END-USER LICENSE AGREEMENT AND TERMS OF SERVICE Patronus Protect

Effective Date: 13 May 2026
Version: 1.0

IMPORTANT NOTICE TO USER

PLEASE READ THIS END-USER LICENSE AGREEMENT AND TERMS OF SERVICE (TOGETHER, THE
"AGREEMENT") CAREFULLY BEFORE DOWNLOADING, INSTALLING, OR USING THE SOFTWARE.

BY (i) CLICKING "I AGREE" OR ANY SIMILAR BUTTON PRESENTED DURING INSTALLATION,
(ii) DOWNLOADING OR INSTALLING THE SOFTWARE, OR (iii) OTHERWISE ACCESSING OR
USING THE SOFTWARE OR THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ THIS
AGREEMENT, UNDERSTAND IT, AND AGREE TO BE LEGALLY BOUND BY ITS TERMS. IF YOU DO
NOT AGREE, YOU MUST NOT INSTALL OR USE THE SOFTWARE AND MUST IMMEDIATELY DELETE
ANY COPIES IN YOUR POSSESSION.

THIS AGREEMENT IS ENTERED INTO BETWEEN YOU (AS DEFINED BELOW) AND Casdo Labs,
a German civil-law partnership (Gesellschaft bürgerlichen Rechts), comprising
Benedikt Veith, Dominik Hommer and Moritz Trautmann, organized under the laws
of the Federal Republic of Germany (THE "PROVIDER"). The Provider, Casdo Labs,
currently operates as a German civil-law partnership (Gesellschaft bürgerlichen
Rechts). A future conversion of Casdo Labs into a limited-liability company
(GmbH) or another corporate form is contemplated; in such event the Provider
shall novate this Agreement to the successor entity, provided that no term is
materially altered to Your detriment, and such novation shall not require Your
separate consent.

THIS AGREEMENT IS COMPRISED OF THREE PARTS:

• PART A: End-User License Agreement (Software License)

• PART B: Terms of Service (Service Use Terms)

• PART C: General Provisions Applying to Parts A and B

The Free Edition of the Software is provided to You at no charge. Section 17
contains important LIMITATIONS OF LIABILITY. Section 22 contains GOVERNING LAW
and JURISDICTION provisions. Please review these sections carefully.

1. DEFINITIONS

For the purposes of this Agreement, the following capitalized terms shall have
the meanings set forth below. Other capitalized terms are defined where they
first appear.

1.1 "Account" means an optional user account that You may create with the
Provider's identity provider (Clerk) in order to use features that
require authentication.

1.2 "Agreement" means this End-User License Agreement and Terms of Service,
including any annexes, schedules, and documents incorporated by
reference (including, without limitation, the Privacy Policy).

1.3 "Device" means a single physical Apple-branded computer running a
supported version of macOS that is owned or lawfully controlled by You.

1.4 "Documentation" means the user documentation, online help materials,
release notes, and any in-application descriptions that the Provider
makes available for the Software.

1.5 "Effective Date" means 13 May 2026, the date on which Version 1.0 of
the Software is initially released to the public.

1.6 "Free Edition" means the no-charge edition of the Software made
generally available to end users by the Provider on or after the
Effective Date.

1.7 "Open-Source Components" means third-party software components
incorporated into or distributed with the Software that are licensed
under open-source licenses, as further described in Section 6.

1.8 "Privacy Policy" means the Provider's privacy notice published
alongside the Software and incorporated into this Agreement by
reference under Section 14.

1.9 "Provider" has the meaning given in the Important Notice above.

1.10 "Root CA" means the root certification authority generated locally on
Your Device by the Software and installed by the Software into the
macOS System Keychain to enable the Software's traffic-inspection
function.

1.11 "Service" means the online components operated by or on behalf of the
Provider that the Software communicates with, including device
registration, software updates, telemetry endpoints, and any related
backend functionality.

1.12 "Software" means the macOS desktop application known as "Patronus
Protect", including its graphical user interface, the bundled System
Extension, the bundled local proxy, related libraries and binaries,
Documentation, and any Updates thereto, but excluding Open-Source
Components to the extent governed by their own licenses.

1.13 "System Extension" means the macOS Network Extension / App Proxy
Provider distributed as part of the Software.

1.14 "Telemetry" means non-content aggregate technical signals (such as
counters, latencies, and policy status) transmitted by the Software to
the Service, as further described in the Privacy Policy.

1.15 "Update" means any modification, patch, hotfix, upgrade, bug fix, or
new version of the Software that the Provider makes available to You.

1.16 "User" or "You" or "Your" means the natural person who installs or
uses the Software, and, where applicable, the legal entity on whose
behalf such natural person acts.

