent, you can’t access their account.

4. The account must be registered by a human. We don’t allow account registration through bots or any other automated processes. Additionally, You will need to be at least 16 years old to complete registration.

5. You are not allowed to disassemble, decompile, or reverse engineer the service or endeavor or support anyone else to do the same practices, unless such restriction is prohibited by Law.

6. You are not allowed to use our service for any illegal or unauthorized practices. You agree to comply with all the applicable laws, rules, and regulations regarding your use of service and your content but not limited to copyright laws.

7. If you use our paid service, fees are non-refundable unless and until and until it is required by law or if you cancel the service during the 30-days money-back guarantee period. You will need to pay all the necessary fees and dues accordingly, if you pay such fees and dues via credit card and other electronic means you authorize us to charge you using your selected payment gateway. We have an automated process to charge for your subscribed service and it will auto-renew the service on the expiration date and charge you automatically from your selected payment method unless and until you cancel the service prior to the renewal date. We may change or update the fee rates of our service and we will notify you via email or any other means, before 30 days of your service renewal date. Your responsibility is to give us complete and accurate billing information. We reserve the right to suspend or terminate your use of the Service if you have any dues. You are liable for all taxes (excluding taxes on our net income), and we will charge tax if required to do so by law.

Your Use of Our Service

1. You are not allowed to access our private API by means other than those expressly permitted by us.

2. You should not modify, adapt, or change the service or change, modify, or alter another website so as to untruly mean that it is associated with the Service or with us.

3. You must refrain from practicing any kind of interruption against our service or servers or networks connected to the Service, including by transmitting any viruses, spyware, worms, malware, or any other code of a disruptive nature. You are not allowed to insert content or code or otherwise alter or interfere with the way any page is rendered or displayed in a user’s browser or device.

4. You should refrain from attempting to restrict another user from using or enjoying the Service and you must not foster or naturalize violations of these Terms or any of our other terms.

5. To provide you the service of Origami we offer downloadable software for your use in connection with the service. The software might be updated automatically and might need a minimum compatible device or operating system(i.e minimum 512MB RAM or Windows/Android 4.01 etc). When you agree with the compliance of these terms, we approve you a non-transferable, revocable, limited, nonexclusive, license to use the Software, merely provided for the specified service. However, that license will only provide you the access to use our service and you are not allowed to sell, copy, or do other illegal practices with it. Origami reserves all the rights, title, and interest in the software. Accepting our terms and conditions you agree with us that, you will not reproduce, republish, frame, download, transmit, modify, display, copy, reverse engineer, sell, or participate in any sale of, rent, lease, loan, assign, distribute, license, sublicense, or exploit in any way, in whole or partially, Our services, Our Content, or any related software, except as expressly stated in these Terms.

6. According to our discretion if we see that these terms are violated then we may terminate your account. Besides, we reserve the right to investigate and prosecute violations of any of these Terms to the fullest extent of the law. We may take any kind of legal action against users who violate our terms. You concede that we have no obligation to prescreen or monitor your access to or use of our Service or any materials, information or other content provided or made available through our Service but has the right to do so. Hereby you agree that we have our sole discretionary practices to remove or delete any data, accounts, or other content that violates these Terms or that is otherwise objectionable.

7. If you use or decide to use any third-party app and connect it with our service, then you should be aware that you are sharing your content and information with a third-party app. We recommend you to see the privacy policy of such third party apps to know how they will utilize your content and information. If they do any illegal or unfair use with your content or information then we will not be responsible for such practices.

Rights

1.Ownership. 

Here in these terms: 

(i) “Content” includes any text message, data, files, graphics, photos, profiles, audio, information, usernames, images, and sounds, musical works, works of authorship, video clips, applications, links, created tasks and associated information, text, files, and also includes other content or materials. 

And

(ii) “User Content” means any content which is provided by the account holders while creating the account.

a. Content ownership of the content we make

Unless and until it is stated otherwise, all the content or materials within the services, including, but not finite to, text, graphics, images, code, illustrations, designs, icons, photographs, video clips, and written and other materials (“Origami Content”), including their selection and arrangement, are protected by trademark, trade dress, patent, copyright, and other intellectual property laws, and any unauthorized use of Origami Content may violate such laws and these Terms.

Without expressly stated in these terms, we do not permit any express or implied right to use and share Origami content. You need to agree that you will not do any misuse, copy, reproduce, transmit, modify, display, republish, frame, download, reverse engineer, sell, or participate in any sale of, distribute, license, sublicense, rent, lease, loan, assign, or exploit in any way, in whole or in part, Origami Content, the Services or any related software or Client Software as mentioned above, without as expressly stated in these Terms and conditions.

You further agreed that you will not remove, alter, or obscure any trademark, copyright, service mark, or other proprietary rights notices incorporated in or accompanying Origami service. You concede that the services and contents are protected by copyright, trademark, and other compatible local laws including the USA.

b. Rights in User Content

We don’t have any ownership rights over the content submitted or created by you in your Origami service account and your content is solely yours. These terms and conditions don’t give Origami any license or right to your content except for the limited rights needed for us to provide the Origami service to you.

Only for some special purposes, we can access your content or data, like if we need it for any kind of development or improvement of our service. Similarly, any collected data from your use will remain yours. 

By using our service you permit us that we can use this data in our service operation and also and you also permit us that as long as the data is anonymized and does not identify you, we can combine this data with the anonymized data of other companies to provide benchmarking, public reports or to otherwise use it to provide the Origami Service.

c. Alerts and Notification

As a part of our service, we may provide you (if enabled) text messages, push notifications, emails, alerts, or other types of messages directly sent to you outside or inside the App (“Notifications”). However, there will be some options for you also to opt-out.

2. Some of our services may contain advertisements and promotions, and you hereby permit us that we may place such advertisements or promotions on the service or in conjunction with your content.  These advertisements may be changed at any time without any notice.

