Tiny Cloud Services Subscription Agreement - Enterprise Version

This Tiny Cloud Services Subscription Agreement (the “Agreement”) is entered into between Ephox Corporation DBA Tiny Technologies Inc. (“Tiny”) having offices at 2100 Geng Road, Suite 210, Palo Alto, CA 94303, United States of America and the Subscriber.

Posted: November 2024.

If you require a signed version of this Agreement, please contact sales@tiny.cloud.

PLEASE READ THIS AGREEMENT CAREFULLY BEFORE USING TINY’S SUBSCRIPTION SERVICES.

THIS AGREEMENT GOVERNS YOUR ACCESS TO AND USE OF CERTAIN SUBSCRIPTION SERVICES OF TINY. THE PARTICULAR SUBSCRIPTION SERVICES WHICH TINY WILL MAKE AVAILABLE TO YOU HEREUNDER WILL BE THOSE WHICH ARE SPECIFIED IN A QUOTE OR OTHER ORDERING DOCUMENT WHICH IS SUBMITTED BY YOU ACCEPTED BY TINY AND WHICH REFERENCES THIS AGREEMENT (IN EACH CASE, AN “ORDER”). BY USING THE SUBSCRIPTION SERVICES, CLICKING A BOX INDICATING YOUR ACCEPTANCE OF THIS AGREEMENT, OR ENTERING INTO AN ORDER WHICH REFERENCES THIS AGREEMENT, YOU ARE AGREEING TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS AGREEMENT. EACH ORDER IS SUBJECT TO, AND GOVERNED BY, THIS AGREEMENT AND DEEMED TO BE A PART HEREOF. AS USED IN THIS AGREEMENT, “YOU”, “YOUR” OR “SUBSCRIBER” REFERS TO THE COMPANY OR ENTITY IDENTIFIED IN THE ORDER. BY ACCEPTING THIS AGREEMENT, YOU REPRESENT THAT YOU HAVE THE AUTHORITY TO BIND SUBSCRIBER TO THIS AGREEMENT.

TINY MAY UPDATE OR MODIFY THIS AGREEMENT IN ACCORDANCE WITH SECTION 10.7 BELOW.

1. DEFINITIONS

The following definitions apply in this Agreement:

“Customer” is any person or entity who receives a license from Subscriber to use the Subscriber Application as interfaced with the Subscription Services for its own use and not for resale or further sublicensing.
“Customer Agreement” means a standard agreement under which a Customer is licensed by Subscriber to use the Subscriber Application.
“Documentation” means the applicable product documentation (which may include online user/help manuals) for the Subscription Services which is made generally available by Tiny as part of the Subscription Services.
“Effective Date” means, unless otherwise specified in an Order, the date on which Subscriber clicked the “I agree” button at https://www.tiny.cloud/or otherwise entered into an Order with Tiny.
“Editor Load” means an event that occurs each time TinyMCE is initialized in Your application. For example, if 100 users load TinyMCE 10 times each, there were 1,000 editor loads. This is recorded with a request to Tiny’s server when the “init” event is dispatched in TinyMCE.
“Permitted Number” means the authorized number of processors, development servers, servers, PVUs, domain names, software applications, Users and/or Customers as indicated in the Order.
“Software” means the software used by Tiny in the provision of the Subscription Services.
“Software-as-a-Service” (“SaaS”) means Software that is made available to the Subscriber via the internet from a remote hosted, Tiny-controlled environment.
“Subscriber Application” means the Subscriber’s software application that will be interfaced with the Subscription Services to the extent authorized hereunder.
“Subscription Fees” shall have the meaning set forth in Section 5.
“Subscription Period” means the term for which Subscriber is granted rights to use the Subscription Services, including any and all renewal periods.
“Subscription Services” shall mean the Software-as-a-Service provided by Tiny as set forth in an Order.
“Support” shall have the meaning set forth in Section 7.3.
“User” means any and all individuals who are authorized by Subcriber to access and use the Subscription Services for the purposes authorized under, and on the terms set forth in, this Agreement.

2. GRANT OF LICENSE; TYPES OF LICENSES

In consideration for the payment of the Subscription Fees as set forth in Section 5 and subject to the terms and conditions of this Agreement, Tiny hereby grants to Subscriber a limited right to use the Subscription Services under the terms and conditions of this Agreement and the applicable Order. An Order may refer to or incorporate an online pricing page or other section of Tiny’s website and, if so, those other pages and sections or both shall be deemed a part of the Order. The grant of this license shall terminate upon the expiration or termination of this Agreement.

2.1

If You have been authorized in Your Order to Use the Subscription Services in a Subscriber Application, then this section 2.1 applies to You.

Subject to the terms and conditions set forth in this Agreement and only during the Subscription Period, Tiny grants to Licensee a non-exclusive, non-transferable, world-wide license, to interface the Subscription Services with a Subscriber Application and make available the Subscription Services and associated Documentation to Customers solely when so included as part of the Subscriber Application; provided that such Subscriber Application must contain significant additional functionality which is not included in the Subscription Services. Subscriber’s right to use and make available the Subscription Service in accordance with the above, and its Customers right to use the Subscription Services as part of the Subscriber Application, shall cease upon the earlier of the expiration of the Subscription Period or the termination of this Agreement. Subscriber shall provide First Level Technical Support to Customers with respect to the licenses granted under Sections 2.1.

2.2 Subscription Service License- Internal Application

If You have been authorized in your Order to Use the Subscription Services in an Internal Subscriber Application (as defined below), then this section 2.2 applies to You.