PART A - END-USER LICENSE AGREEMENT (EULA)

2. GRANT OF LICENSE

2.1 License Grant. Subject to Your continuing compliance with the terms and
conditions of this Agreement, the Provider hereby grants You a
personal, limited, non-exclusive, non-transferable, non-sublicensable,
royalty-free, revocable, worldwide license to install and use the Free
Edition of the Software, in object-code form only, on Devices that You
own or lawfully control, solely for Your own internal personal or
business purposes (the "License").

2.2 No Implied Licenses. No license, right, or interest in any trademark,
trade name, service mark, or logo of the Provider or any third party is
granted under this Agreement. All rights not expressly granted to You
are reserved by the Provider and its licensors.

2.3 No Fee. The Free Edition is provided to You at no charge. The
Provider's gratuitous provision of the Free Edition does not give rise
to any claim by You for continued availability, feature parity, or any
particular level of functionality.

3. PERMITTED USES

3.1 Subject to the restrictions in Section 4, You may:

(a) install the Software on any number of Devices that You own or lawfully control; (b) make one (1) backup copy of the Software for archival purposes, provided that such copy bears all proprietary notices contained in the original; (c) use the Software in the ordinary course of Your personal or professional activities, including on Devices made available to You by Your employer, provided that You are authorized by Your employer to install and run the Software (including the System Extension and the Root CA) on such Devices; and (d) configure the Software in accordance with the Documentation.

4. RESTRICTIONS

4.1 General. Except as expressly permitted by this Agreement or by
applicable mandatory law, You must not, and must not authorize or
permit any third party to:

(a) sell, lease, rent, lend, distribute, sublicense, host as a service, time-share, or otherwise commercially exploit the Software or make it available to any third party; (b) modify, adapt, alter, translate, port, or create derivative works based on the Software, or merge the Software with any other software; (c) reverse engineer, decompile, disassemble, decrypt, or otherwise attempt to derive the source code, underlying ideas, algorithms, file formats, or non-public APIs of the Software (the "Reverse-Engineering Restriction"); (d) remove, obscure, or alter any copyright, trademark, patent, or other proprietary or restrictive notice or legend contained in or on the Software or the Documentation; (e) use the Software to develop, train, benchmark, or evaluate any product or service that competes with the Software; (f) use the Software in violation of any applicable law or regulation, including, without limitation, laws relating to data protection, telecommunications privacy, computer crime, intellectual property, and export control; (g) use the Software to intercept, monitor, or analyse network traffic on any Device that You do not own or lawfully control, or in any manner that constitutes unlawful surveillance of any third party, or to circumvent the security of any system You are not authorized to access; (h) use the Software in any application or environment in which the failure of the Software could reasonably be expected to result in death, personal injury, or severe physical or environmental damage, including life support, nuclear, aviation, or other high-risk uses; (i) bypass, disable, or otherwise circumvent any license-validation, rate-limiting, or update-distribution mechanism of the Software or the Service; or (j) authorize any of the foregoing.

4.2 Reverse-Engineering Carve-Out (EU / EEA Users). Nothing in the
Reverse-Engineering Restriction shall limit or restrict any rights You
may have under mandatory applicable law that cannot be excluded by
contract. In particular, You retain the rights granted to lawful users
of computer programs under Articles 5 and 6 of Directive 2009/24/EC of
the European Parliament and of the Council of 23 April 2009 on the
legal protection of computer programs (the "EU Software Directive"),
including the right to:

(a) observe, study, and test the functioning of the Software in accordance with Article 5(3) of the EU Software Directive while performing any act of loading, displaying, running, transmitting, or storing the Software that You are entitled to perform; and (b) decompile the Software to the extent indispensable to obtain the information necessary to achieve the interoperability of an independently created computer program with the Software, in accordance with the conditions of Article 6 of the EU Software Directive. Where You intend to exercise the right described in subsection (b), You shall first request the necessary interoperability information from the Provider in writing and allow the Provider a reasonable period to provide it. United States Users retain any corresponding rights granted by Section 1201(f) of Title 17 of the United States Code, where applicable.

4.3 Compliance Obligation. You are responsible for ensuring that Your use
of the Software complies with all laws and regulations applicable to
You, including in Your country of residence and in any country from
which You access the Software.

5. RESERVATION OF RIGHTS AND INTELLECTUAL PROPERTY

5.1 Ownership. The Software is licensed, not sold. The Provider and its
licensors retain all right, title, and interest in and to the
Software, the Documentation, the Service, and all related intellectual
property rights, including, without limitation, all copyrights,
patents, trademarks, trade secrets, and database rights. This
Agreement does not convey to You any rights of ownership in or related
to the Software.