3. You concede that our system may always not identify paid services or sponsored content, or commercial communications as such for technical errors.

4. You accept that: 

(i) you are the owner and responsible for the Content posted by you or through the Service or else have the right to grant the rights and licenses set forth in these Terms of Use; 

(ii) Your content will not violate, misappropriate, or infringe on the rights of any third party, privacy rights, including, without limitation, publicity rights, copyrights, trademark, and/or other intellectual property rights; 

(iii) you accept to pay for all fees, royalties, and any other monies owed by reason of content you post on or through the Service; 

5. The name, page headers, custom graphics, button icons, and scripts are our service marks, trademarks, and/or trade dress, heading and logo of Origami are our trademarks and must not be copied or used without our written permission.

6. Though our main intention is to give you the best service. Our service may be interrupted, including, without limitation, for scheduled maintenance or upgrades, for unscheduled downtime, for emergency repairs, for system and server failures, or due to failure of telecommunications links or other equipment.

We highly recommend you to keep a backup of your content or such stuff for backup or storage. If you lose your content for our modification, suspension, or discontinuation of the Services and then we will not be responsible for it. We also warn you about the breaches of security and that the submission of Content or other information may not be secure.

7. You further agree that you are responsible for the content posted within the service. We are not obliged to prescreen, monitor, edit, or remove any Content and your content violates these Terms, you will be legally responsible for that Content.

8. Except as otherwise stated in the Service’s Privacy Policy and DPA, as between you and us, any Content will be non-confidential and non proprietary and we will not be responsible for any use or disclosure of Content. You accept and agree that your relationship with us is not a confidential, rigid, or other types of the special relationship and that your decision to submit any Content does not place us in a position that is any different from the platform held by members of the ordinary public, including with regard to your Content. None of your content is subject to any obligation of confidentiality and we will not be liable for any user or disclosure of any content you provide.

9. According to your agreement and continuing compliance with these terms and conditions we grant you a non-exclusive, non-transferable, revocable limited license to use the Service merely for its intended purposes and you agree to use the service only for the stated purposes.

That mentioned license is revocable and subject to these terms and does not include:

d. The public performance, distribution, or public display of Our Content;

e. Fully or partially modifying or otherwise making any derivative uses of the Services or Our Content.

f. Using any data mining, robots, scraping, or similar data gathering or extraction methods;

g. Downloading any portion of the Services, Our Content, or any information contained therein, except as expressly permitted on the Services;

h. Using our API with an unauthorized or third-party client or by any means;

i. Any use of Our Content or the Services or other than for their intended purposes.

and

j. Any use of Our Content or the Services other than as specifically permitted in these Terms, without our prior written permission, is strictly prohibited and will disband the license to use our Service and Site granted in these Terms.

10. We do not consider or accept ideas, suggestions, content, information, or other materials other than those we have particularly requested and to which certain specific terms, conditions, and requirements may apply. This is to fudge any misunderstandings if your ideas are similar to those we have developed or are developing independently. If despite our policy, you choose to send us content, suggestions, information, ideas, or other materials, you further agree to the following:

10. For all kinds of feedback, postcards, comments, suggestions, ideas, reviews, and other submissions stated, submitted, or offered to us via our Service, our sites, by e-mail or telephone, or otherwise disclosed, submitted or offered in connection with your use of this Service you grant us a royalty-free, irrevocable, transferable right and license to use the User Submissions however we desire, including without limitation, to copy, modify, delete in its entirety, publish, translate, adapt, create derivative works from, and/or sell and/or distribute such User Submissions and/or incorporate such User Submissions into any form, medium, or technology throughout the world.

We have the right to use, disclose, modify, adapt, reproduce, publish, display, create derivative works from, and distribute any User Submissions you submit for any purpose whatsoever, without restriction and without compensating you in any way. We are and shall be under no obligation

We have the right to use, disclose, modify, adapt, reproduce, publish, display, create derivative works from, and distribute any User Submissions you submit for any purpose whatsoever, without restriction and without compensating you in any way. We are and shall be under no obligation

1. to maintain any User Submissions in confidence;

2. to pay to user any compensation against any user Submissions; or

3. to respond to any user Submissions.

You agree that any user activities done by you to us will not violate the right of any third party, including without limitation, trademark, copyright, privacy, or other personal or proprietary rights, and will not be harmful to any person or entity.

You also agree that you will make any practices like, libelous, abusive, unlawful, or obscene material, or contain software viruses, political campaigning, chain letters, commercial solicitation, mass mailings or any form of “spam”.

By using our service, you agree to the above terms regarding User activities. You should be aware that your Submissions shall not under any circumstances be considered User Content as defined in paragraph 1, subsection b. in this section.

Copyright and other Intellectual Property Violations Protection

According to our policy to respond to notices of alleged copyright infringement that comply with the Digital Millennium Copyright Act (“DMCA”). When you come to know that your work has been copied and it seems as copyright infringement, you can send us a notice containing all of the following information to our Copyright department [b][c]:

a. You need to provide A physical or electronic signature for your copyright claim.

b. A detailed description of the copyrighted content that you claim has been infringed;

c. You need to mention the location of the infringing material on our website.

d. You need to provide your address, telephone number, and e-mail address;

e. You need to provide a statement bonafide that the disputed use is not authorized by the copyright owner, its agent, or the law;
and

f. You need to provide a statement for the penalty of perjury, that the above information in your notice is accurate and that you are the copyright owner or authorized to act on the copyright owner’s behalf.

Origami reserves the right to remove the alleged content without any notice and we have sole discretion on it. We may terminate such a user’s account if we find it as a habitual offender. If you think any action taken by us is done mistakenly then you can feel free to contact our copyright department: [email protected].

Accuracy of materials

The materials appearing on Origami’s website could include technical, typographical, or photographic errors. Origami does not warrant that any of the materials on its website are accurate, complete, or current. Origami may make changes to any materials which are on the website at any time without notice. However, Origami does not make any commitment to update the materials.