Subject to the terms and conditions set forth in this Agreement, and only during the Subscription Period, Tiny grants to Subscriber a limited right to use the Subscription Services under the terms and conditions of this Agreement and the applicable Order to interface the Subscription Services with an Internal Subscriber Application (defined below) and use the Subscription Services and associated Documentation solely for its internal business purposes when included as part of such Internal Subscriber Application, provided that such Internal Subscriber Application contains significant additional functionality not included in the Subscription Services. Subscriber’s right to use the Subscription Services shall cease upon the earlier of the expiration of the Subscription Period or the termination of this Agreement. An “Internal Subscriber Application” is a software application of Subscriber that it provides only on its internal networks and not for provision or distribution to Customers or any other third parties.

For clarity, Subscriber’s rights under a license granted pursuant to Section 2.1 do not permit Subscriber to Use the Subscription Service, whether integrated or not, in support of its own internal business operations, as such Use requires the purchase of an Internal Use License as described in this Section 2.2 Subscriber shall provide First Level Technical Support to Users with respect to the licenses granted under Sections 2.2.

2.3 Users

Subscriber may exercise its rights by and through its Users who Use the Subscription Services solely in support of Subscriber’s internal business operations and who are bound in writing to comply with the confidentiality, limited use and other applicable provisions of this Agreement. Subscriber shall ensure that its Users make use of the Subscription Services solely as Subscriber is authorized to Use the Subscription Services hereunder and shall be responsible and liable to ensure that all such Users comply with this Agreement.

3. RESTRICTIONS

3.1 Subscription Services Usages and Restrictions

The Subscription Services provided to the Subscriber are non-exclusive and limited. Subscriber may not and shall ensure that its Customers and internal users do not:

decompile, disassemble, modify or reverse engineer the Subscription Services or its APIs or create derivative works based on the Software, unless a specific license allows for this;
use the Subscription Services in support of any third party except as expressly authorized hereunder;
sell, sublicense, rent, lease or otherwise transfer or grant any rights to the Subscription Services except as expressly authorized hereunder;
access the Subscription Services (i) in order to build a competitive solution or to assist someone else to build a competitive solution; or (ii) if Subscriber is a Tiny competitor or an employee thereof;
exceed usage limits specified in the Order without payment of Overage Fees as described hereunder; or;
permit its Customers or internal users to use the Subscription Services after termination or expiration of this Agreement.

3.2 Access to Subscription Services

The Subscription Services are made available to Subscriber from a remote computing environment that is hosted by Tiny or its third party hosting provider. Subscriber may access the Subscription Services but Subscriber has no rights to receive a copy of the object code or source code to the Software.

3.3 Subscription Services Limits and Usage Calculation

Use of the Subscription Services may be subject to limitations on the number of Customers or Users, as well as limitations on access to packages/bundles of features and/or Permitted Numbers of other specified licensing metrics, as specified in the Order. Use of the Subscription Services beyond any such limitation may require payment of additional usage fees. Subscriber will supply updated counts of applicable metrics on request by Tiny from time to time but at least annually on renewal and Tiny will update the terms of the Subscription in accordance with Section 5 of this Agreement.

Use of the Subscription Services may also be subject to the number of Editor Loads specified in the product plan set forth in the Order; Fees for add-on Editor Loads are calculated as follows, where “Authorized Editor Loads” refers to the then-current number of Editor Loads to which Subscriber is entitled (i.e., the initial Editor Loads in the Order plus any add-on Editor Loads purchased pursuant to the terms below).

Tiny will monitor the actual number of Authorized Editor Loads by Subscriber throughout the Subscription Period and will generate a usage report on a quarterly basis. If monthly Editor Loads exceed 110% of quantity specified in Order (ie. [quantity * 110%] monthly Editor Loads), Licensed quantity will be adjusted to the nearest rounded-up multiple of 10,000 and Subscriber will be invoiced for the new Subscription Fees amount calculated with the sales price per monthly Editor Load per the Order (as may be increased pursuant to Section 5 below) prorated to align with the existing Subscription Period.

User of certain products may be subject to limits on activity such as documents exported or operations as specified in the Order. Tiny will monitor the actual usage numbers by Subscriber throughout the Subscription Period and will generate a usage report on a quarterly basis. If usage exceed 110% of quantity specified in Order (ie. [quantity * 110%] monthly Editor Loads), Licensed quantity will be adjusted to the nearest rounded-up multiple of 1,000 and Subscriber will be invoiced for the new Subscription Fees amount calculated with the sales price per additional quantity (as may be increased pursuant to Section 5 below) prorated to align with the existing Subscription Period.

3.4 Customer Agreements

Subscriber shall ensure that it puts in place a Customer Agreement with each Customer having terms substantially similar or at least as protective of Tiny’s rights as the provisions of this Agreement and the following provisions:

The Customer is granted a nonexclusive, nontransferable right to use the Subscription Services solely for its internal use and not for resale or further licensing;
The Customer may use the Subscription Services solely as interfaced with a Subscriber Application;
The Customer shall not be provided any warranty with respect to the Subscription Services, and the Customer Agreement shall incorporate the disclaimer set forth in Section 8.1 but with no reference to any warranty being provided to the Customer;
Subscriber’s licensors and vendors shall not have any liability or responsibility to Customer;
Title to the Subscription Services, including all intellectual property rights to the Software, remains with Tiny.
The Customer’s right to use the Subscription Services will terminate if the Customer breaches any of the terms set out in the Customer Agreement and is unable to cure such breach within a prompt cure period.
The Customer shall maintain the confidentiality of any proprietary information received from Subscriber or Tiny and shall not disclose such information to any third party without prior written consent.