5.2 Feedback. If You provide the Provider with any suggestions, comments,
improvement ideas, or other feedback relating to the Software or the
Service ("Feedback"), You grant the Provider a perpetual, irrevocable,
worldwide, royalty-free, non-exclusive, sublicensable license to use,
reproduce, modify, and exploit such Feedback for any purpose, without
obligation or compensation to You. You represent that You have the
right to grant such license and that the Feedback does not include
confidential information of any third party.

5.3 Marks. "Patronus Protect" and any related logos, slogans, and product
names are trademarks or service marks of the Provider. You shall not
use such marks except (i) as expressly authorized by this Agreement
or in writing by the Provider, or (ii) for nominative-fair-use
references to the Software that comply with applicable trademark law.

6. OPEN-SOURCE COMPONENTS

6.1 Inclusion. The Software incorporates certain Open-Source Components,
including, without limitation, components based on Tauri (MIT /
Apache-2.0), ONNX Runtime (MIT), HuggingFace Tokenizers (Apache-2.0),
mitmproxy (MIT), the Clerk React SDK (MIT), and various Rust crates
such as serde, reqwest, and sentry-rust (MIT / Apache-2.0).

6.2 Notice File. A complete list of the Open-Source Components included
in the version of the Software installed on Your Device, together
with the applicable license texts and required attribution notices,
is accessible from within the Software at the menu item
"About Patronus Protect -> Licenses" and as a NOTICE file installed
alongside the Software bundle.

6.3 Precedence. The terms of the applicable open-source licenses govern
Your use, modification, and redistribution of each Open-Source
Component to the extent required by such license. To the extent any
provision of this Agreement conflicts with the terms of an applicable
open-source license with respect to a particular Open-Source
Component, the terms of such open-source license shall prevail with
respect to that Open-Source Component, but only to the extent of the
conflict.

6.4 No Warranty for Open-Source Components. Open-Source Components are
provided under their respective licenses, which typically include "as
is" disclaimers. The Provider provides no additional warranty in
respect of Open-Source Components beyond what is required by their
respective licenses or by mandatory applicable law.

7. LICENSE TERM, TERMINATION, AND EFFECTS OF TERMINATION

7.1 Term. The License granted under Section 2 commences on the date You
first install or use the Software and continues until terminated as
provided in this Section 7.

7.2 Termination by You. You may terminate this Agreement at any time and
for any reason by ceasing all use of the Software and uninstalling it
from all Devices.

7.3 Termination by the Provider. The Provider may terminate this
Agreement and the License (i) immediately upon notice to You if You
materially breach this Agreement and fail to cure such breach within
thirty (30) days after receipt of written notice (or, where the
breach is incapable of cure or relates to a violation of
Section 4.1(f), 4.1(g), 19, or any applicable law, immediately
without prior notice), or (ii) for convenience upon thirty (30) days'
written notice to You.

7.4 Effects of Termination. Upon termination of this Agreement, for any
reason:

(a) all rights granted to You under this Agreement, including the License, will immediately terminate; (b) You must promptly cease all use of the Software; (c) You must uninstall the Software, including the System Extension, from all Devices on which it is installed; (d) YOU MUST REMOVE THE ROOT CA THAT THE SOFTWARE INSTALLED INTO THE macOS SYSTEM KEYCHAIN ON EACH AFFECTED DEVICE. Failure to remove the Root CA may leave Your Device in a state in which third parties holding the corresponding private key could theoretically present trusted certificates for arbitrary hosts. The Provider does not retain such private key material, which is generated locally on Your Device, but recommends that You delete the Root CA out of an abundance of caution; and (e) You should delete the local data directories created by the Software, including those located at ~/Library/Application Support/com.patronus.desktop/, ~/Library/Logs/com.patronus.desktop/, and ~/Library/Caches/com.patronus.desktop/.

7.5 Survival. The provisions of Sections 1, 4, 5, 6.3, 7.4, 7.5, 14, 16,
17, 18, 19, 22, 23, and 25 will survive any termination or
expiration of this Agreement.

PART B - TERMS OF SERVICE (SERVICE USE)

8. ACCOUNT REGISTRATION

8.1 Anonymous Device Registration. When the Software is first launched
on a Device, it will register the Device with the Service by
transmitting a locally generated device identifier and edition code
to the Provider's backend in order to receive a cryptographic
device token. No personal information is required for this
registration, and the registration is treated as pseudonymous. The
Privacy Policy describes this process in detail.