Disclaimer of Warranties

Our service, including, without limitation, our content, is provided on an “as is”, “basis”, and “with all faults” basis. To the fullest extent allowed by law, neither we nor any of our employees, contractors, managers, officers, suppliers, licensors, or agents (collectively, the “Origami parties”) make any warranties or representations or endorsements of any kind whatsoever, express or implied, as to:

(a) the service;

(b) our content;

(c) user content; or

(d) security associated with the transmission of information to us or via the service.

Additionally, we hereby disclaim that all warranties, express or implied, including, but not limited to, the warranties of merchantability, non-infringement, title, custom, fitness for a particular purpose, trade, system integration, quiet enjoyment, and freedom from computer virus.

Origami does not warrant or represent that the service will be error-free or uninterrupted; that defects will be corrected; or that the service or the server that makes the service available is free from any harmful components, viruses, including, without limitation, and security breaches of any kind. We do not make any warranties or representations or that the information (including any instructions) on the service is complete, accurate, or useful. You may use the service at your sole risk. Origami does not warrant that the use of your service is lawful in any specific jurisdiction, and we specifically disclaim such warranties. Some jurisdictions do not allow or limit the disclaimer of implied or other warranties so the above disclaimer may not apply to you to the extent such jurisdiction’s law is adequate to you and these terms of use.

By using or accessing our service you represent and warrant that you are practicing lawful activities in every jurisdiction where you access or use the service. Origami does not allow the content and specifically disclaim any liability or responsibility to any person or entity for any loss, damage, injury, liability, claim, or other cause of any character or kind based upon any content.

License Limitations

Any attempt by you to disrupt or interfere with the service including undermining or manipulating the legitimate operation of any of our sites or service is a violation of our policy and also may be a violation of civil and criminal Laws.

Without moderate any other remedies, we may limit, modify, suspend, terminate, or access to the service or delete accounts or portions thereof if you are, or we surmise that you are, failing to comply with any terms of service or for any actual or surmise illegal or improper use of the service, with or without any notice to you. You may lose your account or any user content as a result of account termination or limitation, as well as any benefits, earned items, privileges, and purchased items associated with your use of the service, and we are under no obligation to compensate you for any such losses or results.

We may suspend, limit, or terminate user accounts or the service and or portions thereof, prohibit access to our services, sites, and tools, and their content, remove or delay hosted content, and take legal and technical steps to restrict users from accessing the service if we believe that they are creating risk or possible legal liabilities, infringing the intellectual property corporeality of third parties, or acting inconsistently with the letter or spirit of our terms or policies. Additionally, we may apply our sole discretionary power in appropriate circumstances and may suspend or terminate accounts of users who may be repeat infringers of third party intellectual property rights.

Origami reserves the right to restrict the offering and/or supporting the service or a specific part of the service at any time either permanently or temporarily. In such an event, we shall not be required to provide benefits, refunds, or other compensation to users in connection with such discontinued elements of the service.

Origami AI Limitations

These Origami.ms AI Additional Terms (“Origami.ms AI Terms”) apply to your access and use of any Origami.ms AI feature(s) and form a part of the Terms Of Use or the Master Services Agreement, as applicable, between you and Origami.ms (the “Agreement”). Any capitalized terms used but not otherwise defined herein have the meaning set forth in the Agreement.

“Origami.ms AI” means any tools, features or functionality made available to you via the Origami.ms platform that utilize data models trained by machine learning and artificial intelligence. This includes, but is not limited to, features that allow you to send inputs to OpenAI for processing and receive insights back into Origami.ms for workflow and decision-making purposes.

Your access to or use of Origami.ms AI does not grant Origami.ms any right or license to use or share your data in a manner that is inconsistent with the Agreement. You provide your own API key and use Origami.ms as a medium to send and receive data to and from OpenAI. Origami.ms does not use your data, but you should understand that OpenAI processes your data.

You may provide input to be processed by OpenAI via Origami.ms (“Input”) and receive output generated by OpenAI based on any Input (“Output”). You are solely responsible for the creation, development, content, operation, maintenance, use, and dissemination of your data. You are solely responsible for ensuring that your Input, access to and use of Origami.ms AI, and Output will not (i) violate any applicable law or regulation; (ii) violate these Origami.ms AI Terms, the Agreement, or any content and use policies we may implement from time to time; or (iii) infringe upon, violate, or misappropriate any of Origami.ms’s rights or the rights of any third party.

You may not use Origami.ms AI or any Output to develop data sets, foundation models, or other large scale models that may compete with Origami.ms or Origami.ms AI.

DISCLAIMER OF WARRANTIES. ORIGAMI.MS DOES NOT MAKE ANY WARRANTY AS TO THE RESULTS THAT MAY BE OBTAINED FROM THE USE OF ORIGAMI.MS AI OR THE ACCURACY OF ANY OTHER INFORMATION OBTAINED THROUGH ORIGAMI.MS AI. YOU UNDERSTAND AND AGREE THAT ANY CONTENT OR OUTPUT OBTAINED THROUGH THE USE OF ORIGAMI.MS AI IS PROVIDED “AS-IS” AND OBTAINED AT YOUR SOLE RISK. ORIGAMI.MS DISCLAIMS ALL OTHER WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. IN NO EVENT WILL ORIGAMI.MS’S TOTAL LIABILITY TO YOU FOR ANY DAMAGES, LOSSES OR CAUSES OR ACTIONS, IN AGGREGATE, ARISING FROM OR RELATING TO ORIGAMI.MS AI, YOUR USE OF ORIGAMI.MS AI, OR THE ORIGAMI.MS AI OUTPUT EXCEED ONE HUNDRED UNITED STATES DOLLARS ($1000.00). ORIGAMI.MS MAY DISCONTINUE OR MODIFY ORIGAMI.MS AI OR THESE ORIGAMI.MS AI TERMS AT ANY TIME IN ITS SOLE DISCRETION.