4. TERM & TERMINATION

4.1 Term and Termination

This Agreement commences on the Effective Date and will remain in force until it is terminated or the Subscription Services are cancelled or otherwise expire in accordance with this Agreement. The Subscription Period will auto-renew and Subscription Fees will be due and payable for the applicable renewal period unless either party provides written notice of its intention not to renew this Agreement at least 30 days before the end of the then-current Subscription Period. Unless otherwise agreed by the parties in writing, each renewal period shall be for a period of one (1) year. Fees will be invoiced to the Subscriber in advance for the Subscription Period and each renewal period.

This Agreement may be terminated by either party at any time in the event that (a) the other party is notified in writing by the non-breaching party that it is in material breach of the terms or conditions of this Agreement; and (b) such other party fails to remedy such breach within thirty (30) days following such notice or five (5) business days following such notice if the breach is a failure by Subscriber to pay any fee required under Section 5 of this Agreement. For clarity, failure to pay fees when due shall be a material breach of this Agreement.

This Agreement may also be immediately terminated by Tiny without notice if Subscriber terminates business activities or becomes insolvent, makes an assignment for the benefit of creditors or becomes subject to direct control of a trustee, receiver or similar authority.

4.2 Effect of Termination

Upon termination of this Agreement (including upon expiration of the Subscription Services), all license grants provided herein shall immediately terminate and Subscriber and any of its internal users and Customers shall immediately cease using Subscription Services. For clarity, termination of this Agreement shall also terminate the applicable Order for the Subscription Services. The provisions of this Agreement which relate to confidentiality, intellectual property ownership, limitations and disclaimers of liability and payment obligations, along with terms which expressly or by their nature should reasonably survive termination, shall survive expiration or termination hereof.

4.3 Survival

The terms of this Agreement which relate to confidentiality, intellectual property ownership, indemnity, limitations and disclaimers of liability and payment obligations, along with terms which expressly or by their nature should reasonably survive termination, shall survive expiration or termination hereof in accordance with their terms.

5. PAYMENT AND RENEWAL TERMS

Subscriber agrees to pay Tiny the fees specified in the Order for use of the Subscription Services during the Subscription Period (“Subscription Fees”), including any additional fees calculated in accordance with Section 3.3. The Subscription Fees are payable in United States dollars. The Subscription Fees are payable in advance for each subscription term during the Subscription Period.

Invoices shall be due and payable within thirty (30) days from issuance. Subscription Fees are non-refundable and non-cancellable. When a payment or automatic payment cannot be processed, Subscriber shall have up to thirty (30) days from the renewal date to submit payment in order to retain use of the Subscription Services.

The Subscription Fees do not include taxes, and Subscriber shall pay any sales, use, value added or other taxes or import duties (other than corporate income taxes payable by Tiny) due as a result of any amounts paid to Tiny.

Subscriber shall bear all of Tiny’s costs of collection of overdue fees, including reasonable attorneys’ fees, provided that such fees are incurred after a 30-day grace period following the due date of the payment. In addition, any overdue amounts shall bear interest at the rate of 1.5% per month (or the maximum rate permitted by law, if less) from the due date until the date of payment.

If the Subscriber wishes to use a purchase order or similar document, it must promptly issue the purchase order or similar document after executing the relevant Order. Tiny and Subscriber recognize that only the terms of this Agreement and the Order will be binding, and any terms or conditions in a purchase order or similar document issued by the Subscriber are null and void.

For a subscription that renews annually, Subscription Fees will be invoiced in advance, and, for each subsequent year unless Subscriber cancels the Subscription Services with proper notice as per the terms of this Agreement. Subscriber is committed to each Subscription Period unless it cancels the Subscription Services prior to the commencement thereof in accordance with the terms of this Agreement.

Tiny may increase Subscription Fees for any renewal period by notifying Subscriber in writing (e.g., via email) at least 30 days prior to the commencement of such renewal period.

6. PRIVACY AND SECURITY OF DATA

6.1 Privacy Policy

Tiny’s privacy policy (the “Privacy Policy”) is detailed on the Tiny’s website at https://www.tiny.cloud/legal/privacy/. The Subscriber has read the Privacy Policy and associated Cookies Policy and accepts their contents. The Subscriber acknowledges that usage of the Subscription Services may involve collation, retention and storage of personal data.

6.2 Data Security

The parties shall comply with the terms and conditions regarding data security which are set forth in Schedule B.

6.3 Subscriber Account, Password & Security

Upon completing the registration process, Subscriber shall receive credentials to allow Subscriber to use Subscription Services. The use of some Subscription Services requires a secure passcode (“API Key”), which is directly associated with Subscriber’s account. Subscriber is responsible for maintaining the confidentiality of the account (including the API Key) and is fully responsible for all activities that occur thereunder. Subscriber is not permitted to use another account without permission. Subscriber agrees to immediately notify Tiny of any unauthorized use of Subscriber’s account or any other breach of security. Tiny is not liable for any loss or damage arising from Subscriber’s failure to comply with this Section 6. Subscription Services may prevent Subscriber from accessing the Subscriber Services until its identity can be confirmed if an account designation is used to access Subscription Services from more than one location or from multiple locations in sequence at once.