8.2 Optional Sign-In. Use of the Free Edition does not require You to
create an Account. You may optionally choose to sign in via the
Provider's identity provider (Clerk) to access features that require
authentication. If You create an Account, You must:

(a) provide accurate, current, and complete information when registering and keep it up to date; (b) maintain the confidentiality of Your credentials and any authentication factors associated with Your Account; and (c) promptly notify the Provider of any suspected unauthorized access to or use of Your Account.

8.3 Responsibility for Account. You are solely responsible for all
activity that occurs under Your Account, except to the extent caused
by the Provider's intentional misconduct or gross negligence.

9. ACCEPTABLE USE POLICY

9.1 You agree not to use the Software or the Service:

(a) in violation of any law, regulation, or third-party rights; (b) to upload, transmit, or store any content that is unlawful, defamatory, infringing, harassing, or otherwise objectionable; (c) to send any malware, viruses, worms, trojans, ransomware, or other malicious code, or to interfere with, disrupt, or impose an unreasonable load on the Service or any infrastructure used to provide it; (d) to attempt to gain unauthorized access to any account, system, or network of the Provider or any third party; (e) to engage in scraping, crawling, or automated collection of data from the Service that is not expressly permitted by the Provider; (f) to reverse engineer or probe the Service for vulnerabilities, except pursuant to a vulnerability disclosure program operated by the Provider; or (g) to facilitate any of the foregoing.

9.2 The Provider may, in its reasonable discretion and without
liability, investigate suspected violations of this Section 9 and
take appropriate action, including the suspension or termination of
access to the Service.

10. EXPRESS CONSENT TO SYSTEM MODIFICATIONS

10.1 Purpose. The Software performs its security function by deploying
a macOS System Extension and a locally installed Root CA. By
installing the Software, You expressly consent to the system-level
modifications described in this Section 10.

10.2 System Extension. You expressly consent to the installation,
activation, and operation on Your Device of a macOS Network
Extension / App Proxy Provider distributed as part of the
Software, which intercepts and routes outbound network traffic to
supported AI providers (currently approximately fifty-six (56)
providers) through a local proxy operated by the Software.

10.3 Root CA Installation. You expressly consent to the generation of a
Root CA on Your Device and to its installation, with Your
administrator credentials, into the macOS System Keychain as a
trusted root certificate. You acknowledge and accept that, for as
long as the Root CA is installed, the Software is technically
capable of decrypting outbound TLS traffic from Your Device to the
supported AI provider hostnames. You further acknowledge that:

(a) the Root CA's private key is generated and stored exclusively on Your Device and is not transmitted to the Provider; (b) only network traffic to the supported AI provider hostnames is routed through the local proxy by default; and (c) You are responsible for removing the Root CA upon uninstallation, in accordance with Section 7.4(d).

10.4 Automatic Updates. You expressly consent to the Software
periodically checking for, downloading, and installing Updates,
and to the Service distributing such Updates over secure channels
operated by or on behalf of the Provider. The Provider may, but
is not obligated to, provide release notes for Updates.

10.5 Telemetry. You expressly consent to the collection and
transmission of Telemetry as described in the Privacy Policy. The
Provider does not collect prompt content or response content via
Telemetry. Where the Privacy Policy permits You to disable
Telemetry, You may exercise that option at any time.

11. USER REPRESENTATIONS AND WARRANTIES

11.1 You represent and warrant that:

(a) You are at least sixteen (16) years of age or have obtained the consent of Your parent or legal guardian to enter into this Agreement and to install the Software; (b) You have full legal capacity and authority to enter into this Agreement and, where applicable, to bind any legal entity on whose behalf You act; (c) You are the sole user of the Device on which the Software is installed, or, if other persons use the Device, You have obtained their informed consent to the system modifications described in Section 10 and to the operation of the Software; (d) You are not located in, under the control of, or a resident of any country, region, or territory that is subject to a comprehensive embargo administered by the European Union, the United States Government, the United Kingdom, or the United Nations, and You are not on any list of restricted parties maintained by any of those authorities (including, without limitation, the U.S. Treasury Department's Office of Foreign Assets Control Specially Designated Nationals and Blocked Persons List and the EU consolidated financial sanctions list); and (e) You will not use the Software in violation of any export control or sanctions law described in Section 19.

12. UPDATES AND MODIFICATIONS TO THE SOFTWARE

12.1 Right to Modify. The Provider may, at its discretion and without
liability, modify, enhance, deprecate, or remove features of the
Software and the Service, including in response to legal,
regulatory, security, technical, or commercial considerations.

12.2 Automatic Distribution. Updates may be distributed and installed
automatically. Where an Update materially reduces the functionality
of the Software on which You reasonably rely, the Provider will
use reasonable efforts to provide advance notice within the
Software.

12.3 Critical Updates. The Provider reserves the right to deploy
Updates without prior notice where necessary to address serious
security vulnerabilities or material compliance issues, in which
case notice will be provided promptly after deployment.

