·Miro legal information

·Privacy Policy

·Effective Date: August 1, 2025

·This Privacy Policy describes how RealtimeBoard, Inc. dba Miro, including its affiliates and subsidiaries (collectively, RealtimeBoard, Inc., Miro and also referred to as our, us and we) collects, uses and discloses information from or about an identified or identifiable person, including information that we can associate with an individual person ("Personal Data"), as well as any choices you have with respect to your Personal Data.

11. Applicability of this Privacy Policy

·This Privacy Policy applies to Miro's online collaboration tools and platform, including the associated Miro mobile and desktop applications (collectively, the "Services"), miro.com and other Miro websites (collectively, the "Websites"), other interactions (e.g. customer support, the Miro Community, etc.) you may have with Miro, and the processing of any messages, text, files, images, video or audio recordings, or other content submitted through our Services. This Privacy Policy does not apply to any third-party applications or software that integrate with our Services ("Third-Party Services"), or any other third-party products, services or businesses.

·You, the organization (e.g., your employer or another entity or person) controlling the use of the Services ("Organization") and any associated Customer Content, and any individuals who are granted access to the Services by an Organization ("Users" and, collectively with you and an Organization, "Customer") are also bound by the Terms of Service or the Master Cloud Agreement, as applicable, and any product-specific Terms (together, the "Customer Agreement").

·If you have any questions about specific Organization settings and privacy practices, please contact the Customer whose Organization you use. If you have received an invitation to join an Organization but have not yet created an account, you should request assistance from the Customer that sent the invitation.

22. The types of Personal Data we collect

·Your Personal Data is provided by you, obtained from third parties, and/or created by us when you use the Services.

·Customer Content is the information we obtain from you when you use Miro Services (which may include Personal Data), except for data that is considered Services Data.

·Services Data includes:

• ·Organization and account information, including contact and login information. To create or update an Organization account, you or the relevant Customer (e.g. you or your employer) will supply Miro with an email address, phone number, password, domain and/or similar account details. We may also receive your email address and name from Slack or other organizations with whom our platform has integrations through which you may sign up to use our Services.
• ·Billing information. Customers that purchase a paid version of the Services may provide Miro (or its payment processors) with billing details such as credit card information, banking information and/or a billing address.
• ·Service metadata. When a User interacts with the Services, metadata is generated to provide additional context about their use of the Services. For example, Miro logs the Organizations, boards, people, features, content and links that you view or interact with, as well the types of files shared and any Third-Party Services that you use.
• ·Activity data. Like most websites and services delivered over the Internet, our servers automatically collect information when you access or use our Websites or Services, recording this information in log files. This log data may include the Internet Protocol (IP) address, the address of the web page visited before using the Website or Services, your browser type and settings, the date and time the Services were used, information about browser configuration and plugins, and language preferences.
• ·Device data. Miro collects information about devices accessing the Services, including the type of device, operating system used, device settings, application IDs, unique device identifiers and crash data. Whether we collect some or all of this Services Data often depends on the type of device used and its settings.
• ·Location data. We receive information from you, the relevant Customer and other third-parties that helps us approximate your location. We may, for example, use a business address submitted by your employer or an IP address received from your browser or device to determine approximate location. Miro may also collect location information from devices in accordance with the consent provided by your device.
• ·Third-party data. Miro may receive data about organizations, industries, lists of companies that are customers, Website visitors, marketing campaigns, events, and other matters relevant to our business from parent corporations, affiliates and subsidiaries, our partners, or other third parties that we use to make our own information more useful. This data may be combined using technologies like AI, and may include aggregate-level data. For example, information about how well an online marketing or email campaign performed, or to create a business contacts directory.
• ·Marketing and communications data. Miro may obtain marketing information, including your preferences in receiving marketing from us and our third parties and your communication preferences.
• ·Cookie data. Miro uses a variety of cookies and similar technologies in our Websites and Services to help us collect Services Data. For more details about how we use these technologies, as well as your opt-out opportunities and other options, please see our Cookie Policy.
• ·Email performance data. Miro uses a 'clear image' (gif) in email communications in order to track engagement and performance metrics. Much of this data is aggregated and does not contain Personal Data. If you wish to turn off this tracking, you can do so by turning off images in the email itself.
• ·Third-Party Services data. A Customer may choose to use Third-Party Services. If Customer enables Third-Party Services, Miro may access and exchange Customer Content and Services Data with the Third-Party on Customer's behalf, in accordance with our agreement with the Third-Party Services and any permissions granted by the Customer (including its User(s)).
• ·Contact data. In accordance with the consent provided by your device or other third-party API, we process any contact information that a User chooses to import when using the Services.
• ·Community data. We also receive Services Data when submitted to our Websites or in other ways, such as if you participate in the Miro Community, Miro Academy, or Miroverse, or Miro events. This data is either submitted directly to the Services, or collected during forums, programs, contests, activities, events, or educational programs hosted by Miro (or a vendor).
• ·Customer support data. When you request support, our Customer Success team may process information about you, including recording video or telephone calls with Customers for the purposes of training and quality assurance. You will be notified if a recording is made, and can request that Miro does not record these calls.
• ·Additional data provided to Miro. If you use Miro's AI features pursuant to our Terms of Service, Services Data also includes data associated with your interaction with these technologies. We also receive Services Data when submitted to our Websites or in other ways, such as when you request support, interact with our social media accounts or otherwise communicate with Miro.
• ·Business data. Miro may receive information about individuals from organizations, industries, Customers, (potential) partners, parent corporations, affiliates and subsidiaries, and our partners for cooperation and communication purposes.

·Generally, no one is under a statutory or contractual obligation to provide any Personal Data. However, certain Personal Data is collected automatically and, if some Personal Data, such as Organization setup details, is not provided, we may be unable to provide the Services.

33. How we use Personal Data

·Customer Content. Customer Content that is Personal Data will be used by Miro in accordance with Customer's instructions, including any applicable terms in the Customer Agreement, to provide and improve the Services, and as required by applicable law. This may include automated analysis of general service use cases relevant to you.

