Terms of Use

Document Version: ALL-ToU-v1.0.0 / Legal Pack Version: ALL-LP-v1.0.0

Effective Date: 26 October 2026 | Last Updated: 26 October 2026

1. Introduction and Acceptance

References to “ALL”, “we”, “us” or “our” mean All360 Technology S.A., a company incorporated under the laws of the Republic of Panama, as the contracting entity under these Terms. ALL may perform technical, operational, compliance, support, billing, payout, infrastructure, software, hosting, administrative, or partner-management functions through affiliates, group companies, contractors, service providers, or Authorized Partners. Such arrangements do not make those persons separate contracting parties under these Terms, unless a separate written agreement expressly provides otherwise. ALL operates the Platform as a managed marketplace, orchestration, metering, billing, payout-access, and access-management platform for edge resources. ALL does not itself own, operate, or provide the underlying third-party applications, proxy traffic routing, VPN-related routing functionality, bandwidth, compute, storage, AI workloads, data feeds, or other edge resources made available by independent Node Operators, Developers, Business Customers, or other approved third-party participants through the Platform. ALL is not a bank, deposit-taking institution, custodian, e-money issuer, payment institution, regulated financial institution, telecommunications carrier, internet service provider, VPN provider, proxy provider, or data center operator. If applicable law treats any Platform feature as regulated, ALL will make that feature available only where ALL or an authorised provider holds the required licence, registration, approval, or exemption.

1.1 Agreement to Terms

These Terms constitute a legally binding agreement between you and All360 Technology S.A., a company incorporated and registered under the laws of the Republic of Panama, governing your access to and use of the ALL Platform, website, dashboards, App Store, ALL360 Devices, ALL360 OS, Control Tower, and related services.

ALL360 Devices and ALL360 OS licences are sold and licensed by Allecosystem Technologies LLC, a company incorporated in the United Arab Emirates (the "Seller"). In respect of the sale, delivery, return, refund, and warranty of ALL360 Devices and the grant of ALL360 OS licences, references to "ALL" include the Seller.

By (a) creating an account, (b) purchasing an ALL360 Device, (c) accessing or using any part of the Platform, or (d) clicking "I Accept", you acknowledge that you have read, understood, and agree to be bound by these Terms and all policies incorporated by reference, including our Privacy Policy, Acceptable Use Policy, Warranty Policy and any role-specific addenda that apply to you.

IF YOU DO NOT AGREE TO THESE TERMS, DO NOT ACCESS OR USE THE PLATFORM.

1.2 Role-Specific Addenda

The Platform supports multiple user roles. Acceptance of these Master Terms is required for all users. In addition, each role is subject to a dedicated role-specific addendum that governs the rights and obligations specific to that role. The acceptance mechanism applicable to each addendum differs by role, as set out below.

(a) Customer Addendum (Section 10) — Automatic Application

The Customer Addendum applies automatically to any User who deploys or uses Apps on the Platform. No separate acceptance step is required beyond acceptance of these Master Terms. By taking any action that activates Customer status (including depositing Wallet Balance or deploying an App), you confirm that you have read and agree to be bound by Section 10. Customer status under Section 10 does not grant access to proxy traffic routing, VPN-related routing functionality, bandwidth sharing, compute, storage, AI, sensor, or other edge network services that require B2B onboarding under Section 1.4.

(b) Node Operator Addendum (Section 8) — Express Acceptance Required

The Node Operator Addendum applies only to Users who activate and operate an ALL360 Device as a Node. Before your Node is enrolled and activated on the Platform, you will be required to complete a dedicated Node Operator acceptance flow, separate from and in addition to your acceptance of these Master Terms. The acceptance flow will present the Node Operator Addendum (including the service authorization and opt-in mechanism in Section 8.8) and require your express, affirmative acceptance as a condition of device enrollment. The Node Operator Addendum does not apply to you unless and until you have completed this express acceptance.

The record of your express acceptance, including timestamp, device identifier, account identifier, and version of the Node Operator Addendum accepted, will be retained by ALL as part of the authorization audit trail described in Section 8.8(f).

(c) Developer Addendum (Section 9) — Express Acceptance Required

The Developer Addendum applies only to Users who register a developer account or submit an App for publication on the ALL App Store. Before your developer account is activated or your first App submission is processed, you will be required to expressly accept the Developer Addendum as a standalone acceptance step, separate from your acceptance of these Master Terms. The Developer Addendum does not apply to you unless and until you have completed this express acceptance.

(d) Affiliate Addendum (Section 11) — Express Opt-In Required

The Affiliate Addendum applies only to Users who elect to participate in ALL's referral program. Participation is voluntary and requires express opt-in through the Platform dashboard or designated enrollment flow. By enrolling in the Affiliate Program, you expressly accept the Affiliate Addendum as a condition of participation. The Affiliate Addendum does not apply to you unless and until you have completed this opt-in.

(e) Multiple Roles

You may hold multiple roles concurrently. Each applicable addendum must be expressly accepted (or will apply automatically, as the case may be) in accordance with the acceptance mechanism specified above for each role. In case of conflict between any role-specific addendum and these Master Terms, the addendum prevails with respect to the subject matter of that addendum.

(f) Documents Incorporated by Reference

The following documents are incorporated into these Master Terms by reference and form part of the agreement between you and ALL. By accepting these Master Terms, you also accept the documents listed below as they may be updated from time to time in accordance with Section 3:

Privacy Policy — governs the collection, use, and processing of personal data.

Cookie Policy — governs the use of cookies and similar tracking technologies.

Acceptable Use Policy (AUP) — governs permitted and prohibited uses of the Platform.

Refund and Return Policy — governs refunds, returns, and related procedures, including the RMA Policy.

Delivery and Warranty Policy — governs shipping, delivery, and the commercial hardware warranty applicable to ALL360 Devices, including the Warranty Policy set out in Sections 12 and 13.

Abuse Response Policy — governs ALL's response to abuse reports (see Section 18.4).

1.3 Eligibility

You must be at least 18 years of age (or the age of majority in your jurisdiction, whichever is higher) to use the Platform. By using the Platform, you represent and warrant that you meet these eligibility requirements. Both individuals and legal entities may use the Platform. If you are using the Platform on behalf of an entity, you represent and warrant that you have authority to bind that entity to these Terms.

1.4 Business Customers

Entity users are treated as "Business Customers" and are functionally subject to the Customer Addendum unless otherwise specified.

Business Customers seeking to access edge network services through the Platform — including proxy routing, VPN-related routing functionality, bandwidth sharing, compute, storage, AI, or sensor services — must complete ALL's B2B onboarding process, which includes: (a) submission and approval of a KYB (Know Your Business) application, including UBO disclosure, sanctions screening, and use-case declaration; (b) execution of a separate Master Service Agreement — Enterprise (the “B2B Platform Agreement”) governing the commercial terms, compliance obligations, and downstream accountability requirements applicable to edge network access; and (c) activation of an approved use-case allow-list by ALL, which specifies the service categories, geographies, and traffic types the Business Customer is authorised to access. Access to edge network services is technically gated and will not be available until all three conditions are satisfied. Contractual acceptance of these Master Terms alone does not grant access to edge network services.

1.5 Authorized Partners and White-Label Distribution

ALL360 Devices may be supplied, distributed, supported, or locally managed by authorised partners, resellers, white-label partners, or distributors ('Authorized Partners'). The existence of an Authorized Partner relationship does not modify the obligations of Node Operators, Developers, Customers, or Affiliates under these Terms. No Authorized Partner may waive, modify, or reduce: the Node Operator consent and service-category opt-in requirements; the ISP, network owner, employer, landlord, and other authorization confirmations required under Section 8; the obligations under the Acceptable Use Policy; the abuse-response obligations under Section 18; or the technical controls and opt-in/opt-out mechanisms required by ALL. Where an Authorized Partner maintains the direct commercial relationship with a Node Operator or Customer, the Authorized Partner must ensure that all applicable ALL terms, consent screens, service authorizations, and pass-through obligations are presented to and accepted by the relevant User before device activation or service commencement. ALL may require evidence of such acceptance and may suspend any Node, partner deployment, or Customer access where the required pass-through terms have not been properly presented, recorded, or implemented. ALL is not responsible for representations, warranties, or commitments made by Authorized Partners that are inconsistent with or exceed the scope of these Terms.

1.6 Geographic Availability and Local Law

The Platform is offered only where ALL makes it available and where use of the Platform is lawful. Features, Apps, payment methods, payout methods, Device availability, referral programs, and support options may vary by country or region. ALL may restrict, suspend, or discontinue access to the Platform, any App, any role, or any feature in any jurisdiction where ALL determines that providing such access is prohibited, restricted, commercially impracticable, or legally or regulatorily high-risk.

You are responsible for ensuring that your use of the Platform, operation of a Node, publication of Apps, participation in the Affiliate Program, and receipt or transmission of payments are lawful in your jurisdiction.

2. Definitions

For purposes of these Terms:

"ALL" means All360 Technology S.A., a company incorporated and registered under the laws of the Republic of Panama, acting as the contracting entity under these Terms. Affiliates, subsidiaries, contractors, service providers, and Authorized Partners may support Platform operations but are not contracting parties under these Terms unless a separate written agreement expressly provides otherwise. For Device sales and ALL360 OS licences supplied by Allecosystem Technologies LLC, the Seller is the contracting party responsible for its obligations under the applicable Terms of Sale. All360 Technology S.A. remains the contracting party for Platform services.

"ALL Platform" or "Platform" means the marketplace and technology orchestration environment operated by ALL through which: (i) Node Operators make eligible hardware resources available to the network; (ii) Developers publish and distribute applications; (iii) Customers discover, deploy, and use applications and edge network services; and (iv) Affiliates participate in the referral program.

"ALL360 Device" means any hardware device approved by ALL for use with the Platform, whether provided by ALL or an Authorized Partner, that runs or is intended to run ALL360 OS and may become a Node upon enrollment and activation.

"Active Qualified Device" means an ALL360 Device associated with a Validated Referred User that, during the relevant calculation period, was properly enrolled, met the applicable Uptime Threshold, and was not suspended or terminated, was not a duplicate or improperly enrolled Device, and was not associated with fraudulent or prohibited activity.

"Node" means an enrolled ALL360 Device that communicates with the ALL Control Tower and participates in the network.

"Node Operator" means a User who owns and operates an ALL360 Device, providing power and internet connectivity.

"ALL Control Tower" means ALL's central orchestration system and database that stores User information, aggregate network activity data, and computes billing and payouts.

"ALL360 OS" means the Linux-based operating system installed on ALL360 Devices, featuring sandboxing, secure boot, TPM integration, and full disk encryption.

"Developer" means a User who publishes Apps through the Platform.

"Customer" means a User who deploys or uses Apps on the Platform.

"Affiliate" means a User who participates in the referral program.

“Referral Program” means the three-level referral commission program operated by ALL under which eligible Affiliates may earn commissions calculated exclusively from Qualifying Usage Revenue generated by Validated Referred Users, across up to three (3) referral levels, subject to the Affiliate Addendum, applicable qualification requirements, and territorial restrictions. No commission is earned for recruitment, account creation, or any activity that does not constitute Qualifying Usage Revenue.

“Company Referral Pool" means ALL's internal fund to which amounts calculated for allocation purposes are assigned where the relevant Affiliate does not satisfy the applicable Level 2 or Level 3 qualification requirements during the relevant calculation period. Such amounts are not earned, vested, or payable commissions of any Affiliate, create no payment right, and are not redistributed. Use is determined solely by ALL, subject to these Terms and mandatory law.

“Validated Referred User" means a User who has been attributed to an Affiliate through an approved referral mechanism and has completed all identity, account, KYC/KYB, sanctions, and fraud-prevention verification required by ALL or applicable law.

“App Store” means the ALL Platform marketplace or application store through which Apps are listed, discovered, purchased, deployed, or managed.

“Personal-only mode” means a Node operating mode in which the Node is reserved for the Node Operator’s own deployments and does not accept job allocations from other Customers.

“ALL jobs mode” means a Node operating mode in which the Node may accept job allocations from the ALL Control Tower for Apps or workloads deployed by Customers, subject to eligibility, availability, and Platform rules.

“Terms of Sale” means the purchase-specific terms disclosed and agreed before purchase, together with the Delivery and Warranty Policy and the Refund and Return Policy, as applicable to the purchase.

“Warranty Policy” means ALL’s separate policy describing warranty coverage, exclusions, limitations, and claim procedures for ALL360 Devices.

"Apps" means software applications developed by Developers, distributed through the ALL Platform store, and deployed to Nodes.

"Wallet Balance" means prepaid platform credits usable for Platform services. Wallet Balance is non-withdrawable once funded, except as required by mandatory law.

"Stablecoins" means blockchain-based digital assets pegged to fiat currency as specified by ALL from time to time.

“Payout Balance” means ALL's internal Platform record of amounts approved for payout to an eligible User following completion of the applicable calculation, verification, and review process. Payout Balance is not a bank account, deposit, e-money balance, custodial balance, or ownership of any asset. Amounts recorded in Payout Balance remain subject to applicable thresholds, payout schedules, payment-provider requirements, and any hold, deduction, reversal, set-off, or clawback permitted under Sections 12.3, 12.4, and 12.6.

"Usage" means resource consumption as determined by the ALL Control Tower.

"Uptime Threshold" means the minimum uptime eligibility requirement for Node Operator payouts, calculated per day or other period as determined by ALL.

"Documentation" means help center articles, device specifications, developer policies, program rules, and other materials published by ALL and incorporated by reference into these Terms, which ALL may update from time to time.

"Prohibited Use Cases" means the categories of conduct, applications, and activities expressly prohibited under these Terms, the Acceptable Use Policy, and any applicable role-specific addendum.

“Consumer” means a natural person who uses the Platform for purposes outside their trade, business, craft, or profession. Where the mandatory law of the User’s jurisdiction of habitual residence provides a narrower or broader definition of “consumer” or an equivalent term, that definition applies to the extent required by such mandatory law.

3. Updates and Modifications to Terms

3.1 Right to Modify

ALL reserves the right to modify, update, or replace these Terms, any role-specific addendum, incorporated policies, or Documentation at any time, at its sole discretion, without any obligation to justify the nature or scope of the change beyond what is required by applicable law. Modifications required to address an immediate and credible cybersecurity threat to the Platform or its Users, or required for urgent legal compliance or regulatory emergency, may take effect immediately, with notice provided as soon as reasonably practicable thereafter. All other changes become effective on the date specified in the notice provided under Section 3.2. Your continued use of the Platform after the effective date constitutes acceptance of the updated Terms. If you do not accept the updated Terms, you may discontinue use and close your account in accordance with Section 20.2, without prejudice to any accrued rights or remedies available under applicable law.

3.2 Notice of Material Changes

Material Changes include changes that: (a) significantly reduce User rights or remedies; (b) substantially increase User obligations or liabilities; (c) materially modify payment terms, fees, or payout structures; (d) materially shorten timeframes for exercising User rights, including dispute submission periods, refund request windows, or payout claim deadlines; (e) alter dispute resolution mechanisms or governing law; (f) introduce new termination grounds affecting existing Users. ALL will provide at least thirty (30) days' advance notice before any Material Change takes effect, by email to the address associated with your account, by notice in the Platform dashboard, or by both. Where a change is required by applicable law or regulation with a mandatory effective date that does not permit thirty (30) days' notice, ALL will provide as much advance notice as the circumstances permit. Changes to payment terms, commission rates, or payout structures apply prospectively only and do not affect Qualifying Usage Revenue already accrued prior to the effective date of the change, except where required by applicable law or where the change is made in accordance with Section 3.3. ALL may require affirmative re-acceptance via clickwrap as a condition to continuing to access services or receive payouts where a Material Change affects your rights or obligations in a material way. If clickwrap re-acceptance is required and you do not re-accept, ALL may suspend or restrict your access in accordance with Section 3.3. ALL will maintain a version history of these Terms, accessible at https://all.is.one/legal/terms-history. Each version is identified by its document version number. ALL will log the version number, Legal Pack version, timestamp, and User role-specific acceptance for each User at the time of acceptance or deemed acceptance. Users may request confirmation of the version they accepted by contacting ALL support. Your continued use of the Platform after the effective date of any changes constitutes your binding acceptance of the updated Terms, where permitted by applicable law.

3.3 Consequences of Non-Acceptance

If you do not accept updated Terms (where acceptance is required), ALL may take one or more of the following measures, to the extent reasonably necessary:

• (a) Suspend or terminate your account or any role;
• (b) Suspend publishing, job allocation, deployments, or App distribution;
• (c) Delay, withhold, or freeze payouts or withdrawals, subject to applicable law.

Any delay, withholding, or freeze of payouts or withdrawals under this Section 3.3 constitutes a temporary operational measure pending resolution of the Terms acceptance issue and does not constitute a forfeiture of earned amounts. Permanent withholding or forfeiture of earned amounts may only occur in accordance with Section 12.6. If you do not accept updated Terms within thirty (30) days of ALL’s written notice under Section 3.2, ALL will initiate the formal account closure process under Section 20, and amounts earned prior to closure will be handled in accordance with Section 20.3 and Section 12.6.

You are responsible for regularly reviewing these Terms. The "Last Updated" date at the top of this document indicates the most recent revision.

4. Account Registration and Security

4.1 Account Creation

To access certain features of the Platform, you must create an account by providing accurate, complete, and current information, including your email address, phone number (if required), and payment information.

You agree to:

• (a) Provide true, accurate, current, and complete information;
• (b) Maintain and promptly update your account information;
• (c) Maintain the security and confidentiality of your account credentials;
• (d) Notify ALL immediately of any unauthorized access or security breach;
• (e) Accept responsibility for all activities that occur under your account.

4.2 One Account Per User

You may only create one account per individual or entity. Multiple or fraudulent accounts are prohibited and may result in immediate termination and withholding or forfeiture of any balances or payouts strictly in accordance with Section 12.6.