12.4 No Obligation. Nothing in this Agreement obligates the Provider to
develop, release, or maintain any particular Update or feature.

13. THIRD-PARTY AI SERVICES

13.1 Independent Relationship. The Software interacts with third-party
AI services operated by entities other than the Provider
(including, but not limited to, OpenAI, Anthropic, Google, and
Microsoft) (each, a "Third-Party AI Service"). Your use of any
Third-Party AI Service is governed by Your separate contractual
relationship with the provider of that Third-Party AI Service,
including any terms of service, acceptable use policy, and
privacy notice that they publish.

13.2 No Agency. The Provider is not a party to, and assumes no
responsibility under, any contract between You and any Third-Party
AI Service. The Provider does not act as Your agent or
representative in respect of any Third-Party AI Service and is
not a processor of personal data on behalf of any Third-Party AI
Service.

13.3 No Endorsement. The inclusion of any Third-Party AI Service in
the list of supported providers does not constitute an
endorsement of that Third-Party AI Service by the Provider.

13.4 Compliance. You are solely responsible for ensuring that Your use
of the Software in connection with any Third-Party AI Service
complies with the terms imposed by that Third-Party AI Service,
including any restrictions on automated access, content
inspection, or processing of personal data.

14. PRIVACY

14.1 Privacy Policy. The processing of personal data in connection with
the Software and the Service is governed by the Privacy Policy,
which is incorporated into this Agreement by reference and forms
an integral part of it. By accepting this Agreement, You
acknowledge that You have read and understood the Privacy Policy.

14.2 Conflict. In case of a direct conflict between the Privacy Policy
and this Agreement on matters of data processing, the Privacy
Policy prevails.

15. SERVICE AVAILABILITY AND SUSPENSION RIGHTS

15.1 No Uptime Commitment. The Service is provided on an "as available"
basis. The Provider does not warrant that the Service will be
uninterrupted, error-free, timely, or available at any particular
time, and does not commit to any specific service level or
availability target for the Free Edition.

15.2 Maintenance. The Provider may, in its reasonable discretion,
schedule maintenance windows or perform emergency maintenance,
during which all or part of the Service may be unavailable.

15.3 Suspension. The Provider may suspend Your access to all or part
of the Service, without liability:

(a) if the Provider reasonably believes that You have violated Section 9 or any other material provision of this Agreement; (b) to investigate suspected unlawful or abusive activity; (c) to protect the security, integrity, or availability of the Service or any third party; or (d) if required by applicable law, court order, or other binding directive issued by a competent authority. The Provider will, where reasonably practicable and not prohibited by law, provide You with prior or contemporaneous notice of any suspension and an opportunity to remedy the underlying cause. PART C - GENERAL PROVISIONS APPLYING TO BOTH PARTS

16. DISCLAIMER OF WARRANTIES

16.1 As Is, As Available. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE
LAW, AND SUBJECT TO SECTION 16.4, THE SOFTWARE AND THE SERVICE
ARE PROVIDED "AS IS" AND "AS AVAILABLE", WITH ALL FAULTS, AND
WITHOUT WARRANTY OF ANY KIND. THE PROVIDER AND ITS LICENSORS,
SUPPLIERS, AND DISTRIBUTORS HEREBY DISCLAIM ALL WARRANTIES,
WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING,
WITHOUT LIMITATION, ANY IMPLIED WARRANTIES OF MERCHANTABILITY,
FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT,
AND ANY WARRANTIES ARISING OUT OF COURSE OF DEALING, USAGE, OR
TRADE PRACTICE.

16.2 Security Function. The Software is designed to assist You in
detecting and mitigating certain risks associated with the use of
Third-Party AI Services (such as prompt injection, accidental
exposure of personal data, and policy violations). YOU
ACKNOWLEDGE AND AGREE THAT NO SOFTWARE-BASED SECURITY MEASURE IS
INFALLIBLE AND THAT THE PROVIDER DOES NOT WARRANT THAT THE
SOFTWARE WILL DETECT OR PREVENT ALL POTENTIAL RISKS OR ATTACKS.
The Software is not a substitute for comprehensive endpoint
security, identity and access management, data-loss prevention,
or the exercise of Your own judgment in handling sensitive
information.

16.3 Beta and Preview Features. Any pre-release, beta, alpha,
experimental, or preview features that the Provider may make
available are provided strictly on an "as is" basis, without any
warranty whatsoever, and may be modified, suspended, or
discontinued at any time. You use such features at Your own
risk.