·Services Data. Miro uses Services Data as permitted by law, including for our legitimate interests in operating our Services, Websites and business. For example, Miro uses Services Data:

• ·To provide, improve, and personalize our Services, including AI Features (see here for a description of AI Features), and Websites. This includes enabling you to create an account, create, store and share content and collaborate with others on our platform as well as the use of Services Data from Miro features, tools and templates to recommend or to allow you to discover other Miro features, tools or templates that are relevant to you. For example, to recommend Miro Space or Board templates that are relevant to you, we may use information such as the frequency and time period you engage with certain features and tools in our Service, and infer the relevance of related templates to you.
• ·To protect the security and integrity of our Services, Websites and business. This includes the use of Services Data to support provision of the Services to you, including to create or update an Organization, to prevent or address service errors, security or technical issues, and to analyze and monitor usage of the product and its features, trends and other activities.
• ·To comply with applicable law, legal process or regulation.
• ·To support and communicate with you by responding to your requests, comments and questions. If you contact us, we may use your Services Data to respond.
• ·To develop, test and provide search, learning and productivity tools and additional features. Miro tries to make the Services as useful as possible. For example, we make Services suggestions based on historical use and predictive models, identify organizational trends and insights, customize your experience of the Services, or to create and develop new features and products.
• ·To conduct market and user research. To improve our Services and troubleshoot new products and features, we may carry out research. For example, we may survey Customers (including Admins, Users and other contacts) or third parties about customer satisfaction, user experience, the effectiveness of our marketing campaigns, and their broader interests.
• ·To send emails and other communications.
• ·Transactional: As part of our services, we provide users with certain communications and updates, We may send you service, transactional, technical and other administrative communications, such as communications about your account, your use of our Services, our Service offerings, changes to the Services, and important Services-related notices, such as security and fraud notices. We consider these communications as part of our Services to you.
• ·Promotions/Marketing: In addition, we may send you emails about promotional communications, or other news about Miro. You can opt-out of, or unsubscribe from, these messages at any time by using the unsubscribe link included in all of these communications.
• ·For billing, account management and other administrative matters. Miro may need to contact you for invoicing, account management, and similar reasons and we use account data to administer accounts and keep track of billing and payments.
• ·To investigate and help prevent security issues and abuse.
• ·To manage and to contact you with regard to involvement. We may need to manage and contact you with regard to your involvement and participation in the Miro Community (such as the forums, programs, Miroverse, contests, activities, events or educational programs hosted by Miro or a vendor).

·If information is aggregated so that it can no longer reasonably be associated with an identified or identifiable natural person, Miro may use it for any business purpose.

44. Data retention

·Miro will retain Customer Content and Personal Data in accordance with a Customer's instructions, including any applicable terms in the Customer Agreement and Customer's use of the Services, and as required by applicable law. The deletion of Customer's account may result in the deletion of Customer's personal data and certain associated Services Data. Miro may retain Services Data for as long as necessary for the purposes described in this Privacy Policy.

·Further, note that we may keep certain types of Services Data after the deactivation of an account for the period needed for Miro to pursue legitimate business interests, conduct audits, comply with (and demonstrate compliance with) legal obligations, resolve disputes, and enforce our agreements.

55. How we share and disclose Personal Data

·This section describes how Miro may share and disclose Personal Data. Customers may also determine their own policies and practices for the sharing and disclosure of Personal Data within their control. Miro does not control how they or any other third party chooses to share or disclose Personal Data.

·Miro may share and disclose Personal Data in accordance with a Customer's instructions, including any applicable terms in the Customer Agreement and the Customer's use of the Services and in compliance with applicable law. Where necessary, Miro may only share Personal Data with third parties where we have obtained consent to do so.

·We may share Personal Data as follows:

• ·Vendors. We may engage third parties as service providers or processors to process Personal Data. These third parties may, for example, provide virtual computing and storage services, or we may share business information to develop strategic partnerships to support our Customers. Please see more information on our subprocessors here.
• ·Third-Party Services. Customers may enable Third-Party Services. When enabled, Miro may access and exchange Customer Content with the provider of a Third-Party Service on Customer's behalf. For example, the AI features may share limited data with Microsoft in connection with the use of the AI features and to monitor compliance with codes of conduct. Third-Party Services are not owned or controlled by Miro and third parties that have been granted access to Personal Data may have their own policies and practices for its collection, use, and sharing. Please check the permissions, privacy settings, and notices for these Third-Party Services or contact the relevant provider with any questions.
• ·Development Partners. We may share Personal Data with developers, partners and others we engage to create Miro applications and/or integrate Miro features.
• ·Marketing, Advertising, and Analytics Partners. We may use advertising and analytics services that are intended to analyze your use of our Services based on information obtained from cookies or other trackers, including for delivering advertising to you (such as interest-based, targeted, or cross-context behavioral advertising).
• ·Corporate Affiliates. Miro may share Personal Data with its corporate affiliates, parents and/or subsidiaries for business continuity purposes.
• ·During a change to Miro's business. If Miro engages in a merger, acquisition, bankruptcy, dissolution, reorganization, sale of some or all of Miro's assets or stock, financing, public offering of securities, acquisition of all or a portion of our business, a similar transaction or proceeding, or steps in contemplation of such activities, some or all Personal Data may be shared or transferred, subject to standard confidentiality arrangements.
• ·To comply with laws. If we receive a request for Personal Data, we may disclose Personal Data if we reasonably believe disclosure is in accordance with or required by any applicable law, regulation, or legal process.
• ·To enforce our rights, prevent fraud, and for safety. To protect and defend the rights, property or safety of Miro, its users, or third parties, including enforcing its contracts or policies, or in connection with investigating and preventing illegal activity, fraud, or security issues, including to prevent death or imminent bodily harm.