7. AVAILABILITY AND SUPPORT

7.1 System Availability

Tiny will exert commercially reasonable efforts to make Subscription Services available at least 99% during each calendar month of the Subscription Period; provided, however, that unavailability due to planned and emergency maintenance, as well as due to Force Majeure events (see Section 10.9 below), shall not count as downtime. System unavailability for the purposes of maintenance and upgrade will be scheduled if required early Monday mornings (US East Coast time). All planned outages will be advised on the Tiny website or via email prior to the event.

7.2 Updates

Tiny will provide Subscriber Services updates when available and at its discretion. Tiny is under no obligation to develop any future functionality or enhancements. If an update for Subscriber Services is made available, Tiny may, consistent with its then-current practices, either: (a) automatically replace the previous version with the updated version; or (b) allow continuing access to the existing version for a Tiny-specified period. Where practical, Tiny will schedule Subscriber Services updates during non-business hours and will provide customers with advance notice on the login screen. Updates do not include packages, modules or bundles of features which are separately priced and marketed by Tiny. Tiny may change or remove features or functionality of the Subscription Services.

7.3 Technical Support

7.3.1 Nature of User Support

Tiny offers two levels of technical support (“Support”) under this Agreement: Professional Support and Enterprise Support. The level of Support Subscriber is entitled to is reflected in the Order.

During the Subscription Period, Tiny will provide Support for Defects in the operation of the Subscription Services (a “Defect” occurs when the Subscription Services do not operate in material conformity with the Documentation) in accordance with Schedule A.

7.3.2 Access to Support

Tiny will provide Subscriber access to the Tiny Technologies Online Support Center located at https://support.tiny.cloud/ where Subscriber will be provided access to Documentation, community forums and a web-based support form to submit a support case.

7.3.3 Support Conditions

Tiny’s obligation to provide Support is conditioned upon the following:

Subscriber makes reasonable efforts to solve the problem after consulting with Tiny;
Subscriber provides Tiny with sufficient information and resources to correct the problem; and
Subscriber procures, installs and maintains all equipment necessary to operate Subscription Services.

7.3.4 Service Exclusions

Tiny is not obligated to provide Support in the following situations:

the problem is caused by Subscriber’s negligence, hardware malfunction or other causes beyond the reasonable control of Tiny;
the problem is attributed to third party software not licensed through Tiny; or
Subscription Fees have not been paid by Subscriber.

8. WARRANTY AND LIABILITY

8.1 Warranty and Disclaimers

Tiny warrants, for the Term of each Order, and conditioned on Subscriber’s use of the Subscription Services in compliance herewith, that the Subscription Services will perform in all material respects in accordance with the Documentation. In the event that Tiny breaches the warranty above and is notified in writing promptly thereof, then Tiny will exert commercially reasonable efforts to remedy the non-conformity within a commercially reasonable period of time. If unable to do so, then Subscriber’s sole and exclusive remedy will be to terminate the applicable Order and receive a refund of pre-paid subscription fees for the unused remainder of the then-current subscription term.

EXCEPT FOR THE WARRANTIES IN THIS SECTION ABOVE, TINY MAKES NO WARRANTIES WHATSOEVER, EXPRESSED OR IMPLIED, AND EXPLICITLY DISCLAIMS ALL WARRANTIES OF MERCHANTABILITY AND OF FITNESS FOR A PARTICULAR PURPOSE.

8.2 Limitation of Liability

IN NO EVENT SHALL TINY OR ITS SUPPLIERS BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, PUNITIVE, EXEMPLARY OR CONSEQUENTIAL DAMAGES, INCLUDING ANY LOST PROFITS, LOST DATA OR LOST REVENUE, ARISING OUT OF OR IN CONNECTION WITH THIS AGREEMENT. THE AGGREGATE LIABILITY OF TINY AND ITS SUPPLIERS UNDER THIS AGREEMENT SHALL APPLY SEPARATELY TO EACH ORDER AND SHALL NOT EXCEED THE AMOUNT OF FEES PAID BY SUBSCRIBER FOR THE SUBSCRIPTION SERVICES UNDER THE APPLICABLE ORDER IN THE TWELVE (12) MONTH PERIOD PRECEDING THE DATE OF THE INITIAL CLAIM ASSERTED BY SUBSCRIBER THEREUNDER. THE REMEDIES PROVIDED IN THIS AGREEMENT ARE EXCLUSIVE, SHALL APPLY TO ALL CAUSES OF ACTION AND SHALL APPLY EVEN IF A PARTY SHOULD HAVE KNOWN THAT SUCH DAMAGES WERE POSSIBLE AND EVEN IF A REMEDY FAILS OF ITS ESSENTIAL PURPOSE.

8.3 Remedies for Infringement

In the event that Tiny reasonably believes that the Subscription Services may be subject to an infringement claim, Tiny may, in its sole discretion, either: (a) substitute substantially equivalent subscription services; (b) modify the Subscription Services; or (c) terminate the license granted hereunder.