If you choose to use origami.ms AI, you may not use the origami.ms AI features in a manner that violates any OpenAI Policy.

Limitation of Liability; Waiver

Origami will not be liable to you for any loss or damages of any kind (including, without limitation, indirect, economic, exemplary, for any direct, special, punitive, incidental, or consequential losses or damages) that are directly or indirectly related to:

(a) the service;

(b) our content;

(c) user content;

(d) your use of, the performance of the service or the inability to use;

(e) any action was taken in connection with an investigation by the Origami parties or law enforcement authorities regarding your or any other party’s use of the service;

(f) any action was taken regarding copyright or other intellectual property owners;

(g) any errors or omissions in the service’s operation; or

(h) Any damage to any user’s mobile device, computer, or other equipment or technology including, without limitation, damage from any security breach or from any virus, error, omission, bugs, tampering, fraud, interruption, defect, computer line or network failure or any other technical or other malfunction, delay in operation or transmission, including, without limitation, damages for lost profits, work stoppage, loss of goodwill, loss of data, the accuracy of results, or computer failure or malfunction, even if foreseeable or even if the Origami have been advised of or should have known of the possibility of such damages, whether in an action of negligence, contract, strict liability or tort (including, without limitation, whether caused in whole or in part by negligence, telecommunications failure, acts of God, or theft or destruction of the service).

Origami will not be liable in no instance to you or anyone else for loss, damage or injury, including, without limitation, death, or personal injury. The limitation or exclusion of consequential or incidental damages may not be allowed by some states, in those circumstances, the above limitation or exclusion may not apply to you. In no event will the Origami parties’ total liability to you for all damages, losses, or causes of action exceed one hundred united states dollars ($100).

You agree that in the instance you incur any losses, damages, or injuries that originate out of our acts or omissions, the damages, if any, caused to you are not irreparable or sufficient to entitle you to an injunction preventing any exploitation of any web site, product, service, property, or other content owned or controlled by the Origami, and you will not able to claim legal rights to development, production, distribution, restrain or enjoin the advertising, exhibition, or exploitation of any web site, property, product, service, or other content owned or controlled by Origami.

Origami is not responsible for the actions, content, information, or data of third parties, and you release the Origami parties from any claims and damages, known and unknown, arising out of or in any other way connected with any rights you have against any such third parties.

Indemnification

You agree to defend indemnify, and hold the Origami harmless from and against any claims, damages, losses, liabilities, damages, losses, and expenses, including without limitation, reasonable attorney’s fees and costs, which in any way connected with any of the following:

(i) your access or your content to or use of the Service;

(ii) your alleged breach or breach of these Terms;

(iii) your violation of any third-party right, including without limitation, any intellectual property right, privacy right, publicity, confidentiality, or property;

(iv) your violation of any rules, regulations, laws, statutes, codes, ordinances, or orders of any governmental and quasi-governmental authorities, including, without limitation, all regulatory, administrative and legislative authorities; or

(v) any misrepresentation made by you.

You will cooperate with us as much as needed in the defense of any claim. We reserve the right to take the exclusive control and defense of any matter subject to indemnification arisen by you, and you will not, in any event, settle any claim except our prior written consent. However the foregoing, you agree that the cost of any such defense will be at your sole and exclusive expense.

Arbitration

Exclude when you opt-out or for argument regarding your or our intellectual property like trade dress, copyrights, domain names, trade secrets, trademarks, and patents (without Disputes) you agree that all the disputes between you and us with regard to your relationship with us, It includes without limitation disputes regarding these Terms And Conditions, your use of the Service, and/or rights of privacy and/or publicity, will be resolved by binding, individual arbitration under the American Arbitration Association’s rules for arbitration of consumer-related disputes and you and we hereby expressly waive trial by jury. You may make claims by yourself nor we will participate in a class action or class-wide arbitration for any claims covered by this agreement. You also accede not to participate in claims made by a private attorney, in a general or consolidated claim involving another person’s account, or representative capacity, if we are the proceeding party. This argument resolution provision will be governed by Adequate laws. If we fail to solve this issue by arbitration process then we will go for the Judicial Arbitration and Mediation Services. Judgment on the award rendered by the arbitrator may be entered in any court having competent jurisdiction and any provision of applicable law notwithstanding, the arbitrator will not have authority to verdict remedies, damages, or awards that conflict with these Terms.

You have the option to opt-out of this agreement to arbitrate, as mentioned above. If you do so accordingly, then neither you nor we need to participate in an arbitration proceeding. To opt-out, you need to notify us in writing within 30 days of the date that you first became subject to this arbitration provision. You may opt-out using our email:

email:[email protected]

You must include your name and residence address, the phone number and username that you use for your account, and a clear statement that you want to opt-out of this arbitration agreement.

Time Limitation on Claims

You agree that you will claim for the arisen issue within one year and if you fail to fill this issue within the due time then it will not be accepted.

Termination

Origami reserves the right to terminate this agreement anytime for any reason without any prior notice.

Severability and No Waiver

If any provision of these Terms and conditions seems to be unlawful, void, or for any reason unenforceable while arbitration or by a court of competent jurisdiction, then that provision will be deemed severable from these Terms and will not affect the enforceability and validity of any remaining provisions. If we can not maintain the performance of any provision of these Terms will not be construed as a waiver of any provision or legal right. No waiver of any of these mentioned Terms and conditions will be deemed a further or continuing waiver of that term or condition or any other term or condition.

Entire Agreement

If you are using our service on behalf of any legal entity then you will be treated as the respect of that entity and you can make any agreement on behalf of that entity. These terms include the entire agreement between you and us and lead your use of the service, quash any prior agreements between you and us. Without our prior written consent, you will not assign the terms any rights or delegate any ought hereunder fully or partially, whether voluntary or by operation of law. Any intended assignment or ought by you without our proper prior written permission will be null and void. We may assign these Terms or any rights hereunder without your consent and the Terms will insure to the benefit of and be enforceable by our successor. Neither the course of conduct among the parties nor trade practice will act to temper the Terms. These Terms do not impart any third-party beneficiary rights.

Territorial Restrictions

Our provided information in the service is not prepared for distribution to or use by any person or any legal entity in any jurisdiction or country where such distribution or practice would be conflicting to law or regulation or which would subject us to any registration requirement within such jurisdiction or country. Origami has discretionary power and may reserve the right to limit the emergence of the service or any portion of the service, to any geographic area, any person, or jurisdiction and to limit the quantities of any program, product, content, service, or other feature. Software concerned to or compiled obtainable by the Service may be subject to United States export controls. In this way, software form the service is not allowed to be downloaded, exported, or re-exported:

(a) into any country where the US has forbidden goods;

or

(b) to the U.S. Commerce Department’s Table of Deny Orders or to anyone in the U.S. Treasury Department’s list of Specially Designated Nationals. By practicing such software downloads that are related to the service, you agree and warrant that you are not located under the control of, or a national or resident of, any aforesaid countries or any such list.

These terms and conditions were drafted in English(US). If any conflicts arise between the current English version and the translated version then the English version will be privileged.

Exhibit A – DATA PROCESSING ADDENDUM

This Data Processing Addendum (“DPA”) is incorporated into the Terms and Conditions (the “Agreement”) by and between Origami Ltd. (“Origami”) and you (meaning the individual or the entity, that the individual represents, that shall use the Services (“You” or “Your”). Origami and You will be referred to herein as the “Parties”.

WHEREAS, You have engaged Origami to provide the Services to You;

WHEREAS, the Services involves processing certain personal data, and the Parties wish to regulate Origami’s processing of such personal data, through this DPA, which is an integral part of the Agreement.

IN CONSIDERATION OF the mutual obligations set out herein, the Parties hereby agree that the terms and conditions set out below:

1. Definitions.

1.1. “Data Protection Laws” means to the extent applicable to the Parties: (i) Regulation (EU) 2016/679 General Data Protection Regulation (“EU GDPR”); (ii) the UK Data Protection Act 2018, as well as the GDPR as it forms part of the law of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union (Withdrawal) Act 2018 and as amended by the Data Protection, Privacy and Electronic Communications (Amendments etc.) (EU Exit) Regulations 2019 (SI 2019/419) (“UK GDPR”); (iii) the California Consumer Privacy Act of 2018, the California Privacy Rights Act of 2020 and the regulations adopted thereunder Cal. Civ. Code §§ 1798.100 et. seq. and 11 C.C.R §§7000 et. seq. (“California Privacy Law”); (iv) Virginia Consumer Data Protection Act; (v) Colorado Privacy Act; (vi) Connecticut Act Concerning Personal Data Privacy and Online Monitoring; (vii) Utah Consumer Privacy Act; (vii) other state laws in the United States governing data protection; (ix) Israeli Privacy Protection Law, 5741-1981 and the regulations promulgated thereunder (and in particular the Privacy Protection Regulations (Information Security), 5777 – 2017))(“Israel Privacy Law”).

1.2. “Database” means a collection of Personal Data held by physical, magnetic or optical means.

1.3. “EU SCCs” means the Annex to Commission Implementing Decision (EU) 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of personal data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the Council, available at https://eur-lex.europa.eu/eli/dec_impl/2021/914/oj and incorporated by reference to this DPA.

1.4. “GDPR” means the EU GDPR and the UK GDPR.

1.5. “Sensitive Data” means Personal Data defined as “special categories of data” or other materially similar term under Data Protection Laws, including health data, genetic data, biometric data, information revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, sexual orientation or trade union membership.

1.6. “UK SCCs” means the International Data Transfer Addendum to the EU Commission Standard Contractual Clauses of 21 March 2022 issued under Section 119A of the UK Data Protection Act 2018, available at https://ico.org.uk/media/for-organisations/documents/4019539/international-data-transfer-addendum.pdf and incorporated by reference to this DPA.

1.7. The terms “Business”, “Business Purpose”, “Consumer”, “Collect”, “Sell”, “Share” and “Service Provider” will have the same meaning under California Privacy Law (Cal. Civ. Code §1798.140).

1.8. The terms “Personal Data”, “Controller”, “Processor”, “Data Subject”, “Personal Data Breach”, and “Processing” will have the same meaning as in the GDPR.

1.9. Capitalized terms used in this DPA but not defined herein have the meaning ascribed to them in in the Agreement.

2. Scope and responsibilities.

2.1. Without prejudice to any privacy, data protection or data security obligations under the Agreement, this DPA applies where Origami Processes Personal Data as a Processor or Service Provider on Your behalf of and under the Your instructions, where You are a Controller or Business under Data Protection Laws with respect to the Personal Data or Personal Information that Origami Processes. Whether You are a Controller or a Business under Data Protection Laws is determined according to the provisions of Data Protection Laws and not this DPA.

2.2. You and Origami are each responsible for complying with Data Protection Laws as applicable to them, in their roles as Controller or Business and Processor or Service Provider, respectively.

2.3. Origami will make available to You all reasonable information in its disposal necessary to demonstrate compliance with the obligations under the Data Protection Laws.

2.4. Origami will assist You with the preparation of data privacy impact assessments and prior consultation as appropriate, provided, however, that if such assistance entails material costs or expenses to Origami, the Parties will first come to agreement on You reimbursing Origami for such costs and expenses.

3. Specifics of Processing.

3.1. The particulars of Origami’s Processing activities as a Processor are specified in Appendix 1.

3.2. Origami will Process the Personal Data only on Your behalf and in the manner determined in the Agreement and this DPA, and for as long as You instruct Origami to do so, for the purpose of providing the Services to You. Origami will not Process the Personal Data for any other purpose, unless expressly instructed by You to do so. Origami may also engage in any other Processing activities that Data Protection Laws permit Service Providers or Processors to engage in.