·Owners, Administrators, Users, and others.. Although Miro does not exercise control over this form of data sharing, when a User submits Customer Content (including Personal Data), it may be displayed to other Users that have access to the same Miro Board. For example, a User's name and Miro profile may be displayed. Please consult the Help Center for more information on this functionality. Owners, administrators, Users, and other Customer representatives and personnel may also be able to access, modify, or restrict access to Personal Data. This may include, for example, your employer using Service features to export logs of your activity or accessing or modifying your profile details.

66. Security

·Miro takes the security of Personal Data seriously. Miro strives to protect Personal Data from unauthorized access or disclosure. Miro cannot guarantee that Personal Data stored or sent to Miro will be completely safe and encourages you to use caution. To the maximum extent allowed by applicable law, you agree and acknowledge that Miro will not be liable or responsible if any information about you is intercepted, accessed, and/or used by an unintended recipient.

77. Our responsibility for third party links

·Our Services may contain links to websites and services operated by third parties, which we do not own or control. This Privacy Statement does not apply to your use of such third party websites, and you should read the relevant privacy notices and terms and conditions before using such websites or services.

88. Age restriction

·Miro does not allow use of our Services and Websites by anyone younger than 16 years old ("Minor"). If you learn that a Minor has unlawfully provided us with Personal Data, please contact us and we will take steps to delete this information.

·By using our Services and Websites, you represent and warrant that you are not a Minor as of the date of first access to our Services and Websites.

99. International transfers

·RealtimeBoard Inc. has an international corporate presence, as such our collection of Personal Data necessarily involves the transmission of data on an international basis. If you are an individual located outside of the United States, please be aware that information we collect may be transferred to and processed in the United States and elsewhere outside the United States. As more fully described in the Customer Agreement terms between you and RealtimeBoard Inc., personal data may be transferred across international borders, including without limitation from the EEA, Switzerland, and UK to the United States. Any cross-border transfers of personal data are supported by an approved adequacy mechanism where required by applicable law, such as the EU Standard Contractual Clauses.

·RealtimeBoard Inc. complies with the EU-US Data Privacy Framework ("EU-US DPF"), the UK Extension to the EU-US DPF, and the Swiss-US Data Privacy Framework ("Swiss-US DPF") as set forth by the U.S. Department of Commerce. RealtimeBoard Inc has certified to the US Department of Commerce that it adheres to the EU-US Data Privacy Framework Principles ("EU-US DPF Principles") with regard to the processing of personal data received from the European Union in reliance on the EU-US DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-US DPF. RealtimeBoard Inc has certified to the US Department of Commerce that it adheres to the Swiss-US Data Privacy Framework Principles ("Swiss-U.S. DPF Principles") with regard to the processing of personal data received from Switzerland in reliance on the Swiss-US DPF. With respect to onward transfers of Personal Data to the EU-US DPF, the UK Extension to the EU-US DPF, and the Swiss-US DPF, we remain liable for processing such transfers in accordance with the Principles. If there is any conflict between the terms in this privacy policy and the EU-US DPF Principles and/or the Swiss-US DPF Principles, the Principles shall govern. To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit the U.S. Department of Commerce's Data Privacy Framework website by clicking here or visiting https://www.dataprivacyframework.gov/.

·RealtimeBoard Inc. may disclose your Personal Data in response to lawful requests by public authorities, including to meet national security or law enforcement requirements. If you have a question or complaint related to participation by RealtimeBoard Inc. in the DPF program, we encourage you to contact us online. For any complaints related to the DPF that RealtimeBoard Inc. cannot resolve directly, we have chosen to cooperate with the relevant EU Data Protection Authority, or a panel established by the European data protection authorities, for resolving disputes with EU individuals, the UK Information Commissioner (ICO) for resolving disputes with UK individuals, and the Swiss Federal Data Protection and Information Commissioner (FDPIC) for resolving disputes with Swiss individuals. Please contact us if you'd like us to direct you to your data protection authority contacts. As further explained in the Principles, binding arbitration is available to address residual complaints not resolved by other means. RealtimeBoard Inc. is subject to the investigatory and enforcement powers of the United States Federal Trade Commission (FTC).

·If we share your Personal Data with any RealtimeBoard Inc. affiliates or third parties located in countries outside the European Economic Area, or Switzerland, the United Kingdom, or the United States we take steps to ensure that appropriate safeguards are in place to guarantee the continued protection of your Personal Data, such as by entering into the Standard Contractual Clauses adopted by the European Commission (article 46(2)(c) GDPR), which are available here, and which were also adopted by the UK Government under section 119A of the UK Data Protection Act 2018.

·You can request a copy of the relevant safeguards we rely upon for international transfers by contacting us as set out in Section 13.

1010. Your rights

·Where we are the controller of your Personal Data, and subject to the privacy rights granted to you under the law in your country, you have the following rights:

• ·Access. You can request access to your Personal Data, subject to applicable law.
• ·Portability. You can request a copy of your Personal Data that we process on the basis of consent or in order to perform a contract with you.
• ·Erasure. You can request to erase your Personal Data that we are not required to process for compliance with law or in connection with legal claims. Where we rely on an exemption, we will inform you about this.
• ·Correction. You can request that we correct inaccurate information we maintain about you.
• ·Objection and restriction of processing. You can use the "unsubscribe" link in our marketing communications to stop us from using your information for that direct marketing. You can object to our processing of your Personal Data where we rely on legitimate interests or perform a task in the public interest. We will consider several factors when assessing an objection, including reasonable expectations of Miro customers, the benefits and risks to you, us, other users or other available means to achieve the same purpose that may be less invasive and do not require disproportionate effort. Unless we find that we have compelling legitimate grounds for this processing, which are not outweighed by your interests or fundamental rights and freedoms, or the processing is needed for legal reasons, your objection will be upheld and we will cease processing your Personal Data.
• ·Withdrawal of consent. Where you have provided your consent to our processing of your Personal Data, you can withdraw your consent at any time. If you do withdraw consent, it will not affect the lawfulness of what we have done with your Personal Data before you withdrew consent.