8.3.1

Tiny agrees, at its own expense, to defend or, at its option, to settle, any claim or action brought against Subscriber to the extent it is based on a claim that the Subscription Services as used within the scope of the license granted under this Agreement infringes or violates any United States patent, copyright, trademark, trade secret or other intellectual property right of a third party, and Tiny will indemnify and hold Subscriber harmless from and against any damages, costs and fees reasonably incurred that are attributable to such claim or action and which are assessed against Subscriber in a final judgment. Subscriber agrees that Tiny shall be released from the foregoing obligation unless Subscriber provides Tiny with: (a) prompt written notification of the claim or action; (b) sole control and authority over the defense or settlement thereof; and (c) all available information, assistance and authority to settle and/or defend any such claim or action. If any Subscription Services becomes, or in the opinion of Tiny is likely to become, the subject of an infringement claim or action, Tiny may at its sole option: (i) procure, at no cost to Subscriber, the right to continue using the Subscription Services; (ii) replace or modify the Subscription Services to render it non-infringing, provided there is no material loss of functionality; or (iii) if, in Tiny’s reasonable opinion, neither (i) nor (ii) above are commercially practical, terminate the license and refund all unused amounts paid to Tiny by Subscriber for such Subscription Services as depreciated on a straight-line sixty (60) month basis. Tiny will have no liability under this Section 8.3 for any claim or action where: (A) such claim or action would have been avoided but for modifications of the Subscription Services, or portions thereof, made by anyone other than Tiny; (B) such claim or action would have been avoided but for the combination or use of the Subscription Services, or portions thereof, with other products, processes or materials not supplied or specified in writing by Tiny; (C) Subscriber continues allegedly infringing activity after being notified thereof; or (D) Subscriber’s use of the Subscription Services is not strictly in accordance with the terms of this Agreement. Subscriber will be liable for all damages, costs, expenses, settlements and attorneys’ fees related to any claim of infringement arising as a result of (A)-(D) above. THE FOREGOING OBLIGATIONS CONSTITUTE TINY’S SOLE AND EXCLUSIVE OBLIGATIONS TOWARD SUBSCRIBER, AND SUBSCRIBER’S SOLE AND EXCLUSIVE REMEDY, WITH RESPECT TO ANY INTELLECTUAL PROPERTY CLAIM OR ACTION BROUGHT AGAINST SUBSCRIBER AS AFORESAID.

8.3.2

Subscriber shall defend, indemnify, and hold Tiny, its affiliates and their employees, officers, directors and agents harmless from and against any damages, losses, costs, and liabilities arising from or in connection with: (i) any claim that any data, materials or content provided or uploaded by Subscriber infringes any rights of any third party or gives rise to defamation, invasion of privacy or other claim based on the nature or substance thereof; or (ii) any use of the Subscription Services in a manner contrary to or in violation of the terms and conditions (including usage restrictions) of this Agreement or an Order, or contrary to applicable law.

9. CONFIDENTIALITY

“Confidential Information” is non-public or trade secret information of a party which is provided to the other party hereunder. Confidential Information of Tiny includes the Subscription Services (including its underlying Software) and its related Documentation and materials, and the terms and conditions of this Agreement. The party receiving Confidential Information may use it only for the purposes for which it was provided and may not disclose it to any third party unless such third party is providing services or functions in support of a party’s exercise of its rights or performance of its obligations hereunder and is bound in writing by commercially reasonable confidentiality and limited use restrictions. The limitations on disclosure or use of Confidential information shall not apply to information which (i) is rightfully obtained by the recipient without breach of any confidentiality obligation; (ii) is or becomes known to the public through no act or omission of the recipient; (iii) the recipient develops independently without using Confidential Information of the other party; or (iv) is disclosed in response to a valid court or governmental order, provided that, in such case, the recipient shall, to the extent reasonably practicable, give the other party prior written notice to afford the other party an opportunity to contest the disclosure.

10. GENERAL

10.1 Assignment

Tiny may freely assign this Agreement without restriction. Neither this Agreement nor any rights under this Agreement may be assigned or otherwise transferred by Subscriber, in whole or in part, whether voluntarily or by operation of law, including by way of sale of assets, merger or consolidation, without the prior written consent of Tiny, which may be withheld or conditioned in its absolute discretion. Subject to the foregoing, this Agreement will be binding upon and will vest to the benefit of the parties and their respective successors and assignors.

10.2 Waiver, Severability and Third Party Beneficiaries

A party’s failure to act under this Agreement shall not indicate a waiver of its right to do so at a later date. No waiver of any provision of this Agreement shall be valid unless made in writing and signed by the waiving party. If a provision is found unenforceable, the remaining provisions of this Agreement will remain in full effect and an enforceable term will be substituted reflecting the intent as closely as possible. There are no third party beneficiaries to this Agreement, including Subscriber’s Customers and internal users.

10.3 U.S. Export Restrictions

The Subscription Services may be subject to laws and regulations of the United States and other jurisdictions (“Export Laws”). Subscriber represents that it is not a sanctions target and is not on any of the relevant U.S. government lists of prohibited persons, denied parties or similar lists. Subscriber shall not, and shall ensure that its Customers and internal users do not, export, transfer or otherwise access or use the Subscription Services in any country subject to an embargo or other sanction by the United States or otherwise in violation of any Exports Laws.

10.4 Governing Law

This Agreement is governed by and construed and enforced in accordance with the substantive laws in force in the State of Delaware, USA, and in no event shall the United Nations Convention on Contracts for the International Sale of Goods govern this Agreement. The parties irrevocably submit to the exclusive jurisdiction of the State (and if jurisdiction exists) Federal Courts in Wilmington, Delaware with respect to any dispute arising out of or relating to this Agreement.

