OTHER POLICY

OVALBIS DATA PROCESSING AGREEMENT
Version: 1.0 Effective Date: 10/08/2026 Last Updated: 01/09/2026
1. PARTIES

This Data Processing Agreement ("DPA") is entered into between:

1.1 OVAL LTD

The company operating the OVALBIS platform, referred to in this DPA as:

"OVALBIS", "OVAL LTD", "we", "us", or "Processor".

Registered Address:

[Insert Address]

Email:

[Insert Privacy/Data Protection Email]

And:

1.2 Customer

The individual, company, organization, educational institution, or other entity subscribing to or using OVALBIS services and determining the purposes for which personal data is processed.

The Customer is referred to as:

"Customer", "Business", "Controller", or "you".

2. PURPOSE OF THIS AGREEMENT

This DPA establishes the obligations and responsibilities of OVAL LTD and the Customer concerning the processing of personal data through OVALBIS.

It applies where OVALBIS processes personal data on behalf of the Customer.

This DPA forms part of the agreement governing the Customer's use of OVALBIS.

3. RELATIONSHIP BETWEEN THE PARTIES

For personal data processed on behalf of the Customer:

Customer

Generally determines:

Why personal data is collected;

What personal data is processed;

Who the data concerns;

How the information should be used;

The lawful basis for processing.

The Customer may therefore act as the Data Controller or equivalent legal role.

OVALBIS

Processes the information on behalf of the Customer to provide the contracted services.

OVALBIS may therefore act as the Data Processor or equivalent legal role.

The exact legal roles may differ depending on the processing activity and applicable law.

4. SCOPE

This DPA applies to personal data processed through OVALBIS services, including where applicable:

OVALBIS Intelligence;

OVALBIS business-management features;

Accounting;

HR management;

Payroll;

Inventory management;

Sales;

Procurement;

Customer management;

Supplier management;

Business analytics;

Business reporting;

Business intelligence;

AI-assisted features;

APIs;

Integrations;

Other services provided under the Customer's OVALBIS subscription.

5. TYPES OF PERSONAL DATA

Depending on the Customer's use of OVALBIS, personal data may include:

Identity Information

Name;

Identification information;

Username;

Employee number;

Customer number.

Contact Information

Email;

Telephone number;

Address;

Business contact details.

Employment Information

Job title;

Department;

Employment status;

Contract information;

Work history;

Attendance;

Leave;

Performance information.

Payroll Information

Salary;

Allowances;

Deductions;

Payroll records;

Payment information;

Tax-related payroll information.

Customer Information

Customer identity;

Contact information;

Purchase history;

Account information;

Invoices;

Payment history.

Supplier Information

Supplier contact information;

Supplier transactions;

Contracts;

Payment records.

Financial Information

Where associated with an identifiable individual:

Transactions;

Accounts;

Payments;

Invoices;

Receivables;

Payables.

6. SPECIAL CATEGORIES AND SENSITIVE DATA

The Customer should not upload highly sensitive or special-category personal data into OVALBIS unless:

The applicable OVALBIS service expressly supports such processing;

The Customer has a lawful basis for processing it;

Appropriate safeguards are in place; and

Processing is permitted under applicable law.

Examples may include:

Health information;

Biometric information;

Genetic information;

Information concerning minors;

Highly sensitive identification information.

The Customer remains responsible for determining whether it is lawful to process such information.

7. PROCESSING ACTIVITIES

OVALBIS may process personal data for purposes including:

Account management;

Authentication;

Business management;

Accounting;

Payroll;

HR management;

Inventory management;

Sales;

Procurement;

Reporting;

Analytics;

Business intelligence;

Customer support;

Security;

Backup;

System maintenance;

Error detection;

Fraud prevention;

AI-assisted functionality requested by the Customer.

8. CUSTOMER INSTRUCTIONS

OVALBIS will process Customer personal data according to:

This DPA;

The applicable OVALBIS service agreement;

Customer instructions;

The functionality selected by the Customer;

Applicable law.

OVALBIS will not intentionally process Customer Data for unrelated purposes except where permitted or required by applicable law.

9. CUSTOMER RESPONSIBILITIES

The Customer is responsible for:

Determining the lawful basis for processing;

Providing appropriate privacy notices;

Obtaining required consent where applicable;

Ensuring data accuracy;

Ensuring data minimization;

Determining appropriate retention periods;

Managing employee and user access;

Responding to data-subject requests where required;

Complying with applicable data-protection laws;

Ensuring that information uploaded to OVALBIS may legally be processed.

10. OVALBIS RESPONSIBILITIES

OVALBIS will:

Process personal data according to applicable instructions;

Implement appropriate security measures;

Restrict access to authorized personnel;

Maintain reasonable safeguards;

Assist the Customer with applicable privacy obligations where reasonably possible;

Notify the Customer of certain qualifying security incidents;

Manage subprocessors appropriately;

Delete or return personal data where required under the agreement and applicable law.

11. CONFIDENTIALITY

OVALBIS will ensure that personnel authorized to process Customer personal data are subject to appropriate confidentiality obligations.

Personnel should access Customer data only when necessary for:

Providing services;

Security;

Technical support;

Maintenance;

Legal compliance;

Other authorized purposes.

12. SECURITY MEASURES

OVALBIS will maintain reasonable technical and organizational measures appropriate to the risks associated with processing.

These measures may include:

Technical Measures

Encryption in transit;

Secure authentication;

Password hashing;

Access controls;

Role-based permissions;

Network security;

Database security;

Monitoring;

Logging;

Vulnerability management;

Backup mechanisms.

Organizational Measures

Access-management procedures;

Security policies;

Employee confidentiality obligations;

Security awareness;

Incident-response procedures;

Data-management procedures.

Security measures may evolve as OVALBIS develops.

13. ACCESS CONTROL

OVALBIS will implement access controls designed to ensure that users can access only information they are authorized to access.

Business administrators are responsible for assigning appropriate permissions to their employees and users.

OVALBIS will maintain appropriate administrative controls over internal access.

14. DATA SEGREGATION

OVALBIS is designed as a multi-tenant platform.

Customer data should be logically separated so that one Customer cannot access another Customer's information without authorization.

The OVALBIS architecture will include controls intended to prevent unauthorized cross-company data access.

15. SUBPROCESSORS

OVALBIS may use third-party service providers to provide infrastructure or specific functionality.

Subprocessors may include providers of:

Cloud hosting;

Database infrastructure;

Payment processing;

Email;

Authentication;

Security;

Monitoring;

Customer support;

Artificial intelligence;

Analytics;

Storage.

OVALBIS will seek to ensure that relevant subprocessors are subject to appropriate contractual obligations concerning data protection.

16. AI SERVICE PROVIDERS

OVALBIS may integrate third-party AI services through APIs.

Where the Customer uses AI-powered OVALBIS functionality, relevant information may be transmitted to an AI service provider to generate the requested response.

OVALBIS will seek to minimize the information transmitted.

Where technically appropriate, OVALBIS may provide AI services with:

Aggregated information;

Calculated metrics;

Business summaries;

Relevant contextual information;

instead of transmitting the Customer's complete database.

The Customer should not intentionally submit unnecessary sensitive information to AI features.

The applicable AI service provider may process information under its own contractual terms and policies.

17. AI DATA MINIMIZATION

OVALBIS should implement an AI context layer designed to determine what information is necessary for a particular request.

For example:

Customer asks:

"Why did our profit decline?"

OVALBIS may provide the AI system with:

Revenue trend;

Expense trend;

Cost of goods sold;

Profit margin;

Inventory trend;

Relevant business KPIs.

It should not automatically send:

The entire employee database;

Unrelated customer records;

Unrelated supplier records;

Complete accounting databases.

18. DATA SUBJECT REQUESTS

Where the Customer receives a request from an individual concerning their personal data processed through OVALBIS, the Customer is generally responsible for responding to that request.

Where appropriate and legally required, OVALBIS will provide reasonable assistance to the Customer.

Requests may include:

Access;

Correction;

Deletion;

Restriction;

Objection;

Data portability.