·Exercising Your Rights. To exercise your rights or ask us any questions pertaining to your rights, please contact us using the details set out in Section 13 below. Please note that we may request you to provide us with additional information in order to confirm your identity and ensure that you are entitled to access the relevant personal information.

·You also have the right to lodge a complaint to a data protection authority. For more information, please contact your local data protection authority.

1111. Certain United States-specific rights

·Categories of Personal Data we receive. We may collect, or process on behalf of our customers, the categories of Personal Data described in Section 2 above.

·Sources. For information regarding the categories of sources from which we collect your Personal Data, please see Sections 2 and 3 above.

·Our business and commercial purposes for use. For information regarding the specific purposes for which we collect and disclose your Personal Data, please see Sections 3 and 5 above.

·Retention. Information about our retention of Personal Data is described in Section 4 above.

·Sensitive Personal Data. Certain data that you disclose in Customer Content may be considered sensitive data under applicable law and may be processed in connection with providing and improving the Services. We only use and disclose sensitive Personal Data for the purposes specified in applicable law or otherwise with your consent.

·Depending on where you live in the United States, you may have the following rights:

• ·Access/know. You can request access to the Personal Data we hold about you, how we use it and who we share it with. You have the right to know what Personal Data we collect about you, including the categories of Personal Data, the categories of sources from which the Personal Data is collected, the business or commercial purpose for collecting, selling, or sharing Personal Data, the categories of third parties to whom the business discloses Personal Data, and the specific pieces of Personal Data the business has collected about you.
• ·Deletion. You can request that we delete any of your Personal Data that we collected from you and retained, subject to certain exceptions.
• ·Correction. You can request that we correct inaccurate information we maintain about you.
• ·Opt out of "Sale" and "Sharing". While we do not sell your Personal Data in the conventional sense, we may use advertising and analytics services that are intended to analyze your use of our Services based on information obtained from cookies or other trackers, including for delivering advertising to you (such as interest-based, targeted, or cross-context behavioral advertising). You can opt out of the use of cookies and other trackers on our website by visiting our "Do Not Sell or Share My Personal Information" page. You will need to set your preferences from each device and each web browser from which you wish to opt out. This feature uses a cookie to remember your preference, so if you clear all cookies from your browser, you will need to re-select your preferred settings. We do not have actual knowledge that we "sell" or "share" the personal information of consumers under 16 years of age.
• ·Portability. You can request that we transfer to you a copy of the Personal Data we hold about you.
• ·Limit use or disclosure of Sensitive Personal Data. If we use sensitive Personal Data in certain circumstances, you may have the right to limit the use or disclosure of sensitive Personal Data by us.
• ·Withdrawal of Consent. Where we rely on consent to process your Personal Data, you may have the right to withdraw this consent at any time. If you confirm that you wish to withdraw your consent, we will delete your information from our systems. However, you acknowledge this may limit our ability to provide you with the best possible products and services.

·Exercising Your Rights. You can exercise your rights as described above by contacting us as set out in Section 14. Only you, or a person or business entity that you authorize to act on your behalf (an "authorized agent"), may make the requests set forth above. You may also make a request on behalf of your minor child. The request should include your contact information and describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. In addition, you should provide adequate information that we can reasonably verify that you are the person about whom we collected the personal information (including information that enables us to verify the identifying information we possibly maintain about you), such as your first and last name, email address, and the state in which you reside.

·We will respond to consumer requests in a reasonably timely manner. If we require extra time to respond, we will inform you of the reason and extension period in writing. In order to protect the security of your Personal Data, we will not honor a request if we cannot verify your identity or authority to make the request and confirm the Personal Data relates to you. The method used to verify your identity will depend on the type, sensitivity and value of the information, including the risk of harm to you posed by any authorized access or deletion. Generally speaking, verification will be performed by matching the identifying information provided by you to the Personal Data that we already have.

·Any disclosures we provide will only cover the 12-month period preceding our receipt of your request (and will not be made more than twice in a 12-month period). If we cannot comply with a request, or cannot fully comply with a request, the response we provide will also explain the reasons we cannot comply.

·Non-Discrimination. We will not discriminate against you for exercising any of your rights based on California data protection laws, including, but not limited to, by:

• ·Denying you goods or services.
• ·Charging you different prices or rates for goods or services, including through granting discounts or other benefits, or imposing penalties.
• ·Providing you a different level or quality of goods or services.
• ·Suggesting that you may receive a different price or rate for goods or services or a different level or quality of goods or services.

1212. Changes to this Privacy Policy

·Miro may change this Privacy Policy from time to time. Laws, regulations, and industry standards evolve, which may make those changes necessary, or we may make changes to our services or business. We will post the changes to this page and we encourage you to review our Privacy Policy to stay informed. If we make material changes to the Privacy Policy, Miro will take commercially reasonable efforts to notify you and take additional steps as required by law. If you disagree with the changes to this Privacy Policy, you should deactivate your account and discontinue your use of the Services. Contact the relevant Customer if you wish to request the removal of your Personal Data under their control.

1313. How to contact Miro

·If you have questions about this Privacy Policy, or regarding your Personal Data, you can contact us online, or by mail at:

·RealtimeBoard, Inc. dba Miro ATTN: Privacy Team 315 Montgomery St Suite 900 94104 San Francisco, USA

·Our representative in the European Union:

·RealtimeBoard BV ATTN: Data Protection Team Singel 542 1017 AZ Amsterdam, NL

·Miro legal information

·Master Cloud Agreement

·Any translated versions of the Agreement in a language other than English are provided as a courtesy only. In the event of any conflict or discrepancy between any translated version of the Agreement and the English language version, the English language version shall prevail.

·This is the standard cloud agreement applicable to Miro's Enterprise Plan users. Miro requires a signed Order Form for Enterprise Plan purchases. For Orders executed prior to February 1, 2024, please refer to the Prior Master Cloud Agreement "MCA" Versions.

·Please contact sales@miro.com for details.

·This is the standard cloud agreement applicable to Miro's Enterprise Plan users. Miro requires a signed Order Form for Enterprise Plan purchases. For Orders executed prior to February 1, 2024, please refer to the Prior Master Cloud Agreement "MCA" Versions.