10.5 Notices

All notices must be in writing and shall be sent by first class U.S. mail, a nationally known express or overnight courier (such as FedEx, UPS or the U.S. Postal Service) or email. Subscriber may send a notice relating to this Agreement by delivery-assured service to the Legal Department, Tiny Technologies, 2100 Geng Road, Suite 210, Palo Alto, CA 94303, United States of America. Email notices to Tiny shall be sent to legal@tiny.cloud and such additional email address (if any) provided for notices in the applicable Order. Notices to Subscriber may be sent to: (i) an individual whose email address is provided in the applicable Order; or (ii) such other individual who provided his/her email address to Tiny as an administrative user of the Subscription Services. Notices shall be deemed given upon receipt thereof (as may be evidenced by a courier’s confirmation of delivery). Any notice of change in address shall also be given in the manner set forth above.

10.6 U.S. Government End Users

If Subscriber is a government body, the following shall apply: The Subscription Services are a “Commercial Item,” as that term is defined at 48 C.F.R. §2.101, consisting of “Commercial Computer Subscription Services” as such term is used in 48 C.F.R. §12.212. Consistent with 48 C.F.R. §12.212, the Commercial Computer Subscription Services is being licensed to U.S. Government end users (a) only as Commercial Items and (b) with only those rights as are granted to, and restrictions and limitations imposed upon, all other customers pursuant to the terms and conditions herein. Unpublished-rights are reserved under the copyright laws of the United States.

10.7 Changes to this Agreement

Tiny may revise this Agreement from time to time. In each instance, Tiny will give Subscriber at least forty-five (45) days’ advance notice of the changes. This notice: (a) will be provided in an email to an administrative user of Subscriber who provided their email address to Tiny in the Order or otherwise in connection with the Subscription Services; and (b) may point to https//www.tiny.cloud/legal/ for review of the updated Agreement. As to Subscriber, such changes will take effect at the end of the 45 day notice period except as provided below. If Subscriber does not wish to accept such changes, then Subscriber may, as its sole remedy, notify Tiny within thirty (30) days of receipt of the notice of such changes that the Agreement will terminate in thirty (30) days from Tiny’s receipt of such termination notice unless the parties resolve the issue during this 30-day period. If no such resolution occurs, then this Agreement will terminate at the end of such 30-day period.

10.8 Force Majeure

Neither party will be liable to the other for any failure to perform any of its obligations under this Agreement during any period in which performance is delayed by circumstances not within such party’s reasonable control, such as a natural disaster, act of war or terrorism, riots, fires, acts or orders of government, labor disruption, internet or telecommunication outages or interruptions, hacking or similar incidents, or power outages.

10.9 Intellectual Property; Analytic Data

Tiny, or its affiliates or licensors (as applicable), own(s) all rights, title and interest in and to the Subscription Services, the underlying Software, all Documentation and related materials, the Analytic Data, and all modifications or derivatives thereof. Any rights or licenses not expressly granted to Subscriber in this Agreement are expressly reserved by Tiny.

Subscriber agrees that it shall have and obtain all necessary rights and consents for Tiny to use, process and store all data provided or uploaded by Subscriber or its users into the Subscription Services (“Subscriber Data”) for the purposes of performing its obligations hereunder. Subscriber grants Tiny the right to access and use the Subscriber Data: (a) as reasonably necessary to provide the Subscription Services and otherwise meet its obligations hereunder; and (b) as otherwise permitted under this Agreement.

Tiny may collect and analyze data and content collected and derived from Subscriber and its Customer’s and internal users’ use of the Subscription Services and the data and content uploaded therein to determine usage volumes and trends, optimize support, improve and promote the Subscription Services and for other business purposes (collectively, “Analytic Data”); provided that such Analytic Data shall be de-identified and aggregated.

10.10 Entire Agreement

This Agreement, together with the Orders, constitutes the entire agreement between the parties concerning the Subscription Services and supersedes and replaces any prior or contemporaneous understandings and agreements regarding the subject matter hereof.

Schedule A

Tiny Support

A. PROFESSIONAL SUPPORT

1. TINY SUPPORT SERVICE LEVELS

Tiny undertakes to provide Support in accordance with the following Service Levels:

Response times within the Service Hours: 2 business days. (Business days are based on Service Hours as defined in Section A.2. below).
Subscriber is entitled to four (4) Support Tickets per calendar month on the Professional Plan.

2. SERVICE HOURS

Tiny’s Service Hours:

California, US office: 9:00 AM to 5:00 PM Monday to Friday local time excluding US public holidays.

3. REPORTING OF DEFECTS

All Defects are to be reported by a Subscriber representative through the Tiny technical support form on the Tiny website at: https://support.tiny.cloud/. Tiny’s response to Support requests submitted by email will be delayed. After submission include the Tiny Support case number that was advised by email in response to the initial reporting.

4. APPLICATION TO SUBSCRIPTION SERVICES

Tiny’s Support for any release of the Subscription Services will end as specified: The later of either: (a) six (6) months after the release has been superseded; or (b) eighteen (18) months after the release was made available. Fixes for Defects will be delivered as a part of the normal release process (i.e. in the next release of the Subscription Services).

A. Enterprise SUPPORT

1. TINY SUPPORT SERVICE LEVELS

Tiny undertakes to provide Support in accordance with the following Service Levels:

Tiny Support Service Level – Defect Category 1:
1. Response times within the Service Hours: 4 hours
2. Workaround times within the Service Hour: 24 hours
Tiny Support Service Level – Defect Category 2:
1. Response times within the Service Hours: 8 hours
2. Workaround times within the Service Hour: 36 hours
Tiny Support Service Level – Defect Category 3:
1. Response times within the Service Hours: 24 hours
2. Workaround times within the Service Hours: 48 hours

2. SERVICE HOURS

Tiny’s Service Hours:

California, US office: 9:00 AM to 5:00 PM Monday to Friday local time excluding US public holidays.