OVALBIS may require reasonable verification before taking action affecting personal data.

19. DATA CORRECTION AND DELETION

Where technically possible, OVALBIS will provide functionality allowing authorized Customers to:

Correct information;

Delete information;

Restrict access;

Export information.

Some information may need to be retained because of:

Legal obligations;

Security;

Accounting;

Fraud prevention;

Dispute resolution;

Backup requirements.

20. DATA BREACH AND SECURITY INCIDENTS

OVALBIS will maintain procedures designed to identify, investigate, contain, and respond to security incidents.

Where OVALBIS becomes aware of a qualifying personal-data breach affecting Customer Data, OVALBIS will notify the Customer without undue delay where required by applicable law.

Where reasonably available, the notification may include:

Nature of the incident;

Categories of affected data;

Approximate number of affected records;

Potential consequences;

Measures taken;

Recommended mitigation actions.

The Customer remains responsible for determining whether it must notify affected individuals or regulatory authorities.

21. CUSTOMER RESPONSIBILITY FOR SECURITY INCIDENTS

The Customer must promptly notify OVALBIS if it becomes aware of:

Unauthorized access;

Compromised credentials;

Unauthorized data disclosure;

Suspicious account activity;

Security vulnerabilities affecting Customer use of OVALBIS.

The Customer should take reasonable steps to secure its accounts.

22. DATA RETENTION

OVALBIS will retain Customer Data according to:

The Customer's subscription;

Applicable service agreements;

Customer instructions;

Legal requirements;

Operational requirements.

Customers should configure retention settings where available.

23. DATA RETURN AND DELETION

Upon termination of the Customer's OVALBIS account, OVALBIS may provide reasonable mechanisms for exporting Customer Data where available.

Following the applicable retention period, OVALBIS may delete or anonymize Customer Data.

Backup copies may remain temporarily until overwritten according to normal backup cycles.

24. INTERNATIONAL DATA TRANSFERS

OVALBIS may use infrastructure and subprocessors located in countries other than the Customer's country.

Where personal data is transferred internationally, OVALBIS will seek to implement appropriate safeguards required by applicable law.

25. REGULATORY COOPERATION

Where reasonably necessary, OVALBIS may assist the Customer with information relevant to demonstrating compliance with applicable data-protection requirements.

Such assistance may include information concerning:

Security measures;

Processing activities;

Subprocessors;

Data-retention practices;

Incident procedures.

Additional audit or compliance services may be subject to separate agreements or fees for Enterprise customers.

26. AUDIT RIGHTS

Subject to reasonable confidentiality, security, and operational restrictions, the Customer may request information reasonably necessary to assess OVALBIS's compliance with this DPA.

For Enterprise customers, OVALBIS may provide additional documentation such as:

Security questionnaires;

Compliance documentation;

Audit summaries;

Relevant certifications where available;

Subprocessor information.

Audits must not compromise the security or confidentiality of other customers.

27. DATA PROTECTION IMPACT ASSESSMENTS

Where required by applicable law, OVALBIS may reasonably assist Customers with information needed for a Data Protection Impact Assessment concerning their use of OVALBIS.

The Customer remains responsible for conducting its own assessment where legally required.

28. REGULATORY AUTHORITIES

Where legally required, OVALBIS may cooperate with applicable data-protection authorities.

Nothing in this DPA prevents either party from complying with a lawful requirement from a competent authority.

29. GOVERNMENT REQUESTS

If OVALBIS receives a legally valid request from a government authority for Customer Data, OVALBIS may disclose the information where legally required.

Where legally permitted, OVALBIS may notify the Customer before responding.

OVALBIS may challenge or limit requests where reasonably appropriate and legally permitted.

30. CONFIDENTIAL BUSINESS INFORMATION

The Customer's business information may include confidential:

Financial information;

Pricing;

Customers;

Suppliers;

Employees;

Business strategies;

Inventory;

Sales;

Procurement;

Business plans.

OVALBIS will not intentionally sell Customer confidential business information as a commercial data product.

31. AGGREGATED AND ANONYMIZED DATA

OVALBIS may create aggregated or anonymized information that cannot reasonably identify a Customer or individual.

Such information may be used for:

Product improvement;

Research;

Statistics;

Industry analysis;

Simulation improvements;

Platform development.

OVALBIS will not intentionally disclose identifiable confidential Customer information through such aggregated analysis without authorization.

32. CHILDREN AND EDUCATIONAL USERS

Where OVALBIS is used by educational institutions, additional privacy requirements may apply.

The institution is responsible for determining appropriate authorization for student data.

Where minors use OVALBIS Simulation, OVAL LTD will seek to implement appropriate safeguards consistent with applicable law.

33. CUSTOMER DATA OWNERSHIP

As between the parties, the Customer retains its rights in Customer Data.

The Customer grants OVALBIS the limited rights necessary to process the information to provide the services.

This DPA does not transfer ownership of Customer Data to OVAL LTD.

34. OVALBIS INTELLECTUAL PROPERTY

Nothing in this DPA transfers ownership of:

OVALBIS software;

Source code;

Algorithms;

Platform architecture;

Designs;

Trademarks;

Documentation;

Proprietary technology.

These remain the property of OVAL LTD or its licensors.

35. DATA ACCURACY

The Customer is responsible for ensuring that information entered into OVALBIS is accurate and appropriate for its intended purpose.

OVALBIS may provide validation and automation tools but does not guarantee the accuracy of information supplied by the Customer.

36. FINANCIAL AND ACCOUNTING DATA

Where OVALBIS processes accounting information on behalf of a Customer, the Customer remains responsible for:

Accounting policies;

Data accuracy;

Regulatory compliance;

Tax compliance;

Financial reporting obligations;

Professional review where necessary.

OVALBIS is a technology provider and does not automatically become the Customer's accountant or auditor.

37. HR DATA

Where OVALBIS processes employee information, the Customer remains responsible for:

Employment-law compliance;

Employee notices;

Lawful processing;

Appropriate access controls;

Data accuracy;

Retention requirements.

38. TAX DATA

Where OVALBIS processes tax-related information, the Customer remains responsible for determining and complying with applicable tax obligations.

OVALBIS does not guarantee that tax rules, rates, thresholds, or calculations will always be complete or current.

39. LIMITATION OF PROCESSING

OVALBIS will not intentionally use Customer personal data for unrelated purposes unless:

Authorized by the Customer;

Required to provide the service;

Required by law;

Necessary to protect the security of the platform;

Otherwise permitted by applicable law.

40. CONFLICT WITH OTHER AGREEMENTS

If there is a conflict between this DPA and the OVALBIS Terms of Service concerning personal-data processing, this DPA will control with respect to data-processing matters.

A separately negotiated Enterprise Agreement may modify these terms where expressly stated.

41. TERM

This DPA remains effective while OVALBIS processes personal data on behalf of the Customer.

Certain provisions, including confidentiality, security, data deletion, and legal obligations, may continue after termination where required.

42. TERMINATION

Termination of the OVALBIS subscription or service agreement will generally terminate the Customer's use of OVALBIS.

Data handling after termination will be governed by the applicable retention and deletion provisions.

43. GOVERNING LAW

The governing law for this DPA should be specified in the final agreement based on:

OVAL LTD's legal jurisdiction;

Customer location;

Applicable data-protection laws;

International data-transfer requirements.

The final version should be reviewed by qualified legal counsel.

44. LIABILITY

Liability arising from this DPA will be governed by the applicable OVALBIS service agreement unless otherwise required by applicable law or agreed in writing.

Nothing in this DPA is intended to exclude liability that cannot legally be excluded.

45. CHANGES TO THIS DPA

OVAL LTD may update this DPA where necessary to reflect:

Changes in the OVALBIS platform;

Changes in technology;

Changes in subprocessors;

Changes in legal requirements;

Security improvements.

Where a material change substantially affects Customer obligations, OVAL LTD will seek to provide reasonable notice where required.