·Please contact sales@miro.com for details.

·This is the standard cloud agreement applicable to Miro's Enterprise Plan users. Miro requires a signed Order Form for Enterprise Plan purchases. For Orders executed prior to February 1, 2024, please refer to the Prior Master Cloud Agreement "MCA" Versions.

·Please contact sales@miro.com for details. Publication date: February 1, 2024

·This Master Cloud Agreement ("MCA") is between RealtimeBoard Inc. dba Miro, or the Miro Affiliate identified in an Order ("Miro") and the customer identified below ("Customer") and applies to all Orders entered into with Customer. This MCA is effective upon the date of last execution by the parties ("Effective Date"). Certain capitalized terms are defined in Section 18 (Definitions) and others are defined contextually in this Agreement.

11. Overview.

·Miro offers a unique SaaS Service for visual collaboration that is designed to allow Users to create, collaborate and centralize communication through an interactive visual workspace for innovation.

22. The SaaS Service.

2.12.1. Permitted Use. Miro grants to Customer a worldwide, non-transferable, non-exclusive, non-sublicensable right to access and use the SaaS Service during the Subscription Term only for Customer's internal business purposes and in accordance with the Documentation, the Order and this Agreement.

2.22.2. Orders: Customer may from time to time request Miro to supply the SaaS Service for a specified number of Users and duration and any Technical Service as agreed by the parties in an Order. An Affiliate of Customer may also enter its own Order(s) under the terms of this Agreement.

2.32.3. Users. Only Users may access and use the SaaS Service, and Customer maintains sole control over (i) Customer Content, (ii) its Users' access and use of the SaaS Service in compliance with this Agreement, and actions taken through their Users' accounts (excluding misuse of accounts caused by Miro's breach of this Agreement), and (iii) the use and confidentiality of its Users' logon credentials to the SaaS Service. Each party will promptly notify the other party if it becomes aware of any compromise of any logon credentials.

2.42.4. Administrators. Customer may designate individual User(s) as administrator(s) with certain rights of control and management over Customer's SaaS Service account, including management of Users and Customer Content, as described in the Documentation.

2.52.5. Access to Third Party Boards. Customer acknowledges that to the extent its Users are invited to access a third-party's Board, any access to that Board as well as any content the User submits will be under the sole control of that other customer.

2.62.6. Sharing Settings. Customer controls Board sharing settings, as described in the Documentation. Miro has no liability for how others may access or use Customer Content as a result of Customer's or its Users' decision to share a Board.

2.72.7. Restrictions. Except as expressly authorized in this Section 2, Customer will not, and will not permit its Users to: (a) provide access to, distribute, sell or sublicense the Services to a third party, (b) use the Services on behalf of, or to provide any product or service to, third parties, (c) use the Services to develop a similar or competing product or service, (d) scrape, data mine, reverse engineer, decompile, disassemble or seek to access the source code or non-public APIs to or unauthorized data from the Services, except to the extent expressly permitted by Law (and then only with prior notice to Miro), (e) modify or create derivative works of the Services or copy any element of the Services (other than authorized copies of the Software), (f) remove or obscure any proprietary notices in the Services or otherwise misrepresent the source of ownership of the Services, (g) publish benchmarks or performance information about the Services or facilitate third parties to compile benchmarks or performance measurements about any Services, (h) interfere with the Services operation, circumvent its access restrictions or conduct any security or vulnerability tests of the Services, (i) transmit any viruses or other harmful materials to the Services, (j) allow individuals to share User logon credentials, (k) engage in any fraudulent, misleading, illegal, or unethical activities using or related to the Services or (l) use the Services to store or transmit material which contains illegal content.

33. SLA and Support.

·During the Subscription Term the SaaS Service will be subject to the SLA. Miro will provide Customer with Support in accordance with the Support Policy.

44. Customer Content.

4.14.1. Data Use. Customer grants Miro the non-exclusive, worldwide, limited right to use, copy, store, transmit, and display Customer Content and to modify and create derivative works of Customer Content (e.g. for technical purposes such as reformatting for display on various types of devices), but only as necessary to provide Services under this Agreement.

4.24.2. Security. Miro uses reasonable technical and organizational measures designed to protect the SaaS Service and Customer Content as described in the Security Policy. Miro will maintain commercially reasonable standards and controls designed to detect and prevent the introduction of viruses, malware, Trojan horses, and other code intended to do harm.

4.34.3. Personal Data. Where Miro acts as a processor, each party agrees to comply with its respective obligations under the DPA. Additionally, where Miro acts as a controller, Miro uses Usage Data and User account information as described in its Privacy Policy.

4.44.4. Data Export. During the Subscription Term or within 30 days thereafter (the "Data Export Period"), Customer may export its Customer Content using the export features described in the Documentation. If Customer elects to proactively delete its account at any time, all associated Customer Content held on that account will be deleted permanently in accordance with Miro's standard schedules and procedures.

55. Customer Obligations.

5.15.1. Responsibility for Customer Content. Customer is responsible for its Customer Content, including its content and accuracy, and agrees that its use of the Services and all Customer Content will comply with all Laws. Customer represents and warrants that it has made all disclosures and has all rights, consents, and permissions necessary or legally required to use its Customer Content with the Services and grant Miro the rights in Section 4.1 (Data Use), all without violating or infringing Laws, third-party rights (including intellectual property, confidentiality, publicity, or privacy rights) or any terms or privacy policies that apply to the Customer Content.

5.25.2. Prohibited Uses. Customer may not use the Services with Prohibited Data or for High-Risk Activities. Customer acknowledges that the Services are not intended to meet any legal obligations for these uses, including HIPAA requirements, and that Miro is not a Business Associate as defined under HIPAA. Notwithstanding anything else in this Agreement, Miro has no liability for Prohibited Data or use of the Services for High-Risk Activities.