(a) No Sharing: Your account is personal to you or the legal entity on whose behalf it was created. You may not sell, rent, lease, lend, transfer, assign, share, or otherwise make your account available to any other person or entity without ALL's prior written approval.

(b) Beneficial owner (extension to duplicate): ALL may treat accounts as related or duplicate where they are owned, controlled, funded, operated, managed, or beneficially used by the same person, entity, group, household, business, wallet, payment method, device, network, or other common control indicator.

(c) Merge duplicates: ALL may require you to designate a single primary account and may suspend, close, merge, link, restrict, or consolidate accounts that ALL reasonably determines are duplicate, related, or created for abuse, compliance evasion, or circumvention.

(d) Promotion Misuse: You may not create or use multiple accounts to obtain, multiply, transfer, resell, or misuse promotions, free credits, referral rewards, discounts, trial access, device offers, payout eligibility, or other benefits.

(e) Control for duplicate: ALL may use reasonable technical, payment, KYC/KYB, device, wallet, network, behavioral, referral, and risk signals to detect duplicate, related, fraudulent, or abusive accounts.

4.3 Account Security

You are solely responsible for safeguarding your account login credentials, wallet private keys, and any two-factor authentication mechanisms. ALL is not liable for any loss or damage arising from your failure to maintain account security or from unauthorized access to your account.

ALL will never ask you for your password or private keys. Do not share your credentials with third parties.

5. KYC and AML Compliance

5.1 Mandatory KYC

ALL requires Know Your Customer (KYC) verification for any User who:

• (a) Deposits funds (tops up Wallet Balance);
• (b) Withdraws funds or requests payouts;
• (c) Is otherwise required to complete KYC as determined by ALL in its discretion (including for risk, fraud prevention, or compliance purposes).

KYC may require submission of government-issued identification, proof of address, facial verification, entity documentation (for Business Customers), or other information as ALL deems necessary.

ALL applies a risk-based approach to KYC requirements. The level of verification required may be tiered based on factors such as transaction volume, payout amounts, jurisdiction, role, and assessed risk level. ALL may require enhanced due diligence (EDD) for higher-risk Users or transactions, including additional documentation, source-of-funds declarations, or third-party verification. ALL may update KYC tiers and requirements at any time to reflect changes in applicable law, regulatory guidance, or risk assessments.

5.2 Sanctions Screening and Prohibited Persons

You represent, warrant, and covenant that you:

• (a) Are not located in, resident of, or organized under the laws of any country or territory subject to comprehensive sanctions by the United States, United Nations, European Union, United Kingdom, or United Arab Emirates;
• (b) Are not identified on any sanctions list, including the U.S. OFAC SDN List, EU Consolidated List, UN Sanctions List, or any similar restricted persons list;
• (c) Are not owned or controlled, directly or indirectly, by any such sanctioned person or entity;
• (d) Will not use the Platform to engage in any transaction involving sanctioned persons, jurisdictions, or activities.

ALL may conduct sanctions screening at any time. If ALL determines, in its sole discretion, that you are a prohibited person or are engaging in prohibited activity, ALL may immediately suspend or terminate your account and freeze any funds or payouts.

5.3 Consequences of Non-Compliance

Failure or refusal to complete KYC, or failure to pass sanctions screening, may result in restricted Platform access, suspension or termination of your account or any role, blocking of deposits, withdrawals, or payouts, forfeiture of pending balances or earnings strictly in accordance with Section 12.6, to the extent permitted by applicable law.

ALL reserves the right to report suspicious activity to relevant authorities and to cooperate with law enforcement investigations.

5.4 Anti-Bribery and Anti-Corruption

Each party represents, warrants, and covenants that it has not made, offered, authorised, or accepted, and will not make, offer, authorise, or accept, any payment, gift, promise, or other advantage — directly or indirectly — to or from any person or entity, public or private, in connection with these Terms or the Platform, where such payment, gift, promise, or advantage would constitute a bribe, facilitation payment, or otherwise violate any applicable anti-corruption or anti-bribery law, including the UAE Federal Decree-Law No. 31 of 2021 (Crimes and Penalties Law), the U.S. Foreign Corrupt Practices Act (FCPA), and the UK Bribery Act 2010. Each party agrees to maintain policies and procedures reasonably designed to prevent violations of applicable anti-bribery laws and will promptly notify the other party upon becoming aware of any actual or suspected violation.

6. Law Enforcement Cooperation and Data Disclosure

6.1 Cooperation with Authorities

ALL will respond to valid legal process, including subpoenas, court orders, search warrants, and other lawful requests from law enforcement, regulatory authorities, or government agencies. ALL may disclose User information, account data, transaction history, KYC records, and other information in its possession in response to such requests, consistent with applicable law. Where legally permitted to do so, ALL will use commercially reasonable efforts to notify the affected User of a law enforcement or governmental request before responding, so that the User may seek appropriate legal relief. ALL will not notify Users of a request where doing so is prohibited by applicable law, court order, or by the terms of the request itself, or where ALL determines in good faith that notification would create a risk of harm, obstruct an investigation, or endanger any person.

6.2 Limited Visibility into Traffic Content

Due to the distributed architecture of the Platform (as described in Section 7 below), ALL is not designed to and does not capture, store, or have access to end-to-end traffic content or data processed by Apps running on Nodes. ALL's cooperation with law enforcement is limited to information stored by the ALL Control Tower, which includes:

• (a) Account identifiers (email, phone, wallet address, KYC information);
• (b) Node status and aggregate telemetry (uptime, bandwidth totals, CPU/RAM/disk usage aggregates);
• (c) App installation state and operational events required for orchestration;
• (d) Compliance and enforcement logs.

ALL cannot provide detailed packet-level traffic content or end-to-end communications data that is not collected or retained by the Control Tower.

Diagnostic data downloaded under Section 8.12 relates to device health, operating system and application lifecycle events, uptime metrics, and operational performance indicators. Such diagnostic logs do not include packet-level inspection, payload capture, or end-to-end content of traffic transmitted through Nodes.

6.3 No Liability for Disclosure

You acknowledge and agree that ALL shall have no liability to you for disclosing information pursuant to legal process or as otherwise required or permitted by law.

7. What the ALL Platform Is — Architecture and Distributed Network Disclosures

The Platform, its features, supported payment methods, available applications, available nodes, supported devices, supported jurisdictions, and geographic availability may change over time. ALL may add, modify, suspend, restrict, or discontinue any part of the Platform, subject to these Terms, applicable notice requirements, mandatory consumer rights, and any remedies expressly set out in the applicable Node Operator Terms, Terms of Sale, or regional consumer annexes.

Node availability, performance, and geographic distribution depend on factors outside ALL's direct control, including Node Operator uptime, internet connectivity, power availability, device health, local network conditions, applicable laws, and third-party service availability.

The Platform operates through a distributed network of ALL360 Devices owned or operated by independent Node Operators in various geographic locations. Workloads, applications, and services deployed to nodes generally run on distributed ALL360 Devices rather than centralized infrastructure owned by ALL. Certain Platform components, including the website, dashboards, App Store, Control Tower, account systems, payment interfaces, analytics, support tools, and security systems, may run on infrastructure operated by ALL or its service providers.

The Platform may include payment and payout access interfaces, including interfaces connected to third-party payment processors, digital asset service providers, or other payment rails made available from time to time. ALL does not act as a bank, custodian, e-money issuer, payment institution, or regulated financial institution. Any regulated payment, custody, digital asset, or similar regulated services, if made available through the Platform, are provided by appropriately authorized third-party service providers, not by ALL, except to the extent mandatory law requires otherwise.

The ALL App Store is the marketplace through which Developers may publish applications and Customers may discover, deploy, and manage applications across the distributed node network. Applications listed on the ALL App Store are developed, maintained, and operated by independent third-party Developers or providers, unless expressly identified as ALL applications. ALL may conduct limited technical, security, compliance, and policy reviews for marketplace integrity purposes. Such review is limited and does not constitute a certification, endorsement, warranty, or guarantee that any third-party application is lawful, secure, error-free, suitable, available, or compliant with all applicable laws.

The ALL Control Tower is ALL's central orchestration system. It manages or supports node enrollment, job allocation, usage metering, billing records, payout calculations, security signals, policy enforcement, and network integrity. The Control Tower operates using operational telemetry, usage data, billing data, device status, security signals, and other metadata described in the Privacy Policy. The Control Tower is not designed to capture, store, or inspect the content of traffic or payload data processed by applications running on nodes. ALL may process personal data only as described in the Privacy Policy, including where necessary to perform a contract, comply with legal obligations, pursue legitimate interests where permitted by applicable data protection law and as further described in the Privacy Policy, respond to legal process, or handle data expressly provided to ALL by a User for support, dispute resolution, security, compliance, or legal purposes.

ALL360 OS is the operating system installed on ALL360 Devices. It manages resource allocation, application sandboxing, security controls, device functionality, and communication with the ALL Control Tower. ALL360 OS remains the intellectual property of ALL or its licensors and is licensed, not sold, under Section 19.2 of these Terms and, where applicable to Node participation, the Node Operator Master Agreement. The purchase and warranty terms applicable to the ALL360 Device hardware are governed separately by the Terms of Sale.

ALL360 Devices are hardware devices approved for use with the Platform. When properly enrolled, activated, and operated in accordance with the applicable Node Operator terms, ALL360 Devices may function as active nodes in the ALL distributed network. ALL360 Devices may be sold or otherwise supplied by ALL or authorized partners. Purchasing or receiving an ALL360 Device does not, by itself, constitute participation in the network or entitle the purchaser or recipient to earnings, payouts, jobs, usage, or revenue share. Network participation, if available, requires separate enrollment, approval, and acceptance of the applicable Node Operator terms.

The ALL Platform includes the ALL website, dashboards, App Store, Control Tower, ALL360 Devices, ALL360 OS, software tools, APIs, payment and payout access interfaces, and related services made available by ALL from time to time.

7.1 Third-Party Apps and Developer Materials

Apps made available through the Platform are developed, published, and maintained by independent third-party Developers. ALL provides the marketplace, orchestration, and related Platform features, but does not develop, control, or guarantee third-party Apps. ALL does not warrant or guarantee that any App (a) matches its description, (b) is secure, bug-free, uninterrupted, or error-free, (c) is free of vulnerabilities, malicious code, or harmful components, or (d) is suitable, lawful, or compliant for your specific use case or jurisdiction. You are solely responsible for reviewing and complying with the applicable Developer terms, App privacy policies, and any App-specific disclosures before installing, deploying, or using an App. Your use of any third-party App is at your own risk, and ALL is not responsible for losses, damages, security incidents, data issues, or compliance matters arising from third-party Apps, to the maximum extent permitted by law.

7.2 Online Marketplace, Platform Moderation, and EU Digital Services Disclosures

Where the Platform or App Store is made available in the European Union or another jurisdiction with equivalent online-platform obligations, ALL will operate notice-and-action, complaint-handling, content moderation, trader-verification, transparency, and reporting processes as required by applicable law, including the EU Digital Services Act (Regulation (EU) 2022/2065) and equivalent national or regional legislation. Where required by applicable law, ALL will designate an EU legal representative, maintain an accessible point of contact for authorities and users, provide statement of reasons for content moderation decisions, and operate a complaint mechanism allowing users to contest decisions.

ALL may require Developers and other business Users to identify whether they act as traders, businesses, professionals, or consumers; provide accurate legal identity, contact, tax, licensing, and product/service information; and supply all disclosures required for Customers to make informed decisions before purchasing, deploying, or using an App.

ALL may remove, restrict, demote, suspend, or disable Apps, listings, User Content, accounts, or Platform functionality where ALL reasonably believes that such content or activity is illegal, unsafe, misleading, infringing, fraudulent, non-compliant, or otherwise violates these Terms or applicable law. Where required by law, ALL will provide a statement of reasons and access to an available complaint or review mechanism.

Any ranking, recommendation, search, or display of Apps may depend on factors such as relevance, category, price, performance, uptime, geographic availability, security review status, Customer ratings, support quality, compliance status, and commercial or promotional factors, as disclosed in the Platform interface or Documentation.

8. Node Operator Addendum

This Addendum applies to Node Operators — Users who have expressly accepted this Addendum through the dedicated Node Operator acceptance flow described in Section 1.2(b). This Addendum does not apply to any User who has not completed that express acceptance, regardless of whether they have purchased an ALL360 Device.

8.1 Device Ownership and Purchase

The ALL360 Device is sold outright to the Node Operator. Upon purchase, the Node Operator owns the physical hardware. The purchase is final, subject to ALL's Terms of Sale, Refund & Return Policy, and applicable mandatory consumer rights under applicable law.

The Node Operator does not acquire any ownership, license, or intellectual property rights in the ALL360 OS, ALL Control Tower, Platform software, or ALL trademarks beyond the limited license granted in Section 19.2.

8.2 Relationship with ALL – Independent Contractor

You are an independent contractor, not an employee, agent, partner, or joint venturer of ALL.

• (a) Earnings from Node operation are not wages or salary.
• (b) You are solely responsible for all taxes, social contributions, and regulatory compliance related to your earnings.
• (c) You are not entitled to employee benefits, insurance, or protections.
• (d) ALL does not withhold taxes or issue W-2 forms (or equivalent) unless required by law.

Nothing in these Terms creates an employment, agency, partnership, or joint venture relationship.

8.3 Node Operator Obligations

As a Node Operator, you must:

(a) Power and Connectivity

• Provide continuous electrical power and a stable internet connection to the Node.
• Maintain a reasonable operating environment (appropriate temperature, ventilation, protection from physical damage).
• Use a wired Ethernet connection where feasible.
• Maintain appropriate operating conditions for the ALL360 Device, including adequate ambient temperature and ventilation to prevent overheating, protection from physical damage and moisture, and stable placement to reduce risk of disconnection.

(b) Uptime Requirements

• Keep the Node online and operational to meet Uptime Thresholds (as defined by ALL and disclosed in Documentation).
• Understand that failure to meet Uptime Thresholds may result in reduced or zero payouts.

(c) Compliance with Terms and Policies

• Comply with these Terms, the Node Operator Addendum, Acceptable Use Policy, and all Documentation.
• Not use the Node for any illegal, prohibited, or unauthorized purpose.

8.4 Location and Geographic Restrictions

(a) In-Country Movement Permitted

You may move your Node within the same country without prior notice to ALL.

(b) Cross-Border Movement Restricted

Moving your Node to a different country requires prior written notice to ALL via the Platform dashboard or support channel. Cross-border relocation may require:

• Re-enrollment and re-verification of the Node;
• Updated KYC information;
• Compliance with local laws and export controls.

Failure to notify ALL of cross-border movement may result in Node suspension, payout delays, or account termination.

(c) Prohibited Jurisdictions “Prohibited Jurisdiction” means any country, territory, or region where ALL determines that access to or operation of the Platform is prohibited, restricted, commercially impracticable, or legally or regulatorily high-risk, including jurisdictions subject to comprehensive sanctions, export controls, or other restrictions imposed by the United States, United Nations, European Union, United Kingdom, United Arab Emirates, or other applicable authorities, as updated by ALL from time to time.

You may not operate a Node in any jurisdiction where:

• ALL services are prohibited or restricted;
• You are subject to sanctions or export controls;
• Operation would violate local law.

ALL reserves the right to disable Nodes located in prohibited jurisdictions.

8.5 Node Operator Representations

You represent, warrant, and covenant on an ongoing basis that:

(a) you are the lawful account holder of the internet connection used to operate the Node, or you have obtained and will maintain all permissions required from the internet service account holder, network owner, router or network administrator, employer, landlord, building manager, coworking provider, school, university, public network operator, premises owner, electricity account holder, or any other person or entity whose consent is required for the Node to use the relevant internet connection, local network, electricity supply, premises, or equipment for the enabled service categories;

(b) no applicable ISP terms of service, acceptable use policy, internet service contract, employment agreement, office policy, landlord agreement, lease terms, building rules, coworking terms, school or university policy, network owner policy, public network rules, or applicable law prohibits your participation in the ALL Platform, the hosting of third-party applications, the sharing of bandwidth, or the routing of approved third-party network traffic through the Node for the enabled service categories;

(c) you will promptly disable any affected service category and notify ALL if any required permission is withdrawn, expires, is restricted, becomes uncertain, or if you receive any objection, complaint, warning, notice, or restriction from an ISP, employer, landlord, network owner, building manager, coworking provider, school, university, public network operator, regulator, or other relevant party;

(d) you are solely responsible for any dispute, service disruption, service termination, penalty, fee, claim, regulatory issue, or legal consequence arising from your failure to obtain or maintain the required permissions or from your breach of any applicable agreement, policy, or law.

ALL may suspend or disable the affected Node or service category if ALL reasonably believes that required permissions are absent, withdrawn, disputed, or no longer reliable.

8.6 Mandatory Reporting of Complaints and Notices

You must report to ALL immediately and in any event within 24 hours of receipt of any of the following:

• (a) ISP abuse notices, warnings, or service restrictions related to Node activity;
• (b) Legal complaints, cease-and-desist letters, DMCA notices, or other legal process related to Node traffic or activity;
• (c) Law enforcement inquiries or requests related to the Node;
• (d) Suspected security incidents, unauthorized access, or malicious activity targeting the Node.

Failure to report such events may result in suspension or termination of your Node Operator account and withholding or forfeiture of pending payouts strictly in accordance with Section 12.6.