16.4 Mandatory Statutory Rights. Nothing in this Section 16 limits or
excludes any warranty, condition, or representation that cannot
be limited or excluded under applicable mandatory law (including,
in the case of German law, liability for fraudulent concealment
of defects and the rules applicable to gifts under sections 516
et seq. of the German Civil Code).

17. LIMITATION OF LIABILITY

17.1 Exclusion of Certain Damages. TO THE MAXIMUM EXTENT PERMITTED BY
APPLICABLE LAW, AND SUBJECT TO SECTION 17.4, IN NO EVENT WILL THE
PROVIDER, ITS AFFILIATES, OFFICERS, EMPLOYEES, AGENTS, LICENSORS,
OR SUPPLIERS BE LIABLE TO YOU FOR ANY INDIRECT, INCIDENTAL,
SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR
ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, USE, OR DATA,
ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE SOFTWARE, OR
THE SERVICE, EVEN IF THE PROVIDER HAS BEEN ADVISED OF THE
POSSIBILITY OF SUCH DAMAGES.

17.2 Aggregate Cap. TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW,
AND SUBJECT TO SECTION 17.4, THE AGGREGATE LIABILITY OF THE
PROVIDER ARISING OUT OF OR RELATING TO THIS AGREEMENT, THE
SOFTWARE, AND THE SERVICE IS LIMITED TO THE GREATER OF (i) THE
TOTAL AMOUNT PAID BY YOU TO THE PROVIDER FOR THE SOFTWARE IN THE
TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO LIABILITY,
OR (ii) ONE HUNDRED EUROS (EUR 100). YOU ACKNOWLEDGE THAT,
BECAUSE THE FREE EDITION IS PROVIDED AT NO CHARGE, THE AMOUNT
UNDER CLAUSE (i) WILL TYPICALLY BE ZERO.

17.3 Free-Software Standard of Care (German Law Default). Where the
law of the Federal Republic of Germany applies under Section 22,
the Software is provided gratuitously (Schenkung) within the
meaning of sections 516 et seq. of the German Civil Code (BGB),
and the Provider's liability is determined in accordance with
those provisions. In particular, the Provider is liable only for
fraudulent concealment of defects (section 524 BGB) and for
intent and gross negligence. The Provider's liability for slight
negligence in the breach of essential contractual duties
(Kardinalpflichten) - that is, duties whose fulfillment is
essential for the proper performance of this Agreement and on
whose observance You may regularly rely - is limited to damages
that are foreseeable and typical for contracts of this kind.

17.4 Carve-Outs. NOTHING IN THIS AGREEMENT LIMITS OR EXCLUDES THE
PROVIDER'S LIABILITY FOR:

(a) death or personal injury caused by the Provider's negligence or that of its legal representatives or vicarious agents; (b) intentional misconduct or gross negligence, including by the Provider's legal representatives or vicarious agents; (c) fraud or fraudulent misrepresentation, including fraudulent concealment of defects; (d) any liability that cannot be excluded or limited under the German Product Liability Act (Produkthaftungsgesetz) or any analogous mandatory product-liability or consumer-protection law of any other applicable jurisdiction; or (e) any other liability that cannot be limited or excluded under applicable mandatory law.

17.5 Backup Responsibility. You are responsible for maintaining
regular and adequate backups of Your data and configurations.
The Provider's liability for loss of data is limited to the
typical effort required to restore such data if You had
maintained regular and reasonably current backups.

17.6 Allocation of Risk. The Parties acknowledge that the limitations
in this Section 17 form an essential basis of the bargain
between them and reflect the allocation of risk inherent in the
gratuitous provision of the Software.

18. INDEMNIFICATION BY YOU

18.1 Indemnity. To the maximum extent permitted by applicable law, You
agree to defend, indemnify, and hold harmless the Provider and
its affiliates, officers, employees, agents, licensors, and
suppliers from and against any and all third-party claims,
demands, actions, proceedings, damages, losses, liabilities,
costs, and expenses (including reasonable attorneys' fees and
court costs) arising out of or relating to:

(a) Your breach of this Agreement; (b) Your violation of any law, regulation, or third-party right (including any intellectual-property, privacy, or publicity right); (c) Your installation or use of the Software on any Device that You do not own or lawfully control, or without the consent of all users of such Device as required by Section 11.1(c); (d) any content that You upload, submit, or transmit through the Software or the Service; or (e) Your gross negligence or intentional misconduct.

18.2 Conduct of Claims. The Provider will promptly notify You in
writing of any claim subject to indemnification, give You sole
control over the defense and settlement of such claim (provided
that any settlement requiring an admission of liability or
payment by the Provider requires the Provider's prior written
consent, not to be unreasonably withheld), and provide
reasonable cooperation at Your expense. The Provider may
participate in the defense at its own expense with counsel of
its choice.