66. Suspension of Service.

·Miro may suspend Customer or a User's access to and use of all or any part of the Services if (a) Customer fails to pay any undisputed fee(s) within 10 days of receiving notice of non-payment; or (b) Miro reasonably believes Customer is in breach of Section 2 (The SaaS Service) or Section 5 (Customer Obligations), and/or its actions risk harm to other customers or the security, availability or integrity of any of the Services. Where practicable, Miro will use reasonable efforts to provide Customer with prior notice of the suspension. Once Customer resolves the issue leading to suspension, Miro will promptly restore Customer's or User's access to the relevant Services in accordance with this Agreement.

77. Integration with Third-Party Platforms.

·Miro allows integrations with Third Party Platforms. If Customer elects to use Third-Party Platforms with the Services, (a) such use of Third-Party Platforms is not subject to the terms of this Agreement, (b) Customer acknowledges that Miro does not control and has no liability for Third-Party Platforms, including their security, functionality, operation, availability or interoperability or how the Third-Party Platforms use Customer Content, and (c) Customer gives Miro the right to access and exchange Customer Content with the Third-Party Platform in relation to Customer's use of the Service. Customer shall not use integration with Third-Party Platforms to circumvent any restrictions under this Agreement.

88. Technical Services.

·Any purchased Technical Services are as described in the relevant Order. Customer will give Miro timely access to Customer Materials reasonably needed for the Technical Services, and if Customer fails to do so, Miro's obligation to provide Technical Services will be excused to the extent such lack of access prevents Miro from providing the Technical Services. Miro will use Customer Materials only for purposes of providing Technical Services. Any Technical Services deliverables relate to the configuration and/or use of the SaaS Service and do not constitute "work for hire."

99. Commercial Terms.

9.19.1. Subscription Term. Each Subscription Term will be set forth in the Order.

9.29.2. Fees and Taxes. Fees are invoiced as described in the Order. If Customer has a good faith dispute of an invoice (or any portion thereof), it shall provide Miro by the invoice due date with (a) written notice, (b) reasonable detail of the basis of such dispute, and (c) payment of the undisputed portion of the invoice. The parties shall cooperate in good faith to resolve such disputes. Unless the Order provides otherwise, all fees are due within 30 days of the invoice date. Miro reserves the right to charge a late payment interest fee up to 1.5% per month or the maximum amount allowed by Law, whichever is less. All fees are non-refundable except as set out in Section 10.2 (Warranty Remedy), Section 14.4 (Mitigation and Exceptions) and the SLA. If Customer requires that Miro use a third-party payment processor (e.g. Ariba, Stripe, etc.) for invoicing and payment hereunder, Customer shall be responsible for any fees and charges associated with such use (including registration, participation, and payment processing) and Customer shall reimburse Miro for any such fees and charges set forth in an invoice. Fees are exclusive of all Taxes. Customer is responsible for any sales, use, goods and services, value-added, withholding or similar taxes or levies that apply to its Orders, whether domestic or foreign ("Taxes"), other than Miro's income tax. If Customer is exempt from Taxes, then Customer shall provide a valid exemption certificate to Miro upon execution of the applicable Order.

9.39.3. Reseller Specific Terms. To the extent Customer uses a Reseller in order to access and use any Services pursuant to this Agreement, the following terms will apply:

·(a) Customer will pay applicable fees to Reseller, not Miro, as agreed between Customer and Reseller. If Customer is entitled to a refund under this Agreement, Miro will refund any fees to Reseller, and Reseller will be solely responsible for refunding any amounts to Customer, unless otherwise specified. For purposes of any liability caps in this Agreement, such cap amounts will be calculated based on the amounts paid or payable to Miro by Reseller, not by Customer; and

·(b) Reseller is not a party to this Agreement and is not authorized to modify this Agreement or make any promises or commitments on Miro's behalf. Miro is not bound by any obligations to Customer other than those in this Agreement. Miro is not party to (or responsible under) any separate agreement between Customer and Reseller. Miro is not responsible for Reseller's acts, omissions, products, or services.

1010. Warranties and Disclaimers.

10.110.1. Limited Warranty. Miro warrants to Customer that:

·(a) The SaaS Service will perform materially as described in the Documentation and Miro will not materially decrease the overall functionality during the Subscription Term (the "Performance Warranty"), and

·(b) It will perform any Technical Services in a professional and workmanlike manner with reasonable skill and care (the "Technical Services Warranty").

10.210.2. Warranty Remedy. If Miro breaches Section 10.1 (Limited Warranty) and Customer makes a reasonably detailed written warranty claim within 30 days of discovering the issue, then Miro will use reasonable efforts to correct the non-conformity. If Miro's reasonable efforts fail to remedy the breach of warranty within 60 days of Customer's warranty claim, either party may terminate any affected Order as relates to the non-conforming SaaS Service or Technical Services. Miro will then refund to Customer any pre-paid, unused fees for the terminated portion of the Subscription Term (for the Performance Warranty) or for the non-conforming Technical Services (for the Technical Services Warranty). These procedures are Customer's exclusive remedy and Miro's entire liability for breach of the warranties in Section 10.1. These warranties do not apply to (a) issues caused by misuse or unauthorized modifications, (b) issues in or caused by Third-Party Platforms or other third-party systems or (c) Trials and Betas or other free or evaluation use.

10.310.3. Disclaimers. Except as expressly provided in Section 10.1 (Limited Warranty), the Services are provided "AS IS." Miro and its suppliers make no other commitments, assurances, warranties, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, title or noninfringement. Without limiting its express obligations in Sections 3 (SLA and Support) and 4.2 (Security), Miro does not warrant that Customer's use of the Services will be uninterrupted or error-free or that the Services will meet Customer's requirements, operate in combination with third-party services used by Customer or maintain Customer Content without loss. Miro is not liable for delays, failures, or problems inherent in use of the Internet and electronic communications or other systems outside Miro's control.

1111. Term and Termination.

11.111.1. Term. This Agreement starts on the Effective Date and shall continue to apply until all Orders have expired or been terminated in accordance with this Agreement.