8.7 Prohibited Conduct

You must not:

• (a) Open, disassemble, modify, or reverse-engineer the ALL360 Device hardware.
• (b) Alter, remove, or disable any security mechanisms, tamper-evident seals, or hardware security modules.
• (c) Bypass, disable, or tamper with secure boot, Trusted Platform Module (TPM), disk encryption, firmware verification, or any other security controls in ALL360 OS.
• (d) Install unauthorized software, operating systems, or firmware on the ALL360 Device.
• (e) Gain root or administrative access to ALL360 OS except as expressly permitted by ALL.
• (f) Perform man-in-the-middle (MITM) attacks, packet interception, traffic inspection, or deep packet inspection on traffic routed through the Node.
• (g) Spoof IP addresses, use VPNs, proxies, or location-masking services to misrepresent the Node's geographic location or country.
• (h) Use the Node to conduct network scanning, port scanning, or unauthorized access attempts against third-party systems.
• (i) Fake, manipulate, spoof, or falsify uptime reports, telemetry data, resource utilization metrics, or any other data reported to the ALL Control Tower.
• (j) Engage in "gaming" behavior designed to artificially inflate usage metrics, uptime scores, or earnings.

Violation of these prohibitions may result in immediate Node suspension, account termination, withholding, clawback, or forfeiture of payouts strictly in accordance with Section 12.6, and potential legal action.

8.8 Node Operator Controls — Service Authorization and Opt-In / Opt-Out Mechanisms

For purposes of this Section 8.8, references to the Node Operator's "authorization," "opt-in," or "opt-out" mean the Node Operator's operational authorization to enable or disable a service category on their Node. Privacy-related consent and other lawful bases for personal data processing are governed separately by the Privacy Policy and are not affected by this Section.

(a) Service Categories and Default Status

Node Operator participation in the ALL Platform's edge network requires express, granular, and informed operational authorisation for each of the following service categories:

1. proxy traffic routing;
2. VPN-related routing functionality made available through approved applications or approved B2B arrangements;
3. bandwidth sharing;
4. compute workloads (CPU/RAM);
5. storage and caching workloads;
6. AI workloads;
7. sensor and peripheral device access.

All service categories are disabled by default at the time of device enrollment and account activation. No service category is activated without an explicit, affirmative action by the Node Operator. Enabling any service category requires a separate opt-in step; no service category is activated solely by accepting these Terms or the Node Operator Addendum.

Proxy traffic routing and VPN-related routing functionality require an additional, separate authorisation step beyond the standard category opt-in, in view of the nature of those services. The authorisation screen will include an explicit acknowledgement that the Node Operator's internet connection, public IP address, bandwidth, local network, and ALL360 Device may be used to route approved third-party network traffic through the Platform only for approved Business Customers, or other participants who have completed an equivalent ALL-approved onboarding, compliance review, KYB/KYC screening, and written access agreement.

The proxy traffic routing and VPN-related routing authorisation screen must require the Node Operator to separately acknowledge the following statement:

“I understand and agree that, if I enable proxy traffic routing or VPN-related routing functionality, approved third-party network traffic may be routed through my ALL360 Device, internet connection, public IP address, bandwidth, and local network. I confirm that I am authorised to allow this use and that my ISP terms of service, internet service contract, employer rules, office policy, landlord agreement, lease terms, building rules, network owner policy, router or network administrator rules, coworking terms, school or university policy, public network rules, and applicable law do not prohibit this use. I will disable the relevant service category and notify ALL if this confirmation ceases to be accurate.”

ALL will not activate proxy traffic routing or VPN-related routing functionality, or allocate jobs for those categories, unless the Node Operator has completed both the standard category opt-in and the additional authorisation step described above.

(b) Onboarding Authorization Flow

During initial device enrollment, the Node Operator will be presented with a sequential, stepped authorization flow that separately covers:

(i) a description of the ALL Platform and the Node Operator's role in the distributed network;

(ii) an explanation of the hardware resources that may be used (CPU, RAM, storage, bandwidth, internet connection, sensors) and the basis on which compensation is calculated;

(iii) a granular opt-in screen listing each of the seven service categories described in Section 8.8(a), with each category unchecked by default, and a brief description of what each category entails, the types of workloads or traffic involved, and how usage is metered;

(iv) for proxy traffic routing and VPN-related routing functionality: a dedicated authorization screen with an explicit acknowledgment statement, separate from the general category opt-in;

(v) a confirmation summary displaying the service categories the Node Operator has elected to enable, with the ability to review and amend selections before finalizing.

ALL will not activate any service category or allocate jobs for that category until the Node Operator has completed the applicable onboarding flow and affirmatively confirmed their selections. Device enrollment may proceed with all service categories disabled.

(c) Dashboard Controls and Ongoing Visibility

Following enrollment, the Node Operator may, at any time, access the Platform dashboard to:

(i) view the current opt-in/opt-out status for each service category;

(ii) enable or disable any service category independently;

(iii) view aggregated usage metrics per service category (bandwidth consumed, compute hours, storage utilization, uptime, and similar operational data);

(iv) view earnings accrued and estimated, broken down per service category and per period;

(v) view the history of opt-in and opt-out actions taken on the account;

(vi) view any ISP complaints, abuse flags, legal notices, or automatic suspension events affecting the Node, as applicable and to the extent permitted by applicable law.

The dashboard information is updated with reasonable frequency. ALL does not guarantee real-time accuracy of all displayed data, but will use commercially reasonable efforts to ensure that opt-in/opt-out status and earnings data reflect actual Platform records within the timeframes disclosed in Documentation.

(d) Right to Withdraw Authorization — Opt-Out Per Service

The Node Operator may withdraw authorization for any service category at any time, independently of other categories, by disabling that service category from the Platform dashboard or via any other mechanism made available by ALL.

Upon disabling a service category:

(i) ALL will use commercially reasonable efforts to propagate the opt-out instruction to the ALL Control Tower and to the Node promptly, and in any event within the timeframe disclosed in the Documentation where technically feasible. The current target propagation time is sixty (60) seconds from the time the opt-out action is confirmed in the dashboard, subject to device connectivity, network conditions, security controls, and other technical limitations;

(ii) disabling a service category prevents new sessions, connections, or workload assignments for that category. Existing sessions or workloads may be terminated immediately or wound down in accordance with the technical and safety rules described in the Documentation, except where immediate termination is required for legal, security, abuse-prevention, or compliance reasons;

(iii) no contractual penalty or charge is imposed on the Node Operator for exercising the right to opt out of any service category. The Node Operator retains all earnings accrued for completed sessions prior to the opt-out taking effect;

(iv) the Node Operator will not earn compensation for service categories they have disabled, for the period during which those categories remain disabled.

Exercising the opt-out right does not affect participation in service categories that remain enabled, pending payouts for completed work, or rights under these Terms generally.

Disabling a service category does not constitute breach, non-performance, misconduct, bad faith, or grounds for account termination. ALL will not treat the exercise of an opt-out right as a negative compliance event, reputation penalty, or adverse eligibility factor for unrelated service categories. This does not prevent ALL from allocating fewer or no jobs for the disabled service category, or from applying objective eligibility criteria to service categories that remain enabled.

(e) Automatic Suspension of Service Category

Notwithstanding the Node Operator's opt-in status, ALL may automatically suspend or disable one or more service categories on a Node, without prior notice, upon the occurrence of any of the following events:

(i) receipt by ALL of a credible ISP abuse complaint, network abuse notice, or service restriction linked to the Node's IP address or account;

(ii) detection by ALL of a change in the Node's operating jurisdiction or country that renders the relevant service category non-compliant, restricted, or prohibited in that jurisdiction;

(iii) receipt by ALL of a valid legal notice, regulatory request, court order, or law enforcement demand relating to the Node's traffic or activities;

(iv) detection by ALL's abuse-prevention, security, or risk systems of credible and specific indicators of unauthorized use, abnormal traffic patterns, policy violations, security risk, legal risk, or platform-integrity risk reasonably associated with the Node's activity;

(v) breach of a Business Customer's platform policy or a third-party provider's acceptable use requirements reasonably associated with the Node's activity;

(vi) withdrawal or modification of the Node Operator's authorization in a manner that makes continued operation of a service category non-compliant with these Terms or applicable law.

ALL will notify the Node Operator of an automatic suspension as soon as reasonably practicable, subject to any legal restrictions on disclosure. The Node Operator may request a review through the process described in Section 18.3. Automatic suspension does not constitute a finding of fault or a breach determination.

Automatic suspension is a temporary protective measure and does not, by itself, constitute breach, fault, forfeiture, or a final adverse determination against the Node Operator. Any payout hold, clawback, set-off, forfeiture, or permanent cancellation of amounts related to the suspended activity shall be handled only in accordance with Section 12.6, applicable jurisdiction-specific annexes, and mandatory law.

(f) Authorization Records and Audit Trail

ALL maintains an auditable record of each authorization action taken by the Node Operator in connection with service category opt-ins and opt-outs. Each record includes, at minimum:

(i) timestamp in UTC;

(ii) User ID and Node Operator account identifier;

(iii) Device ID of the ALL360 Device concerned;

(iv) the version of these Terms and of the applicable opt-in schedule presented at the time of the action;

(v) where technically implemented, a cryptographic hash or equivalent integrity marker of the authorization screen or text presented to the Node Operator;

(vi) the list of service categories activated or deactivated, and their status immediately before and after the action;

(vii) confirmation that all service categories were in a disabled state prior to the Node Operator's initial activation of each category;

(viii) the specific action taken by the Node Operator (e.g., "enabled proxy traffic routing," "disabled VPN-related routing functionality ");

(ix) where applicable, the date and time of any withdrawal of authorization.

Authorization records are retained for a minimum of five (5) years from the date of account deactivation or the last activity on the relevant Node, whichever is later, unless a longer retention period is required by applicable law or a shorter retention period is required under applicable data protection law.

8.9 Free Capacity Allocation and Promotional Use

ALL may allocate a portion of your Node's resources for the following purposes, all of which are eligible for Node Operator compensation in accordance with the applicable compensation formula and subject to eligibility conditions:

• (a) Developer testing and App previews;
• (b) Customer free trials and promotional campaigns;
• (c) Platform performance testing and quality assurance;
• (d) Network capacity planning and optimization.

ALL compensates Node Operators for all verified usage of their Node resources as determined by the ALL Control Tower, including usage allocated for developer testing, App previews, customer free trials, performance testing, and network optimization. Free or promotional usage allocated by ALL counts toward the Node Operator's eligible resource utilisation for compensation purposes, subject to the standard eligibility conditions (including Uptime Threshold) and the applicable compensation formula. You acknowledge that earnings during promotional periods may reflect lower effective rates where ALL has subsidised the usage cost for third-party users, and that the compensation formula applicable to such usage will be disclosed in the Dashboard.

8.10 Job Allocation and Earnings Disclaimers

The compensation formula applicable to each service category, including applicable rates per unit (such as USD per GB of bandwidth consumed, USD per compute hour, USD per GB of storage, or other applicable metrics), is published by ALL in the Documentation and is versioned. ALL will notify Node Operators of material changes to the compensation formula in accordance with Section 3.2. The absence of a guarantee of earnings does not affect ALL's obligation to apply the published formula to actual, metered usage.

(a) No Guarantee of Jobs or Earnings

ALL MAKES NO GUARANTEE, REPRESENTATION, OR PROMISE REGARDING THE NUMBER, FREQUENCY, TYPE OR VALUE OF JOBS ALLOCATED TO YOUR NODE, MINIMUM EARNINGS, REVENUE, OR PAYOUTS, PROFITABILITY OR RETURN ON INVESTMENT FROM OPERATING A NODE, CONTINUOUS OR UNINTERRUPTED JOB ALLOCATION

Job allocation is performed through automated and policy-based systems and may depend on Node uptime, performance, and reliability, Customer demand and App deployment patterns, Network capacity and supply/demand dynamics, risk signals, compliance factors, and Node Operator reputation scores. ALL may seek to operate the Platform to improve network utilization and service availability, but does not guarantee any jobs, usage, or earnings. Earnings may be reduced or eliminated due to Customer demand, insufficient Customer Wallet Balances, pricing changes, fees, promotional/free usage (including Section 8.9 allocations), uptime/connectivity issues, missing/delayed telemetry, maintenance, security actions, compliance reviews, sanctions screening, risk assessments, and enforcement decisions.

If no jobs are allocated to your Node, you will receive no earnings.

(b) Variable Earnings

Earnings from Node operation are variable and unpredictable. Earnings may fluctuate based on network activity, customer demand, pricing changes, fee adjustments, and other factors outside your control. Earnings may be zero for extended periods.

(c) Operational Costs

You are responsible for all costs associated with operating a Node, including electricity, internet service, hardware maintenance, and any taxes. ALL is not responsible for reimbursing operational costs, and you may operate at a net loss.

(d) Customer Wallet Balance Insufficiency and Node Operator Non-Payment

ALL will use commercially reasonable efforts to reserve, pre-authorise, or verify sufficient Customer Wallet Balance before allocating paid workloads to Nodes. If a Customer's Wallet Balance is nonetheless insufficient at the time charges are assessed or settled (including due to eviction, disputes, delays, or other reasons), the associated usage may not be billed and the Node Operator may not be paid for that usage. Where verified Node usage occurs due to an ALL Control Tower billing or allocation error despite insufficient Customer Wallet Balance, ALL may adjust the relevant billing records but will not deny Node Operator compensation for verified completed usage solely because of such Platform-side error, except in cases of fraud, abuse, telemetry failure attributable to the Node, or other circumstances described in Section 12.6.

Node Operator payouts remain subject to successful metering, eligibility conditions, applicable compensation formulas, Section 12.6, applicable role-specific terms, and mandatory law. ALL does not guarantee speculative earnings, future jobs, unallocated work, unverified usage, missing or corrupted telemetry, Node-side outages, Node-side non-compliance, or Customer non-payment, except to the extent expressly stated above for verified completed usage caused by an ALL Control Tower billing or allocation error.

(e) Allocation Transparency

While ALL makes no guarantee regarding job allocation volume or earnings, ALL operates allocation systems in good faith and does not intentionally withhold jobs from eligible, online, performing Nodes for the purpose of avoiding payout obligations. Job allocation is performed through automated and policy-based systems applying published or reasonably ascertainable parameters, including Node availability, uptime, performance, and reliability, Customer demand and geographic distribution, service-category opt-in status, network capacity, compliance status, and risk factors. ALL retains discretion to override allocation for legal, security, abuse-prevention, regulatory, sanctions, or platform-integrity reasons.

8.11 Offline Nodes, Telemetry Failures, and Payment Impacts

If your Node is offline, experiences connectivity issues, hardware failure, degraded performance, or fails to transmit telemetry data to the ALL Control Tower, you may receive reduced or zero job allocations, become ineligible for payouts, experience reduced or zero earnings, and be removed from active Node pools.

You are responsible for maintaining power, internet connectivity, appropriate operating conditions, and Node availability. Except as required by mandatory law or applicable warranty terms, ALL has no obligation to reimburse you for unmetered activity, missed opportunities, lost jobs, reduced earnings, or non-payment caused by Node-side issues, including power loss, internet disconnection, hardware misuse, tampering, failure to maintain operating conditions, or other factors within your control.

Missing, incomplete, corrupted, or delayed telemetry may result in under-billing, non-billing, reduced payouts, or non-payment. If a billing, metering, or payout issue is caused by a documented ALL Control Tower outage or other documented Platform-side technical failure, you may submit a claim within the timeframe specified in the applicable Node Operator Schedule or Network Participation Schedule. If no such timeframe is specified, you must submit the claim within thirty (30) days after the affected payout statement becomes available in the Dashboard, unless mandatory law requires a longer period.

If your Node is offline or non-responsive, billing, settlement, payout calculations, App removals, job terminations, enforcement actions, updates, and Control Tower commands may be delayed, incomplete, or otherwise impacted until the Node reconnects.

You acknowledge and accept these control, connectivity, and metering limitations as inherent to the distributed architecture of the Platform.

8.12 Remote Access and Device Control

You grant ALL and its authorized agents the right to:

• (a) Remotely access the Node for maintenance, updates, diagnostics, security patching, and enforcement purposes;
• (b) Download logs, system state information, and diagnostic data from the Node;
• (c) Push firmware updates, OS patches, configuration changes, and security fixes to the Node;
• (d) Reboot, restart, or reconfigure the Node as necessary for network stability and security;
• (e) Disable, lock, or deactivate the Node for violations of these Terms, security incidents, fraud investigations, or compliance reasons.

ALL may exercise these rights without prior notice where reasonably necessary for the stated purposes, subject to applicable law, applicable data minimization requirements, and any notice obligation required by law.

8.13 Node Suspension and Termination

ALL may, in its sole discretion and without prior notice, suspend, restrict, or permanently disable your Node for any of the following reasons (without limitation), subject to the review process described in Section 18.3 and any mandatory rights under applicable law:

• (a) Violation of these Terms or any policy;
• (b) Fraud, gaming, tampering, or manipulation;
• (c) Failure to meet Uptime Thresholds or performance standards;
• (d) ISP complaints, legal notices, or law enforcement requests;
• (e) Suspected security compromise or malicious activity;
• (f) Operation in a prohibited jurisdiction;
• (g) Failure to complete or maintain KYC verification;
• (h) Non-payment of fees (if applicable);
• (i) Risk to network stability, security, or reputation.

Suspension or termination does not entitle you to a refund of the Device purchase price, except where required by mandatory law, the Terms of Sale, or the Warranty Policy. Pending payouts may be delayed, frozen, withheld, clawed back, or forfeited only in accordance with Section 12.6.

9. Developer Addendum

This Addendum applies to Developers — Users who have expressly accepted this Addendum through the dedicated Developer acceptance flow described in Section 1.2(c). This Addendum does not apply to any User who has not completed that express acceptance, regardless of whether they have submitted an App for review.

9.1 App Submission and Listing Requirements

To publish an App, you must provide:

(a) Accurate App Information

• Complete, accurate, and non-misleading App name, description, and promotional materials;
• Truthful claims regarding App features, functionality, performance, and limitations;
• Accurate categorization and classification of the App;
• Contact information for User support inquiries.

(b) Dedicated App Privacy Policy

You must provide a dedicated privacy policy for each App that discloses:

• What data the App collects from Users and Nodes;
• How data is used, processed, stored, and shared;
• Data retention periods;
• User rights and choices;
• Contact information for privacy inquiries.