18.3 No Reverse Indemnity. Because the Software is provided at no
charge under the Free Edition, no reciprocal indemnity is given
by the Provider under this Agreement.

19. EXPORT CONTROLS AND SANCTIONS

19.1 Compliance. The Software may be subject to export-control and
sanctions laws and regulations of the European Union, the
Federal Republic of Germany, the United States of America, and
other applicable jurisdictions, including, without limitation,
the EU Dual-Use Regulation (Regulation (EU) 2021/821), the U.S.
Export Administration Regulations (15 C.F.R. Parts 730-774), and
the sanctions programs administered by the U.S. Treasury
Department's Office of Foreign Assets Control (OFAC).

19.2 No Prohibited Destinations or Persons. You will not, and will
not permit any third party to, directly or indirectly export,
re-export, transfer, or release the Software (i) to any country,
region, or territory subject to a comprehensive embargo, (ii) to
any person or entity on any restricted-party list, or (iii) for
any end use prohibited under applicable export-control laws,
including any end use related to weapons of mass destruction or
to the design, development, production, or use of nuclear,
chemical, or biological weapons or missile technology.

19.3 Cooperation. You agree to cooperate with any reasonable request
by the Provider to demonstrate compliance with this Section 19,
including by providing any certifications or information that
may be required.

20. TERMINATION BY THE PROVIDER

20.1 The grounds and procedure for termination of this Agreement by
the Provider are set out in Section 7.3. In addition to the
grounds set out there, the Provider may also terminate this
Agreement immediately if the Provider ceases to make the Free
Edition generally available, in which case the Provider will
use reasonable efforts to give at least sixty (60) days'
advance notice in the Software or by other reasonable means.

20.2 Termination does not affect any rights or remedies that have
accrued before the effective date of termination.

21. MODIFICATIONS TO THESE TERMS

21.1 Right to Modify. The Provider may modify this Agreement from
time to time, for example to reflect changes in the Software,
in applicable law, or in the Provider's business model.

21.2 Notice. The Provider will provide notice of any material
modification by reasonable means, including by displaying a
notice within the Software, sending an email to the address
associated with Your Account (if any), or posting a notice on
the Provider's website.

21.3 Acceptance.

(a) Where the law of the Federal Republic of Germany applies, the modified terms will be deemed accepted by You if You do not object in text form within six (6) weeks after receipt of the notice, and the Provider has expressly drawn Your attention to this consequence in the notice. If You object within that period, You may continue to use the Software under the prior terms until the Provider terminates this Agreement under Section 7.3(ii), or You may terminate this Agreement under Section 7.2. (b) Where the law of the Federal Republic of Germany does not apply, Your continued use of the Software after the effective date of the modification constitutes Your acceptance of the modified terms. If You do not agree to the modified terms, You must stop using the Software.

21.4 No Retroactive Effect. Modifications will not apply
retroactively and will not deprive You of any rights that have
already accrued.

22. GOVERNING LAW AND JURISDICTION

22.1 Governing Law. This Agreement, and any non-contractual
obligations arising out of or in connection with it, are
governed by and construed in accordance with the substantive
laws of the Federal Republic of Germany, excluding (i) its
conflict-of-laws rules to the extent that they would lead to
the application of foreign law, and (ii) the United Nations
Convention on Contracts for the International Sale of Goods
(CISG).

22.2 Consumer-Protection Carve-Out. If You are a consumer with
habitual residence in a Member State of the European Union or
the European Economic Area, You also enjoy the protection
afforded to You by mandatory provisions of the law of the
country in which You have Your habitual residence. Nothing in
Section 22.1 deprives You of that protection.

22.3 Jurisdiction.

(a) If You are a merchant (Kaufmann), a legal entity under public law, or a special public-law fund, the exclusive place of jurisdiction for all disputes arising out of or in connection with this Agreement is the seat of the Provider in the Federal Republic of Germany. (b) For all other Users, the statutory rules on jurisdiction apply. In particular, consumers may bring proceedings against the Provider in the courts of the place where the consumer is domiciled.

22.4 EU Online Dispute Resolution. The European Commission provides
an online dispute resolution platform, which is accessible at
https://ec.europa.eu/consumers/odr/. The Provider is neither
obliged nor willing to participate in a dispute-resolution
procedure before a consumer arbitration board within the
meaning of the German Consumer Dispute Resolution Act
(Verbraucherstreitbeilegungsgesetz, VSBG).

23. CLASS-ACTION AND COLLECTIVE-PROCEEDING CONSIDERATIONS

23.1 No Class or Collective Proceedings. To the maximum extent
permitted by applicable law, all disputes between You and the
Provider arising out of or relating to this Agreement, the
Software, or the Service shall be resolved on an individual
basis only. You agree that You will not bring or participate
in any class action, mass action, collective action, or
representative proceeding against the Provider, except where
such waiver is prohibited by applicable mandatory law.