11.211.2. Termination. Either party may terminate this Agreement (including all Orders) if the other party (a) fails to cure a material breach of this Agreement (including a failure to pay undisputed fees) within 30 days after notice, (b) ceases operation without a successor or (c) seeks protection under a bankruptcy, receivership, trust deed, creditors' arrangement, composition or comparable proceeding, or if such a proceeding is instituted against that party and not dismissed within 60 days.

11.311.3. Effect of Termination. Upon expiration or termination of (a) this Agreement, Customer's access to Services will cease; and (b) any Order, then Customer's access to the Services provided for under that Order will cease, in each case other than limited use of the SaaS Service to export Customer Content as described in Section 4.4 (Data Export). At the disclosing party's request upon expiration or termination of this Agreement, the receiving party will delete all of the disclosing party's Confidential Information, except for Customer Content, which Miro shall delete in accordance with its standard schedule and procedures after the Data Export Period. Customer Content and other Confidential Information may be retained in the receiving party's standard backups after deletion but will remain subject to this Agreement's confidentiality restrictions.

11.411.4. Survival. These Sections survive expiration or termination of this Agreement: 2.7 (Restrictions), 4.4 (Data Export), 5 (Customer Obligations), 9.2 (Fees and Taxes), 10.3 (Disclaimers), 11.3 (Effect of Termination), 11.4 (Survival), 12 (Ownership), 13 (Limitations of Liability), 14 (Indemnification), 15 (Confidentiality), 17 (General Terms) and 18 (Definitions). Except where an exclusive remedy is provided, exercising a remedy under this Agreement, including termination, does not limit other remedies a party may have.

1212. Ownership.

·Neither party grants the other any rights or licenses not expressly set out in this Agreement. Except for Miro's use rights in this Agreement, between the parties Customer retains all intellectual property and other rights in Customer Content and Customer Materials provided to Miro. Except for Customer's use rights in this Agreement, Miro and its licensors retain all intellectual property and other rights in the Services, deliverables and related Miro technology, templates, formats, and dashboards, including any modifications or improvements to these items made by Miro. Miro may generate and use Usage Data to operate, improve, analyze, and support the Services and for other lawful business purposes, provided Usage Data shall not contain Customer Content. If Customer provides Miro with feedback or suggestions ("Feedback") regarding the Services or other Miro offerings, Miro may use such Feedback without restriction or obligation, provided Feedback shall be subject to Section 15 (Confidentiality) and shall not contain Customer Content or reference Customer as the source.

1313. Limitations of Liability.

13.113.1. Exclusions of Liability. Subject to Section 13.3, neither party (nor its suppliers) will have any liability arising out of or related to this Agreement for any loss of use, lost data, lost profits, lost revenues, loss of goodwill, interruption of business or for any indirect, special, incidental, reliance, or consequential damages of any kind, even if informed of their possibility in advance.

13.213.2. Liability Cap. Subject to Section 13.3, each party's entire aggregate liability arising out of or related to this Agreement will not exceed in the aggregate the amounts paid or payable by Customer to Miro during the prior 12 months under this Agreement.

13.313.3. Uncapped Claims. Nothing in Section 13.1 or 13.2 shall be taken to limit or exclude either party's liability for (a) breach of Section 2.7 (Restrictions), (b) indemnification obligations in Section 14 (Indemnification), (c) a party's infringement, misappropriation, or violation of the other party's intellectual property rights, (d) willful misconduct or (e) death, personal injury, or damage to tangible property.

13.413.4. Nature of Claims and Failure of Essential Purpose. The waivers and limitations in this Section 13 (Limitation of Liability) apply regardless of the form of action, whether in contract, tort (including negligence), strict liability or otherwise and will survive and apply even if any limited remedy in this Agreement fails of its essential purpose. Notwithstanding the limitations set forth in this Section 13, there shall be no limit to either party's liability arising out of Customer's payment obligations or liability which cannot be excluded or limited under applicable law.

1414. Indemnification.

14.114.1. Indemnification by Miro. Miro will (a) defend Customer from and against any unrelated third-party claim ("Claim") to the extent alleging that the Services infringe a third party's patent, copyright, trademark, or trade secret, and (b) indemnify and hold harmless Customer against any damages or costs finally awarded against Customer (including reasonable attorneys' fees) or agreed in settlement by Miro resulting from the Claim.

14.214.2. Indemnification by Customer. Customer will (a) defend Miro from and against any unrelated third-party claim to the extent resulting from Customer Content, Customer Materials (if applicable), or Customer's breach or alleged breach of Section 5 (Customer Obligations), and (b) indemnify and hold harmless Miro against any damages or costs finally awarded against Miro (including reasonable attorneys' fees) or agreed in settlement by Customer resulting from the Claim.

14.314.3. Procedures. The indemnifying party's obligations in this Section 14 are subject to receiving (a) prompt notice of the claim, provided, the right to indemnity shall not be affected by a failure or delay by the indemnified party in giving notice, unless the rights and remedies of the indemnifying party have been prejudiced by such delay, (b) the exclusive right to control and direct the investigation, defense and settlement of the Claim and (c) all reasonably necessary cooperation of the indemnified party, at the indemnifying party's expense for reasonable out-of-pocket costs. The indemnifying party may not settle any Claim without the indemnified party's prior consent if settlement would require the indemnified party to admit fault or take or refrain from taking any action (other than relating to use of the Services when Miro is the indemnifying party). The indemnified party may participate in a Claim with its own counsel at its own expense. Notwithstanding the foregoing, any costs, or expenses (including attorneys' fees) incurred by the indemnified party prior to giving notice and tendering the defense to the indemnifying party shall be borne by the indemnified party.