3. REPORTING OF DEFECTS

DEFECT CATEGORIES

Category 1:
1. Effective use (commercially tenable use) of the Subscription Services is not possible due to such defects, or is unreasonably restricted or impaired.
Category 2:
1. Effective use of the Subscription Services is not gravely impaired, so that working with the Subscription Services according to the Documentation is possible.
Category 3:
1. Effective use is not restricted due to this Defect.

The categorization of defects into one of the Defect Categories is determined by Tiny at the time that the defect is reported.

4. APPLICATION TO SUBSCRIPTION SERVICES

Tiny’s Support for any release of the Subscription Services will end as specified:

The later of either: (a) six (6) months after the release has been superseded; or (b) eighteen (18) months after the release was made available. Fixes for Defects will be delivered as a part of the normal release process (i.e. in the next release of the Subscription Services).

Schedule B

Data Processing Agreement

This document is a data processing agreement (DPA) and constitutes an integral part of Tiny Cloud Services Subscription Agreement (Agreement) between Ephox Corporation DBA Tiny Technologies Inc. (“Tiny” or “Processor”) having offices at 2100 Geng Road, Suite 210, Palo Alto, CA 94303, United States of America and the Subscriber (or “Controller”).

Data identifying the Controller, including their name, address and any relevant identification number, are indicated in the Order which constitutes an integral part of this DPA.

The Controller and the Processor shall hereinafter also jointly be referred to as the “Parties”.

1. Definitions

Processor – an entity contracted with personal data processing under a data processing agreement with the Controller;

Data Controller – an entity that on its own or jointly with others determines purposes and methods of personal data processing;

Filing system - any structured set of personal data which are accessible according to specific criteria, regardless whether decentralized or dispersed on a functional basis;

Data Processing - any operation which is performed on personal data, such as collection, recording, storage, development, alteration, making available and erasure, in particular performed within IT systems;

Law – means any privacy and/or data protection laws, regulations and binding guidance that apply to the Processing of Personal Data under the Agreement, or to the privacy of electronic communications, including, to the extent applicable, (i) the General Data Protection Regulation (EU) 2016/679 ("GDPR"), the EU e-Privacy Directive (Directive 2002/58/EC), (ii) the California Consumer Privacy Act (“CCPA”);

GDPR – Regulation of the European Parliament and the Council (EU) 2016/679 of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation);

"Restricted Transfer" means: (i) where the GDPR applies, a transfer of personal data originating from the EEA to a country outside of the EEA which is not subject to an adequacy determination by the European Commission;

"Standard Contractual Clauses" or "EU SCCs" means the standard contractual clauses annexed to the European Commission`s Implementing Decision 2021/914 of 4 June 2021 on standard contractual clauses for the transfer of Personal Data to third countries pursuant to Regulation (EU) 2016/679 of the European Parliament and of the European Council;

Sub-processor – an entity contracted by the Processor to process personal data in full or in part, as a consequence of performance of its DPA with the Controller;

Supervisory Authority - a public authority supervising compliance with data protection regulations, authorized to control and impose administrative penalties, should it detect any violations of the binding provisions of personal data protection regulations.

2. Subject matter hereof

2.1. Under this DPA, the Controller shall contract the Processor with processing of personal data, collected in the filing systems specified below, and in the scope defined below.

2.2. Purpose of the personal data processing shall be to perform the provisions of the Agreement, including but not limited to provision of services or granting a license by the Processor to the Controller.

2.3. Scope of processing shall include: to collect, archive, store, record, develop personal data.

2.4. The Processor shall process the personal data contracted by the Controller, comprising in personal data entered by the Controller or its customers into Tiny Cloud Services. The scope of data entrusted for the processing includes, i.a., name and surname, telephone number, address, email address, the ID card number, image, or any other personal data voluntarily entered by the Controller or by the end users into Tiny Cloud Services.

2.5. Should the provisions of the Agreement, referred to under section 2.2 above, contradict the provisions hereof with respect to the terms and scope of data processing by the Processor or its Sub-processors, the provisions hereof shall prevail, unless this DPA provides otherwise.

3. Obligations of the Processor

3.1. The Processor undertakes to process personal data concerned only in the scope and for the purpose defined in the DPA.

3.2. The Processor shall process personal data upon instruction of the Controller. An instruction shall be considered a task contracted to be delivered by the Processor under the provisions hereof, and also all communication with the Controller or Data Subject, in particular electronic communication (e.g. an email).

3.3. The Processor undertakes to implement and maintain at all times all technical and organisational measures for safe processing of the data concerned, in line with the requirements laid down by the GDPR, in particular its article 28 and article 32.

3.4. The Processor undertakes to monitor compliance with the terms of protection, defined under section 3.3 above.

3.5. The Processor undertakes to have personal data processed only by persons authorized to do so by the Processor.

3.6. The Processor shall have the persons authorized to process personal data undertake to keep confidentiality, or shall ensure that they are under a respective statutory confidentiality obligation.

3.7. Given the commitment by the Processor to ensure proper technical and organizational measures, and to be able to demonstrate compliance of the data processing with the binding provisions of law, the Processor shall implement data protection policies, defined under GDPR article 24(2), if proportionate in relation to its processing processes.

3.8. The Processor may have all or even part of the personal data processing operations, defined under section 2 hereof, performed by another entity.

3.9. Upon termination or expiry hereof, the Processor undertakes promptly, without an additional notice, to return to the Controller the personal data concerned, and to permanently erase them from all carriers, both in electronic and paper format, unless the respective provisions of the EU or domestic law oblige the Processor to process the data. The obligation, defined in this subsection, shall also be binding upon the entities processing the data as contracted by the Processor as its Sub-processors.

3.10. Processor shall act solely as a “Service Provider” (as defined in the CCPA) with respect to any personal data provided by Controller, and Processor shall not take any action that would result in Processor not acting as a Service Provider. Processor certifies that it understands its obligations under the CCPA and will comply with the restrictions and obligations contained in this DPA. Processor represents and warrants that it shall not disclose or engage in any processing activity with regard to Controller personal data that would constitute a “sale” of personal information under CCPA.

4. Rights and Obligations of the Controller

4.1. The Controller warrants that all personal data contracted to the Processor for processing purposes have been collected in line with the absolutely binding provisions of law.

4.2. The Controller reserves itself the option to audit the Processor, as specified under GDPR article 28(3)(h). Such an audit make take place only upon a prior notice given to the Processor not later than 2 weeks before the audit concerned, and shall not interfere with normal operation of the Processor’s business. During the audit, the Controller shall be obliged to comply with the Processor’s internal safety and confidentiality procedures and policies. Should the Controller contract a third party perform the audit, the auditor cannot be a Competitor of the Processor or an affiliate of the Processor’s Competitor, including their employee or cooperating partner, regardless of the basis of their employment or cooperation, and also such an auditor shall be obliged to maintain confidentiality.

4.3. The Processor undertakes to promptly notify the Controller of any administrative or court proceedings, administrative decision, ruling, notified audits and inspections, should they involve personal data contracted by the Controller.

5. Confidentiality

5.1. The Processor, its Sub-processor and other persons acting on its behalf, who have access to personal data, shall be bound by a confidentiality obligation and shall keep professional secret in terms of personal data processing, and personal data protection policy, in line with the binding data protection legislation.

5.2. The Controller shall be obliged to keep confidential all documentation and information received from the Processor, concerning technical and organizational safety measures in place with the Processor and its Sub-processors, and also other information the Processor wants to keep confidential.

5.3. The confidentiality obligation shall remain binding also upon termination hereof.

6. Sub-processing services (Sub-processor)

6.1. The Controller hereby agrees for the Processor to utilize services of another processor (Sub-processor) and to subcontract in full or in part processing of the personal data, defined under section 2 hereof (general consent).

6.2. The Processor shall inform the Controller of all intended changes to add a Sub-processor or to replace one, thereby enabling the Controller to object against such changes.

6.3. The Processor shall be obliged to verify whether the Sub-processor concerned is able to ensure safe data processing, in line with terms and conditions laid down by the absolutely binding provisions of law, in particular the provisions of the GDPR.

7. Liability and Penalties

7.1. The Processor acknowledges that in performance of this DPA within the processing operations concerned, it shall be responsible for implementing risk-adequate technical and organizational measures, and ensuring processing in compliance with the provisions of law.

7.2. The Processor acknowledges that in connection with the performance hereof, it may be audited for compliance of its data processing by a Supervisory Authority controlling compliance of the data processing with the binding provisions of law.

7.3. The Controller undertakes to promptly notify the Processor of any administrative or court proceedings, and/or notified controls and/or inspections, should they involve personal data contracted to the Processor, to enable the Processor to demonstrate legal compliance of its processing operations, or else the Controller shall be deprived of its right to raise a claim against the Processor for reimbursement of costs incurred by the Controller in connection with such administrative and/or court proceedings, and/or such a control and/or inspection.

8. Duration of the DPA

8.1. The DPA shall be concluded for the duration of the Agreement, defined under section 2.2 hereof.

8.2. The Controller may terminate the DPA, and also the Agreement, defined under section 2.2 hereof, should an administrative decision or a final and non-appealable judgment be handed down upon the Processor as a result of proceedings initiated in connection with a personal data protection breach involving processing operations performed by the Processor.

9. Data Transfers

9.1. Processor shall (and shall procure that any Sub-processor shall) not Process or transfer (directly or via onward transfer) any personal data in or to a territory other than the territory in which the personal data was first collected (nor permit the personal data to be so Processed or transferred) and shall not conduct any transfers unless it takes all such measures as are necessary to ensure such Processing or transfer is in compliance with Law (including such measures as may be communicated by Controller to Processor). Without prejudice to the foregoing, the parties agree that when a transfer of personal data by Controller (as data exporter) to Processor (as data importer) under this DPA is a Restricted Transfer, Processor and Controller shall be bound by the Standard Contractual Clauses.

10. Final Provisions

10.1. Should the Controller require assistance in performing its obligations to respond to a request made by a data subject, in terms of exercising the rights of the later defined under GDPR Chapter III, the Controller shall notify the Processor of the requirement concerned. Terms of providing support by the Processor, referred to in the previous sentence, shall be agreed by and between the Parties in a separate agreement.

10.2. Should any of the provisions hereof be invalid or ineffective, it shall not affect validity or effectiveness of other provisions hereof. The Parties shall have such an invalid or ineffective provision replaced with another, valid and effective one, which shall reflect the business objective of the invalid or ineffective provision. Should the DPA fail to provide for a regulation it should have provided for by law, the Parties, acting in good faith, shall add such a regulation to the provisions hereof.