23.2 No Jury Trial. To the maximum extent permitted by applicable
law, You and the Provider each waive any right to a trial by
jury in any proceeding arising out of or relating to this
Agreement.

23.3 Severability of Waivers. If the waivers in Sections 23.1 or
23.2 are held to be unenforceable in any particular dispute,
the remainder of this Agreement shall remain in effect with
respect to that dispute, and the unenforceable portion shall
be severed only to the minimum extent necessary.

24. FORCE MAJEURE

24.1 The Provider will not be liable for any failure or delay in
performance under this Agreement that is caused by events
beyond its reasonable control, including, without limitation,
acts of God, natural disasters, war, terrorism, civil unrest,
government action, sanctions, pandemics, public-health
emergencies, labor disputes, failures of telecommunications or
internet infrastructure, failures of cloud-service providers,
cyberattacks, or shortages of materials or energy. The
Provider will use commercially reasonable efforts to mitigate
the effects of any force-majeure event.

25. MISCELLANEOUS

25.1 Entire Agreement. This Agreement, together with the Privacy
Policy and any applicable open-source license notices,
constitutes the entire agreement between You and the Provider
with respect to the subject matter hereof and supersedes all
prior or contemporaneous oral or written agreements,
proposals, and understandings.

25.2 No Waiver. The failure of the Provider to enforce any right
or provision of this Agreement will not be deemed a waiver of
such right or provision. Any waiver of any provision of this
Agreement will be effective only if in writing and signed by
the Provider.

25.3 Severability. If any provision of this Agreement is held to
be invalid, illegal, or unenforceable by a court of competent
jurisdiction, that provision will be severed or modified to
the minimum extent necessary so that the remaining provisions
of this Agreement continue in full force and effect. The
severed provision will be replaced by a provision whose
economic and legal effect comes as close as legally possible
to that of the invalid provision.

25.4 Assignment. You may not assign, transfer, or sublicense this
Agreement or any of Your rights or obligations under it,
whether by operation of law or otherwise, without the
Provider's prior written consent. Any attempted assignment in
violation of the foregoing is null and void. The Provider may
assign or transfer this Agreement, in whole or in part,
without restriction, including (i) to an affiliate, (ii) in
connection with the novation, conversion, or restructuring of
the Provider entity referred to in the Important Notice
(including a conversion of Casdo Labs into a Casdo Labs GmbH
or another corporate form), or (iii) in connection with a
merger, acquisition, reorganization, or sale of all or
substantially all of its assets.

25.5 No Third-Party Beneficiaries. Except as expressly set out in
this Agreement, nothing in this Agreement is intended to or
will confer upon any third party any legal or equitable right,
benefit, or remedy of any nature.

25.6 Independent Contractors. The Parties are independent
contractors. Nothing in this Agreement creates a partnership,
joint venture, agency, fiduciary, or employment relationship
between the Parties.

25.7 Notices. Notices to the Provider must be sent in text form to
the address set out in Section 26. Notices to You may be sent
to the email address associated with Your Account (if any) or
displayed within the Software. A notice is deemed received
(i) on the day of delivery if delivered by hand, (ii) on the
second business day after dispatch if sent by recognized
overnight courier, or (iii) on the day of transmission if sent
by email, provided that no bounce or delivery failure is
received.

25.8 Headings. Section headings are for convenience only and do
not affect the interpretation of this Agreement.

25.9 Language. This Agreement is concluded in the English language.
Where the Provider also publishes a German-language version,
the German-language version may be authoritative for Users with
habitual residence in the Federal Republic of Germany to the
extent required by mandatory consumer-protection law.

25.10 Interpretation. The words "include", "includes", and
"including" are to be read as if followed by "without
limitation". References to "Sections" are to sections of this
Agreement unless otherwise specified.

26. CONTACT INFORMATION

For questions regarding this Agreement, notices, or other legal communications,
please contact:

Casdo Labs (Gesellschaft bürgerlichen Rechts)
Partners / authorized representatives:
- Benedikt Veith
- Dominik Hommer
- Moritz Trautmann
Heiliggeistgasse 8
93047 Regensburg
Germany

Email: team@patronus.studio
Web: https://patronus.studio

For privacy-related inquiries, please also refer to the contact details set
out in the Privacy Policy.

Software versions as of the Effective Date:

• Patronus Protect macOS application: 1.0.3

• Network Extension component: 1.0.25

• Tauri layer: 0.1.2

Last updated: 13 May 2026.