46. CONTACT

Questions concerning this DPA should be directed to:

OVAL LTD

Platform: OVALBIS

Data Protection Contact: [Insert Name/Title]

Email: [privacy@yourdomain.com]

Legal Email: [legal@yourdomain.com]

Address: [Insert Registered Address]

47. ANNEX A — PROCESSING DETAILS

Subject Matter

Processing of personal data required to provide OVALBIS services.

Duration

For the duration of the Customer's use of OVALBIS plus applicable retention periods.

Nature of Processing

Processing may include:

Collection;

Storage;

Organization;

Retrieval;

Analysis;

Reporting;

Modification;

Deletion;

Transmission to authorized subprocessors;

AI-assisted processing where requested.

Purpose

To provide:

Business management;

Accounting;

HR;

Payroll;

Inventory;

Sales;

Procurement;

Business intelligence;

Analytics;

Simulation;

AI-assisted services;

Security;

Customer support.

Categories of Data Subjects

Potentially:

Employees;

Customers;

Suppliers;

Contractors;

Business contacts;

Business owners;

Platform users;

Students;

Trainees;

Other individuals whose data is entered by the Customer.

48. ANNEX B — SECURITY MEASURES

OVALBIS should maintain appropriate controls including, where applicable:

Authentication

Password hashing;

Session security;

Multi-factor authentication where available;

Account recovery controls.

Authorization

Role-based access control;

Company-level data isolation;

Least-privilege access.

Infrastructure

Secure hosting;

Network controls;

Firewall protection;

Secure database configuration.

Encryption

HTTPS/TLS for data transmission;

Appropriate encryption for stored information where required.

Monitoring

Security logging;

Error monitoring;

Suspicious activity detection.

Backup

Regular database backups;

Backup access controls;

Disaster recovery procedures.

Personnel

Confidentiality obligations;

Appropriate access restrictions;

Security awareness.

Incident Response

Incident detection;

Containment;

Investigation;

Recovery;

Notification procedures.

49. ANNEX C — SUBPROCESSORS

OVALBIS may maintain a current list of subprocessors through its website or customer portal.

Potential categories include:

The final production DPA should include the actual providers used by OVAL LTD rather than only categories.

50. ANNEX D — AI PROCESSING

Where AI functionality is enabled:

OVALBIS may:

Receive a user request;

Determine the relevant business context;

Retrieve appropriate business metrics;

Minimize unnecessary information;

Send relevant context to an AI provider;

Receive the AI-generated response;

Apply OVALBIS processing rules;

Present the result to the user.

OVALBIS should avoid sending an entire Customer database to an AI provider for a request that requires only a small subset of information.

AI outputs are decision-support information and should be reviewed before important decisions are made.

51. ANNEX E — DATA RETURN AND DELETION

Upon termination, the Customer may request available data export within the applicable period.

After the applicable retention period, OVALBIS may:

Delete Customer Data;

Anonymize information;

Remove data from active systems;

Allow backup copies to expire according to backup schedules.

Where retention is legally required, OVALBIS may retain the relevant information for the required period.

OVALBIS ACCEPTABLE USE POLICY

1. INTRODUCTION

This Acceptable Use Policy ("AUP") explains the permitted and prohibited uses of the OVALBIS platform and services.

OVALBIS is operated by OVAL LTD and provides business simulation, business management, accounting, HR management, inventory management, business intelligence, analytics, and AI-assisted services.

This Policy applies to all users of OVALBIS, including:

Individual users;

Young entrepreneurs;

Students;

Educational institutions;

Business owners;

Employees;

Business administrators;

Enterprise customers;

Developers using OVALBIS APIs;

Other authorized users.

By using OVALBIS, you agree to comply with this Policy.

This Policy forms part of the OVALBIS Terms of Service.

2. PURPOSE OF THIS POLICY

The purpose of this Policy is to:

Protect OVALBIS users;

Protect business information;

Protect personal information;

Prevent fraud and abuse;

Maintain platform security;

Protect system availability;

Prevent illegal activities;

Promote responsible use of AI;

Protect the integrity of business simulations;

Protect the reliability of OVALBIS business-management tools.

3. ACCEPTABLE USE

Users may use OVALBIS for lawful business, educational, entrepreneurial, analytical, and administrative purposes.

Examples include:

Business Simulation

Practicing business strategies;

Testing pricing strategies;

Simulating competition;

Practicing hiring decisions;

Testing marketing strategies;

Simulating taxation;

Testing business expansion;

Learning financial management.

Real Business Management

Recording transactions;

Managing inventory;

Managing employees;

Managing customers;

Managing suppliers;

Managing sales;

Managing procurement;

Preparing management reports;

Monitoring business performance.

Business Intelligence

Analyzing business performance;

Identifying business risks;

Setting targets;

Monitoring milestones;

Generating reports;

Using AI-assisted analysis;

Making informed business decisions.

4. GENERAL USER RESPONSIBILITIES

Users must:

Provide accurate information where required;

Maintain secure account credentials;

Use appropriate access permissions;

Protect confidential business information;

Respect other users;

Comply with applicable laws;

Use the platform responsibly;

Verify important information generated by OVALBIS;

Report security problems responsibly.

5. PROHIBITED ACTIVITIES

Users must not use OVALBIS for illegal, fraudulent, abusive, deceptive, or harmful activities.

Prohibited activities include:

Fraud;

Money laundering;

Theft;

Unauthorized financial activity;

Identity theft;

Cyberattacks;

Unauthorized access;

Malware distribution;

Harassment;

Data theft;

Intellectual property infringement;

Platform abuse;

Circumvention of security controls.

6. FRAUDULENT BUSINESS ACTIVITIES

OVALBIS must not be used to facilitate fraudulent business activities.

Users must not intentionally create or manipulate records for unlawful purposes.

Examples include intentionally creating false:

Invoices;

Receipts;

Financial statements;

Payroll records;

Tax records;

Inventory records;

Sales records;

Purchase records;

Customer records;

Supplier records.

7. TAX AND FINANCIAL MISUSE

OVALBIS must not be used to intentionally create fraudulent tax or financial records.

Examples include:

Creating false expenses;

Hiding taxable income;

Manipulating transactions;

Creating fictitious employees;

Creating fictitious suppliers;

Creating fictitious customers;

Manipulating financial statements;

Generating fraudulent tax documentation.

OVALBIS does not authorize users to violate tax or financial laws.

8. ACCOUNTING RESPONSIBILITY

OVALBIS may automate accounting calculations and generate financial reports.

However, users remain responsible for:

Data accuracy;

Correct transaction entry;

Accounting policies;

Reviewing generated reports;

Regulatory compliance;

Professional accounting requirements.

Users must not intentionally enter false information to obtain misleading financial results.

9. HR AND EMPLOYEE DATA

Users may use OVALBIS to manage employee information where permitted by applicable law.

Users must:

Have appropriate authority to process employee information;

Limit access to authorized personnel;

Avoid unnecessary collection of employee data;

Maintain appropriate security;

Follow applicable employment and privacy laws.

Users must not use OVALBIS to unlawfully discriminate against employees or applicants.

10. PROHIBITED EMPLOYMENT DISCRIMINATION

Users must not use OVALBIS tools, including AI-assisted features, to make unlawful discriminatory decisions based on protected characteristics.

For example, users should not use the system to unlawfully exclude or disadvantage people based on characteristics protected by applicable law.

AI-generated recommendations must not automatically be treated as final employment decisions.

Human review should be applied to important employment decisions.

11. CUSTOMER AND SUPPLIER INFORMATION

Users must only upload or process customer and supplier information that they are authorized to use.

Users must not:

Collect information unlawfully;

Upload stolen data;

Sell unauthorized personal information;

Use customer information for unlawful purposes;

Expose customer records to unauthorized users.

12. PERSONAL DATA

Users must comply with applicable privacy and data-protection laws.

Users should not upload personal information unless there is an appropriate reason and lawful basis for processing it.

Users should avoid uploading unnecessary sensitive information.

13. SENSITIVE INFORMATION

Unless specifically supported and authorized, users should not store unnecessary highly sensitive information in OVALBIS.

Examples may include:

Passwords;

Authentication secrets;

Private encryption keys;

Financial account credentials;

Medical information;

Biometric information;

Highly sensitive identification information.

OVALBIS features should not be used as a general-purpose secret-storage system.

14. ACCOUNT SECURITY

Users must protect their accounts.

Users must not:

Share passwords;

Sell accounts;

Rent accounts;

Transfer accounts without authorization;

Attempt to access another person's account;

Use stolen credentials;

Bypass authentication;

Circumvent multi-factor authentication.

If an account is compromised, the user should notify OVALBIS as soon as reasonably possible.

15. UNAUTHORIZED ACCESS

Users must not attempt to gain unauthorized access to:

Another user's account;

Another company's data;

OVALBIS databases;

Internal systems;

APIs;

Administrative interfaces;

Infrastructure;

Cloud systems;

Security controls.

16. SECURITY TESTING

Users must not perform unauthorized:

Penetration testing;

Vulnerability scanning;

Exploit attempts;

Denial-of-service testing;

Authentication attacks;

Database attacks.

Security researchers who wish to test OVALBIS should first obtain written authorization from OVAL LTD.

17. MALWARE

Users must not upload, transmit, distribute, or execute:

Viruses;

Worms;

Trojans;

Ransomware;

Spyware;

Keyloggers;

Malicious scripts;

Botnet software;

Other malicious code.

18. SYSTEM ABUSE

Users must not intentionally interfere with OVALBIS infrastructure.

Examples include:

Excessive automated requests;

Resource exhaustion;

Denial-of-service attacks;

Database flooding;

API abuse;

Automated account creation;

Circumventing usage limits.

19. API USE

Where OVALBIS provides APIs, users must use them according to applicable API documentation and limits.

Users must not:

Abuse API endpoints;

Circumvent rate limits;

Harvest unauthorized data;

Reverse engineer restricted APIs;

Share API keys publicly;

Use API credentials belonging to another user;

Create excessive automated traffic.

API credentials should be treated as confidential.

20. AUTOMATION AND BOTS

Automated access may be permitted where OVALBIS expressly supports it.

Users must not use bots or automated systems to:

Circumvent subscription limits;

Create fake accounts;

Scrape protected information;

Overload the platform;

Manipulate simulations;

Manipulate rankings;

Manipulate business competitions.

21. SIMULATION INTEGRITY

OVALBIS Simulation is intended to provide a fair environment for business learning and competition.

Users must not manipulate simulations through:

Exploiting software bugs;

Creating multiple fraudulent accounts;

Automated gameplay;

Unauthorized database modification;

Collusion;

Fake transactions;

Manipulating rankings;

Sharing restricted simulation information where prohibited.

OVALBIS may invalidate results obtained through prohibited behavior.

22. COMPETITION AND LEADERBOARDS

Where OVALBIS provides competitions or leaderboards, users must not attempt to artificially increase:

Scores;

Profits;

Market share;

Rankings;

Achievements;

Competition results.

OVALBIS may investigate suspicious activity.

23. AI ACCEPTABLE USE

OVALBIS AI features must be used responsibly.

Users must not intentionally use OVALBIS AI services to:

Generate fraudulent business records;

Facilitate illegal activities;

Circumvent security controls;

Generate malicious code for attacks;

Conduct fraud;

Manipulate financial information unlawfully;

Generate discriminatory employment decisions;

Create deceptive documents for unlawful purposes.

24. AI DECISION-MAKING

AI recommendations are intended to assist users.

Users should not rely solely on AI-generated recommendations for high-impact decisions.

Examples include:

Hiring;

Termination;

Major investments;

Large loans;

Tax decisions;

Legal decisions;

Major financial transactions.

Appropriate human review should be used.

25. AI OUTPUT VERIFICATION

AI-generated information may be:

Incorrect;

Incomplete;

Outdated;

Misleading;

Based on incomplete data.

Users should verify important AI outputs before acting on them.

26. PROMPT ABUSE

Users must not intentionally use OVALBIS AI features to:

Extract confidential information belonging to other businesses;

Circumvent system permissions;

Attempt to expose internal prompts or secrets;

Extract protected system information;

Manipulate security mechanisms.

27. INTELLECTUAL PROPERTY

Users must respect intellectual property rights.

Users must not upload or distribute content that they do not have the right to use.

This includes unauthorized:

Software;

Images;

Documents;

Videos;

Databases;

Trademarks;

Copyrighted materials.

28. COPYRIGHT INFRINGEMENT

OVALBIS must not be used to distribute or facilitate unauthorized copies of copyrighted material.

Users are responsible for ensuring that their uploaded content does not unlawfully infringe third-party rights.

29. HARASSMENT AND ABUSE

Users must not use OVALBIS to:

Threaten others;

Harass users;

Bully users;

Intimidate users;

Distribute abusive content;

Engage in targeted harassment.

30. ILLEGAL CONTENT

Users must not use OVALBIS to store, distribute, or facilitate unlawful content or activities.

OVAL LTD may remove or restrict access to content where reasonably necessary to comply with law or protect users and the platform.

31. MISREPRESENTATION

Users must not falsely claim to:

Represent OVAL LTD;

Represent OVALBIS;

Be an OVALBIS employee;

Be an authorized partner;

Own another user's account;

Have permissions they do not possess.

32. IMPERSONATION

Users must not impersonate:

Other users;

Business owners;

Employees;

OVAL LTD personnel;

Government officials;

Financial institutions;

Other organizations.

33. SPAM

Users must not use OVALBIS to distribute:

Unsolicited bulk messages;

Spam;

Malicious links;

Phishing messages;

Fraudulent communications.

34. PHISHING

OVALBIS must not be used to create or distribute deceptive communications designed to obtain:

Passwords;

Authentication codes;

Payment information;

Personal information;

Business credentials.

35. DATA SCRAPING

Users must not scrape, harvest, or systematically collect information from OVALBIS that they are not authorized to access.

This includes:

User information;

Business information;

Employee records;

Customer information;

Supplier information;

Internal system information.

36. DATA ISOLATION

OVALBIS may host multiple businesses within the same platform.

Users must not attempt to access information belonging to another business.

A user who discovers another company's data accidentally must:

Stop accessing it;

Avoid copying or distributing it;

Notify OVAL LTD;

Follow reasonable instructions for secure handling.

37. BUSINESS CONFIDENTIALITY

Users should treat information belonging to other businesses as confidential.

Users must not intentionally:

Copy another company's information;

Sell another company's information;

Publish confidential information;

Use another company's information for competitive advantage.

38. SUBSCRIPTION ABUSE

Users must not circumvent subscription restrictions.

Examples include:

Sharing paid accounts improperly;

Creating multiple accounts to bypass limits;

Using technical methods to unlock premium features;

Manipulating subscription systems;

Circumventing AI usage limits.

39. FREE-PLAN ABUSE

Free plans must not be used to create excessive accounts for the purpose of obtaining resources beyond intended limits.

OVAL LTD may restrict or suspend accounts involved in systematic free-plan abuse.

40. PAYMENT FRAUD

Users must not use:

Stolen payment cards;

Unauthorized payment accounts;

Fraudulent payment information;

Chargeback abuse;

Payment manipulation.

41. BUSINESS REPORT MISUSE

Reports generated by OVALBIS may be used for legitimate business purposes.

Users remain responsible for verifying reports before submitting them to:

Banks;

Investors;

Regulators;

Tax authorities;

Auditors;

Government agencies;

Business partners.

OVALBIS does not guarantee that every automatically generated report will satisfy every external organization's requirements.

42. TAX REPORT MISUSE

Users must not knowingly submit automatically generated or modified OVALBIS information to tax authorities when they know that the information is false or misleading.

Users remain responsible for reviewing tax-related information.

43. FINANCIAL DECISION-MAKING

OVALBIS may provide financial analysis and recommendations.

Users must not represent OVALBIS outputs as guaranteed financial outcomes.

Important financial decisions should be reviewed by qualified professionals where appropriate.

44. BUSINESS INTELLIGENCE MISUSE

Business Intelligence features must not be used to unlawfully:

Monitor individuals;

Profile employees;

Discriminate against people;

Obtain competitor secrets;

Collect unauthorized personal information.

45. THIRD-PARTY INTEGRATIONS

Users must ensure that information shared through integrations is authorized.

Before connecting an external service, users should verify:

What information will be shared;

Which permissions are granted;

Which organization controls the external service;

Whether the integration is appropriate for their business.

46. SECURITY VULNERABILITY REPORTING

If you discover a potential vulnerability in OVALBIS, report it responsibly to:

Security Email: [security@ovalbis.com]

Reports should include enough information for OVAL LTD to investigate the issue.

Security researchers should not:

Access unrelated user data;

Modify customer information;

Destroy information;

Disrupt services;

Publicly disclose an unresolved vulnerability without reasonable coordination.

47. ENFORCEMENT

OVAL LTD may take reasonable action when users violate this Policy.

Possible actions include:

Warning;

Removing prohibited content;

Restricting functionality;

Suspending an account;

Suspending API access;

Terminating an account;

Cancelling a subscription;

Preserving relevant evidence;

Reporting activity to appropriate authorities where legally required or appropriate.

48. INVESTIGATIONS

OVAL LTD may investigate suspected violations.

Where reasonably necessary, investigations may involve reviewing:

Account activity;

Security logs;

API usage;

Authentication events;

Relevant system records;

Reports of abuse.

Investigations will be conducted subject to applicable law and privacy obligations.

49. EMERGENCY ACTION

OVAL LTD may take immediate action when necessary to:

Protect users;

Protect business data;

Prevent security attacks;

Prevent fraud;

Protect platform infrastructure;

Comply with legal requirements.

Immediate action may occur without prior notice where delay could create significant risk.

50. REPORTING ABUSE

Users can report suspected violations by contacting:

OVAL LTD

Abuse Email: [abuse@yourdomain.com]

Reports should include:

Description of the issue;

Relevant account or business;

Date/time;

Supporting information;

Screenshots or other evidence where appropriate.

Users should not include unnecessary personal information in abuse reports.

51. FALSE REPORTS

Users must not knowingly submit false or malicious abuse reports intended to:

Harm another user;

Disrupt a competitor;

Cause an account to be suspended;

Manipulate a competition;

Harass another person.

52. POLICY UPDATES

OVAL LTD may update this Acceptable Use Policy when necessary.

Updates may be made because of:

New OVALBIS features;

Security improvements;

New technologies;

Changes to AI functionality;

Changes in law;

Changes in business operations.

The "Last Updated" date will identify the latest version.

53. RELATIONSHIP WITH OTHER POLICIES

This Policy should be read together with:

OVALBIS Terms of Service;

OVALBIS Privacy Policy;

OVALBIS Cookie Policy;

OVALBIS Data Processing Agreement;

OVALBIS Subscription & Billing Terms;

OVALBIS AI Usage Policy;

Other applicable agreements.

If there is a conflict, the applicable contractual agreement will determine which provision applies.

OVALBIS SUBSCRIPTION & BILLING TERMS

1. INTRODUCTION

These Subscription & Billing Terms ("Billing Terms") govern the purchase and use of paid subscription plans offered through the OVALBIS platform.

OVALBIS is operated by OVAL LTD and provides:

Business simulation;

Business intelligence;

Business management;

Accounting;

HR management;

Inventory management;

Sales management;

Procurement management;

Analytics;

Reporting;

AI-assisted business services;

Other related business-management functionality.

These Billing Terms form part of the OVALBIS Terms of Service.

By purchasing or using a paid OVALBIS subscription, you agree to these Billing Terms.

2. OVALBIS SUBSCRIPTION MODEL

OVALBIS operates primarily as a subscription-based Software-as-a-Service ("SaaS") platform.

OVALBIS may offer:

Free Plan

Starter Plan

Basic Plan

Standard Plan

Gold Plan

Enterprise Plan

The exact features, limits, prices, and availability of each plan will be displayed on the OVALBIS pricing page or within the customer's account.

3. FREE PLAN

The Free Plan may allow users to access selected OVALBIS functionality without paying a subscription fee.

The Free Plan may include limitations on:

Number of businesses;

Number of users;

Storage;

Reports;

Accounting functionality;

HR functionality;

Inventory functionality;

Business intelligence;

AI usage;

Data history;

Integrations;

Support.

OVAL LTD may modify the features available under the Free Plan.

4. PAID PLANS

Paid plans may include:

Starter

Designed for individuals and very small businesses beginning to use OVALBIS.

Basic

Designed for small businesses requiring additional business-management functionality.

Standard

Designed for growing businesses requiring more advanced management, analytics, accounting, HR, inventory, and AI capabilities.

Gold

Designed for established businesses requiring expanded capabilities, users, data, analytics, automation, and AI functionality.

Enterprise

Designed for larger organizations requiring customized features, integrations, support, security controls, and contractual arrangements.

The actual features and limits will be published on the OVALBIS pricing page.

5. PRICING

The applicable subscription price will be displayed before the customer completes a purchase.

Prices may vary based on:

Subscription plan;

Billing frequency;

Number of users;

Number of businesses;

Usage;

Storage;

AI consumption;

Optional features;

Geographic location;

Currency;

Taxes;

Enterprise requirements.

The price shown at checkout will be the price applicable to that transaction, subject to applicable taxes and disclosed charges.

6. BILLING FREQUENCY

OVALBIS may offer:

Monthly billing;

Annual billing;

Other billing periods.

The selected billing period will be shown during purchase.

Annual subscriptions may provide a lower effective monthly price than monthly subscriptions where OVALBIS offers annual discounts.

7. AUTOMATIC RENEWAL

Unless otherwise stated, paid subscriptions may automatically renew at the end of each billing period.

For example:

Monthly subscription

A subscription purchased on June 10 may renew around July 10.

Annual subscription

A subscription purchased on June 10 may renew around June 10 of the following year.

The applicable renewal amount will be communicated according to the applicable billing and notice requirements.

8. RENEWAL NOTICES

Where required by applicable law, OVALBIS may provide notice before automatic renewal.

Customers are responsible for maintaining current billing and contact information.

9. PAYMENT METHODS

OVALBIS may support payment methods such as:

Debit cards;

Credit cards;

Mobile payments;

Bank payments;

Online payment gateways;

Other supported payment methods.

Available payment methods may vary by country.

Payment processing may be performed by third-party payment providers.

10. PAYMENT PROVIDERS

OVALBIS may use third-party payment processors to process subscription payments.

Payment providers may have their own:

Privacy policies;

Security requirements;

Transaction limits.

OVAL LTD is not responsible for failures caused by payment providers beyond its reasonable control.

11. CURRENCY

OVALBIS may display subscription prices in currencies supported by the platform.

The available currency may depend on:

Customer location;

Payment method;

Billing provider;

OVALBIS configuration.

Currency conversion may be performed by the payment provider or financial institution.

Exchange rates may vary.

12. TAXES

Subscription prices may be subject to applicable taxes, including:

VAT;

Sales tax;

Digital-service taxes;

Other applicable government charges.

Where applicable, taxes may be added during checkout.

The customer is responsible for taxes that the customer is legally required to pay directly.

13. BUSINESS CUSTOMERS AND TAX INFORMATION

Business customers may be asked to provide:

Legal business name;

Business address;

Tax identification number;

Billing address;

Other information necessary for invoicing.

Customers are responsible for providing accurate information.

14. INVOICES AND RECEIPTS

OVALBIS may provide invoices or payment receipts electronically.

Invoices may include:

Customer name;

Subscription plan;

Billing period;

Amount;

Taxes;

Payment status;

Invoice number;

Transaction information.

Customers should retain invoices for their accounting records.

15. FAILED PAYMENTS

If a payment fails, OVALBIS may:

Notify the customer;

Retry the payment;

Request updated payment information;

Restrict paid features;

Downgrade the account;

Suspend the subscription;

Terminate the paid subscription.

The customer remains responsible for valid unpaid charges.

16. PAYMENT DISPUTES

If you believe you were incorrectly charged, contact OVALBIS support before initiating a payment dispute where reasonably possible.

We will investigate legitimate billing disputes.

Nothing in this section prevents a customer from exercising rights provided by applicable law or payment-provider rules.

17. UPGRADING A PLAN

Customers may upgrade their subscription where the option is available.

An upgrade may take effect:

Immediately;

At the beginning of the next billing period;

According to the billing system's displayed terms.

Where applicable, the customer may be charged a prorated amount for the remaining billing period.

The exact calculation will be displayed or determined by the applicable billing system.

18. DOWNGRADING A PLAN

Customers may downgrade where supported.

A downgrade may take effect:

Immediately;

At the end of the current billing period.

If the new plan has lower limits, customers may need to reduce:

Users;

Businesses;

Storage;

AI usage;

Data;

Integrations;

Other resources.

OVALBIS will provide reasonable information about requirements for completing a downgrade where technically possible.

19. PLAN LIMITS

Each subscription plan may have limits.

Examples include:

User Limit

Maximum number of authorized users.

Business Limit

Maximum number of companies/business profiles.

Storage Limit

Maximum amount of stored files or data.

AI Limit

Maximum AI requests, credits, tokens, or other usage measurements.

Transaction Limit

Maximum number of transactions processed during a billing period.

Report Limit

Maximum number of generated reports.

Integration Limit

Maximum number of connected third-party systems.

The applicable limits will be displayed with the selected plan.

20. USAGE-BASED FEATURES

Certain OVALBIS services may use usage-based pricing.

Examples include:

AI processing;

API requests;

Data storage;

Document processing;

Advanced analytics;

Automated reports.

Where usage-based charges apply, OVALBIS will disclose the applicable pricing before or during use where reasonably possible.

21. AI USAGE LIMITS

AI functionality may be subject to limits based on the customer's subscription.

Limits may be measured using:

Number of AI requests;

AI credits;

Tokens;

Processing volume;

Other usage measurements.

When a customer reaches an AI limit, OVALBIS may:

Stop additional AI requests;

Require an upgrade;

Offer additional AI credits;

Wait until the next billing period;

Apply another disclosed usage mechanism.

22. FAIR USE

Subscription plans are intended for reasonable use consistent with their advertised purpose.

OVAL LTD may establish fair-use controls to prevent:

Automated abuse;

Excessive resource consumption;

API abuse;

AI abuse;

Account sharing;

Infrastructure overload.

Fair-use controls will not be used to arbitrarily remove advertised core functionality from ordinary customers.

23. MULTI-USER BUSINESS ACCOUNTS

A business subscription may allow multiple authorized users.

The account administrator is responsible for:

Managing users;

Assigning roles;

Removing former employees;

Protecting account credentials;

Maintaining appropriate permissions.

Additional users may require additional subscription fees.

24. MULTIPLE BUSINESSES

A customer may be permitted to manage multiple businesses depending on the selected plan.

For example:

Starter → 1 Business

Basic → Multiple/limited Businesses

Standard → Expanded Businesses

Gold → Larger Business Portfolio

Enterprise → Custom

These are illustrative examples. The actual limits will be displayed on the OVALBIS pricing page.

25. STORAGE

Storage limits may apply to:

Documents;

Images;

Invoices;

Business files;

Reports;

Attachments;

Other uploaded information.

Customers should periodically export important business records where appropriate.

26. PLAN FEATURE CHANGES

OVAL LTD may improve or modify subscription features.

Changes may include:

New features;

Improved functionality;

Security improvements;

Updated AI functionality;

Changes to integrations;

Removal of obsolete functionality.

Where a material reduction to a paid service is proposed, OVAL LTD will seek to provide reasonable notice where required.

27. PROMOTIONAL PRICING

OVALBIS may offer:

Discounts;

Promotional prices;

Launch offers;

Student offers;

Startup offers;

Annual discounts;

Referral offers;

Promotional credits.

Promotional offers may have additional terms.

Unless expressly stated, promotional pricing does not automatically continue after the promotional period.

28. FREE TRIALS

OVALBIS may offer free trials of paid plans.

Trial periods may vary.

Unless clearly stated otherwise:

A trial does not guarantee continued access to paid features;

OVALBIS may require payment information;

A trial may automatically convert to a paid subscription where clearly disclosed;

Customers may cancel before the conversion date.

29. TRIAL ABUSE

A customer must not create multiple accounts to repeatedly obtain promotional trials.

OVAL LTD may restrict promotional eligibility where it reasonably determines that trial abuse has occurred.

30. REFUNDS

Refund eligibility depends on:

Applicable law;

Subscription type;

Payment method;

Promotional terms;

The reason for the request.

Except where required by applicable law or expressly stated otherwise, subscription payments are generally non-refundable after the applicable billing period begins.

31. REFUND REQUESTS

Customers requesting a refund should provide:

Account email;

Invoice number;

Transaction date;

Reason for the request.

Refunds may be issued to the original payment method where technically possible.

32. CANCELLATION

Customers may cancel a subscription through the available account settings or by contacting OVALBIS support.

Cancellation normally prevents future renewal.

Unless otherwise stated, cancellation does not automatically create a refund for the current billing period.

33. EFFECT OF CANCELLATION

After cancellation:

Paid features may remain available until the end of the current billing period;

The subscription may then become Free;

Certain features may become unavailable;

Usage limits may change;

Data may remain subject to applicable retention rules.

34. ACCOUNT TERMINATION

OVAL LTD may suspend or terminate a subscription where permitted under the OVALBIS Terms of Service.

Reasons may include:

Non-payment;

Fraud;

Abuse;

Security violations;

Illegal activities;

Serious violations of the Terms of Service;

Serious violations of the Acceptable Use Policy.

35. DATA AFTER DOWNGRADE OR CANCELLATION

If a customer downgrades to a plan with lower limits, the customer may need to reduce usage.

Where technically possible, OVALBIS may provide a reasonable period to:

Export data;

Reduce storage;

Remove users;

Reduce businesses;

Adjust AI usage;

Change integrations.

OVALBIS may restrict access to resources exceeding the new plan limits.

36. ENTERPRISE SUBSCRIPTIONS

Enterprise customers may receive customized:

Pricing;

User limits;

Storage;

AI usage;

Support;

Security controls;

Integrations;

Service-level commitments;

Data-processing terms.

Enterprise services may be governed by a separate Enterprise Agreement.

Where there is a conflict, the Enterprise Agreement may control.

37. SERVICE CREDITS

Enterprise customers may receive service credits where expressly provided under a Service Level Agreement.

Service credits are not automatically available unless included in the applicable agreement.

38. PAYMENT SECURITY

OVAL LTD will seek to use reasonable safeguards for subscription billing.

Where payment processing is handled by a third-party provider, sensitive payment information may be processed directly by that provider rather than stored by OVALBIS.

39. ACCOUNT OWNERSHIP

The person or organization identified as the account owner is responsible for the subscription unless otherwise agreed.

Business accounts should use appropriate organizational email addresses where possible.

40. TRANSFER OF SUBSCRIPTIONS

Subscriptions generally may not be resold, transferred, or assigned without authorization from OVAL LTD.

Enterprise agreements may provide different rules.

41. NO RESALE

Customers may not resell OVALBIS access as a commercial service unless authorized by OVAL LTD.

Authorized partners, resellers, or distributors may operate under separate agreements.

42. THIRD-PARTY COSTS

Customers may incur additional costs from third parties when using OVALBIS integrations.

Examples include:

Payment-provider fees;

Mobile network charges;

Internet charges;

Third-party software subscriptions;

External API fees.

These costs are the customer's responsibility unless otherwise stated.

43. PRICE CHANGES

OVAL LTD may change subscription prices.

For existing customers with active subscriptions, price changes will be communicated in accordance with applicable law and contractual requirements.

Where required, customers may be given an opportunity to cancel before the new price applies.

44. DISCOUNTS

Discounts may not be combined unless expressly permitted.

Discounts may have:

Expiration dates;

Eligibility requirements;

Usage limits;

Geographic restrictions;

Plan restrictions.

45. CREDITS

OVALBIS may provide account credits for:

Promotions;

Service interruptions;

Customer support resolutions;

Referral programs;

Other promotional purposes.

Credits:

May have expiration dates;

May not be transferable;

May not be redeemable for cash;

May have additional conditions.

46. REFERRAL PROGRAMS

OVALBIS may introduce referral programs.

Referral rewards may be subject to:

Eligibility requirements;

Fraud-prevention controls;

Maximum rewards;

Expiration dates;

Additional promotional terms.

Users must not manipulate referral systems.

47. BUSINESS SIMULATION SUBSCRIPTIONS

OVALBIS Simulation may use subscription plans that provide access to:

Additional simulations;

Advanced scenarios;

Competitions;

Analytics;

Business cases;

Training content;

AI coaching;

Advanced simulation features.

Simulation subscription fees do not represent investment in real businesses and do not provide ownership of simulated companies.

48. OVALBIS INTELLIGENCE SUBSCRIPTIONS

OVALBIS Intelligence plans may provide access to:

Accounting;

HR;

Inventory;

Business intelligence;

Financial analysis;

Business dashboards;

AI analysis;

Reports;

Forecasting;

Targets and milestones.

Availability depends on the selected plan.

49. NO GUARANTEE OF BUSINESS RESULTS

Purchasing an OVALBIS subscription does not guarantee:

Increased revenue;

Increased profit;

Business growth;

Reduced expenses;

Investment returns;

Successful hiring;

Successful marketing;

Successful business decisions.

OVALBIS provides software and decision-support tools.

50. BILLING ERRORS

If an obvious pricing or billing error occurs, OVAL LTD may correct the error.

Where appropriate, customers may be contacted before a corrected charge is processed.

51. FRAUD PREVENTION

OVAL LTD may investigate suspicious transactions.

We may restrict or suspend transactions where reasonably necessary to:

Prevent fraud;

Protect customers;

Protect payment systems;

Comply with applicable law.

52. CHARGEBACKS

Customers should contact OVALBIS support regarding billing disputes before initiating a chargeback where reasonably possible.

Fraudulent or abusive chargebacks may result in account restrictions where permitted by applicable law.

This does not limit legitimate consumer or legal rights.

53. BILLING CONTACT INFORMATION

Customers are responsible for keeping:

Billing email;

Billing address;

Payment information;

Business details;

Tax information;

accurate and up to date.

54. COMMUNICATIONS

By maintaining a subscription, customers may receive transactional communications relating to:

Payments;

Invoices;

Renewals;

Subscription changes;

Account security;

Service interruptions;

Billing problems.

Marketing communications may be managed separately according to applicable privacy and communication preferences.

55. BILLING DISPUTE PROCESS

For billing disputes, customers should contact:

OVALBIS Billing Support

Email:

[billing@support.com]

Include:

Account email;

Invoice number;

Date of transaction;

Amount charged;

Description of the issue.

56. CHANGES TO THESE BILLING TERMS

OVAL LTD may update these Billing Terms when necessary.

Changes may reflect:

New subscription models;

New payment methods;

New features;

Changes in law;

Changes in business operations;

Changes in pricing structures.

Material changes will be communicated where required.

57. RELATIONSHIP WITH OTHER OVALBIS POLICIES

These Billing Terms should be read together with:

OVALBIS Terms of Service;

OVALBIS Privacy Policy;

OVALBIS Cookie Policy;

OVALBIS Data Processing Agreement;

OVALBIS Acceptable Use Policy;

OVALBIS AI Policy;

Enterprise Agreement, where applicable;

Service Level Agreement, where applicable.

58. GOVERNING LAW

The governing law and jurisdiction applicable to these Billing Terms should be specified in the final legal version based on OVAL LTD's legal structure, operating jurisdiction, and target markets.

Yes. For OVALBIS, I recommend making AI Usage & AI Data Privacy a separate policy because AI will be one of the most important parts of the Intelligence System. It should explain what data can be sent to AI providers, how OVALBIS minimizes data, what users should not submit, how AI outputs are handled, and the user's responsibility when making business decisions.

Here is a detailed OVALBIS AI Usage & AI Data Privacy Policy — Version 1.0.

OVALBIS AI USAGE & AI DATA PRIVACY POLICY

Version: 1.0 Effective Date: [Insert Date] Last Updated: [Insert Date] Owner: OVAL LTD

1. INTRODUCTION

OVALBIS uses Artificial Intelligence ("AI") to provide users with intelligent business analysis, recommendations, automation, forecasting, business insights, educational guidance, and other AI-assisted functionality.

OVALBIS is operated by OVAL LTD.

This AI Usage & AI Data Privacy Policy ("AI Policy") explains:

How OVALBIS uses AI;

How business information may be processed by AI;

What information may be shared with third-party AI providers;

How OVALBIS minimizes data sent to AI providers;

How users should use AI responsibly;

The limitations of AI-generated information;

How AI-related data is protected.

This Policy should be read together with the OVALBIS:

Data Processing Agreement;

Acceptable Use Policy;

Subscription & Billing Terms;

Cookie Policy.

2. OVALBIS AI APPROACH

OVALBIS does not necessarily need to develop and train its own foundational AI model.

Instead, OVALBIS may integrate existing AI models and services through APIs.

The OVALBIS AI architecture may include:

USER

↓

OVALBIS APPLICATION

↓

AI GATEWAY

↓

DATA PERMISSION CHECK

↓

DATA MINIMIZATION

↓

BUSINESS CONTEXT ENGINE

↓

AI PROVIDER API

↓

AI RESPONSE

↓

OVALBIS VALIDATION

↓

USER

This architecture is intended to reduce unnecessary disclosure of Customer Data.

3. PURPOSES OF AI PROCESSING

OVALBIS may use AI for purposes including:

Business Analysis

Revenue analysis;

Expense analysis;

Profitability analysis;

Cash-flow analysis;

Inventory analysis;

Sales analysis;

Customer analysis;

Supplier analysis.

Business Intelligence

Identifying trends;

Identifying risks;

Identifying opportunities;

Comparing business performance;

Explaining business indicators;

Generating management insights.

Forecasting

Where supported, AI may assist with:

Sales forecasting;

Demand forecasting;

Inventory forecasting;

Cash-flow forecasting;

Business growth projections.

Forecasts are estimates and are not guaranteed outcomes.

Business Recommendations

AI may suggest:

Pricing strategies;

Marketing strategies;

Hiring considerations;

Inventory strategies;

Cost-control measures;

Expansion strategies;

Business targets;

Performance milestones.

Automation

AI may assist with:

Report generation;

Data classification;

Document analysis;

Business summaries;

Natural-language queries;

Management reporting.

4. AI IS A DECISION-SUPPORT TOOL

OVALBIS AI is designed to assist users rather than replace responsible human decision-making.

AI recommendations should be treated as decision-support information.

Users remain responsible for decisions concerning:

Employees;

Customers;

Investments;

Taxes;

Loans;

Financial commitments;

Business expansion;

Contracts;

Legal matters;

Other significant business decisions.

5. HUMAN REVIEW

Human review is recommended for significant decisions.

For example:

AI:

"Reducing Product A's price by 5% may increase sales."

↓

Business Owner:

Reviews sales history

+ competitor pricing

+ costs

+ market conditions

+ cash position

↓

FINAL BUSINESS DECISION

AI recommendations should not automatically trigger significant business actions without appropriate controls.

6. TYPES OF DATA THAT MAY BE PROCESSED

Depending on the feature used, OVALBIS AI may process:

Business metrics;

Financial summaries;

Sales information;

Inventory information;

Employee-related information;

Customer information;

Supplier information;

Business goals;

Business strategy;

Market information;

User prompts;

Uploaded documents;

Reports;

Other information necessary to provide the requested AI service.

7. DATA MINIMIZATION

OVALBIS will seek to provide AI providers only with information reasonably necessary to perform a requested task.

For example, if a user asks:

"Why did our profit decrease this quarter?"

OVALBIS may send:

Revenue;

Expenses;

Cost of goods sold;

Previous-period profit;

Current-period profit;

Relevant business indicators.

OVALBIS should not automatically send:

The entire employee database;

Unrelated customer records;

Unrelated supplier records;

Complete business archives.

8. AI CONTEXT ENGINE

OVALBIS may use a Business Context Engine to determine which information is relevant to an AI request.

The Context Engine may consider:

User permissions;

Company;

Module;

Business period;

Requested analysis;

Relevant KPIs;

Data sensitivity;

AI feature requirements.

Only information necessary for the request should be included where technically feasible.

9. ROLE-BASED AI ACCESS

AI responses should respect the user's OVALBIS permissions.

For example:

Employee

May access:

Their permitted tasks;

Relevant operational information.

HR Manager

May access:

Authorized HR information.

Accountant

May access:

Authorized accounting information.

Business Owner

May access:

Authorized company-wide information.

The AI system should not provide information that the user does not have permission to access.

10. COMPANY DATA ISOLATION

OVALBIS may serve multiple businesses.

AI requests must respect company-level data isolation.

A user from Company A must not be able to use an AI prompt to obtain information belonging to Company B.

The AI layer must follow the same authorization rules as the main OVALBIS platform.

11. PERSONAL DATA

Where personal data is included in an AI request, OVALBIS will seek to minimize the information shared.

Where technically appropriate, OVALBIS may:

Remove names;

Replace identities with identifiers;

Aggregate information;

Summarize records;

Remove unnecessary contact information;

Use statistical information instead of individual records.

12. PSEUDONYMIZATION

Where appropriate, OVALBIS may replace identifying information with pseudonymous identifiers.

For example:

Instead of:

"John Doe's salary increased by 15%."

The AI context may contain:

"Employee E-1047 salary increased by 15%."

This can reduce unnecessary exposure of identifying information.

13. ANONYMIZATION

Where possible, OVALBIS may use aggregated or anonymized data for certain AI and analytics purposes.

For example:

Instead of providing individual employee records, the system may provide:

"Average employee turnover increased by 8% during the last six months."

14. THIRD-PARTY AI PROVIDERS

OVALBIS may use third-party AI providers.

Examples may include providers offering:

Large language models;

Machine-learning APIs;

Document processing;

Speech recognition;

Image analysis;

Forecasting;

Other AI services.

The actual providers used by OVAL LTD should be listed in the applicable Subprocessor List where required.

15. AI PROVIDER SELECTION

OVAL LTD should evaluate relevant AI providers based on factors including:

Security;

Privacy;

Reliability;

Data-processing terms;

Enterprise controls;

Data-retention practices;

Data-use policies;

Geographic processing;

Regulatory requirements.

16. AI PROVIDER DATA RETENTION

AI providers may have different retention policies.

OVAL LTD will seek to select configurations and providers that appropriately protect Customer Data.

Where available and appropriate, OVALBIS may use provider configurations that limit retention of API inputs and outputs.

17. AI TRAINING

OVALBIS will seek to ensure that Customer Data submitted through business AI features is not used by third-party AI providers to train general-purpose models where the applicable provider configuration or contractual terms prohibit such use.

The exact treatment depends on the AI provider, service, configuration, and applicable contract.

OVALBIS should disclose relevant provider practices where necessary.

18. USER-SUBMITTED AI PROMPTS

Users should avoid including unnecessary personal or confidential information in free-form AI prompts.

For example, users should avoid entering:

Passwords;

API keys;

Private encryption keys;

Authentication codes;

Unnecessary employee information;

Unnecessary customer information;

Unnecessary confidential information.

19. CONFIDENTIAL BUSINESS INFORMATION

Users should consider the sensitivity of information before submitting it to AI functionality.

Business owners should not intentionally submit information that is:

Unnecessary;

Highly sensitive;

Legally restricted;

Confidential to another party;

Not authorized for processing.

20. FINANCIAL INFORMATION

OVALBIS may process financial information to provide business analysis.

Examples include:

Revenue;

Expenses;

Profit;

Cash flow;

Accounts receivable;

Accounts payable;

Inventory value;

Financial ratios.

AI outputs based on financial information are analytical assistance and should be verified before important financial decisions.

21. ACCOUNTING AI

AI may assist with:

Transaction classification;

Financial summaries;

Accounting explanations;

Financial report interpretation;

Anomaly identification;

Management reporting.

AI should not be considered a substitute for professional accounting review where professional review is required.

22. TAX AI

AI may assist users in understanding tax-related information or analyzing business data.

However:

Tax rules may change;

AI may misunderstand a tax situation;

AI may produce incorrect calculations;

Different jurisdictions have different tax requirements.

Users should verify tax information with applicable authorities or qualified professionals before relying on it for material decisions.

23. HR AI

AI may assist with:

Workforce analytics;

Staffing analysis;

Training suggestions;

Workforce planning;

Employee performance trends;

Recruitment workflow assistance.

AI should not automatically make final decisions concerning employees.

24. EMPLOYMENT DECISIONS

OVALBIS should not be used as the sole basis for high-impact employment decisions.

Examples include:

Hiring;

Firing;

Promotion;

Demotion;

Salary decisions;

Disciplinary decisions.

Human review and applicable employment laws should be considered.

25. INVENTORY AI

AI may analyze:

Stock levels;

Sales history;

Product demand;

Inventory turnover;

Reorder trends.

AI-generated inventory recommendations are estimates and should be reviewed against actual business conditions.

26. PRICING AI

OVALBIS may use AI to suggest pricing strategies.

AI may consider:

Costs;

Historical sales;

Demand;

Market information;

Competitor information where lawfully available;

Profit margins.

Pricing recommendations are not guarantees.

Users remain responsible for ensuring that pricing practices comply with applicable competition and consumer-protection laws.

27. MARKETING AI

AI may assist with:

Marketing strategies;

Campaign ideas;

Customer segmentation;

Content suggestions;

Marketing analysis.

Users remain responsible for ensuring that marketing activities comply with applicable advertising, privacy, consumer-protection, and intellectual-property laws.

28. COMPETITOR INFORMATION

OVALBIS should only use competitor information obtained from lawful and authorized sources.

Users must not use OVALBIS AI to obtain:

Trade secrets;

Confidential competitor information;

Stolen databases;

Unauthorized private information.

29. AI OUTPUT ACCURACY

AI-generated content may contain:

Errors;

Incorrect assumptions;

Outdated information;

Missing context;

Incorrect calculations;

Hallucinated information.

Users should independently verify important outputs.

30. AI CALCULATIONS

Where possible, OVALBIS should use deterministic software calculations for financial and accounting operations rather than relying exclusively on AI.

For example:

Transaction Data

↓

Accounting Engine

↓

Deterministic Calculation

↓

Financial Result

↓

Explanation / Insight

The AI should preferably explain verified calculations rather than independently inventing financial numbers.

31. AI AND FINANCIAL STATEMENTS

OVALBIS may automatically prepare financial statements using data recorded in the accounting engine.

AI may assist in:

Explaining statements;

Identifying trends;

Summarizing changes;

Highlighting unusual movements.

The underlying financial calculations should preferably be performed by OVALBIS's accounting engine.

32. AI AND BUSINESS FORECASTING

Forecasts may be generated using:

Historical data;

Business rules;

Statistical models;

AI models;

Market information.

Forecasts are estimates and should not be interpreted as guarantees.

33. EXTERNAL INFORMATION

If an AI feature uses external information, OVALBIS may obtain information from:

Public sources;

Licensed data providers;

APIs;

Market databases;

Other authorized sources.

The availability and accuracy of external information may vary.

34. AI-GENERATED DOCUMENTS

OVALBIS may generate:

Business reports;

Summaries;

Recommendations;

Business plans;

Marketing drafts;

Management reports;

On this page

OTHER POLICY

1.1 OVAL LTD

1.2 Customer