The App Privacy Policy must be accessible to Users before they deploy or use the App and must comply with applicable data protection laws (including GDPR, CCPA, UAE PDPL, or other applicable regimes).

(c) Intellectual Property Rights

You represent and warrant that:

• You own or have all necessary rights, licenses, and permissions to publish the App and all associated content;
• The App does not infringe any third-party intellectual property rights (patents, trademarks, copyrights, trade secrets);
• You have the authority to grant ALL and Users the licenses described in these Terms.

(d) Publicity and Marketing Permissions

By submitting or publishing an App, you grant ALL a non-exclusive, worldwide, royalty-free license to display your name, business name, App name, and logos/trademarks you provide (if any) for marketplace listing, discovery, and marketing of the Platform and the App (e.g., store listings, website, social media, demos, and promotional materials). Where required by applicable law, you may request an opt-out from discretionary marketing placements (excluding basic marketplace listing display) by contacting support.

9.2 Sole Responsibility for App Behavior and Compliance

You, as the Developer, are responsible for the behaviour, functionality, security, support, legal compliance, and data practices of your App, to the extent applicable to your role as controller, processor, sub-processor, joint controller, service provider, or independent provider:

• (a) Ensuring the App functions as described and does not contain critical bugs or defects.
• (b) Implementing appropriate security controls to protect against vulnerabilities, exploits, and unauthorized access.
• (c) Providing timely and effective support to App Users, responding to inquiries, and resolving issues.
• (d) Providing bug fixes, security patches, and feature updates as necessary.
• (e) Ensuring the App complies with all applicable laws, regulations, and industry standards in all jurisdictions where it is available, including data protection, export control, consumer protection, and content regulations.
• (f) Ensuring all data collection, processing, storage, and sharing practices comply with your App Privacy Policy and applicable laws.
• (g) Ensuring any third-party services, APIs, or dependencies integrated into the App are properly licensed and compliant.

ALL is not responsible for App behavior, functionality, security, compliance, or User disputes arising from your App.

9.3 App Review — Managed Marketplace

ALL operates the Platform as a managed marketplace. Each App, each new version of an App, and each App update must be submitted to, reviewed, and approved by ALL before publication, re-publication, distribution, or release on the Platform.

ALL may review Apps, versions, and updates for security, malware, vulnerabilities, technical compatibility, permissions, resource usage, network, sensor, USB or peripheral access, data practices, privacy disclosures, metadata, promotional materials, pricing disclosures, Developer verification, and compliance with these Terms, the Developer Addendum, and applicable Platform requirements.

ALL may approve, conditionally approve, reject, require modification or resubmission of, restrict, suspend, withdraw approval for, or remove any App, version, or update. Review decisions remain effective unless and until modified through the applicable appeal process.

Publication, re-publication, distribution, activation, or release of an App, version, or update without completing the applicable review and approval process constitutes a breach of these Terms and may result in immediate suspension, rollback, disabling, or removal of the affected App, version, or update.

The Developer must provide complete, accurate, and non-misleading information regarding each App, version, and update and remains responsible for the App’s content, functionality, security, data practices, legal compliance, disclosures, maintenance, updates, vulnerability remediation, and support.

App review, approval, publication, ranking, or continued availability does not constitute an endorsement, certification, warranty, legal opinion, security assurance, or guarantee by ALL.

The detailed submission, review, approval, update, permission, security, ranking, support, suspension, takedown, and appeal procedures are governed by the Developer Policy and App Review Guidelines incorporated into these Terms by reference. Those documents may include app review timelines, rejected-App appeals, update approvals, permission requests, USB, peripheral, network and sensor approvals, logo, splash-screen and screenshot requirements, ranking rules, customer reviews and ratings, vulnerability disclosure, emergency patches, Developer support service levels, and App takedown appeals.

During any period of suspension, restriction, or removal under this Section, pending or future payouts attributable to the affected App are subject to Sections 9.4 and 12.6.

Subject to Section 15 and to the maximum extent permitted by applicable law, ALL does not warrant that its review process will identify every defect, vulnerability, legal issue, privacy issue, incompatibility, or policy violation. Nothing in this Section excludes or limits any obligation or liability that cannot lawfully be excluded or limited.

9.4 Emergency Takedown and Removal Rights

ALL reserves the right, in its sole discretion and without prior notice or approval, to immediately remove, delist, suspend, or disable any App from the store, terminate deployments of the App on all Nodes, suspend or terminate your Developer account, and impose an Emergency Payout Hold (as defined in Section 9.4(a) below) on pending or future payouts. Permanent clawback or forfeiture of earned amounts is governed exclusively by Section 9.4(b) and Section 12.6.

Grounds for emergency takedown include (but are not limited to):

• (i) Suspected violation of these Terms, applicable law, or ALL policies;
• (ii) Security vulnerabilities, malware, or malicious behavior;
• (iii) Infringement of third-party intellectual property rights;
• (iv) User complaints, legal notices, or regulatory inquiries;
• (v) Misrepresentation, fraud, or deceptive practices;
• (vi) Risk to Platform security, stability, or reputation;
• (vii) Failure to provide or maintain a compliant App Privacy Policy.

(a) Emergency Payout Hold — Scope, Notification, and Duration

Upon the occurrence of any of the grounds listed above, ALL may impose an Emergency Payout Hold, which is a temporary freeze of pending or future payouts. An Emergency Payout Hold does not constitute a determination of breach, a finding of violation, or a forfeiture of earned amounts. ALL will notify the Developer of the Emergency Payout Hold and the grounds relied upon within forty-eight (48) hours of the hold being imposed, subject to any legal restrictions on disclosure (including active law enforcement requests or ongoing investigations).

ALL will use commercially reasonable efforts to complete ordinary Emergency Payout Hold reviews within thirty (30) calendar days after notifying the Developer. The hold may continue for longer where reasonably required for sanctions, AML/KYC, fraud prevention, payment processor requirements, chargebacks, legal process, regulatory requests, law enforcement, complex technical investigation, or another circumstance covered by Section 12.6. ALL will release the held amounts once the relevant risk condition is resolved, unless a final adverse payment action is permitted under Section 12.6.

(b) Permanent Clawback — Section 12.6 Process Required

Permanent withholding, clawback, or forfeiture of amounts already earned by or already paid to the Developer is governed exclusively by Section 12.6 and may only occur following completion of the investigation, final determination, and proportionality requirements set forth in that Section. An Emergency Payout Hold under Section 9.4(a) does not, by itself, constitute or result in permanent forfeiture. For the avoidance of doubt, this Section 9.4(b) applies to all amounts earned by the Developer in connection with any App listed on the Platform, regardless of the grounds for the emergency takedown action that preceded it.

Delayed Removal Due to Offline Nodes

App removal depends on Node connectivity. Offline Nodes will receive removal instructions upon reconnection. ALL is not responsible for delays in App removal caused by offline or unreachable Nodes.

9.5 Misclassification, Misrepresentation, and Enforcement

If ALL determines, in its sole discretion, that an App has been miscategorized, misrepresented, or violates any policy, ALL may (without limitation):

• (a) Require re-categorization or re-submission;
• (b) Delist or remove the App;
• (c) Suspend or ban your Developer account;
• (d) Withhold or claw back payouts (as described in Section 12.6);
• (e) Require enhanced KYC verification;
• (f) Report violations to law enforcement or regulatory authorities.

9.6 Prohibited App Categories

The following categories of Apps constitute Prohibited Use Cases (as defined in Section 2) and will not be approved for listing or distribution on the ALL Platform: (a) Apps designed or adapted for the operation of botnets, credential stuffing, DDoS attacks, or any form of network abuse; (b) Apps that facilitate, enable, or promote illegal surveillance, stalking, spyware, or non-consensual data collection; (c) Apps designed to bypass, circumvent, or undermine the Platform's security mechanisms, sandboxing, or access controls; (d) Apps used to conduct, facilitate, or process transactions involving sanctioned persons, sanctioned jurisdictions, or illegal financial activities; (e) Apps that generate, distribute, or host child sexual abuse material (CSAM) or any content that sexualises minors; (f) Apps designed or used primarily for fraudulent activity, phishing, social engineering, or identity theft; (g) Apps that mine or generate cryptocurrency or digital assets using Node resources without explicit Node Operator consent and without being listed as a compute workload subject to Node Operator opt-in; (h) Apps that facilitate illegal gambling, unlicensed financial services, or unregistered securities offerings; (i) Apps that collect, aggregate, or resell personal data in violation of applicable data protection law; (j) any App whose primary or predominant use case would constitute a Prohibited Use Case under the Acceptable Use Policy. ALL may update the list of prohibited categories at any time by updating the Acceptable Use Policy or Developer Policy.

9.7 Developer Pricing Controls

Developers may price Apps and/or App usage by resource parameters (including CPU, network/bandwidth, disk/storage, RAM/memory, and other metrics supported by the Platform). ALL may enforce pricing rules (including minimum/maximum prices, fees, mandatory constraints, discount rules, and revenue share structures) and may change such rules. Material changes to pricing rules, fees, revenue share, or payout-impacting constraints will apply prospectively and will be notified in accordance with Section 3. ALL may apply immediate changes where required for legal, regulatory, sanctions, AML/KYC, fraud-prevention, tax, payment-processing, security, or platform-integrity reasons. No pricing change will retroactively reduce amounts already earned for verified completed usage, except as permitted under Section 12.6 or mandatory law.

10. Customer Addendum

This Addendum applies to any User who deploys or uses Apps on the Platform.

10.1 Pay-As-You-Go Model and Wallet Balance

(a) Prepaid Credits

Customers must prepay for Platform services by depositing funds into their Wallet Balance. Usage charges (compute, storage, bandwidth, App fees) are deducted from your Wallet Balance in real-time or on a periodic basis as determined by ALL.

(b) Insufficient Balance

If your Wallet Balance is insufficient to cover usage charges, ALL may, without notice pause, suspend, or evict your App deployments, terminate running jobs or instances, restrict access to the Platform until you top up your balance. ALL is not responsible for service disruption, data loss, or business impact caused by insufficient Wallet Balance. You are solely responsible for monitoring your balance and maintaining sufficient funds.

10.2 Location Selection and Geolocation Disclaimers

(a) Customer Preferences

You may select preferred Node locations (country, city, or region) when deploying Apps, subject to availability.

(b) No Guarantee of Specific Location

ALL does not guarantee that your App will be deployed to a specific Node or location. Actual Node assignment depends on real-time availability of Nodes in the requested location, Node Operator uptime and eligibility status, network capacity and supply/demand balance, IP-based geolocation data from third-party providers (which may be inaccurate or outdated).

Geolocation accuracy is not guaranteed. Node location metadata relies on IP address geolocation, which may not reflect the physical location of the device or the legal jurisdiction of the Node Operator. ALL is not responsible for inaccurate geolocation data, deployment to unintended locations due to VPN usage, proxy routing, or geolocation errors, compliance issues arising from App deployment in specific jurisdictions. You are solely responsible for ensuring your App deployments comply with applicable laws in all relevant jurisdictions.

10.3 Session Traceability and B2B Record-Keeping

Business Customers accessing proxy routing, VPN-related services, or network-resource services through the Platform must maintain sufficient session-level records to identify and attribute use of the ALL edge network to their own end customers, users, accounts, or systems. Such records must include, at minimum: the Business Customer's account identifier; session start and end timestamps; Node identifier or region; bandwidth consumed; and any abuse or anomaly flags generated during the session. Records must be retained for the period specified in the applicable B2B Platform Agreement, or, where no period is specified, for a minimum of five (5) years from the date of the session. Business Customers must make such records available to ALL upon reasonable request for the purposes of abuse response, legal compliance, billing verification, sanctions screening, fraud prevention, or law enforcement cooperation. Failure to maintain or produce such records may result in suspension or termination of access in accordance with Section 18. Where session-level records contain personal data, Business Customers must retain and disclose such records in accordance with applicable data protection law, including data minimisation, storage limitation, security, and lawful-basis requirements. If applicable law requires a shorter retention period for specific categories of personal data, the shorter mandatory period applies unless retention is required for legal claims, regulatory compliance, law enforcement cooperation, sanctions compliance, fraud prevention, or another lawful basis.

10.4 No Service Level Agreement (SLA) – Distributed Availability

THE PLATFORM IS PROVIDED ON AN "AS-IS" AND "AS-AVAILABLE" BASIS WITH NO SERVICE LEVEL AGREEMENT (SLA). Nodes and the Platform may experience downtime, interruptions, degraded performance, or complete unavailability. Individual Nodes may go offline at any time due to Node Operator actions, connectivity issues, power loss, hardware failure, or maintenance. App performance (latency, throughput, compute speed) depends on Node hardware, internet connectivity, and network congestion, all of which vary and are outside ALL's control. ALL does not guarantee automatic failover, redundancy, or high-availability configurations unless explicitly purchased as a premium feature (if available). Customers are solely responsible for backups, retention, and disaster recovery for any data, configurations, and workloads deployed on the Platform. ALL does not guarantee persistence or recoverability, including where Nodes go offline, deployments are evicted (including for insufficient Wallet Balance), Apps are removed/delisted, or Nodes become unavailable. ALL has no obligation to restore data or reimburse for data loss, to the maximum extent permitted by law. ALL is not liable for any damages, losses, or business interruption caused by service unavailability, Node downtime, or performance issues.

10.5 Billing Disputes and Adjustments

(a) Metering Finality

ALL Control Tower's metering and billing records are presumed accurate, subject to correction under Section 12.5 and review under Section 18.3.

(b) Billing Disputes

If you believe a billing error has occurred, you must submit a dispute within 30 days of the charge via the Platform dashboard or support channel, providing all relevant details and evidence. ALL will investigate in good faith.

(c) Prospective Adjustments Only

Billing adjustments, if granted, may apply prospectively only. Retroactive refunds or credits apply only where a confirmed billing error is established under Section 12.5 or where required by applicable mandatory law.

10.6 Acceptable Use Policy and Prohibited Activities

Customers must comply with ALL's Acceptable Use Policy (AUP), available at the Platform URL and incorporated into these Terms by reference. The AUP sets out the Prohibited Use Cases and all other permitted and prohibited uses of the Platform and ALL edge network services, including without limitation restrictions on illegal activities, network abuse, content violations, data protection breaches, and sanctions non-compliance. Violation of the AUP may result in, without limitation, immediate suspension or termination of your account, eviction of all App deployments, freezing or forfeiture of Wallet Balance in accordance with Section 12.6, and potential legal action. ALL reserves the right to investigate suspected violations and to cooperate with law enforcement authorities.

11. Affiliate Addendum

This Addendum applies only to Users who have expressly enrolled in the Affiliate Program through the process described in Section 1.2(d). Participation is voluntary, non-transferable, and subject to eligibility, applicable KYC/KYB requirements, territorial availability, and continuing compliance with these Terms, this Addendum, the Referral Commission Plan, the Acceptable Use Policy, and applicable law.

11.1 Affiliate Program Overview

ALL operates a three-level referral commission program through which eligible Affiliates may earn commissions calculated exclusively from Qualifying Usage Revenue attributable to Users referred directly or indirectly through up to three (3) referral levels:

Level 1 — Direct Referrals: 10% of Qualifying Usage Revenue attributable to Users directly referred by the Affiliate (“Level 1 Users”).

Level 2 — Indirect Referrals via Level 1 Users: 5% of Qualifying Usage Revenue attributable to Users referred by Level 1 Users (“Level 2 Users”), subject to Level 2 Qualification under Section 11.2(b).

Level 3 — Indirect Referrals via Level 2 Users: 5% of Qualifying Usage Revenue attributable to Users referred by Level 2 Users (“Level 3 Users”), subject to Level 3 Qualification under Section 11.2(b).

There are no commissions beyond Level 3. Participation in the Referral Program does not guarantee any income, commission, profit, return, recovery of Device costs, or other financial result.

11.2 Qualifying Usage Revenue, Rates, and Qualification

(a) Qualifying Usage Revenue

“Qualifying Usage Revenue” means the net amount actually received, finally settled, and retained by ALL from the bona fide consumption of eligible Platform services — including eligible compute, storage, bandwidth, network-resource, and App services — by a Validated Referred User, as determined from ALL’s billing and attribution records.

“Validated Referred User” means a User who has been attributed to an Affiliate through an approved referral mechanism and has completed all identity, account, KYC/KYB, sanctions, and fraud-prevention verification required by ALL or applicable law.

Qualifying Usage Revenue excludes: hardware sales; Device purchase prices; OS licensing, Software License, activation, enrollment, or onboarding fees; unconsumed Wallet Balance top-ups; taxes, duties, and government charges; refunds, chargebacks, reversals, cancelled transactions, and disputed amounts; payment-processing, withdrawal, blockchain network, conversion, and transaction fees; amounts payable to Developers, Node Operators, or other third parties; revenue attributable to fraudulent, suspended, terminated, or duplicate accounts; revenue attributable to accounts that have failed or not completed any KYC/KYB verification required by ALL or applicable law; and any other category excluded in the Referral Commission Plan.

No commission is earned for recruitment, account creation, onboarding, Device purchase, Software License payment, Device activation or enrollment, or any activity that does not constitute Qualifying Usage Revenue.

ALL’s calculation of Qualifying Usage Revenue is presumed accurate, subject to the review process under Section 18.3.

(b) Commission Rates and Qualification

Level 1: Level 1 entitlement requires active enrollment in the Referral Program, completion of applicable KYC/KYB requirements, and continuing compliance with this Addendum. No Device threshold applies to Level 1. The 10% commission rate applies for each calculation period in which these requirements are satisfied.

Level 2: Level 2 Qualification requires at least ten (10) Active Qualified Devices enrolled in the Affiliate’s Level 1 network during the relevant calculation period and continuing compliance with all applicable requirements. The 5% commission rate applies only for calculation periods in which Level 2 Qualification is satisfied. No Level 2 commission is earned for any period in which Level 2 Qualification is not met.