14.414.4. Mitigation and Exceptions. In response to an actual or potential infringement Claim, if required by settlement or injunction or as Miro determines necessary to avoid material liability, Miro may at its option: (a) procure rights for Customer's continued use of the Services, (b) replace or modify the allegedly infringing portion of the Services to avoid infringement without reducing the Service's overall functionality or (c) terminate the affected Order and refund to Customer any pre-paid, unused fees for the terminated portion of the Subscription Term. Miro's obligations in this Section 14 do not apply (1) to the extent infringement results from Customer's modification of the Service or use of the Service in combination with items not specified in the Documentation or provided by Miro (including Third-Party Platforms), (2) to infringement resulting from Software other than the most recent release provided by Miro (where Customer has been notified about such recent release), (3) to unauthorized use of the Services, (4) if Customer settles or makes any admissions about a Claim without Miro's prior consent, (5) if Customer continues to use the Services (or any element thereof) after being notified of allegedly infringing activity or informed of modifications that would have avoided the alleged infringement or (6) to Trials and Betas or other free or evaluation. Sections 14.1 and 14.4 set forth Customer's exclusive remedy and Miro's entire liability regarding infringement of third-party intellectual property rights.

1515. Confidentiality.

15.115.1. Definition. "Confidential Information" means information disclosed to the receiving party under this Agreement that is designated by the disclosing party as proprietary or confidential or that should be reasonably understood to be proprietary or confidential due to its nature and the circumstances of its disclosure. Without limiting the foregoing (a) the terms and conditions of this Agreement and any technical or performance information about any of the Services shall be treated exclusively as Miro's Confidential Information; and (b) Customer Content shall be treated exclusively as Customer's Confidential Information.

15.215.2. Obligations. As a receiving party, each party will (a) not disclose the other party's Confidential Information to third parties except as permitted in this Agreement, including Section 4.1 (Data Use), and (b) only use Confidential Information to fulfill its obligations and exercise its rights in this Agreement. The receiving party may disclose Confidential Information to its Affiliates, employees, agents, contractors, and other representatives having a legitimate need to know (including, for Miro, the subcontractors referenced in Section 17.9), provided it remains responsible for their compliance with this Section 15, and they are bound to confidentiality obligations no less protective than this Section 15.

15.315.3. Exclusions. These confidentiality obligations do not apply to information that the receiving party can document (a) is or becomes public knowledge through no fault of the receiving party, (b) it rightfully knew or possessed prior to receipt under this Agreement, (c) it rightfully received from a third party without breach of confidentiality obligations or (d) it independently developed without using the disclosing party's Confidential Information.

15.415.4. Remedies. Unauthorized use or disclosure of Confidential Information may cause substantial harm for which damages alone are an insufficient remedy. Each party may seek appropriate equitable relief, in addition to other available remedies, for breach or threatened breach of this Section 15.

15.515.5. Required Disclosures. Nothing in this Agreement prohibits either party from making disclosures, including of Customer Content and other Confidential Information, if required by Law, subpoena, or court order, provided (if permitted by Law) it notifies the other party in advance and cooperates in any effort to obtain confidential treatment.

1616. Trials and Betas.

·If Customer receives access to the Services or Service features on a free or trial basis or as an alpha, beta, or early access offering ("Trials and Betas"), use is permitted only for Customer's internal evaluation during the period designated by Miro (or if not designated, 30 days). Trials and Betas are optional and either party may terminate participation or discontinue using Trials and Betas at any time for any reason. Trials and Betas may be inoperable, incomplete, or include features that Miro may add, remove, change, separately release, or never release. Trials and Betas and their features and performance metrics comprise Miro Confidential Information. Notwithstanding anything else in this Agreement, Miro provides Trials and Betas "AS IS."

1717. General Terms.

17.117.1. Assignment. Except as otherwise set forth in this Agreement, neither party may assign this Agreement without the prior consent of the other party, except that either party may assign this Agreement in connection with a merger, reorganization, acquisition, or other transfer of all or substantially all its assets or voting securities, with reasonable notice to the other party. Any non-permitted assignment is void. This Agreement will bind and inure to the benefit of each party's permitted successors and assigns.

17.217.2. Governing Law, Jurisdiction and Venue. Unless otherwise agreed to herein, this Agreement is governed exclusively by the laws of the State of California and the United States without regard to conflicts of laws provisions and without regard to the United Nations Convention on the International Sale of Goods. The jurisdiction and venue for actions related to this Agreement will be the state and United States federal courts located in San Francisco, California and both parties submit to the exclusive jurisdiction of those courts.

17.317.3. Attorneys' Fees and Costs. The prevailing party in any action to enforce this Agreement will be entitled to recover its reasonable attorneys' fees and costs in connection with such action.

17.417.4. Notices. Except as set out in this Agreement or unless otherwise required by applicable laws, any notice or consent under or in connection with this Agreement must be in writing to the addresses on the first page and will be deemed given: (a) upon receipt if by personal delivery, (b) upon receipt if by certified or registered mail (return receipt requested), (c) one day after dispatch if by a commercial overnight delivery service, or (d) upon receipt if by email, with proof of delivery and receipt. Either party may update its address with notice to the other party. All notices to Miro must include a copy emailed to legal@miro.com. Non-legal operational notices will be sent to Customer's assigned Miro administrator by email or through the SaaS Service.

17.517.5. Entire Agreement. This Agreement sets out the parties' entire agreement regarding its subject matter and supersedes any and all prior and contemporaneous agreements, promises, assurances and understandings between the parties (whether written or oral) regarding its subject matter. In the event of any conflict among the terms of the MCA, Order(s), the DPA and the Policies, the order of precedence shall be as follows: (a) the Order, (b) the DPA, (c) the MCA, and (d) the Policies, including any respective exhibits to the foregoing. Any translated versions of the Agreement in a language other than English are provided as a courtesy only. In the event of any conflict or discrepancy between any translated version of the Agreement and the English language version, the English language version shall prevail. In this Agreement, headings are for convenience only and "including" and similar terms are to be construed without limitation. This Agreement may be executed in counterparts (including electronic copies and PDFs), each of which is deemed an original and which together form one and the same agreement.

17.617.6. Amendments. Any amendments, modifications or supplements to this Agreement must be in writing and signed by each party's authorized representatives in order to be legally effective or, as appropriate, agreed through electronic means provided by Miro. Nonetheless, