·FRONT PRIVACY NOTICE

·Effective as of July 1, 2026. View the prior version here.

11. Introduction

·This Privacy Notice describes how FrontApp, Inc. ("Front," "we", "us" or "our") handles personal data that we collect through our websites and mobile applications that link to this Privacy Notice (collectively, the "Service"), as well as through our marketing and other activities described in this Privacy Notice. Use of the Service is subject to our SaaS Services Agreement.

·California residents: See our California privacy notice for information about your personal information and privacy rights.

·Individuals in the EEA/UK/Switzerland: See our Notice to European users for information about your personal data and data protection rights.

·If you have any questions or concerns about our use of your personal data, please contact us.

22. Scope of this Privacy Notice

·Front provides businesses with a cloud-based communication hub that their teams use for customer-related communications. The Service is not intended for use by individuals for personal, family, household, or other consumer purposes, and the personal data covered by this Privacy Notice pertains to individuals acting in a business or commercial capacity. This Privacy Notice does not apply to personal data about Front personnel or job candidates, or to personal data that Front processes on behalf of customers in our capacity as a processor or service provider, including data that they authorize us to access in their Google Workspace accounts. See the Front Products and Services Privacy Notice for information on how Front handles personal data as instructed by our customers in the course of providing certain features of our Services to them, including through cookies and similar technologies. See the Front Google User Data Privacy Notice for information on our handling of data customers authorize us to access in their Google Workspace accounts.

33. Personal data we collect

·The personal data we collect from you, either directly or indirectly, will depend on how you interact with us and with our Service. We collect personal data about you from the following sources:

·Information you provide to us. Personal data you may provide to us through the Service, at our online or offline events, through our promotions and surveys, when visiting our offices, or otherwise includes:

• ·Contact data. Your full name, professional title, organization name, email address, mailing address, phone number, social media handle, and other contact details.
• ·Account data. Your full name, email address, the password for your Service account, your country, and any other information you choose to add to your Service profile or associate with your account, such as your avatar, industry, country, pronouns, birthdate, or hobbies.
• ·Transaction data. Any payment card data or banking details you chose to use to pay for the Service, and information about your transactions with us.
• ·Communications data. Information in your communications with us, including when you communicate with us through the Service, social media, events, or otherwise; respond to surveys; provide feedback; or post to our blogs/forums. This includes both the content of these communications and the contact details and metadata associated with it, such as social media handles, profile photos that you use with your social and email accounts, calendar appointment details; and the date/time of the communication. We and our service providers may monitor and record calls/videoconferences with our support or sales teams and other communications for training and quality assurance purposes and the other purposes described in the How we use your personal data section below.
• ·Security data. Security camera footage of our offices, facilities and event spaces.
• ·Referral data. Contact details of friends or contacts that you refer to us or that refer you, such as when you invite them or are invited by them to use the Service. You should not share your friends' or contacts' information with us unless you have permission to do so.

·If we collect personal data not specifically listed above, we will use it consistent with this Privacy Notice or as otherwise explained at the time of collection.

·Information automatically collected. As you navigate the Service, our communications, and other online services, we, our service providers, and our advertising partners may automatically collect information about you, your computer or device, and your browsing actions and usage activity, such as:

• ·Device data. Technical information about your computer or mobile device, including operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique device identification numbers or other identifiers (including identifiers used for advertising purposes), language settings, mobile device/cellular carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information associated with IP address (e.g., city/town).
• ·Usage data. Page and screen views, search terms, authentication details, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages/screens, information about your activity on a page/screen, access times and duration of access, whether you have opened our emails or clicked links within them, and other functional information on Service performance (like diagnostics and crash logs).

·Cookies and other technologies. Some of the information we collect automatically is captured using cookies and other technologies as described in our Cookie Notice.

·Third party sources. We combine personal data we receive from you or collect automatically when you use the Service with personal data we obtain from other sources, such as:

• ·Our business contacts who share details about their professional contacts and friends, including potential customers and partners.
• ·Public sources, including government records, information you submit in public forums, and information made publicly available on social media and company website bios (e.g., names, job titles, professional history and training/certifications).
• ·Data brokers who provide contact details and biographical details (e.g., professional/education history) about potential customers and help us keep the details in our database up to date.
• ·Authentication services you can use to log into the Service, such as those provided by Google, and Microsoft, which may share information about you to facilitate the authentication as described in the service's settings or privacy policy.
• ·Social media accounts that you connect to the Service, such as when you use a social media widget in the Service to "like" content in the Service. When you do this, the social platform may share your profile or other personal data about you with us. You may be able to limit the information shared with us in the settings of your social media account.

44. How we use your personal data

·We use your personal data for the following purposes or as otherwise described in this Privacy Notice or at the time of collection:

·Service delivery. We use your personal data to register your Service account, to manage and administer your Service account, provide the Service and to communicate with you about our Service (including support and administrative messages that we may send via email, chat features in the Service or other channels).

·Business operations. We use your personal data to administer and maintain our Service and our IT systems (including monitoring, troubleshooting, data analysis, testing, system maintenance, repair and support, reporting and hosting of data) and to operate our business.

·Research and development. We use your personal data for research and development purposes, including to analyze and improve the Service and our business in an informed way. As part of these activities, we may create aggregated, de-identified and/or anonymized data from personal data we collect. We make personal data into de-identified or anonymized data by removing information that makes the data personally identifiable to you. We may use this aggregated, de-identified or otherwise anonymized data and share it with third parties for our lawful business purposes, including to analyze, improve and promote the Service and our business.

·Marketing. As permitted by applicable law, we may collect and use your personal data to send you marketing emails or contact you by phone about our and/or our partners' products, services or events. You may opt-out of our marketing communications as described in the Opt-out of marketing section below.

·Targeted advertising. Our third-party advertising partners may use cookies and similar technologies to collect information about your use of the Service (including the device data and usage data described above), our communications, and other online services over time and with different browsers and devices. Our advertising partners use that information to show you ads online that they think will interest you and measure the ads' performance. We may also share individuals' contact data with our advertising partners to facilitate interest-based advertising on their platforms (e.g., social media platforms) to those individuals or others with similar traits.

·Compliance and protection. We use your personal data to comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas or requests from government authorities. We also use your personal data to protect our, your or others' rights, privacy, safety, or property (including by establishing and defending legal claims), including by conducting internal audits against our policies; enforcing the terms and conditions that govern the Service; and taking steps to prevent, investigate and deter fraud, cyberattacks or other unauthorized, unethical, or illegal activity.

55. How we share your personal data

·We may share your personal data with the following categories of recipients, at your direction, and as otherwise described in this Privacy Notice or at the time of collection.

·Affiliates. We may share all categories of personal data with FrontApp SARL (France), FrontApp Ireland Limited (Ireland), and other corporate affiliates that we control, are controlled by, or with which we are under common control, for purposes consistent with this Privacy Notice.

·Service providers. We may share all categories of personal data with third parties that provide services on our behalf or help us operate the Service or our business (such as hosting, information technology and software, customer support, email and telephone communications, call recording, marketing, advertising, payment processing, user authentication, market/survey research, data brokerage, generative artificial intelligence, and analytics).

·Payment processors. Third party payment processors, such as Stripe, that collect your payment card data and other transaction data to process your payment card transactions when you pay for the Service. You can learn about how Stripe handles your personal data in its privacy policy available here: https://stripe.com/privacy. We also give you the option to use third party services such as Plaid to gather your account and banking details from your bank. By using Plaid to gather this data, you grant us and Plaid the right, power, and authority to act on your behalf to access and transmit your personal financial information from the relevant financial institution. You agree to your personal and financial information being transferred, stored, and processed by Plaid as described in Plaid's privacy policy currently available at https://plaid.com/legal/#end-user-privacy-policy and you expressly agree to its terms and conditions.

·Authentication services. When you log into the Service by using your credentials on a third party service, such as Google and Microsoft, the service will collect contact data, device data and usage data from you to facilitate the authentication as described in the service's relevant settings or privacy policy.

·Advertising partners. Third party advertising companies collect, and we share with them, personal data for targeted advertising purposes as described above, including the companies placing third party advertising cookies identified in our Cookie Notice. Their use of personal data is subject to their own privacy policies. These include channel and integration partners.

·Other users and the public. Other users of our blogs and forums to which you post content visible to them, such as community.front.com, parts of which are publicly accessible.

·Professional advisors. We may share all categories of personal data with professional advisors, such as lawyers, auditors, and bankers, where necessary in the course of the professional services that they render to us.

·Authorities and others. We may share all categories of personal data with law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the compliance and protection purposes described above. See our Law Enforcement Data Request Guidelines for details on how we handle law enforcement requests.