3.3. Origami will Process the Personal Data on documented instructions from You, including without limitation through the Agreement and the Services’s features and functions configurable by You, unless Origami is otherwise required to by law to which it is subject (and in such a case, Origami will inform You of that legal requirement before processing, unless that law prohibits such information on important grounds of public interest). Your instructions to Origami must be consistent with the nature of character of the Services. You are solely responsible for determining the lawfulness of the data processing instructions You provide to Origami and will provide Origami only instructions that are lawful under Data Protection Laws. Origami will immediately inform You if, in Origami ‘s opinion, an instruction is in violation the Data Protection Laws, or if Origami makes a determination that it can no longer meet its obligations under Data Protection Laws. In the event that any of Your instructions cause Origami to incur material incremental costs, Origami may notify You and, unless otherwise agreed upon by the Parties in a writing, such costs will be reimbursed by You.

3.4. To the extent You shall use the Service to process Sensitive Data, You must first obtain Origami’s explicit prior written consent. You shall not upload any Sensitive Data into the Service without such consent.

3.5. Origami deletes the Personal Data it has Processed on Your behalf under this DPA from its systems, after the end of the term of the Agreement or upon written request from You, and upon Your request, will furnish written confirmation that the Personal Data has been deleted pursuant to this section.

4. Data Subject rights.

4.1. You shall bear the sole and exclusive responsibility for complying with Data Subject and Consumer rights in the Personal Data, including accessing their data, correcting it, restricting its processing, or deleting it.

4.2. Taking into account the nature of Origami’s Processing activities and the Services, Origami will assist You to accommodate Data Subjects’ requests to exercise their rights in relation to their Personal Data.

4.3. When Origami received a request from a Data Subject or Consumer that it can identify as Your Data Subject or Consumer, Origami will pass on to You these requests.

5. Sub-processing.

5.1.1. You hereby extend Your general authorization to Origami to use third party sub-processors and service providers for Processing Personal Data within the scope of the Services. The current list of third party sub-processors and service providers is specified in Appendix 2 below.

5.1.2. Origami will procure that the sub-processors Process the Personal Data in a manner consistent with Origami’s obligations under this DPA and Data Protection Laws, particularly Article 28 of the GDPR and 11 C.C.R. §7051, with such obligations imposed on that sub-processor by way of a written contract, in particular providing sufficient guarantees to implement appropriate technical and organizational measures in such a manner that the processing will meet the requirements of Data Protection Laws. Origami’s remains liable to You for the sub-processors’ compliance with their obligations.

6. Cross-border data transfers.

6.1. You acknowledge and agree that Origami and its sub-processors will only Process the Personal Data in member states of the European Economic Area, in territories or territorial sectors recognized by an adequacy decision of the European Commission as providing an adequate level of protection for Personal Data pursuant to Articles 45 of the GDPR, or using adequate safeguards as required under the GDPR’s provisions governing cross-border data transfers (e.g., SCCs).

6.2. Origami shall comply with Data Protection Laws applicable to cross-border transfer of Personal Data, including but not limited, to the Privacy Protection Regulations (Transfer of Information to Databases Outside of Israel), 5761-2001.

7. Data security.

7.1. Without prejudice to the data security obligations under the Agreement, in Processing Personal Data, Origami will implement appropriate technical and organizational measures to protect the Personal Data against accidental or unlawful destruction or accidental loss, alteration, unauthorized disclosure or access, as further described in Appendix 3.

7.2. Origami will perform regular internal or third-party assessments, audits, or other technical and operational testing of its security procedures and practices at least once every 12 months.

7.3. Origami will ensure that its staff authorized to Process the Personal Data have committed themselves to confidentiality or are under an appropriate statutory obligation of confidentiality.

7.4. Origami will without undue delay notify You of any Personal Data Breach that it becomes aware of regarding Personal Data of Data Subjects that Origami Processes within the scope of this DPA. Origami’s notification to You will include the following information, as well as other information reasonably requested by You, and if the information is not readily available at the time of the notification or request by You, Origami may provide it in phases as it becomes available:

7.4.1. The nature of the Personal Data Breach including where possible, the categories and approximate number of Data Subjects and Consumers concerned and the categories and approximate number of Personal Data records concerned;

7.4.2. The likely consequences of the Personal Data Breach; and

7.4.3. The measures taken or proposed to be taken to address the Personal Data Breach, including, where appropriate, measures to mitigate its possible adverse effects.

7.5. Origami will use commercial efforts to mitigate a Personal Data Breach and prevent its recurrence. You and Origami will cooperate in good faith on issuing any statements or notices regarding such Personal Data Breaches, to authorities, Data Subjects and Consumers.

8. Audits.

8.1. Origami will, not more than once per annum (unless otherwise required by a data protection authority or Data Protection Law), allow for and contribute to audits, including carrying out inspections conducted by a reputable auditor mandated by You, during normal business hours and subject to a prior notice to Origami of at least 30 days and coordination with Origami as to the agenda of the audit, as well as appropriate confidentiality undertakings by the auditor covering such inspections, in order to establish Origami’s compliance with this DPA and the provisions of the Data Protection Laws regarding the Personal Data that Origami Processes on behalf of You. Such audits and inspection must reasonably limit any disruption to Origami’s business, and You will avoid (and ensure that each of its auditors avoids) causing (or, if it cannot avoid, minimize) any damage, injury or disruption to Origami’s premises, equipment, personnel, and business while its personnel are on those premises during such audit or inspection. If such audits or inspections entail material costs or expenses to Origami, the Parties will first come to agreement on You reimbursing Origami for such costs and expenses.

9. California Privacy Law.

This section 9 applies to the extent that You are a Business subject to the California Privacy Law.

9.1. The Parties acknowledge and agree that Origami is a Service Provider.

9.2. The Parties agree that You are disclosing the Personal Information to Origami only for the following limited and specified Business Purpose: the provision of Origami’s Services. Origami will not Sell or Share the Personal Information.

9.3. Origami is prohibited from retaining, using, or disclosing Your Personal Information for:

9.3.1. Any commercial purpose other than the foregoing Business Purposes, unless expressly permitted by the California Privacy Law.

OR

9.3.2. Outside the direct business relationship between You and Origami, unless expressly permitted by the California Privacy Law.

9.4. Origami will comply with all applicable sections of the California Privacy Law.

9.5. Origami grants You the right to take reasonable and appropriate steps, in accordance with this DPA, to ensure that the Origami uses the Personal Information it Collects pursuant to this DPA in a manner consistent with Origami ‘s obligations under the California Privacy Law.

9.6. Origami grants You the right, upon notice, to take reasonable and appropriate steps, in accordance with this DPA, to stop and remediate Origami’s unauthorized use of Personal Information.

9.7. If Origami receives a request from a California Consumer, about his or her Personal Information processed by You, Origami will inform You thereof, will not comply with the request itself unless instructed to in writing by You, and in the absence of Your instructions to the contrary, will inform You that the request cannot be acted upon because the request has been sent to a Service Provider.

10. Israel Privacy Law.

Appendices 4,5 and 6 of this DPA will apply to the extent that You are subject to the Israel Privacy Law.

11. Miscellaneous.

11.1. Origami’s liability under this DPA will be as per the limitations, exclusions and caps specified in the Agreement.

11.2. This DPA will prevail in the event of inconsistencies between it and the Agreement or subsequent agreements entered into or purported to be entered into by the Parties after the date of this DPA, except where explicitly agreed otherwise in writing.

11.3. This DPA is governed by the governing law specified in the Agreement, and disputes arising under this DPA will be adjudicated as specified in the Agreement.

11.4. This DPA terminates upon the termination of the Agreement.

11.5. All the clauses in the DPA that are bound by and required under Data Protection Laws, will continue to apply even after the expiration or termination of the Agreement between the Parties, provided that Origami continues to retain Your Personal Data

Appendix 1 – Details of Processing

1. Categories of Data Subjects

As determined and controlled by You in Your sole discretion.

2. Categories of Personal Data Processed

The type and extent of Personal Data uploaded by You into the Services, shall be determined and controlled by You in Your sole discretion.

3. Special categories of Personal Data Processed

The type and extent of special categories of Personal Data uploaded by You into the Services, shall be determined and controlled by You in Your sole discretion.

4. Frequency of Transfer

Ongoing, throughout the term of the Agreement.

5. Nature of the Processing

Retrieval, organization, structuring, storage, adaptation or alteration, combination.

6. Purpose(s) of the Data Transfer

The provision of the Services as specified in the Purchase Order attached to the Agreement.

7. The Period for Which the Personal Data Will Be Retained

The retention period is coterminous with the term of the Agreement and to Your instructions to cease and discontinue Processing.

8. Transfers to Sub-Processors

See Appendix 2.

Appendix 2 – List of Sub-processors

Appendix 3 – Technical and Organizational Measures

Certifications: Origami is certified with ISO 9001 and ISO 27001:2013, granted by the Standards Institute of Israel.

AWS and Azure Infrastructure: Origami employs AWS’s and Azure infrastructure, which includes biometric authentication for all data centers.

Data Encryption: All data is encrypted during transit, and encryption at rest is also available.

Secure Sockets Layer (SSL) Encrypted Communication: SSL certificates protect server-client communication, ensuring all information transmitted is encrypted.

User Access Controls: Origami offers an extensive permissions management system, allowing administrators to define what each user can see and do, following the principle of least privilege.

Multi-Factor Authentication (MFA) and Single Sign-On (SSO): Origami supports MFA and SSO from active directories or other identification systems, providing an additional layer of security by verifying user identities.

IP-Based Access Restriction: Origami allows administrators to control access to Origami based on IP addresses. This means that only users accessing Origami from predefined IP addresses can log in.

Web Application Firewall (WAF) and Server Firewall: Our WAF proactively protects Origami from fraud and data theft, blocking suspicious activity. It inspects every web request for potential threats such as cross-site scripting, SQL injection, path traversal, and over 400 other types of attack. Additionally, our server firewalls create a highly controlled access point, limiting access based on specific IPs, specific ports, passwords, OTPs, and more.

Endpoint Protection: All endpoints are equipped with Endpoint Detection and Response (EDR) and anti-malware software, with restrictions on installing additional software, ensuring physical hardware is equally protected.

Regular Backups and Automated Disaster Recovery System: Orogami performs three daily backups, providing over 90 restore points at any given time. This ensures rapid recovery in case a backup is needed. Moreover, in the event of a disaster, our automated recovery system restores all critical functions quickly and with minimal disruption, ensuring business continuity.

Regular Security Audits and Penetration Testing: Origami conducts regular security audits and annual penetration testing to identify and address any potential vulnerabilities.

Employee Training: Origami’s team is regularly trained to identify and avoid potential threats such as phishing and social engineering, reducing the risk of human error.

Appendix 4 – Additional requirements for Databases subject to Israel Privacy Law

1. Origami shall grant its employees access to the Database, subject to conducting training activities regarding privacy protection and information security obligations applicable to Origami by virtue of the Data Protection Laws and this DPA.

2. Origami shall not grant access to the Personal Data to its employees, before reviewing and confirming, within the boundaries of applicable law, that their background, integrity, and reliability are suitable for a position granting them access to Personal Data.

3. Origami undertakes to manage access rights to Personal Data, including by way of providing its employees with ‘Least Privileges’ based on their ‘Need to Know’, for the purpose of carrying out their tasks, and shall take measures in order prevent access by unauthorized individuals to Personal Data. In addition, Origami will maintain an up-to-date listing of all individuals authorized to access or use the Database and will prevent access to any individual who does not have a need to be exposed to the Personal Data.

4. Origami shall develop, implement, and enforce an information security policy that covers at least the following topics (“Information Security Policy”):

4.1 Guidelines regarding the physical protection of the Database systems and the sites in which they are located;

4.2 Guidelines regarding the management and monitoring of access authorizations and actions taken in the Database;

4.3 Mapping of all the of the security measures taken by Origami regarding the Database;

4.4 Guidelines for individuals authorized to access Personal Data and Database;

4.5 A review of the risks to which the Personal Data is exposed to as part of Origami’s ongoing activities including instructions regarding the means of recording, monitoring, and identifying threats to which the Database systems are exposed;

4.6 Instructions and procedures regarding the mitigation and management of a Personal Data Breach;

4.7 Instructions and procedures regarding the use of removable devices.

5. Origami shall map the operational environment of the Database. In this regard, Origami shall prepare an inventory list that includes all the systems, software, interfaces, infrastructures of hardware components and communications components that Origami operates in the Database environment for the ongoing operation of the Database (the “Database Systems”). Origami shall update the list of inventories specified in this section from time to time and shall only disclose the document to those individuals who require access to it for the performance of their job functions. However, Origami shall update the foregoing list in any case in which substantial changes to the operating environment are implemented in the Database or in the manner in which Personal Data is Processed.

6. In the event of a Personal Data Breach, Origami will provide a notification to You no later than twenty-four (24) hours after becoming aware of any Personal Data Breach.

7. If required by Data Protection Laws, Origami shall provide You, at least in every 12 month or upon its request, a written approval according to which it performs and fulfills its obligations pursuant to this DPA and the provisions of the Data Protection Laws. Origami shall fully cooperate with You in providing all information and assistance reasonably requested by You in connection with data security issues and practices and supplementary documents, so as to allow You to properly address information security, privacy and regulatory matters relating to the Database.

8. To the extent that Your Database is considered a Database at medium data security level under Israel privacy Law, this Database will be subject to additional requirements as set forth in Appendix 5 of this DPA.

9. To the extent that the Your Database is considered a Database at high data security level under Israel privacy Law, this Database will be subject to additional requirements as set forth in Appendices 5 and 6 of this DPA.

Appendix 5 – Additional requirements for Databases at medium data security level under Israel Privacy Law

1. Without derogating from section 4 of Appendix 4 above, Origami shall include in the Information Security Policy the following:

2.1 The means of identification and verification of access the Database Systems;

2.2 Instructions regarding the manner in which access to the Database is managed, the means of controlling access to Personal Data and the actions taken regarding the Personal Data.

2.3 Instructions regarding periodic audit reports as stated in section 8 of the DPA above.

2.4 Instructions and procedures regarding periodic backup and restoration of the Documentation Mechanism (defined below);

2.5 Instruction regarding the manner in which development activities in the Database are performed and documented;

3. In addition to the requirements set in section 5 of Appendix 4 above, Origami will ensure that the systems and devices located in its premises or assigned to its employees, consultants, and anyone on its behalf, on which Personal Data is Processed or accessed (for example: servers, workstations, communication components, etc.) will be stored in a protected location, which prevents unauthorized intrusion and physical entry. Without derogating from the above, Origami will take measures to control and document the entry to and exit from its own sites where the Database Systems are located, and will audit all inbound and outbound equipment to and from the Database Systems (for example: laptops, laptops, cameras, etc.).

4. Without derogating from section 1 of Appendix 4 above, Origami shall grant its employees with access to the Database, subject to conducting training activities regarding privacy protection and information security obligations applicable. Such training shall take place at least once every two years and as soon as possible after recruiting.

5. Origami shall grant its own authorized users with access to the Database subject to authentication measures based on physical means, such as two-factor authentication through the smartphone of the authorized user. In this regard, Origami shall determine the means of identification, instructions related to passwords management, automatic disconnection from the Database after period of inactivity (idle time), and provisions regarding how to handle faults related to identity authentication.

6. Origami undertakes to automatically document all activities carried out in the Database Systems, including (but not limited to) documenting attempts to access the database systems, deleting and/or changing Personal Data, database development operations and change in access permissions to the database systems (“Documentation Mechanism”). The Documentation Mechanism will collect at least the following data: the user’s identity, the date and time of the operation, the source of the operation (web address or computer name), the system component in which the operation was performed, the type of operation, whether the operation was successful or failed. The audit data generated by the Documentation Mechanism shall be maintained for 24 months.

7. Without derogating from section 6 of Appendix 4 above, Origami will discuss occurrences of Personal Data Breaches at least once every 12 months, and will examine the need to update its Information Security Policy as a result therefrom. The findings of those discussions will be sent to You.

8. Origami undertakes to conduct, at least once in 24 months, an internal or external audit by an entity or a person with appropriate certification for auditing information security (who is not the Origami’s CISO), in order to ascertain the Origami’s compliance with these provisions and the provisions of Data protection Laws.

9. Origami undertakes to establish guidelines regarding how to recover and backup the Personal Data periodically including instructions regarding data recovery during Personal Data Breach.

Appendix 6 – Additional requirements for Databases at high data security level under Israel Privacy Law

1. In addition to the requirements specified in section 4 of Appendix 4 above, Origami shall conduct data security risk assessments, in relation to its Processing of Your Personal Data in accordance with the Agreement and this DPA. Such data protection risk assessment will take place at least every eighteen (18) months.

2. In addition to the requirements specified in section 4 of Appendix 4 above, Origami shall conduct penetration tests on the Database Systems to examine their resilience to internal and external risks. Such tests shall take place at least once every eighteen (18) months; Origami will then discuss the results of the penetration tests and will correct the deficiencies discovered (in any). The findings will be shared with You.

3. Notwithstanding Section 7 of the DPA above, Origami will conduct discussions regarding occurrence of Personal Data Breaches at least every three (3) months and will examine the need to update its Information Security Policy. The findings will be shared with You.

4. Without derogating from section 9 of Appendix 4 above, Origami will maintain a copy of the backup data in a manner that assures the accuracy and reliability of that data.