Level 3: Level 3 Qualification requires at least twenty (20) Active Qualified Devices enrolled across the Affiliate’s Level 1 and Level 2 networks combined during the relevant calculation period and continuing compliance with all applicable requirements. The 5% commission rate applies only for calculation periods in which Level 3 Qualification is satisfied. No Level 3 commission is earned for any period in which Level 3 Qualification is not met.

“Active Qualified Device” means an ALL360 Device associated with a Validated Referred User that, during the relevant calculation period, was properly enrolled, satisfied the applicable Uptime Threshold, and was not suspended or terminated, was not a duplicate or improperly enrolled Device, and was not associated with fraudulent or prohibited activity.

Qualification is assessed separately for each calculation period. Failure to qualify during a calculation period does not affect commissions validly earned and finally settled in prior periods, subject to Sections 12.4 and 12.6.

Where an Affiliate does not satisfy the applicable Level 2 or Level 3 qualification requirements, the corresponding amount calculated for allocation purposes is allocated to the Company Referral Pool, as defined in Section 2, and does not accrue to, vest in, or become payable to any Affiliate. No compression, reallocation, or redistribution of the allocated amount to any upline or other Affiliate applies.

11.3 Attribution

Level 1 attribution is determined through referral links, codes, cookies, or other mechanisms approved by ALL, with a default attribution window of thirty (30) days.

Level 2 and Level 3 attribution is determined through referral-chain records maintained by the ALL Control Tower. Those records are presumed accurate unless a manifest technical, attribution, identity, fraud, or Platform error is established through the review process under Section 18.3.

Where attribution cannot reasonably be established from reliable records, no commission is payable. The detailed attribution rules and correction procedures are set out in the Referral Commission Plan.

11.4 Anti-Fraud and Clawbacks

ALL may investigate and temporarily hold, adjust, or reverse provisional commissions, or claw back commissions already paid or otherwise vested, where there is reasonable evidence of fraud, self-referral, duplicate or fake accounts, attribution manipulation, artificial usage, coordinated abuse, breach of these Terms, or violation of applicable law.

An Affiliate is not automatically responsible for every independent act of a Level 2 or Level 3 User. Any adjustment, reversal, or clawback must be reasonably connected and proportionate to the affected activity or revenue.

Clawback and forfeiture are governed by Section 12.6. Detailed anti-fraud procedures are set out in the Referral Commission Plan.

11.5 Territorial Restrictions

The Referral Program and each referral level are available only in jurisdictions expressly enabled by ALL. ALL may restrict, suspend, or discontinue any referral level in any jurisdiction, subject to Section 3. ALL may take immediate action without prior notice where reasonably required by applicable law, regulatory requirements, sanctions, fraud-prevention requirements, a material fraud risk, or a material compliance risk.

In the United Kingdom, Level 2 and Level 3 commissions are available only if and to the extent expressly activated by ALL following completion of the applicable legal and regulatory review. Nothing in these Terms guarantees the availability of any referral level in the United Kingdom.

In the United States, earnings-related marketing requires ALL’s prior written authorisation and must comply with the current Income Disclosure Statement and applicable law.

Country-specific conditions are set out in the Referral Commission Plan or the applicable Regional Annex.

11.6 Review

Disputes regarding attribution, commission calculations, qualification decisions, or enforcement actions may be submitted under the review process in Section 18.3. Payment holds, adjustments, clawbacks, and forfeitures remain subject to Section 12.6.

11.7 Referral Commission Plan and Document Priority

Operational details — including calculation periods, payout thresholds, qualifying services, marketing rules, attribution procedures, Active Qualified Device requirements, Company Referral Pool use, and territorial availability — are governed by the Referral Commission Plan incorporated into these Terms by reference.

In the event of conflict, the Master Terms govern general Platform matters, this Affiliate Addendum governs Affiliate-specific rights and obligations, and the Referral Commission Plan governs operational details. The Referral Commission Plan may not override the Master Terms or this Affiliate Addendum.

Material changes to commission rates, qualification requirements, or payout structures are subject to Section 3 and apply prospectively only.

12. Payment, Wallet, Stablecoins, Fees, and Final Authority

12.1 Wallet Balance – Prepaid Platform Credits and Top-Ups

(a) Prepaid Platform Credits

Wallet Balance represents prepaid platform credits usable solely for eligible Platform services, including App deployments, compute usage, storage, bandwidth, Developer fees, and other Platform charges supported by ALL from time to time. Wallet Balance is denominated in U.S. Dollar equivalent and may be funded or settled using Stablecoins or other payment methods supported by ALL from time to time. Wallet Balance does not represent ownership of any specific Stablecoin, fiat currency, digital asset, or other asset held by ALL or any third-party provider, unless expressly stated otherwise in writing.

(b) Non-Withdrawable Top-Ups – General Rule

Except as expressly provided in these Terms, the Refund & Return Policy, an applicable jurisdiction-specific annex, a separate written agreement, or mandatory applicable law, Wallet Balance credited as a top-up is non-withdrawable and may be used only to purchase or access eligible Platform services. This restriction does not limit any mandatory withdrawal, cancellation, refund, statutory conformity, legal guarantee, consumer guarantee, or other non-waivable right available to Consumers under applicable law. For Consumers, unused Wallet Balance will be handled in accordance with the applicable jurisdiction-specific annex, the Refund & Return Policy, and mandatory law. Wallet Balance is intended for use only within the Platform. You are responsible for monitoring your Wallet Balance and using it for eligible Platform services.

The Refund & Return Policy, published by ALL and incorporated by reference into these Terms, sets forth detailed eligibility requirements, procedural steps, timelines, fees, refund methods, compliance checks, and conditions applicable to refund requests. ALL may modify the Refund Policy from time to time in accordance with Section 3.

(c) No Bank Account; Regulatory Treatment; Regulated Payment Functionality

Wallet Balance is intended to operate solely as a prepaid contractual right to access eligible Platform services. It is not intended to be, and does not constitute, a bank account, deposit account, savings account, investment product, interest-bearing instrument, stored value facility, e-money product, money transmission service, payment institution service, crypto-asset service, payment token service, custodial wallet, or government-insured account. Stablecoin top-ups, legally required refunds, approved refunds, and withdrawals of Payout Balance are available only where permitted by applicable law and only through a payment, virtual asset, payment-token, or other regulated service provider holding the required authorisation, licence, registration, or exemption in the relevant jurisdiction, unless ALL itself holds the required authorisation. ALL does not custody User Stablecoins, operate redeemable User asset balances, or provide payment-token, money transmission, stored value, e-money, or custodial services unless ALL or the relevant authorised provider holds the required authorisation under applicable law. Where ALL receives amounts before final settlement to an authorised provider or before crediting Platform usage rights, ALL will handle such amounts only as permitted by applicable law and solely for the limited purpose of completing the relevant Platform transaction.

Where receipt of Stablecoins, processing of payments, maintenance of Wallet Balance, refunds, withdrawals, payouts, conversion, custody, or transfer requires a payment services licence, stored value facility authorisation, payment token services approval, virtual asset authorisation, or equivalent regulatory authorisation in any jurisdiction, ALL will either structure the relevant feature through an authorised provider or make the feature unavailable in that jurisdiction until the required structure or authorisation is in place. ALL does not offer interest, yield, return, appreciation, investment exposure, or deposit protection on Wallet Balance or any Stablecoin-related functionality.

(d) Scope

This Section 12.1 applies only to Customer and User prepaid Wallet Balance top-ups for Platform usage. Node Operator earnings, Developer revenue share, Affiliate commissions, payout balances, and other amounts earned through the Platform are separate from Wallet Balance and are governed by the applicable role-specific addenda and payout provisions of these Terms.

12.2 Payments

(a) Payment Methods

Payments and payouts may be processed using supported Stablecoins, fiat payment rails, or other payment methods made available by ALL from time to time. A Stablecoin, blockchain network, wallet type, payment rail, or payout method is “supported” only if it is technically supported by the Platform, enabled in the relevant jurisdiction, and permitted under applicable law and the requirements of ALL’s authorised payment, virtual asset, payment-token, or other regulated service providers.

ALL may add, remove, restrict, suspend, or discontinue any Stablecoin, blockchain network, payment method, payout method, or jurisdictional availability where required or advisable for legal, regulatory, sanctions, AML/KYC, tax, banking, payment-processing, fraud-prevention, consumer-protection, or risk-management reasons.

(b) User Responsibility for Wallet Security

You are solely responsible for:

• Securing your external cryptocurrency wallet and private keys;
• Providing correct wallet addresses for deposits and withdrawals;
• Selecting the correct blockchain network (Ethereum, Polygon, Tron, etc.) as specified by ALL;
• Any third-party wallet risks, including loss, theft, or compromise of funds;
• Transaction fees (gas fees, network fees) associated with blockchain transactions.

ALL is not responsible for:

• Loss of funds due to incorrect wallet addresses or network selection;
• Theft, hacking, or compromise of your external wallet;
• Irreversible blockchain transactions (all blockchain transactions are final);
• Delays, failures, or errors caused by blockchain network congestion or technical issues;
• Changes in Stablecoin value or de-pegging events.

(c) Blockchain Transaction Finality

Blockchain transactions are technically final and irreversible once confirmed on the relevant blockchain network. ALL cannot reverse, cancel, recall, or modify the original on-chain transaction.

Where a refund, credit, reversal, or payment adjustment is required under these Terms, the Refund & Return Policy, an applicable jurisdiction-specific annex, a separate written agreement, or mandatory law, such refund or adjustment will be processed as a separate transaction through a supported payment method, supported Stablecoin network, authorised payment provider, or other payment rail made available by ALL.

12.3 Fees and Deductions

ALL may apply the following fees and deductions. Fees are subject to change in accordance with Section 3 of these Terms:

• (a) Withdrawal fees: Charged when you withdraw payouts from the Platform.
• (b) Network fees / gas fees: Blockchain transaction costs required to process deposits and withdrawals.
• (c) Platform processing fees: Administrative or operational fees for transaction processing.
• (d) Percentage-based fees: Applied to payouts, usage revenue, or Affiliate commissions.
• (e) Other deductions: Including taxes, regulatory fees, or third-party service fees.

Fees may be disclosed in the Platform dashboard or Documentation and are incorporated by reference. ALL may modify fees prospectively in accordance with Section 3. Material changes to fees, deductions, payout thresholds, payout timing, revenue share, or compensation formulas will be notified in advance as required under Section 3.2. Immediate fee changes may be applied without prior notice only where required by applicable law, regulatory directive, sanctions obligation, AML/KYC requirement, tax change, blockchain network fee, gas fee, banking charge, chargeback cost, payment reversal, or payment processing provider requirement outside ALL’s reasonable control. Such changes apply prospectively only, unless mandatory law, a payment-network rule, chargeback, tax obligation, court order, regulatory directive, or sanctions obligation requires otherwise.

12.4 Holdbacks, Thresholds, and Payout Timing

(a) Minimum Payout Thresholds

ALL may impose minimum payout thresholds (e.g., minimum balance required before withdrawal is permitted). Thresholds may vary by User role, jurisdiction, or risk profile.

(b) Payout Schedules

Payouts may be processed on a periodic schedule (e.g., weekly, bi-weekly, monthly) as determined by ALL. ALL does not guarantee immediate or on-demand payouts.

(c) Holdback and Reserve Periods

Holdback and reserve periods are temporary protective measures. For ordinary reviews, a holdback may not exceed thirty (30) calendar days per review event.

A holdback may continue for longer only where reasonably required for sanctions compliance, AML/KYC review, fraud prevention, payment processor requirements, chargebacks, payment reversals, tax review, legal process, court order, regulatory directive, law enforcement request, complex technical investigation, or another circumstance covered by Section 12.6. Where legally and operationally permissible, ALL will provide notice of the continued hold and will review the hold at reasonable intervals.

ALL will release held amounts when the relevant review or risk condition is resolved, unless a final adverse payment action is permitted under Section 12.6. Where no valid basis for continued retention exists at the expiry of the applicable thirty (30)-day period, ALL will initiate release of the retained amounts without undue delay and within a reasonable time.

12.5 Metering and Billing Finality

ALL Control Tower’s determinations regarding metering, usage, billing, Wallet Balance deductions, payouts, earnings, commissions, revenue share, refunds, credits, and adjustments are the authoritative Platform records for operational and settlement purposes, subject to correction for confirmed error, manifest error, duplicate billing, fraud, documented ALL Control Tower outage, documented Platform-side technical failure, successful dispute review under Section 18.3, applicable role-specific terms, applicable jurisdiction-specific annexes, and non-waivable rights under mandatory law.

A “confirmed error” means a metering or billing determination that ALL, following a good-faith review initiated by User request under Section 18.3, determines to be materially inaccurate relative to actual verified resource usage, billing records, transaction records, or Platform telemetry.

Unless mandatory law or a separate written agreement provides otherwise, the User must submit a metering or billing dispute within thirty (30) calendar days after the relevant statement, payout record, invoice, or dashboard record becomes available.

12.6 Holds, Reversals, Set-Offs, and Forfeiture

To the extent permitted by applicable law, ALL may immediately freeze, hold, delay, suspend, restrict, or temporarily withhold Wallet Balance, Payout Balance, payouts, earnings, commissions, revenue share, credits, refunds, withdrawals, or pending payments where ALL reasonably determines that such action is necessary for fraud prevention, sanctions compliance, AML/KYC compliance, security, payment disputes, chargebacks, payment reversals, billing or metering errors, legal obligations, regulatory requirements, law enforcement requests, tax compliance, user protection, platform integrity, or enforcement of these Terms or applicable policies. A temporary hold, freeze, withholding, restriction, or delay is a protective measure and does not constitute a final determination of breach, liability, forfeiture, or permanent non-payment. ALL may permanently forfeit, cancel, claw back, reverse, or set off Wallet Balance, Payout Balance, payouts, earnings, commissions, revenue share, credits, refunds, withdrawals, or pending payments only where permitted by applicable law and where: (a) ALL determines, after investigation and final determination, that fraud, illegal activity, sanctions violations, AML/KYC violations, deliberate misuse, payment abuse, chargeback abuse, referral abuse, manipulation, infringement, material breach, or other serious violation has occurred; and (b) the affected amounts are directly connected to the relevant violating activity, transaction, account, App, Node, referral, deployment, use case, or payment flow; or (c) such action is required by a court order, arbitral award, regulatory directive, sanctions obligation, AML/KYC requirement, tax obligation, chargeback, payment reversal, refund obligation, payment processor requirement, or applicable law. Any final adverse payment action must be proportionate and limited to the amounts directly connected to the violation, disputed transaction, legally required reversal, or relevant risk condition. Amounts earned legitimately and unconnected to the relevant violation will not be forfeited solely because of a separate violation, unless required by law or necessary to prevent unlawful payment. Where legally required and where doing so would not compromise fraud prevention, security, sanctions compliance, AML/KYC compliance, law enforcement, regulatory compliance, user safety, payment recovery, or an ongoing investigation, ALL will provide notice and a reasonable opportunity to respond before taking a final adverse payment action. Amounts held, frozen, delayed, withheld, reversed, clawed back, set off, or forfeited do not accrue interest, yield, appreciation, or other return, except where required by mandatory law. In the event of any inconsistency between this Section 12.6 and any other provision of these Terms, role-specific addendum, policy, Documentation, or program rule concerning freezing, withholding, delay, reversal, set-off, clawback, forfeiture, cancellation, or permanent non-payment, this Section 12.6 prevails, subject always to mandatory law and applicable jurisdiction-specific annexes.

12.7 Tax Responsibility

Each User is solely responsible for determining, calculating, reporting, and paying all taxes, duties, levies, and governmental charges arising from their use of the Platform and any earnings, payouts, or economic activity conducted through the Platform, including but not limited to income tax, value-added tax (VAT), goods and services tax (GST), sales tax, withholding tax, self-employment tax, and any other applicable taxes in any relevant jurisdiction. ALL does not provide tax advice and does not withhold, remit, or report taxes on your behalf unless specifically required by applicable law. You are responsible for maintaining accurate records, issuing invoices where required, and filing all necessary tax returns and reports.

13. Data, Privacy and Security

Your use of the Platform is governed by ALL's Privacy Policy and Cookie Policy, both of which are incorporated into these Terms by reference. ALL's Privacy Policy sets out the lawful bases on which ALL processes personal data (which may include, depending on the context, contract performance, legal obligation, legitimate interests, or consent), the categories of data processed, retention periods, and your rights as a data subject. Please review the Privacy Policy at https://all.is.one/legal/privacy before using the Platform. To the extent that processing of your personal data requires your consent under applicable law, such consent will be sought separately and specifically.

13.1 Developer Data Responsibility

Developers are responsible for the data processing carried out by their Apps. Depending on the relevant App, deployment model, applicable Data Processing Agreement (DPA), and Customer instructions, a Developer may act as an independent controller, processor, sub-processor, or joint controller. The applicable App Privacy Policy, DPA, or B2B Platform Agreement will specify the relevant role allocation where required by applicable data protection law.

• (a) Developers must provide a dedicated App Privacy Policy that complies with applicable data protection laws (GDPR, CCPA, UAE PDPL, etc.).
• (b) Developers are responsible for data protection compliance to the extent applicable to their role as controller, processor, sub-processor, joint controller, service provider, or independent provider, including lawful basis, transparency, data subject requests, security, retention, transfers, and processor instructions where applicable.
• (c) ALL is not responsible for Developer data practices or violations of data protection laws by Developer Apps.