·Business transferees. Parties (and their advisors) to business transactions involving a corporate divestiture, merger, consolidation, acquisition, reorganization, sale or other disposition of all or any portion of the business or assets of, or equity interests in, Front or our affiliates (including, in connection with a bankruptcy or similar proceedings) may acquire all categories of personal data that we handle in connection with such transactions or we may share it with them in the context of negotiations of or due diligence for such transactions. Front does not share your mobile number or consent to receive texts with third parties. However, your mobile number may be shared with our SMS provider and other subcontractors as part of customer support or as required by law.

66. Your choices

·This section applies to all users. Some users may also have additional rights under applicable privacy laws, as described in the relevant region-specific sections below. If you do not provide information we identify as required or mandatory, we may not be able to provide features or services that require that information.

·Access or update your information. You may review and update certain Service account information by logging into your account.

·Opt-out of marketing communications. You may opt-out of marketing emails at any time by following the opt-out or unsubscribe instructions at the bottom of the email, or by contacting us. Please note that if you opt-out of promotional emails, you may continue to receive service-related and other non-marketing emails.

·Request deletion. You may request deletion of your information by contacting us with your request.

·Cookies. Most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. See our Cookie Notice and Front Products & Services Privacy Notice for more information about how to control cookies.

·Do Not Track. Some Internet browsers may be configured to send "Do Not Track" signals to the online services that you visit. We currently do not respond to "Do Not Track" signals. To find out more about "Do Not Track," please visit http://www.allaboutdnt.com.

77. Other sites and services

·The Service may contain links to or integrations of websites and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites or other online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites and other online services you use.

88. Security and Retention

·We use technical and organizational safeguards designed to protect the personal data we collect and process about you. However, security risk is inherent in all internet and information technologies, and we cannot guarantee the security of your personal data.

·We retain personal data for as long as necessary to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for the compliance and protection purposes described above. Factors determining the appropriate retention period for personal data include the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorized use or disclosure of personal data, the purposes for which we process the personal data, whether we can achieve those purposes through other means, and the applicable legal requirements.

·When we no longer require the personal data, we have collected about you, we will either delete or anonymize it (so that it is no longer personally identifiable with you) or, if this is not possible (for example, because your personal data has been stored in backup archives), then we will isolate your personal data from any further processing, employing security safeguards designed to protect it until deletion is possible.

99. International data transfers

·We are headquartered in the United States and may use service providers that operate in the United States and other countries other than the country in which you are resident. These countries may have data protection laws that differ from those of your country (and, in some cases may not be as protective as those in your state, province, or country).

·Individuals in the European Economic Area, United Kingdom, and Switzerland should read the information provided below about the transfer of personal data outside of those locations.

1010. Children

·The Service is not intended for use by anyone under 16 years of age. If you are a parent or guardian of a child under 16 from whom you believe we have collected personal data in a manner prohibited by law, please contact us. If we learn that we have collected personal data through the Service from a child under 16 without the consent of the child's parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.

1111. Changes to this Privacy Notice

·We reserve the right to modify this Privacy Notice at any time. If we make material changes to this Privacy Notice, we will notify you by updating the date of this Privacy Notice and posting it on the Service or other appropriate means. Any modifications to this Privacy Notice will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Notice indicates your acknowledgment that the modified Privacy Notice applies to your interactions with the Service and our business.

1212. How to contact us

·If you have questions or concerns about this Privacy Notice or our practices, please contact us at [email protected].

1313. California privacy notice

·This notice describes our collection, use and disclosure of personal information of California residents in our capacity as a "business" under the California Consumer Privacy Act ("CCPA") and their rights with respect to their personal information. For purposes of this notice, "personal information" has the meaning given in the CCPA but does not include information exempted from the scope of the CCPA.

·Information practices. The following describes our practices currently and during the past 12 months:

• ·Collection and disclosure. The chart below describes the personal information we collect by reference to the statutory categories of personal information specified in the CCPA's definition of "personal information", and the categories of third parties to whom we disclose it. The terms in the chart refer to the categories of information described above under Personal data we collect and the categories of third parties described above under How we share your personal data. We collect all categories of personal information from the sources described in Personal data we collect and use them for the business/commercial purposes described in How we use your personal data. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below. We may also disclose personal information to professional advisors, law enforcement and government authorities, and business transferees as described in the How we share your personal data section of this Privacy Notice.

• ·Sales and sharing of personal information. Our use of the targeted advertising services described above may constitute the "sharing" or "sale" of personal information (including the identifiers, California customer records, commercial information and inferences described in the chart above) under the CCPA from which you have the right to opt-out. Click the Your Privacy Choices link in the footer of this webpage for instructions on exercising this opt-out right. Your request to opt-out will apply only to the browser and the device from which you submit the request. Although our Services are not intended for children under 16 years of age, we are required to inform you that we do not have actual knowledge that we have sold the personal information of California residents under the age of 16.
• ·Sensitive personal information. We do not use or disclose sensitive personal information for purposes subject to the right to limit the use and disclosure of sensitive personal information under the CCPA.
• ·Retention. We retain personal information as described in the security and retention section above.

·Your privacy rights. As a California resident, you have the following rights under the CCPA:

• ·Right to know. You can request information about the categories of personal information that we have collected; the categories of sources from which we collected personal information; the business or commercial purpose for collecting, sharing and/or selling personal information; the categories of any personal information that we sold or disclosed for a business purpose; and the categories of any third parties with whom personal information was sold, shared or disclosed for a business purpose.
• ·Right to access. You can request a copy of certain personal information that we have collected about you.
• ·Right to deletion. You can request that we delete personal information that we collected from you.
• ·Right to correction. You can request that we correct inaccurate personal information that we have collected about you.
• ·Nondiscrimination. You are entitled to exercise the rights described above free from discrimination as prohibited by the CCPA.

·Exercising your rights. You may submit requests to exercise your right to know, access, deletion and correction by contacting us. The rights described above are not absolute, and in certain cases, we may decline your request as permitted by law. We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it.

·Identity verification. We need to verify your identity to process your requests to exercise your rights to know, access, deletion, and correction, and we reserve the right to confirm your California residency. To verify your identity, we may require you to log into a Service account if you have one, provide identifiers we can match against information we may have collected from you previously, confirm your request using the email address or telephone number that we have on record, provide government identification, or provide a declaration under penalty of perjury, where permitted by law.

·Authorized agents. Your authorized agent may make a request on your behalf upon our verification of the agent's identity and our receipt of a copy of a valid power of attorney given to your agent pursuant to applicable state law. If you have not provided your agent with such a power of attorney, we may ask you and/or your agent to take additional commercially reasonable steps permitted by law to verify that your request is authorized, such as by verifying your identity directly with us, providing proof that you have given the authorized agent signed permission to submit the request, and directly confirming with us that you gave the authorized agent such permission.

1414. Notice to European users

·The information provided in this notice applies only to individuals in the United Kingdom ("UK"), the European Economic Area ("EEA") and Switzerland (we collectively refer this group of countries as "Europe"). This notice applies in the event of any conflict or inconsistency between this notice and the other provisions of this Privacy Notice.

·The personal data that we collect from you is identified and described in greater detail in the section of the Privacy Notice entitled Personal data we collect.

·Controller. FrontApp, Inc. is the controller of your personal data described in this Privacy Notice unless you have entered into a service contract with or received direct marketing communications from a different Front affiliate, in which case that entity is the controller. If you have questions about the controller of your personal data, please contact us. You may contact the relevant controller by email at [email protected] or by mail at:

·FrontApp, Inc., 1 Montgomery St, 13th Floor, San Francisco, California 94104, USA FrontApp Ireland Limited, 21-23 City Quay, 4th Floor, Dublin 2, D02 FP21, Ireland FrontApp SARL, 32 Rue René Boulanger, 75010 Paris, France

·UK and Swiss Representatives. The names and contact details of FrontApp, Inc.'s representatives in the UK and Switzerland for purposes of data protection laws in those countries are as follows:

·UK Lionheart Squared Ltd Lionheart Squared Ltd, FAO Front

1717 Glasshouse Studios, Fryer Court Road

·Fordingbridge, Hampshire, SP6 1QX United Kingdom

·Switzerland Lionheart Squared Switzerland

·Lionheart Squared Switzerland SarL, FAO Front Blvd George Favon 43, CH-1204 Geneva

·Legal bases for processing. European data protection law requires that we have a "legal basis" for each purpose for which we process your personal data. Depending on the purpose for collecting your information, we may rely on one of the following legal bases:

• ·The processing is necessary to perform a contract that we are about to enter into, or have entered into, with you ("Contractual Necessity").
• ·The processing is necessary to pursue our legitimate interests or those of a third party and we are confident that your privacy rights will be appropriately protected ("Legitimate Interests").
• ·We need to comply with laws or to fulfill certain legal obligations ("Compliance with Law").
• ·We have your specific consent to carry out the processing for the purpose in question ("Consent"). Generally, we do not rely on Consent as a legal basis for using your personal data other than in the context of direct marketing communications where required by applicable law. In some circumstances we are required to obtain your consent to use non-essential cookies or similar tracking technologies or to send direct marketing emails. Obtaining your consent in accordance with our obligations under applicable laws implementing the ePrivacy Directive does not necessarily mean that we will rely on consent to process your personal data for these purposes under GDPR.

·The table below identifies the legal bases we rely on in respect of the relevant purposes for which we use your personal data. For more information on these purposes and the categories of personal data involved, see the section in the Privacy Notice entitled How we use your personal data.

·Use for new purposes. We may use your personal data for reasons not described in this Privacy Notice where permitted by law and the reason is compatible with the purpose for which we collected it. If we need to use your personal data for an unrelated purpose, we will notify you and explain the applicable legal basis.

·Special categories of data. We do not collect sensitive data defined by the GDPR as "special categories of data" (i.e., personal data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership; genetic or biometric data processed for the purpose of uniquely identifying a natural person; data concerning health or data concerning a natural person's sex life or sexual orientation) and ask that you do not provide us with any such information.

·Your rights. European data protection laws give individuals in Europe the following rights regarding their personal data:

• ·Right of access. You can ask us to provide you with information about our processing of your personal data and give you access to your personal data.
• ·Right to rectification. If the personal data we hold about you is inaccurate or incomplete, you are entitled to request to have it rectified.
• ·Right to erasure. You can ask us to delete or remove your personal data where there is no lawful reason for us continuing to store or process it, where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law.
• ·Right to restrict processing. You can ask us to suspend the processing of your personal data if you want us to establish the information's accuracy; where our use of the information proves to be unlawful but you do not want us to erase it; where you need us to hold the information even if we no longer require it as you need it to establish, exercise or defend legal claims; or if you have objected to our use of your information but we need to verify whether we have overriding legitimate grounds to use it.
• ·Right to object. You can object to our processing of your personal data where we are relying on a legitimate interest (or those of a third party) to do so and you believe it impacts your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes.
• ·Right to data portability. You have the right, in certain circumstances, to ask us to provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format.
• ·Right to withdraw consent at any time. Where we are relying on consent to process your personal data you have the right to withdraw your consent at any time. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent.

·Exercising those rights. Please note that some of these rights may be limited where we have an overriding interest or legal obligation to continue to process the personal data or where certain exemptions apply. If we decline your request, we will tell you why, subject to legal restrictions.

·To exercise any of these rights, please contact us. We may request specific information from you to help us confirm your identity and process your request.

·Your right to lodge a complaint with your supervisory authority. If you are not satisfied with our response to a request you make, or how we process your personal data, you can make a complaint to the data protection regulator in your habitual place of residence.

·For individuals in the EEA: The contact information for the data protection regulator in your place of residence can be found here: https://edpb.europa.eu/about-edpb/board/members_en

·For individuals in the UK: The contact information for the UK data protection regulator is below: The Information Commissioner's Office Water Lane, Wycliffe House Wilmslow - Cheshire SK9 5AF Tel. +44 303 123 1113 Website: https://ico.org.uk/make-a-complaint/

·For individuals in Switzerland: You may contact the Swiss data protection regulator here: https://www.edoeb.admin.ch/edoeb/en/home/deredoeb/kontakt.html

·International data transfers. We are headquartered in the United States and may use service providers that operate in the United States and other countries. Therefore, we may transfer your personal data to recipients outside of the European Economic Area, UK, and Switzerland. Some of these recipients are located in countries which have been formally recognized as providing an adequate level of protection for personal data by the relevant governmental body in the European Union, UK or Switzerland, as applicable, in which case, we rely on the relevant "adequacy decisions". Where the transfer is not subject to an adequacy decision or regulations, we take appropriate safeguards to ensure your personal data remains protected in accordance with this Privacy Notice and applicable laws by entering into appropriate data transfer mechanism permitted under Article 46 of the GDPR / UK GDPR (as applicable). With respect to data transfers to the United States, FrontApp, Inc. relies on its certification to the United States Department of Commerce that we adhere to the Data Privacy Framework Principles ("Principles") of the EU-U.S. Data Privacy Framework, the UK Extension to the EU-U.S. Data Privacy Framework, and the Swiss-U.S. Data Privacy Framework, as further described in the Front Data Privacy Framework Certification Notice, which supplements this Privacy Notice with respect to personal data we process as a controller. Other relevant mechanisms include the European Commission's Standard Contractual Clauses or the UK International Data Transfer Addendum (as applicable). A copy of our data transfer mechanism can be provided on request.

·English version controls

·The information provided in non-English translations of this Privacy Notice are provided for convenience only. In the event of any ambiguity or conflict between translations, the English version is authoritative and controls.

·SOFTWARE-AS-A-SERVICE (SaaS) AGREEMENT

·Front has updated this Software-as-a-Service (SaaS) Agreement, effective as of September 29, 2026 (the, "Effective Date"). For the prior version of our SaaS Agreement, please click here.

11. INTRODUCTION

·This SaaS Agreement sets out the general terms and conditions under which Front agrees to provide, and Customer and End User agree to receive and use, the Services. By accessing or using the Services, Customer and End User acknowledge that they have read, understand, and agree to be bound by this SaaS Agreement, Front's Privacy Notice, End User Conduct & Content Policy and the Supplemental Terms. Those who do not agree with this Agreement must not access or use the Services.

1.11.1 Authority. The individual agreeing to this Agreement represents to Front that they have the authority to bind Customer and any Affiliates to this Agreement.

1.21.2 Age Requirement. The Services must not be used by anyone under the age of eighteen (18) or the age of majority of the jurisdiction they reside in. Customer is responsible for (i) ensuring that all End Users are at least eighteen years old or the age of majority where the End Users reside, and (ii) that the Services will not be integrated with any of Customer's products, services, or websites that are directed towards or likely to be accessed by someone under the age of eighteen or the age of majority of the jurisdiction they reside in. If an End User is under eighteen, End User must have End User's parent or legal guardian's permission to use the Services.

1.31.3 Relationship Between Customer and End User. The administrator of Customer's Account can modify or re-assign roles of End Users and otherwise exercise the rights granted to the Customer pursuant to this Agreement. If a Customer elects to replace the administrator of its Customer Account, such administrator must agree to take any actions reasonably necessary and requested by Front or Customer to facilitate such transfer of authority.

1.41.4 Professional Services. If Customer purchases Professional Services from Front, such Professional Services shall be governed by Front's Professional Services Agreement, which is incorporated into this Agreement by reference.

22. USE AND ACCESS TO THE SERVICES

2.12.1 Access and Use of the Services. Front grants Customer a non-transferable, non-exclusive, revocable right to access and use the Services pursuant to the terms and conditions of this Agreement and the Documentation. Only one (1) individual may access or use an End User Account during the Subscription Term.

2.22.2 Customer and End User Responsibilities. Customer is responsible, on behalf of itself and its End Users, for: (i) obtaining, maintaining, and securing any Equipment used to access the Services; (ii) complying with the terms of Front's End User Conduct and Content Policy and the Supplemental Terms, as well as any applicable Front policies referenced in this Agreement; (iii) giving all notices to, and obtaining any rights, permissions or consents from its End Users or others that are necessary for Customer's lawful use of the Services and the processing of Customer Data contemplated by this Agreement; (iv) responding to and resolving any dispute between Customer and an End User related to or based on Customer Data and/or Customer's processing of that Customer Data in connection with Customer's use of the Services; and (v) complying with all applicable laws and regulations.

2.32.3 General Restrictions. Unless otherwise expressly permitted in the Agreement, Customer and End User must not: (a) reproduce, duplicate, copy, sell, resell, sublicense or exploit Front Technology in whole or part for any commercial purpose without Front's prior written approval; (b) reverse engineer, decompile, disassemble or otherwise seek to obtain the source code, object code, underlying algorithms or non-public APIs to Front Technology, except when decompilation is expressly permitted by the laws of Customer's jurisdiction (and then only by advance request, during which Front may impose reasonable conditions including a fee on Customer's decompilation); (c) modify, translate or create derivative works based on Front Technology; (d) use Front Technology, or any content or output received or derived from Front Technology, including Front AI features, to directly or indirectly create, train, test or otherwise improve any machine learning algorithms or artificial intelligence system, including any architectures, models, or weights; (e) use Front Technology for competitive or benchmarking purposes; or (f) remove or obscure any proprietary language, labels, or notices contained in Front Technology.

2.42.4 Login Credentials. Customer and End User are responsible for all login credentials, including usernames and passwords, and Front shall not be liable for any damages or losses that may occur due to Customer's or its End Users' failure to maintain the confidentiality of their login credentials. End Users are not permitted to share or use the same login credentials to the Services. Front reserves the right to refuse registration of or cancel passwords it deems inappropriate. Customer is responsible for notifying Front via the intake form at https://help.front.com/en/contact-us if it becomes aware of any unauthorized use of or access to its Customer Account or any End User Account.

2.52.5 Export Compliance. Customer and End User may not remove or export from the United States or allow the export or re-export of the Services, software or anything related thereto, or any direct product thereof in violation of any restrictions, laws or regulations of the United States Department of Commerce, the United States Department of Treasury Office of Foreign Assets Control, or any other United States or foreign agency or authority. Customer represents that neither it nor any of its End Users are named on any U.S. government denied-party list. Customer shall not permit any End User to (a) access or use the Services in a U.S. embargoed country or region or in violation of any U.S. export law or regulation, (b) place any information in the Services that is controlled under the U.S. International Traffic in Arms Regulations or other similar laws, or (c) access or use any Services for any purpose prohibited by the United States or applicable international import and export laws and regulations. Front shall have no obligation or liability to Customer if a governmental or regulatory action restricts access to the Services, and Customer agrees that this Agreement expressly excludes any right to access the Services from a jurisdiction where such governmental or regulatory restriction is in effect.

2.62.6 Support and Maintenance. The Services may be temporarily unavailable for scheduled maintenance or for unscheduled emergency maintenance, either by Front or by third party providers, or because of other causes beyond Front's reasonable control, but Front shall use reasonable efforts to provide advance written notice of any scheduled service disruption. Front may access Customer Accounts or End User Accounts to respond to and resolve support requests.

2.72.7 Modifications. Customer acknowledges that Front may modify the features and capabilities of the Services during the Subscription Term. Front shall provide Customer with reasonable notice of any deprecation of features or capabilities which Front determines, in its reasonable discretion, to be materially detrimental to Customer.

2.82.8 Excessive Use. Front reserves the right to suspend access and use of the Services or any features (including integrations with Third Party Services and Non-Front Messaging Platforms, as defined in the Supplemental Terms) if Customer exceeds usage limits as stated in the Documentation, Order Form, or Subscription Plan. Front shall provide Customer with written notice prior to any suspension under this section and shall use commercially reasonable efforts to limit such suspension. Subject to section 7.4, the Parties agree to collaborate in good faith to resolve cases of Excessive Use within fourteen (14) days from the time Front provides Customer with notice of such Excessive Use. Front may resume Customer's access to and use of the Services once Excessive Use is resolved to Front's reasonable satisfaction.

2.92.9 Sensitive Personal Data. Unless specifically agreed to in writing between Front and Customer, Customer agrees not to use the Services to process, transmit, collect, or store any Sensitive Personal Data. Where Parties entered into such an agreement like a Business Associate Addendum under the Health Insurance Portability and Accountability Act, Customer is responsible for compliance with any applicable data protection laws and regulations governing the processing of Sensitive Personal Data. Customer acknowledges that the Services are not PCI DSS compliant and Front is not a service provider or merchant under PCI DSS.

33. CONFIDENTIALITY

3.13.1 Protection of Confidential Information. The Receiving Party agrees (i) to protect the confidentiality of Confidential Information using at least the same degree of care as it uses with its own Confidential Information, but in no event less than a reasonable degree of care, and (ii) not to disclose (except in performance of the Services or as otherwise permitted by this Agreement) to any third person any such Confidential Information without the express prior written consent of the Disclosing Party. The Receiving Party may disclose Confidential Information to its Representatives on a strict need-to-know basis and only to those who are obligated to maintain the confidentiality of such Confidential Information under terms that are at least as protective as the terms set forth herein.

3.23.2 Compelled Disclosure. The Receiving Party may disclose Confidential Information of the Disclosing Party to the extent legally required in connection with any legal or regulatory proceeding, or where Front is the Receiving Party, in accordance with Front's Law Enforcement Data Request Guidelines; provided, however, that in such event the Receiving Party will, when permitted by law, provide advance notice to the Disclosing Party.

3.33.3 Equitable Relief. The Receiving Party acknowledges that disclosure of Confidential Information would cause substantial harm for which damages alone would not be a sufficient remedy, and therefore that upon any such disclosure by the Receiving Party the Disclosing Party may be entitled to appropriate equitable relief in addition to whatever other remedies it might have at law.

44. DATA PROTECTION, OWNERSHIP, AND USAGE

4.14.1 Data Protection. Front shall implement and maintain technical, organizational, and physical measures designed to protect the confidentiality, integrity and availability of Customer Data in Front's possession, custody or control. When Customer provides personal data, the Parties agree to the terms of Front's Data Processing Addendum, which is incorporated by reference into this Agreement.

4.24.2 Ownership. As between the Parties, Customer owns all right, title, and interest (including intellectual property rights, or where applicable, must ensure it has valid rights to) the Customer Data, subject to Front's rights under this Agreement. Front owns all right, title, and interest (including intellectual property rights) in and to Front Technology and Usage Data. Procurement of the Services does not confer ownership of Front Technology to Customer.

4.34.3 Data Use. Customer grants Front a worldwide, non-sublicensable, non-transferable (except to a permitted assignee of Front), non-exclusive right to access, use, Process and display the Customer Data (i) to provide and improve the Services, (ii) to comply with applicable laws and regulations, (iii) to perform Front's obligations under this Agreement including enforcing Front's terms and policies, (iv) to prevent or address service, security, support and technical issues and (v) as otherwise expressly permitted by this Agreement or by Customer in writing. The rights granted in this Section shall be exercised solely to the extent necessary for the applicable purpose. Customer also grants Front the non-exclusive right to collect, aggregate, and manually analyze Usage Data. Front may, during and after the Subscription Term, use Usage Data to analyze, support, develop, operate and improve the Services and other Front offerings and for other lawful business purposes, including to generate industry benchmarks or best practice guidance, recommendations, or similar reports.

4.44.4 Customer Responsibilities. Customer shall conspicuously display a privacy notice that discloses Customer's privacy practices, including: (i) that Customer Data is processed, stored, disclosed, or otherwise used through Front Technology; (ii) the categories of Customer Data collected; (iii) that Customer's product or service incorporates artificial intelligence or automated technology provided by a third party; and (iv) offering an opt-out (or an opt-in where legally required) of the processing, storing, disclosure, or other use of Customer Data through Front Technology. Notwithstanding the foregoing, Customer is solely responsible for determining the disclosures that are required under applicable law.

55. FEEDBACK

·By submitting any feedback or suggestions regarding the Services, including sharing such feedback with any Representative of Front or through the Services itself, Customer grants to Front an unlimited, irrevocable, perpetual, sub-licensable, transferable, royalty-free license to use such feedback or suggestion(s) for any purpose.

66. FEES AND PAYMENT

6.16.1 Calculation of Subscription Charges. Customer may purchase the Services either through Front's website or by executing an Order Form. Customer must purchase a Subscription Plan for each End User who accesses or uses the Services through an End User Account. If the Parties execute an Order Form, Customer will pay Front in accordance with the terms of such Order Form. Subscription Charges are billed in advance and are nonrefundable unless otherwise stated herein. If Customer's use of the Services exceeds the number of purchased End User Accounts set forth on an Order Form, is ongoing after expiry or termination of the Subscription Term, or otherwise requires the payment of additional Fees under this Agreement, Customer shall be charged for such usage and agrees to pay additional Fees owed. Unless otherwise agreed upon in writing, the Subscription Charges for a renewal of the Subscription Term or for any additional subscriptions purchased by Customer shall be calculated according to the price(s) then specified on Front's website.

6.26.2 Payment and Billing. Unless otherwise expressly set forth in this Agreement or an Order Form, all Subscription Charges are due in full upon commencement of the Subscription Term. Unless a different payment mechanism is required by Front, Customer must provide a valid credit card to purchase a Subscription Plan and Customer authorizes Front to automatically charge Customer's selected payment method for Subscription Charges on or after the starting date of each subsequent Subscription Term unless Customer's Subscription Plan terminates as set forth in Section 7.2 below. Customer agrees to promptly update its Customer Account information, including payment information, with any changes that may occur (for example, a change in billing address or credit card expiration date) within thirty (30) days of such change. Front may choose to bill through an invoice, in which case, full payment for invoices is due within thirty (30) days after the mailing date of the invoice.

6.36.3 Taxes. Unless otherwise stated in an Order Form, Front's charges do not include any Taxes. Customer is responsible for paying Taxes assessed in connection with Customer's Subscription Plan except those assessable against Front as measured by its net income. Front will invoice Customer for such Taxes if Front believes that Front has a legal obligation to do so, and Customer agrees to pay such Taxes if so invoiced. Front agrees to exempt Customer from any Taxes for which Customer provides to Front a tax exemption certificate; provided, however, that no such exemption shall be extended to Customer following written notice to Front from a taxing authority of appropriate jurisdiction that Customer does not qualify for the claimed exemption.

6.46.4 Billing Disputes. If Customer believes that Front has billed Customer incorrectly, Customer must contact Front no later than thirty (30) days after the closing date on the first billing statement in which the error or problem appeared in order to receive an adjustment or credit. Please direct inquiries to Front's customer support department at [email protected]. If Customer fails to pay any undisputed Fees when due in accordance with Section 6.2, Front shall provide Customer with written notice of such delinquency. If Customer fails to cure such delinquency within fourteen (14) days of receiving such notice, Front may, in addition to Front's other remedies, suspend access to and use of the Services by Customer and End Users. Customer's obligation to pay Fees shall continue during any period of suspension. Notwithstanding the foregoing, Front shall not suspend access to the Services while a good-faith billing dispute is pending, provided that Customer has timely notified Front of such dispute in writing and pays all undisputed amounts when due.

6.56.5 Upgrades. If Customer chooses to upgrade its Subscription Plan or increase the number of End Users authorized to access and use the Services during a Subscription Term, any incremental Subscription Charges associated with such upgrade will be charged in accordance with the Subscription Charges that exist between Customer and Front during the applicable Subscription Term. The Subscription Term for additional End Users shall be coterminous with the then-current Subscription Term for the existing End Users. In any subsequent Subscription Term, Customer's Subscription Charges will reflect any such upgrades. Any discount provided to Customer is applicable only to the initial Subscription Term detailed in an Order Form and will not be applied to any subsequent Subscription Terms.

6.66.6 Downgrades. Customer may not downgrade its Subscription Plan or reduce the number of End User subscriptions during any Subscription Term. If Customer desires to downgrade its Subscription Plan or reduce the number of End User subscriptions under any Subscription Plan for a subsequent Subscription Term, Customer must provide Front with thirty (30) days written notice prior to the end of Customer's then-current Subscription Term. Downgrading a Subscription Plan may cause loss of data, features, or capacity of the Services as available to Customer under its Customer Account, and Front is not responsible for such loss. No credits or refunds will be issued for usage that is less than the purchased number of subscriptions or for unused time on Subscription Plans.

6.76.7 Payment Portals. If Customer mandates Front to use a vendor payment portal or compliance portal that charges Front a subscription fee or a percentage of any uploaded invoice as a required cost of doing business, Customer shall be invoiced by Front for, and Customer is obligated to pay, the cost of this fee.

77. TERM AND TERMINATION

7.17.1 Term. Subject to the terms and conditions of this Agreement, Front shall provide the Services to Customer for the initial Subscription Term, which shall then be automatically renewed and extended for successive twelve (12) month periods.

7.27.2 Termination. Either Party may request termination at least thirty (30) days prior to the end of the then-current Subscription Term, and Customer may submit such request for termination by notifying Front at [email protected]. Either Party may terminate this Agreement if the other Party fails to cure a material breach of this Agreement within thirty (30) days after written notice to the other Party, including when Customer ceases its business operations or becomes subject to insolvency proceedings and such proceedings are not dismissed within sixty (60) days. Upon any termination, Front may immediately deactivate the Customer Account and any associated End User Account(s). In no event will termination for cause relieve Customer of its obligation to pay any unpaid Fees payable to Front or absolve Customer of any liability pertaining to Customer and its End Users' use of the Services, except when Customer terminates due to Front's uncured material breach of this Agreement.

7.37.3 Data Export. Front will make all Customer Data available to Customer for electronic retrieval for thirty (30) days upon termination. After such thirty (30) days, Front shall delete Customer Data in accordance with its Data Deletion Policy.

7.47.4 Suspension and Other Remedial Action. In addition to any other remedies that may be available, Front reserves the right to take that remedial action it deems necessary without liability to Front, including the immediate suspension or termination of a Customer Account or an End User Account, upon notice to Customer should Customer or an End User (i) fail to abide by Front's End User Conduct and Content Policy; or (ii) if in Front's sole discretion, such action is deemed necessary to prevent disruption to the Services or harm to others. Front will use commercially reasonable efforts to provide Customer with advance notice of terminations and suspensions when practicable, but if Front determines that the actions of a Customer or End User endanger the operation of the Services or pose a threat of imminent harm to others, Front may suspend access to the Services without notice. Front reserves the right to notify Customer and/or the administrator associated with the Customer Account with respect to an End User's violation of the terms of this Agreement.

88. WARRANTIES AND DISCLAIMER

8.18.1 Front Warranties. Front warrants that during the Subscription Term the Services will perform materially in accordance with the Documentation. Front further warrants that (a) it will not knowingly introduce viruses, malware, or other malicious code into the Services, and (b) it will maintain commercially reasonable security measures for the Services during the Subscription Term in accordance with Section 4.1 of this Agreement. Front's sole liability (and Customer's sole and exclusive remedy) for any breach of this warranty will be for Front to use commercially reasonable efforts to correct any reported material non-conformity by Customer, or if Front determines such remedy to be impracticable, either Party may terminate the Agreement and Customer will receive a pro-rata refund of any pre-paid, unused Fees for the terminated portion of the Subscription Term. The warranties herein do not apply if the error was caused by Customer's or End User's Excessive Use, misuse, or unauthorized modification of the Services or Third Party Services.

8.28.2 Mutual Warranties. Each Party represents and warrants to the other that: (i) this Agreement has been duly executed and delivered and constitutes a valid and binding agreement enforceable against such Party in accordance with its terms; (ii) no authorization or approval from any third party is required in connection with such Party's execution, delivery or performance of this Agreement; and (iii) the execution, delivery and performance of the Agreement does not and will not violate the terms or conditions of any other agreement to which it is a party or by which it is otherwise bound.

8.38.3 Disclaimer. EXCEPT AS EXPRESSLY PROVIDED FOR HEREIN, AND TO THE FULLEST EXTENT PERMITTED BY LAW, THE SERVICES AND ALL RELATED COMPONENTS AND INFORMATION ARE PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS WITHOUT ANY WARRANTIES OF ANY KIND, AND FRONT DISCLAIMS ANY AND ALL WARRANTIES, WHETHER EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY, TITLE, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. FRONT DOES NOT WARRANT THAT THE SERVICES WILL BE UNINTERRUPTED, SECURE, ERROR-FREE, VIRUS-FREE OR FREE FROM HARMFUL COMPONENTS; NOR DOES IT MAKE ANY WARRANTY AS TO THE RESULTS THAT MAY BE OBTAINED FROM USE OF THE SERVICES. FRONT DOES NOT WARRANT THAT IT WILL REVIEW THE CUSTOMER DATA OR SERVICE OUTPUTS FOR ACCURACY OR THAT IT WILL MAINTAIN THE CUSTOMER DATA WITHOUT LOSS OR CORRUPTION. FRONT SHALL NOT BE LIABLE FOR DELAYS, INTERRUPTIONS, SERVICE FAILURES OR OTHER PROBLEMS INHERENT IN USE OF THE INTERNET AND ELECTRONIC COMMUNICATIONS, THIRD PARTY PLATFORMS, THIRD PARTY MESSAGING APPLICATIONS, OR OTHER SYSTEMS OUTSIDE THE REASONABLE CONTROL OF FRONT.

99. INDEMNIFICATION

9.19.1 Front's Indemnification Obligations. Front will defend Customer Parties from and against any third party claim alleging that the Customer's use of the Services as contemplated under this Agreement infringes or misappropriates the intellectual property rights of such third party and will indemnify the Customer Parties for damages awarded against the Customer Parties in connection with or as a result of such claim or any amounts paid by Customer Parties under a settlement approved by Front, including reasonable fees of attorneys engaged by Front in connection with the defense or settlement of such claim. Notwithstanding the foregoing, Front will not indemnify Customer Parties to the extent the claim against Customer Parties arises from (i) Customer or any End User's use of the Services in a manner that violates this Agreement; (ii) modification of the Services by anyone other than Front or its Representatives, unless approved by Front; (iii) the combination, operation or use of the Services with software or processes not provided by Front, including Third Party Services, unless approved by Front; or (iv) violations of third-party rights caused by Customer Data.

9.29.2 Customer's Indemnification Obligations. Customer will defend Front Parties from and against any third party claim, action, suit, proceeding or demand arising from or related to (i) Customer's or an End User's use of the Services in violation of applicable laws or this Agreement and (ii) any Customer Data, and will indemnify Front Parties for costs or damages awarded against the Front Parties in connection with or as a result of such claim or any amounts paid by Front Parties under a settlement approved by Customer, including reasonable fees of attorneys engaged by Customer in connection with the defense or settlement of such claim.

9.39.3 Potential Infringement. If due to a claim of infringement the Services are held by a court of competent jurisdiction or believed by Front to be infringing, Front may at its option and expense: (i) replace or modify the Services to be non-infringing provided that such modification or replacement contains substantially similar features and functionality; (ii) obtain for Customer a license at Front's expense to continue using the Services; or (iii) if neither of the foregoing are commercially practicable, terminate this Agreement and Customer's rights hereunder, in which case Front's sole liability (in addition to its indemnification obligations above) shall be to provide Customer with a pro-rata refund of prepaid but unused Subscription Charges applicable to the remaining portion of Customer's current Subscription Term. Sections 9.1 and 9.3 state Front's sole liability with respect to, and Customer Parties' exclusive remedy against Front for, any infringement claim.

9.49.4 Indemnification Process. In the event of a potential indemnity obligation, the Party seeking indemnification must: (i) provide prompt notice to the indemnifying Party concerning the existence of an indemnifiable claim; (ii) promptly provide the indemnifying Party with all information and assistance reasonably requested; and (iii) cooperate fully with the indemnifying Party in defending the claim. Failure to give prompt notice shall not constitute a waiver of a Party's right to indemnification and shall affect the indemnifying Party's obligations under this Agreement only to the extent that the indemnifying Party's rights are materially prejudiced by such failure or delay. The indemnifying Party shall have full control and authority over the defense of any claim; provided, however, the indemnifying Party shall not enter into any settlement that (a) requires the indemnified Party to admit liability or fault, (b) imposes any financial obligation on the indemnified Party, or (c) does not unconditionally release the indemnified Party from all liability with respect to such claim, in each case without the indemnified Party's prior written consent, not to be unreasonably withheld or delayed.

1010. LIMITATION OF LIABILITY

10.110.1 Exclusion Of Consequential Damages. UNDER NO CIRCUMSTANCES AND UNDER NO LEGAL THEORY (WHETHER IN CONTRACT, TORT, NEGLIGENCE OR OTHERWISE) SHALL EITHER PARTY TO THIS AGREEMENT, OR THEIR RESPECTIVE AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, AGENTS, SERVICE PROVIDERS, SUPPLIERS OR LICENSORS, BE LIABLE TO THE OTHER PARTY OR ITS AFFILIATES FOR ANY LOST PROFITS, LOST SALES OR BUSINESS, LOST DATA, BUSINESS INTERRUPTION, LOSS OF GOODWILL, COSTS OF COVER OR REPLACEMENT, OR FOR ANY OTHER TYPE OF INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, CONSEQUENTIAL OR PUNITIVE LOSS OR DAMAGES INCURRED BY THE OTHER PARTY OR ITS AFFILIATES IN CONNECTION WITH THIS AGREEMENT, THE SERVICES OR PROFESSIONAL SERVICES, REGARDLESS OF WHETHER SUCH PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF OR COULD HAVE FORESEEN SUCH DAMAGES.

10.210.2 Limitation Of Liability. NOTWITHSTANDING ANYTHING TO THE CONTRARY IN THIS AGREEMENT, EACH PARTY'S AGGREGATE LIABILITY TO THE OTHER PARTY, ITS AFFILIATES, OR ANY THIRD PARTY ARISING OUT OF THIS AGREEMENT, THE SERVICES OR PROFESSIONAL SERVICES, SHALL IN NO EVENT EXCEED THE SUBSCRIPTION CHARGES AND/OR PROFESSIONAL SERVICES FEES PAID BY CUSTOMER DURING THE TWELVE (12) MONTHS PRIOR TO THE FIRST EVENT OR OCCURRENCE GIVING RISE TO SUCH LIABILITY. EACH PARTY ACKNOWLEDGES AND AGREES THAT THE ESSENTIAL PURPOSE OF THIS SECTION 10.2 IS TO ALLOCATE THE RISKS UNDER THIS AGREEMENT BETWEEN THE PARTIES AND LIMIT POTENTIAL LIABILITY GIVEN THE SUBSCRIPTION CHARGES AND PROFESSIONAL SERVICES FEES, WHICH WOULD HAVE BEEN SUBSTANTIALLY HIGHER IF FRONT WERE TO ASSUME ANY FURTHER LIABILITY OTHER THAN AS SET FORTH HEREIN. THE FOREGOING LIMITATIONS IN THIS SECTION 10.2 SHALL NOT APPLY TO CLAIMS OR DAMAGES ARISING FROM (1) THE INDEMNIFICATION OBLIGATIONS HEREIN, (2) A PARTY'S BREACH OF ITS CONFIDENTIALITY OBLIGATIONS UNDER SECTION 3 (OTHER THAN CLAIMS RELATING TO A BREACH OF FRONT'S OBLIGATIONS UNDER SECTION 4.1 OR THE DATA PROCESSING ADDENDUM), OR (3) CUSTOMER'S NON-PAYMENT OF UNDISPUTED FEES DUE AND PAYABLE. THE LIMITATION OF LIABILITY PROVIDED FOR HEREIN APPLIES IN AGGREGATE TO ANY AND ALL CLAIMS BY EITHER PARTY AND ITS AFFILIATES, AND SHALL NOT BE CUMULATIVE.

10.310.3 Jurisdiction-specific Exclusions. Some jurisdictions do not allow the exclusion of implied warranties or limitation of liability for incidental or consequential damages or for a Party's own fraud, willful injury to the person or property of another, or violation of law which means that some of the above limitations may not apply to Customer. IN THESE JURISDICTIONS, FRONT'S LIABILITY WILL BE LIMITED TO THE GREATEST EXTENT PERMITTED BY LAW.

10.410.4 Enforceable Against Front. Any claims or damages that Customer may have against Front shall only be enforceable against Front and not any other entity, nor any officers, directors or Representatives of Front or any other entity.

10.510.5 The provisions of this Section 10 allocate the risk between the Parties under this Agreement and the Parties have relied on these limitations in determining whether to enter into this Agreement.

1111. USE OF THIRD PARTY SERVICES

·If Customer chooses to use the Services with a Third Party Service, Customer grants Front permission to allow the Third Party Service to access or use Customer Data for the interoperation of that Third Party Service with the Services. Customer's use of such Third Party Service, and any exchange of Customer Data between Customer and the provider of such Third Party Service is solely between Customer and the Third Party Service provider. Front does not warrant or support any Third Party Service or other non-Front product or service, regardless of whether such Third Party Service is promoted or made available through the Services or is designated by Front as "certified" or "working with" the Services. Customer acknowledges that, as between Customer and Front, Customer is solely responsible for reviewing and complying with such Third Party Service provider's terms of use, practices, and policies. Front shall not be responsible for any disclosure, modification, deletion, or other processing of such Customer Data by the Third Party Service provider or for any act or omission on the part of such Third Party Service provider. Front does not guarantee the continued availability of Third Party Services and may cease supporting them without entitling Customer to any refund, credit, or other compensation, if, for example, the Third Party Service provider ceases to make the Third Party Service available for interoperation with the Front Services in a manner acceptable to Front. Customer irrevocably waives any claim against Front with respect to Third Party Services. Front is not liable for any damage or loss caused or alleged to be caused by or in connection with (i) Customer's access or use of any Third Party Services or (ii) Customer's reliance on such Third Party Services including its data practices or policies.

1212. TRIAL SUBSCRIPTIONS AND BETA ACCESS

·Front may, at its option, offer new customers a Trial subject to this Agreement. Any customizations made to the Services by Customer or on its behalf during Trial will be permanently lost unless Customer purchases a subscription to the applicable Services or exports such data prior to the end of the Trial. Select Customers may be invited to participate in the review and testing of Beta Versions. In exchange for Customer's use of a Trial or Beta Version, Customer agrees that Front may collect data, including crash data, Customer Data, or Usage Data, regarding Customer's use of Trial or Beta Version and analyze Customer Data, including by human review, to improve the Services and further personalize the Customer's experience irrespective of whether Customer had opted-out of data collection in non-Trial or non-Beta Versions. To stop additional data, including Customer Data, from being used for product improvement, Customer must discontinue its use of the Trial or Beta Version by uninstalling the Trial or toggling off the feature or capability associated with the Beta Version. Customer acknowledges and understands that (i) its participation in such Trial or Beta Versions is not required and is at Customer's own risk; (ii) Trials and Beta Versions are made available on an "as is" basis without warranties of any kind; and (iii) its participation in a Trial and/or Beta Versions may be subject to additional terms. Beta Versions do not represent the Services made commercially available and may contain bugs causing system failure or data loss. Front will have no liability arising out of or in connection with Customer's use of Beta Versions. Notwithstanding anything to the contrary herein, Front shall have the right to terminate Trials or Beta Versions at any time and for any reason.

1313. MISCELLANEOUS

13.113.1 Governing Law; Venue. This Agreement and any disputes arising under it will be governed by the laws of the State of California without regard to its conflict of laws provisions, and Front, Customer, and End User consent to the personal jurisdiction and venue of the state or federal courts located in San Francisco, California. The application of the United Nations Convention on Contracts for the International Sale of Goods is expressly excluded.

13.213.2 Disputes. Prior to initiating arbitration or litigation under this Section, the Parties shall first attempt to resolve any dispute through good-faith informal negotiation. The Party asserting the dispute shall provide written notice to the other Party describing the dispute and the relief sought. The Parties shall have sixty (60) days from receipt of such notice to resolve the dispute informally. Neither Party may initiate arbitration or litigation until the expiration of this sixty (60) day period, unless injunctive relief is sought under Section 3.3.

13.313.3 Arbitration. Any dispute arising out of or in any way relating to this Agreement that is not resolved through the informal dispute resolution process above shall be resolved according to California law and exclusively by binding arbitration before a single arbitrator with the Judicial Arbitration and Mediation Service (JAMS) and pursuant to the then existing arbitration rules at JAMS. If the Parties cannot agree upon selection of an arbitrator, then JAMS shall appoint an arbitrator experienced in the enterprise software industry. The place of the arbitration will be San Francisco, California unless otherwise agreed upon by the Parties. The arbitration will be conducted in English. The arbitrator shall provide detailed written findings of fact and conclusions of law in support of any award. Judgment upon any such award may be enforced in any court of competent jurisdiction. The Parties further agree that the arbitration shall be conducted in their individual capacities only and not as a class action or other representative action, and the Parties expressly waive their right to file a class action or seek relief on a class basis. If any court or arbitrator determines that the class action waiver set forth herein is void or unenforceable for any reason or that an arbitration can proceed on a class basis, then the portions of this section mandating arbitration shall be deemed null and void in their entirety and the Parties shall be deemed to have not agreed to arbitrate disputes. Customer may opt out and not be bound by the arbitration and class action waiver provisions by sending written notice to Front within thirty (30) days of the Effective Date of this Agreement between Customer and Front. Written notice should be sent to the address shown below. If Customer opts out of arbitration, Front will also not be bound to arbitrate. Notwithstanding the foregoing, either Party shall be entitled to seek injunctive relief as set forth in the Confidentiality section above to stop unauthorized use of any Confidential Information or the Services or infringement of a Party's intellectual property rights. Disputes, claims, or controversies concerning either Party's intellectual property rights or claims of piracy or unauthorized use of the Services shall not be subject to arbitration. The Parties further agree that the prevailing Party in any action or proceeding to enforce any right or provisions under this Agreement, including any arbitration or court proceedings, will be entitled to recover its reasonable costs and attorneys' fees.

13.413.4 Legal Notices. Front may provide general notices related to the Services that are applicable to Customer via email or notification within the Services and such notices shall be deemed to satisfy any legal requirement that notice be made in writing. Legal notices (including all legal notices from Customer) must be sent via email, first class mail, airmail, or overnight courier to the address of the Customer provided via an Order Form. Legal notices will be deemed to have been duly given when received, if personally delivered; when receipt is electronically confirmed, if transmitted by email; the day after it is sent, if sent for next day delivery by recognized overnight delivery service; and upon receipt, if sent by certified or registered mail, return receipt requested. Legal notices to Front shall be sent to:

·FrontApp, Inc. Attn: Legal Department One Montgomery Street, Floor 13 San Francisco, CA 94104 If Email: [email protected]

13.513.5 Publicity; Use of Customer's Marks. Front shall have the right to use Customer's name and logo in a factual manner on Front's website and in other communication with existing or potential Front customers. Customer may opt out of such use at any time by providing written notice to Front. Any press release, case study, or other marketing use beyond name and logo inclusion in Front marketing materials shall require Customer's prior written consent.

13.613.6 Severability; No Waiver. In the event that any provision of this Agreement is found to be invalid or unenforceable, such provision shall be limited or eliminated to the minimum extent necessary so that the Agreement shall otherwise remain in full force and effect and remain enforceable between the Parties. No waiver of any provision of this Agreement shall be deemed a further or continuing waiver of such provision or any other provision, and a Party's failure to assert any right or provision under this Agreement shall not constitute a waiver of such right or provision.

13.713.7 Assignment. Neither this Agreement nor any of the rights or licenses granted hereunder may be transferred or assigned by either Party without the other Party's prior written consent (not to be unreasonably withheld or delayed); provided, however, that either Party may assign this Agreement and all Order Forms related to Customer's use of the Services upon written notice (if by Customer via email to [email protected]) without the other Party's consent to an Affiliate or to its successor in interest in connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of its assets; provided, however, that should Customer assign this Agreement to any competitor of Front, then Front shall have the right to terminate this Agreement and Customer's use of the Services upon notice. Any other attempt to transfer or assign this Agreement or a Customer Account will be null and void. Subject to the foregoing, this Agreement shall bind and inure to the benefit of the Parties, their respective successors, and permitted assigns.

13.813.8 Force Majeure. Neither Party shall be liable for delayed or inadequate performance of its obligations hereunder to the extent caused by a Force Majeure Event. The Party experiencing such Force Majeure Event shall be relieved from its obligations (or part thereof) as long as the Force Majeure Event lasts and hinders the performance of said obligations (or part thereof); provided, however, that the Party experiencing such Force Majeure Event shall promptly notify the other Party of such event and shall make reasonable efforts to mitigate the effects of the Force Majeure Event. Notwithstanding the foregoing, this Section 13.8 shall not excuse Customer's obligation to pay Fees that became due and payable prior to the date of the Force Majeure Event.

13.913.9 Relationship of the Parties. The Parties are and shall be independent contractors with respect to all Services provided under this Agreement. This Agreement does not create a partnership, franchise, joint venture, agency, fiduciary, or employment relationship between the Parties, and Customer does not have any authority of any kind to bind Front in any respect whatsoever. There are no third party beneficiaries to this Agreement. Without limiting this section, Customer's End Users are not third party beneficiaries to Customer's rights under this Agreement.

13.1013.10 Use by Affiliates and Extension of Rights. Customer may extend its rights, benefits and protections provided herein to its Affiliates provided that Customer remains responsible for and liable for such Affiliate's use of the Services and compliance with this Agreement.

13.1113.11 Compliance and Conduct. Neither Party, nor any of its employees or agents, has offered, received or been offered, directly or indirectly, any illegal or improper bribe or kickback (whether in the form of a payment, gift, undue advantage, or thing of value), or will offer or accept the same in connection with this Agreement. All Parties agree to comply with the US Foreign Corrupt Practices Act of 1977, the UK Bribery Act of 2010, and any equivalent anti-corruption requirements in other jurisdictions that are reasonably applicable to this Agreement.

13.1213.12 Insurance. During the Subscription Term, Front shall maintain insurance coverage that is commercially reasonable and consistent with industry standards for companies of similar size providing similar services, including (a) commercial general liability insurance; (b) technology errors and omissions / cyber liability insurance; and (c) workers' compensation insurance as required by applicable law. Front shall provide evidence of such coverage upon Customer's reasonable written request.

13.1313.13 English Version Controls. Non-English translations of this Agreement may be provided for convenience only. In the event of any ambiguity or conflict between translations, the English version is authoritative and controls.

13.1413.14 Entire Agreement. This Agreement contains the entire understanding between the Parties concerning the subject matter hereof and supersedes any prior or contemporaneous representations, warranties, understandings, proposals, discussions, negotiations, and agreements, whether written or oral, regarding its subject matter. To the extent of any conflict or inconsistency, the following order of precedence shall apply: Order Form, Data Processing Addendum, Professional Services Agreement, the applicable Supplemental Terms, the End User Conduct and Content Policy, followed by this SaaS Agreement.

13.1513.15 Headings. Headings used in this Agreement are provided for convenience only and will not be used to construe meaning or intent.

13.1613.16 Survival. The following sections will survive any expiration or termination of this Agreement: 2.2 (Customer and End User Responsibilities), 2.3 (General Restrictions), 2.5 (Export Compliance), 3 (Confidentiality), 4 (Data Protection, Ownership and Usage), 5 (Feedback), 6 (Fees and Payment), 7 (Term and Termination), 8 (Warranties and Disclaimer), 9 (Indemnification), 10 (Limitation of Liability), 12, (Trial Subscriptions and Beta Access), 13 (Miscellaneous), and 14 (Definitions).

13.1713.17 Changing this Agreement. Front reserves the right to update or modify this Agreement from time to time as its business evolves by posting an updated version of this Agreement on its website. If, in Front's sole discretion, it believes that the modifications being made are material, Front will notify Customer and End User prior to the change taking effect. By continuing to utilize the Services after the effective date of any update to this Agreement, Customer and End User will be deemed to have accepted such update.

1414. DEFINITIONS

14.114.1 "Account" means a Customer Account or End User Account.

14.214.2 "Affiliate" means, with respect to a Party, any entity that directly or indirectly controls, is controlled by, or is under common control with such Party, whereby "control" (including, with correlative meaning, the terms "controlled by" and "under common control") means the possession, directly or indirectly, of the power to direct, or cause the direction of the management and policies of such Party, whether through the ownership of voting securities, by contract or otherwise.

14.314.3 "Agreement" means this Software-as-a-Service (SaaS) Agreement, consisting of the terms and conditions stated herein, the Data Processing Addendum, the End User Conduct and Content Policy, the Law Enforcement Data Request Guidelines, the Supplemental Terms as well as any Order Form(s) entered into by the Parties.

14.414.4 "Beta Version" means a pre-release version of new tools and/or enhancements within the Services which may be identified as "beta," "early access," "evaluation," "preview," "test," "pre-release," or a similar term.

14.514.5 "Confidential Information" means all information provided or made available by the Disclosing Party to the Receiving Party in connection with this Agreement that is either identified as, or should reasonably be understood by the Receiving Party to be, proprietary or confidential, including, but is not limited to, non-public information regarding features, functionality and performance of the Services, the terms of this Agreement, Customer Data, business plans, product plans, roadmaps, strategies, forecasts, projects and analyses, security reports (including SOC2 and ISO reports), the results of any audit related to the Services (including but not limited to security audits), financial information and fee structures, business processes, methods and models, and technical Documentation, but does not include any information that the Receiving Party can demonstrate (i) was generally available to the public at the time of disclosure; (ii) was in its possession or known by it without restriction prior to receipt from the Disclosing Party; (iii) was rightfully disclosed to it without restriction by a third party; or (iv) was independently developed without the use of any Confidential Information of the Disclosing Party.

14.614.6 "Customer" means the individual or entity represented by the individual(s) entering into this Agreement with Front and includes Customer's Affiliates.

14.714.7 "Customer Account" means the Front account or instance within the Services created on behalf of Customer by a representative of Customer that has administrative rights on the Customer Account to take certain actions and make certain changes on behalf of the Customer.

14.814.8 "Customer Data" means information submitted to or created in the Services by or on behalf of Customer or End User in connection with Customer or End User's use of the Services. Customer Data does not include Usage Data, information about Front's business contacts within Customer's organization, information about Account holders Processed for the purpose of administering or operating such accounts or Front's marketing activities.

14.914.9 "Customer Parties" means Customer and its Affiliates, subsidiaries, officers, employees and agents.

14.1014.10 "Customer Settings" means the portion of the Services in which Customer's administrator can create a Customer Account and where Customer can perform administrative functions, such as adding and deleting users.

14.1114.11 "Data Deletion Policy" means Front's data deletion policy found at https://help.front.com/en/articles/2133, as may be updated by Front from time to time.

14.1214.12 "Data Processing Addendum" means Front's data processing addendum found at https://front.com/legal/data-processing-addendum, as may be updated from time to time.

14.1314.13 "Disclosing Party" means a Party to this Agreement which may make Confidential Information available to the other Party.

14.1414.14 "Distributed Code" means application programming interfaces (APIs), software development kits (SDKs), HTML tags, JavaScript code, object code, plugins, or other code provided by Front for Customer to deploy in connection with Customer's use of the Services.

14.1514.15 "Documentation" means the then-current, generally available documentation detailing the functionalities of the Services or describing the Subscription Plans made available by Front in the Front help center at https://help.front.com/ which is updated from time to time, or in any statement of work for Professional Services; provided, however, that Documentation shall specifically exclude third-party content or any information provided through a knowledge base created by Front on a Customer's behalf.

14.1614.16 "End User" means an individual accessing or using the Services as provisioned by Customer administrator or through Customer's own products, services, or websites.

14.1714.17 "End User Account" means the Front account or instance within the Services created by an End User who completes the registration process by providing their full legal name, a valid email address, and any other information requested.

14.1814.18 "End User Conduct and Content Policy" means Front's acceptable use policy found at https://help.front.com/en/articles/2374, as may be updated from time to time.

14.1914.19 "Equipment" means any equipment and ancillary services needed in order to connect to, access or otherwise use the Services, including modems, hardware, servers, software, operating systems, networking, web servers and the like.

14.2014.20 "Excessive Use" means Customer's usage of the Services that (i) exceeds the usage limits published in the Documentation, Order Form, or applicable Subscription Plan, (ii) that constitutes a violation of Front's Usage Policy or Front's End User Conduct and Content Policy, or (iii) causes (or is reasonably likely to cause) degradation of performance, integrity or security of the Services.

14.2114.21 "Fees" means dollar amounts due and payable to Front by Customer as compensation for Customer's access or use of the Services, including Subscription Charges and fees for Professional Services.

14.2214.22 "Force Majeure Event" means a condition that is beyond a Party's reasonable control, including but not limited to natural disasters, civil disturbances, epidemics, pandemics, quarantines, acts of terrorism or war, labor conditions, governmental actions, interruptions or failure of the internet or any utility service, failures in third-party hosting services, and denial of service attacks.

14.2314.23 "Front" means FrontApp, Inc., a Delaware corporation.

14.2414.24 "Front Parties" means Front and its Affiliates, subsidiaries, officers, employees and agents.

14.2514.25 "Front Technology" means technology owned by Front or licensed to Front by a third party, including: (i) the Services, including all derivative works and modifications thereof; (ii) Documentation; and (iii) any feedback provided to Front.

14.2614.26 "Front's Usage Policy" means Front's usage policy found at https://help.front.com/en/articles/3506304, as may be updated from time to time.

14.2714.27 "including" means including, without limitation.

14.2814.28 "Law Enforcement Data Request Guidelines" means Front's guidelines found at https://front.com/law-enforcement-guidelines, as may be updated by Front from time to time.

14.2914.29 "Order Form" means the written instrument signed by both Parties to this Agreement which specifies the Fees associated with Customer's use of the Services as well as the Subscription Term.

14.3014.30 "Parties" means Customer and Front.

14.3114.31 "Privacy Notice" means Front's privacy notice found at https://front.com/legal/privacy-notice, as may be updated by Front from time to time.

14.3214.32 "Process" and inflections thereof refer to any operation or set of operations which is performed on Customer Data or on sets of Customer Data, whether or not by automated or manual means, such as collection, recording, organization, structuring, storage, adaptation or alteration, retrieval, consultation, use, disclosure by transmission, dissemination or otherwise making available, alignment or combination, restriction, erasure, and destruction.

14.3314.33 "Professional Services" means consulting or professional services (including any training, success and implementation services) provided by Front. Professional Services may also be referred to as consulting services in the Documentation or statement of work.

14.3414.34 "Professional Services Agreement" means the agreement found at https://front.com/legal/professional-services-agreement, as may be updated by Front from time to time.

14.3514.35 "Receiving Party" means a Party to this Agreement which may receive Confidential Information from the other Party.

14.3614.36 "Representatives" means the employees, Affiliates, consultants, contractors, subcontractors, agents, or advisors of a Party.

14.3714.37 "Software-as-a-Service (SaaS) Agreement" means the general terms and conditions stated herein, and does not include any terms incorporated by reference.

14.3814.38 "Sensitive Personal Data" means an individual's sensitive financial information (such as social security number, bank account number, and other bank account details), health information protected under health data protection laws, precise geolocation data, biometric data or human genomic data (for purposes of uniquely identifying an individual), personal information of children pursuant to Children's Online Privacy Protection Act ("COPPA"), and any additional types of sensitive personal information included within this term or a similar one as used in applicable data protection laws or regulations (such as "special categories of personal data" pursuant to the General Data Protection Regulation ("GDPR")).

14.3914.39 "Services" means the software-as-a-service solution(s) owned or operated by Front, including software, mobile applications, Distributed Code, websites, other properties, and any modifications or extensions above, whenever or wherever developed. "Services" excludes Third Party Services.

14.4014.40 "Subscription Charges" means dollar amounts due and payable to Front by Customer under this Agreement in exchange for Customer's use of the Services as stated on an Order Form or during checkout through Front's website.

14.4114.41 "Subscription Plan" means the packaged Services plan(s) and the functionality and Services associated therewith (as detailed on Front's website and in Documentation applicable to the Service).

14.4214.42 "Subscription Term" means the time period during which Front shall agree to provide and Customer shall agree to purchase the Services as specified in an Order Form or as agreed to by Customer upon signing up through Front's websites or Customer Settings.

14.4314.43 "Supplemental Terms" means the additional terms and conditions found at https://front.com/legal/supplemental-terms, as may be updated by Front from time to time.

14.4414.44 "Taxes" means all taxes, levies, duties or similar assessments of any nature, including but not limited to, value-added, sales, use or withholding taxes, assessable by any jurisdiction.

14.4514.45 "Third Party Services" means the various third party applications and services which Front makes available for use in connection with the Services.

14.4614.46 "Trial" means a limited free trial or offer of the Services or portions thereof.

14.4714.47 "Usage Data" means anonymized or de-identified Customer Data relating to Customer and End Users' use of the Services, including data derived therefrom.