13.1A Data Processing Agreements and Role Allocation

Where ALL processes personal data on behalf of a Business Customer, Developer, or other controller, the parties must enter into a Data Processing Agreement before the relevant processing begins. The DPA governs the subject-matter, duration, nature and purpose of processing, categories of personal data and data subjects, controller instructions, security measures, sub-processing, international transfers, assistance, audit, return or deletion, and breach cooperation. Where the parties act as independent controllers or joint controllers, the applicable data sharing or joint-controller terms must be agreed where required by applicable data protection law. No B2B edge network access involving personal data may be enabled until the required DPA, data sharing terms, or joint-controller terms are in place.

13.2 Security Disclaimers and Limitations

(a) ALL360 OS Security Mechanisms

ALL360 OS includes security features such as sandboxing, secure boot, TPM integration, full disk encryption, and access controls. However:

• Security mechanisms are provided on a "best-effort" basis and may not prevent all attacks or vulnerabilities;
• Security measures may be compromised due to zero-day exploits, Node Operator misconduct, hardware defects, or sophisticated attacks;
• ALL does not guarantee that Nodes or the Platform are immune to hacking, malware, data breaches, or unauthorized access.

(b) No Guarantee of Confidentiality, Integrity, or Availability

ALL DOES NOT GUARANTEE:

• Confidentiality of data processed by or stored on Nodes;
• Integrity of data transmitted through the Platform;
• Availability or continuous operation of Nodes or the Platform;
• Prevention of data loss, corruption, or unauthorized disclosure.

ALL does not guarantee absolute security, confidentiality, integrity, or uninterrupted availability. ALL will implement and maintain technical and organizational security measures appropriate to the nature of the Platform, the risks presented, and applicable law. Subject to Section 15 and mandatory law, ALL is not liable merely because a security incident occurs despite the implementation of appropriate technical and organisational measures. Nothing in this Section excludes or limits liability arising from ALL’s breach of its applicable contractual or legal obligations relating to security, confidentiality, incident response, notification, or personal data protection.

(c) User Responsibility for Security

You are solely responsible for:

• Securing your account credentials, passwords, and two-factor authentication;
• Securing your cryptocurrency wallet and private keys;
• Implementing appropriate security measures for data you deploy or process on the Platform;
• Monitoring for suspicious activity and reporting security incidents to ALL.

14. Disclaimers of Warranties

14.1 Disclaimer of All Warranties

Subject to Section 23, applicable jurisdiction-specific annexes, the Terms of Sale, the Warranty Policy, any applicable DPA, and any liability or warranty that cannot be excluded or limited under mandatory law, and only to the maximum extent permitted by applicable law, the Platform, ALL360 Devices, ALL360 OS, ALL Control Tower, Nodes, Apps, marketplace, Documentation, and Platform features are provided on an “as-is” and “as-available” basis. ALL EXPRESSLY DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING BUT NOT LIMITED TO IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT, WARRANTIES OF ACCURACY, RELIABILITY, COMPLETENESS OR TIMELINESS OF DATA OR CONTENT, WARRANTIES OF UNINTERRUPTED, ERROR-FREE OR SECURE SERVICES, WARRANTIES THAT DEFECTS WILL BE CORRECTED OR THAT THE PLATFORM IS FREE FROM VIRUSES OR HARMFUL COMPONENTS, WARRANTIES REGARDING THE PERFORMANCE, UPTIME, AVAILABILITY OR GEOGRAPHIC LOCATION OF NODES, WARRANTIES REGARDING THE LEGALITY, SAFETY, QUALITY OR COMPLIANCE OF ANY APPS PUBLISHED ON THE PLATFORM.

14.2 No Earnings Guarantees

ALL MAKES NO GUARANTEE, REPRESENTATION, WARRANTY, OR PROMISE REGARDING INCOME, EARNINGS, REVENUE, OR PROFITABILITY FROM OPERATING A NODE, PUBLISHING APPS, OR PARTICIPATING IN THE AFFILIATE PROGRAM, NUMBER FREQUENCY, TYPE OR VALUE OF JOBS, DEPLOYMENTS OR USAGE, PRICING STABILITY OR PREDICTABILITY, RETURN ON INVESTMENT OR RECOVERY OF OPERATIONAL COSTS. EARNINGS MAY BE ZERO. YOU MAY OPERATE AT A NET LOSS.

14.3 Third-Party and Distributed Network Disclaimers

ALL IS NOT RESPONSIBLE FOR:

• (a) Third-party Developers, Apps, or content published on the Platform. Developers are independent parties, and ALL does not endorse, guarantee, or assume liability for Developer conduct or App behavior.
• (b) Third-party geolocation data, which may be inaccurate, outdated, or unreliable.
• (c) Third-party blockchain networks, including transaction delays, failures, fee fluctuations, forks, or network outages.
• (d) Third-party wallet providers, including security breaches, loss of funds, or service unavailability.
• (e) Node Operator conduct, Node availability, or Node performance, which are outside ALL's direct control.

14.4 Force Majeure

ALL's liability for delay or non-performance caused by events outside its reasonable control is governed by Section 21.11 of these Terms.

15. Limitation of Liability

15.1 Exclusion of Consequential Damages

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, IN NO EVENT SHALL ALL, ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, CONTRACTORS, OR LICENSORS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO LOSS OF PROFITS, REVENUE, BUSINESS OPPORTUNITIES OR EXPECTED SAVINGS, LOSS OF DATA, GOODWILL OR REPUTATION, BUSINESS INTERRUPTION OR DOWNTIME, COSTS OF SUBSTITUTE SERVICES OR PROCUREMENT ARISING OUT OF OR RELATED TO THESE TERMS, THE PLATFORM, NODES, APPS, OR ANY SERVICES, REGARDLESS OF THE THEORY OF LIABILITY (CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, OR OTHERWISE), AND EVEN IF ALL HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

15.2 Cap on Direct Liability

Subject to Section 15.4, applicable jurisdiction-specific annexes, and any liability that cannot be excluded or limited under applicable law, ALL's total aggregate liability for any and all claims arising out of or related to these Terms, the Platform, Apps, Nodes, or Services will not exceed the greater of:

(a) USD $100; or

(b) The total amounts actually paid by you to ALL for the Platform or Services during the twelve (12) months immediately preceding the event giving rise to the claim; whichever is higher.

For Business Customers operating under a negotiated B2B Platform Agreement, liability caps may be separately specified in that agreement. In the absence of a specific agreement, the cap above applies. For claims arising out of or in connection with activities governed by the Node Operator Master Agreement, the liability cap and calculation rules in Section 13.2 of that agreement apply in place of, and not in addition to, the general cap above, subject to Section 15.4 and applicable jurisdiction-specific annexes.

For Node Operators, Developers, Affiliates, and other Users who receive earnings, commissions, payouts, or revenue share, liability limitations applicable to such amounts are set forth in the applicable role-specific agreement. For Consumers (as defined in Section 2), these liability limitations do not apply where they would conflict with mandatory consumer protection law. Consumers retain all statutory rights and remedies under applicable law. For hardware defects in the ALL360 Device, ALL's liability is governed by the Warranty Policy, Terms of Sale, and applicable statutory warranties.

15.3 Acknowledgment of Risk

You acknowledge and agree that You use the Platform at your own risk, You have evaluated the risks and benefits of using the Platform and have determined that the benefits outweigh the risks, the disclaimers and limitations in these Terms are fundamental elements of the bargain between you and ALL and that ALL would not provide the Platform without these limitations.

15.4 Jurisdictional Limitations

Some jurisdictions do not allow the exclusion or limitation of certain warranties or liabilities. In such jurisdictions, the above exclusions and limitations shall apply to the maximum extent permitted by law, and you may have additional statutory rights. Nothing in these Terms excludes or limits ALL's liability for:

(a) Death or personal injury caused by ALL's negligence;

(b) Fraud or fraudulent misrepresentation;

(c) Gross negligence or willful misconduct;

(d) Any other liability that cannot be excluded or limited under applicable mandatory law.

16. Indemnification

16.1 Your Indemnification Obligations

You agree to indemnify, defend (at ALL's option), and hold harmless ALL, its parent, subsidiaries, affiliates, officers, directors, employees, agents, contractors, licensors, and service providers (collectively, "ALL Parties") from and against any and all claims, demands, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees and court costs) arising out of or related to:

• (a) Your use or misuse of the Platform;
• (b) Your breach of these Terms or any representation, warranty, or covenant;
• (c) Your violation of any applicable law, regulation, or third-party right;
• (d) Your content, data, or Apps;
• (e) Your operation of a Node, including ISP complaints, legal notices, or regulatory actions;
• (f) Infringement or misappropriation of intellectual property rights;
• (g) Privacy, data security, or data protection violations;
• (h) User disputes, complaints, or claims related to your activity on the Platform;
• (i) Your fraud, negligence, willful misconduct, or illegal activity.

For Consumers, this indemnity applies only to the extent permitted by mandatory consumer protection law and only for losses caused by the Consumer’s unlawful conduct, fraud, wilful misconduct, negligence, or material breach of these Terms. You are not required to indemnify ALL for losses to the extent caused by ALL’s own breach, negligence, fraud, gross negligence, wilful misconduct, or any matter for which indemnity cannot be required under mandatory law.

16.2 Survival

This indemnification obligation survives termination of these Terms and your use of the Platform.

17. Governing Law and Dispute Resolution

17.1 Governing Law

These Terms and any dispute arising out of or relating to these Terms or the Platform shall be governed by and construed in accordance with the laws of the Republic of Panama, without regard to its conflict-of-laws principles.

The parties expressly agree that the substantive laws of Panama apply notwithstanding that the seat of arbitration is Dubai, United Arab Emirates.

Nothing in this Section deprives a Consumer or any other User of the protection of mandatory laws that cannot validly be excluded by contractual choice of law.

17.2 Binding Arbitration and Class Action Waiver

(a) Agreement to Arbitrate

To the fullest extent permitted by applicable law, you and ALL agree that any dispute shall be resolved through final and binding arbitration in accordance with Section 17.2(b), rather than through court proceedings, except as expressly provided in this Section.

This arbitration agreement does not apply to a Consumer or other User to the extent that mandatory law prohibits pre-dispute arbitration, requires the User’s separate consent after the dispute has arisen, or otherwise renders the arbitration agreement invalid or unenforceable.

Nothing in this Section prevents either party from:

(i) seeking urgent, interim, conservatory, or injunctive relief from a court of competent jurisdiction;

(ii) applying to a competent court for the recognition, enforcement, or setting aside of an arbitral award; or

(iii) bringing a claim before a small-claims court, consumer authority, regulatory authority, or other competent body where such right cannot lawfully be excluded.

Seeking such relief does not constitute a waiver of this agreement to arbitrate.

(b) Arbitration Rules and Forum

Any dispute arising out of or in connection with these Terms, including any question regarding their existence, validity, interpretation, performance, breach, or termination, shall be referred to and finally resolved by arbitration under the Arbitration Rules of the Dubai International Arbitration Centre (“DIAC”), which Rules are deemed incorporated into this Section.

The seat, or legal place, of arbitration shall be Dubai, United Arab Emirates, excluding the Dubai International Financial Centre unless the parties expressly agree otherwise in writing.

The language of the arbitration shall be English.

The tribunal shall consist of one (1) arbitrator, unless the parties agree to three (3) arbitrators or the DIAC Arbitration Court determines, in accordance with the DIAC Arbitration Rules, that three (3) arbitrators are appropriate having regard to the complexity, value, or other circumstances of the dispute.

The substantive law governing these Terms and the merits of the dispute shall be the law of the Republic of Panama, as provided in Section 17.1.

The arbitration agreement contained in this Section shall be governed by the law of the seat of arbitration, subject to any mandatory law applicable to the arbitration agreement.

(c) CLASS ACTION WAIVER

TO THE FULLEST EXTENT PERMITTED BY APPLICABLE LAW, YOU AND ALL AGREE THAT EACH PARTY MAY BRING CLAIMS AGAINST THE OTHER ONLY IN AN INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF, CLAIMANT, OR CLASS MEMBER IN ANY PURPORTED CLASS, REPRESENTATIVE, MASS, OR COLLECTIVE PROCEEDING.

Unless both parties agree otherwise in writing:

(i) no arbitration or proceeding may be joined, consolidated, or combined with another proceeding;

(ii) no arbitrator or court may preside over any class, representative, mass, or collective proceeding; and

(iii) an arbitrator may award relief only in favour of the individual party seeking relief and only to the extent necessary to resolve that party’s individual claim.

This waiver does not apply to Consumers or other Users to the extent that it would be invalid, unfair, unenforceable, or contrary to mandatory collective-redress, representative-action, consumer-protection, employment, platform-work, data-protection, competition, or public-law rules applicable in the relevant jurisdiction.

(d) Costs of Arbitration

The fees and costs of the arbitration, including DIAC administrative fees, tribunal fees and expenses, legal costs, expert costs, and other recoverable expenses, shall be determined and allocated by the tribunal in accordance with the DIAC Arbitration Rules and applicable law.

The tribunal may take into account the outcome of the dispute, the parties’ conduct, procedural efficiency, proportionality, and any other relevant circumstances when allocating costs.

Nothing in this Section requires a Consumer or other User to bear arbitration costs that mandatory law requires ALL to pay or that would make access to a remedy prohibitively expensive.

18. Enforcement, Investigations, and Remedies

18.1 Investigations and Cooperation

ALL may conduct investigations into suspected violations, which may include:

• (a) Requesting additional information, documentation, or verification from you;
• (b) Accessing logs, telemetry, device state, or account activity;
• (c) Consulting with third-party experts, forensic analysts, or legal counsel;
• (d) Freezing funds or restricting access during the investigation.

You agree to cooperate fully with ALL's investigations and to provide requested information in a timely manner. Failure to cooperate may result in account suspension or termination.

18.2 Final Decision Authority

ALL’s enforcement decisions take effect when communicated and remain effective unless modified or reversed through the review process under Section 18.3, by a competent authority, court, or arbitral tribunal, or as otherwise required by applicable law. Where required by applicable law — including the EU Digital Services Act — ALL will provide a statement of reasons for any content moderation, account suspension, App delisting, or termination decision, explaining the factual basis and the policy ground for the decision, in a manner that allows the affected user to understand and contest it.

For decisions outside the scope of DSA mandatory statement of reasons, ALL will provide a summary explanation where operationally possible, subject to legal restrictions on disclosure (including ongoing investigations, law enforcement requests, or confidentiality obligations). ALL's discretionary decisions on platform integrity, security, and risk management may be communicated in summary form without full reasoning disclosure.

18.3 Support-Based Review Process for Enforcement Actions

If your account is suspended, your Node is disabled, your App is delisted, payouts are frozen or withheld, or you believe an enforcement action was taken in error, you may request review through the Platform dashboard or support channel and provide supporting evidence.

ALL will review the request in good faith and may uphold, modify, or reverse the decision. Any payment hold, forfeiture, clawback, set-off, or permanent non-payment remains subject to Section 12.6.

Where required by applicable law, including the EU Digital Services Act, ALL will provide access to the applicable internal complaint-handling process, statement of reasons, redress information, and any available certified out-of-court dispute settlement mechanism. Nothing in this Section limits any mandatory court, regulatory, consumer, data protection, employment, platform-work, or public-law remedy.

18.4 Abuse Reports and Mandatory Response Timelines

ALL maintains an Abuse Response Policy governing how ALL receives and responds to reports of misuse of the Platform, including misuse of the ALL edge network. Reports may be submitted by Node Operators, third parties, ISPs, regulators, or law enforcement. High-Risk Network Abuse. Where ALL receives a credible third-party report, ISP notice, regulator notice, law-enforcement request, metadata signal, security signal, payment-risk signal, or other non-content-based indication of high-risk network abuse — including CSAM-related abuse reports, terrorism-related abuse reports, DDoS origination, large-scale fraud, active law enforcement or regulatory demand, ISP suspension notice, or UAE Cybercrime Law risk — ALL will use commercially reasonable efforts to take preventive action within one (1) hour for Platform components under its control, including suspension of the relevant Node, Business Customer account, service category, use-case, App deployment, or jurisdiction. Immediate suspension is a temporary protective measure and does not require completion of a full investigation. Any final adverse payment action is governed by Section 12.6. Standard Abuse Response. ALL's target response commitments for all other abuse reports are: (a) acknowledgement within twenty-four (24) hours of receipt; (b) initial triage within three (3) business days; (c) resolution, rejection, escalation, or interim update within ten (10) business days, unless the matter is complex or requires external information; and (d) periodic updates where legally permitted and operationally appropriate. ALL may shorten these timelines where required by law, platform safety, regulatory urgency, or the nature of the reported harm. Consistent with the requirements of Regulation (EU) 2022/2065 (Digital Services Act), where applicable, ALL will process notices in a timely, diligent, non-arbitrary, and objective manner and will provide the notifying party with a statement of the decision taken, including information on the possibility of redress where required by law.

19. Intellectual Property Rights

19.1 ALL's Intellectual Property

ALL and its licensors own all rights, title, and interest in and to the Platform, including ALL Platform website, dashboard, and user interfaces, ALL Control Tower software, infrastructure, and algorithms, ALL360 OS and ALL360 Device firmware, ALL trademarks, logos, branding, and service marks, Documentation, help materials, and content published by ALL, data, analytics, and insights derived from Platform usage.

No title or ownership rights are transferred to you. Your use of the Platform does not grant you any intellectual property rights except the limited licenses expressly set forth in these Terms.

19.2 Limited License to Use the Platform

Subject to your compliance with these Terms, ALL grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to:

• (a) Access and use the Platform for its intended purposes;
• (b) Use ALL360 OS on your ALL360 Device (for Node Operators);
• (c) Publish and distribute Apps through the Platform (for Developers);
• (d) Deploy and use Apps (for Customers).

This license does not permit you to modify, reverse-engineer, decompile, or disassemble the Platform or ALL360 OS, remove or obscure proprietary notices, trademarks, or copyright notices, use the Platform for any purpose not expressly authorized by these Terms, sublicense, sell, rent, or transfer your access rights. ALL may revoke this license at any time upon your breach of these Terms.

19.3 User Content and Apps

You retain ownership of content, data, and Apps you submit to the Platform ("User Content"), subject to the licenses you grant to ALL and other Users.

By submitting User Content, you grant ALL a worldwide, royalty-free, sublicensable, transferable license to:

• (a) host, store, reproduce, and display your User Content as necessary to operate the Platform;
• (b) Distribute your Apps to Nodes and Customers;
• (c) Use anonymized, aggregated data derived from your usage for analytics, research, and service improvement.

You represent and warrant that you own or have the necessary rights to grant these licenses and that your User Content does not infringe any third-party rights.

19.4 DMCA and Copyright Infringement

If you believe content on the Platform infringes your copyright, please submit a notice to ALL’s designated copyright contact at [email protected].

ALL respects intellectual property rights and, where applicable, processes copyright infringement notices in accordance with the Digital Millennium Copyright Act (DMCA) and other applicable intellectual property notice-and-action regimes. The detailed notice, counter-notice, and repeat-infringement procedures are set out in ALL's Abuse Response Policy.

20. Termination and Survival

20.1 Termination by ALL

ALL may terminate or suspend your account, any role, or your access to the Platform in accordance with these Terms. Where termination is for cause — including breach, fraud, illegal activity, serious policy violation, tampering, sanctions risk, legal or regulatory requirement, or critical security risk — ALL may act immediately and without advance notice. Where termination is without cause, ALL will provide reasonable advance notice, and for Node Operators with an active Node and pending or recent earnings, at least thirty (30) days’ advance notice where legally and operationally practicable.

For all other roles, ALL may terminate for convenience with reasonable notice having regard to the circumstances.

• (a) Breach of these Terms or any policy;
• (b) Fraud, illegal activity, serious policy violations, tampering, or sanctions risk;
• (c) Prolonged inactivity;
• (d) Legal or regulatory requirement;
• (e) Discontinuation of services or features;
• (f) Credible and specific risk to Platform security, stability, legal compliance, sanctions compliance, abuse prevention, or platform integrity.

“Prolonged inactivity” means a period of twelve (12) consecutive months during which you do not log into your account, operate an active Node, deploy or use Apps, receive or request payouts, maintain an active Wallet Balance, or otherwise engage in Platform activity, as determined by ALL.

20.2 Termination by You

You may terminate your account at any time by contacting ALL support and requesting account closure or following the account deletion process in the Platform dashboard (if available).

Upon termination by you, your access to the Platform will cease. Pending payouts, withdrawals, refunds, unused Wallet Balance, and any applicable fees or deductions will be handled in accordance with Section 12, Section 20.3, any applicable jurisdiction-specific annex, and mandatory applicable law.

20.3 Effects of Termination

Upon termination of your account: Notwithstanding anything in this Section 20.3, nothing in these Terms limits, excludes, or waives any mandatory statutory right, consumer guarantee, legal guarantee, product conformity right, right of withdrawal, or other non-waivable statutory protection to which you may be entitled under the laws of your jurisdiction of habitual residence, regardless of your role on the Platform. The role-specific provisions below govern the operational consequences of termination and do not restrict mandatory statutory rights. Consumers (as defined in Section 2) retain all statutory rights and remedies under applicable mandatory law.

(a) For Node Operators:

• The ALL360 Device remains your property (ALL does not require return of hardware);
• Node services will cease immediately or upon next connection to ALL Control Tower;
• Pending payouts may be delayed, frozen, or forfeited pending compliance review (see Section 12.6);
• Commercial support may terminate, subject always to any mandatory statutory warranty, legal guarantee, consumer guarantee, or product conformity rights that continue to apply under applicable law.

(b) For Developers:

• Your Apps will be delisted from the store and removed from Nodes (subject to offline Node delays);
• Pending revenue share payouts may be withheld or forfeited as described in Section 12.6.

(c) For Customers:

● All active App deployments may be terminated, suspended, or evicted;

● Unused Wallet Balance will be handled in accordance with Section 12, applicable jurisdiction-specific annexes, and mandatory law;

● Refunds or credits are not guaranteed except where expressly provided in these Terms, an applicable annex, a separate written agreement, or mandatory law.

(d) For Affiliates:

• Referral links will be deactivated;
• Pending commissions may be withheld or forfeited strictly in accordance with Section 12.6.

20.4 Survival

Any provision that by its nature should survive termination will survive, including Sections 5, 6, 8.5, 8.6, 8.8(f), 10.3, 12, 13, 14, 15, 16, 17, 18 for pending investigations or disputes, 19, 20.3, 20.4, 21.9, 21.11, 23, and any applicable jurisdiction-specific annex, policy, DPA, B2B Platform Agreement, or role-specific obligation that must continue for legal, regulatory, payment, tax, security, audit, dispute, or enforcement purposes.

21. General Provisions

21.1 Entire Agreement

These Terms, together with the Privacy Policy, Acceptable Use Policy, role-specific addenda, Terms of Sale, and any other policies or Documentation expressly incorporated by reference, constitute the entire agreement between you and ALL regarding the Platform and supersede all prior or contemporaneous understandings, agreements, representations, and warranties.

21.2 Severability

If any provision of these Terms is found to be invalid, illegal, or unenforceable by a court or arbitrator, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it enforceable, or if that is not possible, severed from these Terms.

21.3 Waiver

ALL's failure to enforce any right or provision of these Terms shall not constitute a waiver of that right or provision. Any waiver must be in writing and signed by an authorized representative of ALL.

21.4 Assignment

You may not assign, transfer, or delegate these Terms or your rights and obligations without ALL's prior written consent. ALL may freely assign these Terms and its rights and obligations to any affiliate, successor, or purchaser of all or substantially all of its business or assets.

21.5 No Third-Party Beneficiaries

These Terms do not create any third-party beneficiary rights except as expressly stated.

21.6 Notices

ALL may provide notices to you:

• (a) By email to the address associated with your account;
• (b) By posting on the Platform dashboard or website;
• (c) By in-app notification or banner;
• (d) By any other method permitted by law.

You agree that electronic notices satisfy any legal requirement that notices be in writing.

You must send notices to ALL by email to [email protected].

21.7 Relationship of the Parties

Nothing in these Terms creates a partnership, joint venture, agency, employment, or fiduciary relationship between you and ALL. You are an independent contractor with respect to your use of the Platform.

21.8 Export Compliance

You represent and warrant that you are not located in a country subject to a U.S. Government embargo or designated as a "terrorist supporting" country, and you are not listed on any U.S. Government list of prohibited or restricted parties.

You agree to comply with all applicable export control and sanctions laws, including the U.S. Export Administration Regulations, OFAC sanctions, UAE export control and sanctions regulations, United Nations Security Council resolutions and sanctions regimes, and all other applicable export control, dual-use goods, and sanctions frameworks in jurisdictions where ALL, you, or your hardware resources operate.

21.9 Devices and Warranty

The ALL360 Device is subject to a separate Warranty Policy, which sets out any warranty coverage, exclusions, limitations, and claim procedures.

ALL may introduce new device models or variants, modify specifications/features, change pricing, promotions, discounts, availability, or discontinue device models at any time. ALL provides no price protection, retroactive discounts, or compensation for prior purchases made before any price changes or promotions, except as required by mandatory law.

21.10 Language

These Terms are drafted in the English language. If these Terms are translated into any other language, the English version shall prevail in case of conflict.

21.11 Force Majeure

ALL shall not be liable for any delay or failure to perform its obligations under these Terms to the extent caused by circumstances beyond ALL's reasonable control, including but not limited to: acts of God, natural disasters, earthquakes, floods, fire, or extreme weather events; acts of war, armed conflict, terrorism, civil unrest, riots, or insurrection; epidemics, pandemics, or public health emergencies declared by a governmental authority; actions or orders of any government, regulatory authority, or court, including sanctions, trade restrictions, or mandated shutdowns; internet, telecommunications, or electrical infrastructure failures not attributable to ALL's own systems; large-scale cyberattacks, denial-of-service attacks, or critical infrastructure failures affecting the Platform or its third-party providers; or any other event outside ALL's reasonable control ('Force Majeure Event'). ALL will notify affected Users as soon as reasonably practicable upon becoming aware of a Force Majeure Event that affects its ability to perform, and will use commercially reasonable efforts to resume performance. If a Force Majeure Event continues for more than 30 consecutive days, either party may terminate any affected service arrangement by written notice, without liability to the other party, subject to payment obligations already incurred. This clause does not excuse payment obligations that have already fallen due prior to the Force Majeure Event.

22. Contact Information

If you have questions, concerns, or disputes regarding these Terms or the Platform, please contact ALL at:

All360 Technology S.A.

Registered office: [●]

Email: [email protected]

23. Jurisdiction-specific Terms and Consumer Protections

23.1 Application of Jurisdiction-Specific Annexes

Certain Users may be entitled to mandatory consumer protection rights or other non-waivable statutory rights under the laws of their jurisdiction of habitual residence. Where applicable, the jurisdiction-specific annexes attached to these Terms form an integral part of these Terms and apply in addition to these Master Terms.

23.2 Consumer Status

The term “Consumer” is defined in Section 2 of these Terms. For purposes of any jurisdiction-specific annex, the definition in Section 2 applies as informed by the mandatory law of the User’s jurisdiction of habitual residence.

23.3 Priority of Applicable Annexes

If you are a Consumer with habitual residence in the European Economic Area, the United Kingdom, or another jurisdiction for which ALL has published a jurisdiction-specific annex, the corresponding annex applies to you. If any provision of an applicable jurisdiction-specific annex conflicts with any provision of these Master Terms, any role-specific Addendum, or any incorporated policy, the applicable annex prevails to the extent of the conflict. Provisions of these Master Terms that are not inconsistent with the applicable annex continue to apply.

23.4 Mandatory Consumer Rights

Nothing in these Terms limits, excludes, or waives any mandatory statutory right, remedy, guarantee, warranty, or protection that you have as a Consumer under the laws of your jurisdiction of habitual residence. Where mandatory consumer protection laws of your jurisdiction of habitual residence provide greater protection than these Terms, those mandatory provisions apply to the extent required by law.

23.5 Business Users

If you use the Platform on behalf of an entity, in connection with a trade, business, craft, profession, or other commercial activity, you are not treated as a Consumer for purposes of these Terms. In that case, the jurisdiction-specific consumer annexes do not apply to you, except where mandatory law provides otherwise.

23.6 Updates to Annexes

ALL may publish, update, replace, or supplement jurisdiction-specific annexes from time to time to reflect changes in applicable law, regulatory requirements, Platform operations, or business practices. Where required by applicable law, ALL will provide notice of material changes or request renewed acceptance.

23.7 No Limitation of Local Law

The choice of governing law, arbitration forum, venue, limitation of liability, warranty disclaimer, refund restriction, payout rule, or any other provision in these Terms does not limit or exclude any non-waivable protection available to Consumers under applicable mandatory law.

Annex A — EU/EEA CONSUMER PROVISIONS

A.1 Application

This Annex applies to you if you are a Consumer with habitual residence in a Member State of the European Economic Area (EEA). To the extent any provision of this Annex conflicts with any other provision of the Master Terms or any role-specific Addendum, this Annex prevails for Users to whom it applies.

A.2 Definition of Consumer

A “Consumer” means a natural person acting for purposes outside their trade, business, craft, or profession, as defined under Directive 2011/83/EU and the implementing legislation in your jurisdiction.

A.3 Right of Withdrawal (Cooling-off Period)

(a) Pursuant to Directive 2011/83/EU on Consumer Rights, you have the right to withdraw from your contract with ALL within fourteen (14) calendar days from (i) the day the ALL360 Device is delivered to you (for the device purchase) or (ii) the day the contract for digital services is concluded (for Platform services). (b) To exercise your right of withdrawal, you must inform ALL by an unequivocal statement (e.g., a letter sent by post or email to the addresses set out in Section 22) of your decision to withdraw. You may use the model withdrawal form available at https://all.is.one/legal/withdrawal-form. (c) Digital services and Wallet Balance. If you expressly request or consent to immediate performance of digital services before the expiry of the withdrawal period and acknowledge the legal consequences, you may lose the right of withdrawal for services fully performed and may be required to pay proportionately for services partially performed, to the extent permitted by applicable law. A Wallet Balance top-up credited to your account is not treated as a service fully performed merely because it has been credited. Unused Wallet Balance credited as a top-up remains subject to Section A.4 and your mandatory rights under applicable law, unless and until it has been applied to eligible Platform services. (d) Hardware (ALL360 Device). The right of withdrawal applies fully to the device purchase. You must return the device within 14 days of communicating your withdrawal. You may be liable for any diminished value of the device resulting from handling beyond what is necessary to establish the nature, characteristics, and functioning of the device, to the extent permitted by applicable law. ALL will reimburse the device purchase price and, where applicable, the cost of the least expensive standard delivery method offered by ALL at the time of purchase (excluding return shipping costs, where you bear them under applicable law).

A.4 Wallet Balance — Right of Refund

Notwithstanding Section 12.1(b) and Section 20.3(c) of the Master Terms, where you are a Consumer in the EEA: (a) Unused Wallet Balance is refundable on account closure. Upon termination of your account by you or by ALL (other than for fraud, sanctions, AML violations, or other unlawful conduct confirmed after investigation), any unused Wallet Balance shall be refunded to you in the original payment method or, where impractical, in equivalent Stablecoin to a wallet address you specify, within thirty (30) days of account closure. (b) Administrative fee. ALL may apply a reasonable administrative fee for refund processing, not exceeding the actual cost of processing, in accordance with applicable consumer protection law. (c) Forfeiture limited to confirmed wrongdoing. Forfeiture of Wallet Balance under Section 12.6 of the Master Terms applies only after confirmed investigation and determination of fraud, illegal activity, or material breach of these Terms, with the User given a reasonable opportunity to respond to the allegations.

A.5 Statutory Consumer Guarantees and Warranties

(a) Hardware warranty. The ALL360 Device benefits from the statutory legal guarantee of conformity under Directive (EU) 2019/771 and the applicable national implementing law in your jurisdiction of habitual residence. This statutory legal guarantee applies for at least two (2) years from delivery, or for any longer period required by applicable national law, and applies in addition to, and independently of, any commercial warranty offered by ALL. (b) Digital services warranty. Platform services and digital content benefit from the statutory legal guarantee of conformity under Directive (EU) 2019/770 and the applicable national implementing law in your jurisdiction of habitual residence. ALL is liable for any lack of conformity for the period required under applicable national implementing law. (c) Remedies. In case of non-conformity, you are entitled to repair or replacement for hardware, bringing into conformity for digital services, price reduction, or termination of the contract with refund, in accordance with the hierarchy of remedies established by applicable law.

A.6 Unfair Contract Terms

The provisions of the Master Terms shall be interpreted and applied in accordance with Directive 93/13/EEC on unfair terms in consumer contracts. Any provision found by a competent court or authority to be unfair within the meaning of this Directive shall not be binding on you, while the remainder of the Master Terms shall continue to apply.

A.7 Governing Law and Jurisdiction for Consumers

(a) Notwithstanding Section 17.1 of the Master Terms, where you are a Consumer in the EEA, your contract with ALL shall be governed by the law of your jurisdiction of habitual residence to the extent that such law contains mandatory consumer protection provisions, in accordance with Article 6 of Regulation (EC) No 593/2008 (Rome I). (b) You may bring proceedings against ALL before the courts competent under the mandatory consumer-jurisdiction rules applicable in your jurisdiction of habitual residence. ALL may bring proceedings against you only before the courts permitted by those same mandatory rules. (c) Arbitration is optional for Consumers. Arbitration under Section 17.2 of the Master Terms is offered as an alternative for Consumers in the EEA but is not mandatory. Submission to arbitration requires your express, post-dispute, written consent.

A.8 Class Action and Collective Redress

The class action waiver in Section 17.2(c) of the Master Terms does not apply to you to the extent that it would prevent you from participating in collective redress proceedings expressly authorized under Directive (EU) 2020/1828 on representative actions or under the national law of your jurisdiction.

A.9 Limitation of Liability — Consumer Floor

Notwithstanding Section 15 of the Master Terms: (a) ALL does not exclude or limit its liability for (i) death or personal injury caused by ALL's negligence, (ii) fraud or fraudulent misrepresentation, (iii) any other liability that cannot be excluded or limited under applicable consumer protection law. (b) For other damages, ALL's liability is limited to damages that were foreseeable at the time of contract conclusion as a typical consequence of the breach, in accordance with national contract law principles.

A.10 Alternative Dispute Resolution and Consumer Redress

Consumers may have access to consumer protection authorities, courts, and alternative dispute resolution mechanisms in their Member State of habitual residence, in accordance with applicable national law. ALL’s contact email for consumer complaints is [email protected]. ALL is not obliged to participate in an ADR procedure unless required by applicable law, but may do so voluntarily or where required.

A.11 Stablecoin Payments — Consumer Disclosures

(a) Stablecoin payments, refunds, and payouts are available only where supported by ALL, permitted by applicable law, and processed through an authorised provider or other lawful payment rail in accordance with Section 12. (b) You acknowledge that Stablecoin payments involve risks, including blockchain transaction finality, incorrect wallet address or network selection, transaction fees, network congestion, potential de-pegging or volatility, and absence of deposit insurance or bank-style protection. (c) Where you are entitled to a refund under this Annex or applicable law, ALL will, at your option, refund either (i) in equivalent supported Stablecoin to a wallet address you specify, or (ii) in EUR via bank transfer to a SEPA-eligible account, at the prevailing exchange rate on the date of refund. Reasonable and documented conversion or transfer fees may be deducted to the extent permitted by applicable law. (d) Nothing in the Master Terms or this Annex shall be construed as limiting or preventing you from exercising your statutory consumer rights solely because the contract is denominated, paid, or settled in Stablecoins.

A.12 Digital Content and Digital Services Conformity (Directive 2019/770)

(a) Where ALL provides digital content or digital services to Consumers in the EU/EEA under these Terms (including access to the ALL Platform as a service), ALL warrants that such digital content and services conform to the requirements of Directive (EU) 2019/770 on contracts for the supply of digital content and digital services ('Digital Content Directive'), as implemented in applicable Member States. (b) Conformity means that the digital service: (i) is of the description, quantity, and quality, and possesses the functionality, compatibility, interoperability, and other features as described in these Terms and related documentation; (ii) is fit for any purpose communicated by you to ALL before conclusion of the contract; and (iii) is supplied with all agreed updates, including security updates, required to maintain conformity. (c) Where the digital service does not conform, you are entitled to: first, have the service brought into conformity (repair or replacement, as applicable); and if conformity cannot be achieved within a reasonable time or without significant inconvenience to you, a proportionate reduction in price or termination of the contract with a refund of amounts paid, subject to mandatory local law. (d) The conformity period for continuous digital services is the duration of the contract. For one-off digital content, the conformity period is two (2) years from supply, unless mandatory local law provides a longer period. (e) This clause does not apply to B2B Users, to free-tier services where no price is paid and no personal data is provided or undertaken to be provided, except for personal data processed solely to supply the digital service or comply with legal requirements, or to the ALL360 Device hardware, which is governed by the statutory goods conformity provisions of this Annex.

Annex B — United Kingdom Consumer Provisions

B.1 Application

This Annex applies to you if you are a Consumer with habitual residence in the United Kingdom (England, Wales, Scotland, or Northern Ireland). To the extent any provision of this Annex conflicts with any other provision of the Master Terms or any role-specific Addendum, this Annex prevails for Users to whom it applies.

B.2 Definition of Consumer

For purposes of this Annex, a “Consumer” means an individual acting for purposes wholly or mainly outside that individual's trade, business, craft, or profession, as defined under Section 2 of the Consumer Rights Act 2015.

B.3 Right of Cancellation (Cooling-off Period)

(a) Pursuant to the Consumer Contracts (Information, Cancellation and Additional Charges) Regulations 2013, you have the right to cancel your contract with ALL within fourteen (14) calendar days from (i) the day after the ALL360 Device is delivered to you (for the device purchase) or (ii) the day after the contract for digital services is concluded (for Platform services), without giving any reason. (b) To exercise your right of cancellation, you must inform ALL of your decision to cancel by a clear statement (e.g., a letter sent by post or email to the addresses set out in Section 22). You may use the model cancellation form available at https://all.is.one/legal/withdrawal-form. (c) Digital services and Wallet Balance. If you expressly request or consent to immediate performance of digital services before the expiry of the cancellation period and acknowledge the legal consequences, you may lose the right to cancel for services fully performed and may be required to pay proportionately for services partially performed, to the extent permitted by applicable UK law. A Wallet Balance top-up is not treated as fully performed merely because it has been credited to your account; unused Wallet Balance remains subject to Section B.4 and mandatory law. (d) Hardware (ALL360 Device). The right of cancellation applies to the device purchase. You must return the device within 14 days of communicating your cancellation. You may be liable for any diminished value of the device resulting from handling beyond what is necessary to establish the nature, characteristics, and functioning of the device, to the extent permitted by applicable law. ALL will reimburse the device purchase price and any standard delivery costs paid by you within 14 days of receiving the returned device or evidence of return shipment, whichever is earlier. You may bear the direct cost of return shipping unless ALL agrees otherwise or mandatory law provides otherwise.

B.4 Wallet Balance — Right of Refund

Notwithstanding Section 12.1(b) and Section 20.3(c) of the Master Terms, where you are a Consumer in the United Kingdom: (a) Unused Wallet Balance is refundable on account closure. Upon termination of your account by you or by ALL (other than for fraud, sanctions, AML violations, or other unlawful conduct confirmed after investigation), any unused Wallet Balance shall be refunded to you in the original payment method or, where impractical, in equivalent Stablecoin to a wallet address you specify, within thirty (30) days of account closure. (b) Administrative fee. ALL may apply a reasonable administrative fee for refund processing, not exceeding the actual cost of processing, in accordance with applicable consumer protection law. (c) Forfeiture limited to confirmed wrongdoing. Forfeiture of Wallet Balance under Section 12.6 of the Master Terms applies only after confirmed investigation and determination of fraud, illegal activity, or material breach of these Terms, with the User given a reasonable opportunity to respond to the allegations.

B.5 Statutory Consumer Rights and Warranties (Consumer Rights Act 2015)

(a) Goods (ALL360 Device). Under the Consumer Rights Act 2015, the ALL360 Device must be (i) of satisfactory quality, (ii) fit for any particular purpose made known to ALL at the time of purchase, and (iii) as described. (b) Short-term right to reject. If the ALL360 Device does not meet these statutory requirements, you have the right to reject the device and obtain a full refund within thirty (30) days of delivery. (c) Right to repair or replacement. After the 30-day short-term right to reject expires, you are entitled to a repair or replacement of the device within a reasonable time and without significant inconvenience, at no cost to you. (d) Final right to reject and right to price reduction. If repair or replacement fails to remedy the non-conformity, or if such remedies are impossible or disproportionate, you are entitled to either a price reduction or to reject the device and obtain a refund (which may be reduced to reflect use of the device after the first six months). (e) Digital content and services. Platform services and digital content supplied by ALL must be of satisfactory quality, fit for purpose, and as described, in accordance with Chapter 3 of Part 1 of the Consumer Rights Act 2015. In case of non-conformity, you are entitled to have the digital content or service brought into conformity, or to a price reduction or refund where provided by applicable law. (f) Limitation periods. Statutory claims may be brought within six (6) years in England, Wales, and Northern Ireland (Limitation Act 1980) or five (5) years in Scotland (Prescription and Limitation (Scotland) Act 1973) from the date the cause of action accrued. (g) Statutory rights additional to commercial warranty. The statutory rights described in this Section B.5 apply in addition to, and independent of, any commercial warranty offered by ALL under the Warranty Policy or otherwise.

B.6 Unfair Contract Terms (Consumer Rights Act 2015 Part 2)

(a) The provisions of the Master Terms shall be interpreted and applied in accordance with Part 2 of the Consumer Rights Act 2015 on unfair terms in consumer contracts. Any term found by a competent court to be unfair within the meaning of Section 62 of that Act shall not be binding on you, while the remainder of the Master Terms shall continue to apply. (b) Without limiting the foregoing, in accordance with Section 65 of the Consumer Rights Act 2015, ALL does not exclude or restrict liability for death or personal injury resulting from negligence. (c) Terms listed in Part 1 of Schedule 2 to the Consumer Rights Act 2015 may be regarded as unfair and shall be assessed in accordance with the fairness and transparency requirements under applicable law.

B.7 Governing Law and Jurisdiction for Consumers

(a) Notwithstanding Section 17.1 of the Master Terms, where you are a Consumer in the United Kingdom, the mandatory consumer protection provisions of UK law apply to your contract with ALL, regardless of the choice of law set out in the Master Terms. (b) Notwithstanding Section 17.2 of the Master Terms, you may bring proceedings against ALL in the courts of the part of the United Kingdom in which you are domiciled. ALL may bring proceedings against you only in the courts of the part of the United Kingdom in which you are domiciled. (c) Arbitration is optional for Consumers. Any pre-dispute arbitration agreement in the Master Terms shall not be binding on you to the extent it would be unfair, invalid, or unenforceable under the Arbitration Act 1996, the Consumer Rights Act 2015, or other applicable UK consumer protection law. Submission to arbitration requires your express, post-dispute, written consent. You retain the right to bring proceedings in UK courts.

B.8 Class Action and Collective Redress

The class action waiver in Section 17.2(c) of the Master Terms does not apply to you to the extent that it would prevent you from (i) participating in Group Litigation Orders under Civil Procedure Rule 19.10, (ii) being represented in representative proceedings under Civil Procedure Rule 19.6, or (iii) participating in collective proceedings before the Competition Appeal Tribunal where such proceedings are otherwise available under UK law.

B.9 Limitation of Liability — Consumer Floor

Notwithstanding Section 15 of the Master Terms: (a) ALL does not exclude or limit its liability for (i) death or personal injury caused by ALL's negligence, (ii) fraud or fraudulent misrepresentation, (iii) breach of the terms implied by Sections 9, 10, 11, 13, 14, or 15 of the Consumer Rights Act 2015 (where applicable), or (iv) any other liability that cannot be excluded or limited under UK consumer protection law. (b) For other damages, ALL’s liability is limited to losses that were reasonably foreseeable as a result of ALL’s breach at the time the contract was entered into, subject to applicable UK consumer protection law.

B.10 Alternative Dispute Resolution

In accordance with the Alternative Dispute Resolution for Consumer Disputes (Competent Authorities and Information) Regulations 2015, where ALL is unable to resolve a complaint internally and an impasse is reached, ALL will inform you of the certified ADR provider(s) that may be available to handle the dispute. ALL is not obliged to use an ADR provider but may participate voluntarily. The ADR provider that may be available for matters of this kind will be identified in ALL’s final response to your complaint or otherwise provided where required by applicable law.

B.11 Stablecoin Payments — Consumer Disclosures

(a) Stablecoin payments, refunds, and payouts are available only where supported by ALL, permitted by applicable law, and processed through an authorised provider or other lawful payment rail in accordance with Section 12.

(b) You acknowledge that Stablecoin payments involve risks, including blockchain transaction finality, incorrect wallet address or network selection, transaction fees, network congestion, potential de-pegging or volatility, and absence of deposit insurance or bank-style protection, including protection under the Financial Services Compensation Scheme. (c) Where you are entitled to a refund under this Annex or applicable law, ALL will, at your option, refund either (i) in equivalent supported Stablecoin to a wallet address you specify, or (ii) in GBP via bank transfer to a UK bank account, at the prevailing exchange rate on the date of refund. Reasonable and documented conversion or transfer fees may be deducted to the extent permitted by applicable law. (d) Nothing in the Master Terms or this Annex shall be construed as limiting or preventing you from exercising your statutory consumer rights solely because the contract is denominated, paid, or settled in Stablecoins. (e) Regulatory status. Unless ALL separately notifies you otherwise, ALL is not authorised by the Financial Conduct Authority. Wallet Balance and Stablecoins are not protected by the Financial Services Compensation Scheme. If any Stablecoin-related services provided by ALL become subject to UK regulatory authorisation, registration, or conduct requirements, ALL will provide the disclosures and protections required by applicable law.

B.12 UK Referral Program Compliance

The Referral Program may be made available in the United Kingdom only where and to the extent expressly enabled by ALL following completion of the applicable legal, regulatory, compliance, and commercial review.

Participation in, operation of, and marketing of the Referral Program in the United Kingdom must comply, to the extent applicable, with the Trading Schemes Act 1996, the applicable Trading Schemes Regulations, the Digital Markets, Competition and Consumers Act 2024, the CAP Code and other applicable advertising requirements, the UK financial-promotion regime, and any other mandatory UK law.

Level 2 and Level 3 commissions are not available to UK participants unless and until those levels are expressly activated by ALL following completion of the applicable UK legal and regulatory review. Nothing in these Terms guarantees the availability of the Referral Program or of any particular referral level in the United Kingdom.

Annex C — California Consumer Privacy Rights (ccpa/cpra)

C.1 Application

This Annex applies to you if you are a resident of the State of California, United States. It supplements the Master Terms and Privacy Policy and sets out your rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA).

C.2 Your California Privacy Rights

California residents have the right to: (a) know what personal information ALL collects, uses, discloses, and sells or shares; (b) delete personal information ALL holds about you, subject to applicable exceptions; (c) correct inaccurate personal information; (d) opt out of the sale or sharing of personal information; (e) limit the use of sensitive personal information; (f) non-discrimination for exercising your privacy rights. To exercise any of these rights, contact ALL at [email protected]. ALL will respond to verifiable consumer requests within forty-five (45) days.

C.3 No Sale of Personal Information

ALL does not sell personal information as defined under CCPA/CPRA. ALL does not share personal information for cross-context behavioural advertising without consent.

C.4 Governing Law for California Consumers

Nothing in the Master Terms limits your rights under California law. Mandatory California consumer protection provisions apply regardless of the choice of governing law in Section 17.1 of the Master Terms.

Annex D — Brazil Consumer Rights (LGPD)

D.1 Application

This Annex applies to you if you are located in Brazil or if your personal data is processed in connection with the offering of goods or services in Brazil, and supplements the Master Terms and Privacy Policy in accordance with the Lei Geral de Proteção de Dados Pessoais (LGPD), Law No. 13.709/2018.

D.2 Your LGPD Rights

Data subjects in Brazil have the right to: (a) confirmation of the existence of processing; (b) access to personal data; (c) correction of incomplete, inaccurate, or outdated data; (d) anonymisation, blocking, or deletion of unnecessary or excessive data; (e) portability of data to another service or product provider; (f) deletion of personal data processed with your consent; (g) information about the public and private entities with which ALL has shared your data; (h) information about the possibility of not providing consent and its consequences; (i) withdrawal of consent at any time. To exercise these rights, contact ALL at [email protected].

D.3 Legal Bases for Processing

ALL processes personal data on the following legal bases under the LGPD: performance of a contract (Art. 7(V)); legitimate interest (Art. 7(IX)); compliance with a legal obligation (Art. 7(II)); and, where applicable, consent (Art. 7(I)). Specific legal bases for each processing activity are set out in the Privacy Policy.

D.4 Data Protection Officer

ALL has designated a data protection officer (DPO) responsible for overseeing LGPD compliance. Contact details for the DPO are available at https://all.is.one/legal/privacy.

Annex E — UAE Consumer Protections

E.1 Application

This Annex applies to Consumer Users located in the United Arab Emirates and supplements the Master Terms in accordance with UAE Federal Law No. 15 of 2020 on Consumer Protection and its implementing regulations, and Federal Decree-Law No. 45 of 2021 on Personal Data Protection (UAE PDPL).

E.2 Consumer Rights under UAE Law

UAE consumers have the right to: (a) accurate, clear, and truthful information about Platform services and fees; (b) protection from misleading commercial practices, including misleading earnings representations; (c) a mechanism to submit complaints to ALL regarding service quality, billing, or conduct. Complaints may be submitted to [email protected]. ALL will acknowledge complaints within five (5) business days and provide a final response within thirty (30) days.

E.3 UAE PDPL Data Rights

Data subjects in the UAE have rights under Federal Decree-Law No. 45/2021, including the right to access, correct, and request deletion of personal data, and the right to withdraw consent. To exercise these rights, contact ALL at [email protected]. ALL will process verified requests within thirty (30) days.

E.4 Governing Law for UAE Consumers

Nothing in the Master Terms limits mandatory UAE consumer protection rights. UAE Federal Law No. 15 of 2020 and UAE PDPL apply to UAE consumers regardless of the choice of governing law in Section 17.1.

E.5 UAE Modern Technology-Based Trade and Electronic Contracting Disclosures

In accordance with UAE Federal Decree-Law No. 14 of 2023 on Trading by Modern Technological Means and, where applicable, Federal Decree-Law No. 46 of 2021 on Electronic Transactions and Trust Services ('UAE Electronic Trade Laws'), ALL provides the following pre-contractual information to UAE-based users before conclusion of any transaction: (a) Identity of the trader: All360 Technology S.A., a company incorporated under the laws of the Republic of Panama, for Platform services, and Allecosystem Technologies LLC, a company incorporated in the United Arab Emirates, for the sale of ALL360 Devices and ALL360 OS licences; (b) Geographic location and contact details: Republic of Panama (Platform services) and United Arab Emirates (ALL360 Devices and ALL360 OS licences); contact via email [email protected]; (c) Main characteristics of the service: the ALL Platform provides a B2B edge computing marketplace enabling Node Operators, Developers, Customers, and Affiliates to participate in a distributed edge network, as more fully described in these Terms; (d) Total price: pricing is dynamic and determined by resource usage, as displayed in the Platform dashboard; (e) Terms of payment: Wallet Balance top-up via Stablecoins as described in Section 12; (f) Delivery: Platform access is provided electronically upon account activation; (g) Right to cancel: UAE consumers may cancel in accordance with applicable UAE consumer protection law, subject to limitations set out in these Terms and applicable UAE law; (h) Duration of the contract: the contract continues until terminated in accordance with Section 20; (i) Complaints: UAE consumers may submit complaints to ALL via email [email protected] and may escalate to the UAE Ministry of Economy or relevant emirate-level consumer protection authority.

Annex F — Australia Consumer Rights (acl)

F.1 Application

This Annex applies to you if you are located in Australia and supplements the Master Terms in accordance with the Australian Consumer Law (ACL), Schedule 2 to the Competition and Consumer Act 2010 (Cth), and the Privacy Act 1988 (Cth).

F.2 Australian Consumer Guarantees

Where ALL supplies services to Australian consumers, those services come with guarantees that cannot be excluded under the ACL, including guarantees that services will be rendered with due care and skill, will be fit for the purpose for which they are commonly supplied, and will be supplied within a reasonable time where no time is agreed. Nothing in the Master Terms excludes, restricts, or modifies these consumer guarantees. Where a failure to comply with a consumer guarantee is a major failure, you are entitled to a refund or to terminate the contract. Where the failure is not major, ALL is entitled to remedy the failure within a reasonable time.

F.3 Limitation of Liability for Australian Consumers

To the extent permitted by the ACL, ALL limits its liability for failures to comply with consumer guarantees in respect of services to re-supplying the services or paying the cost of having the services supplied again.

F.4 Australian Privacy Act

ALL handles personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). Australian residents have the right to access and correct personal information held by ALL. Privacy complaints may be directed to [email protected] in the first instance, and thereafter to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.

F.5 Governing Law for Australian Consumers

Nothing in the Master Terms limits mandatory rights under the ACL or the Privacy Act 1988 (Cth). Australian consumer protection provisions apply regardless of the choice of governing law in Section 17.1.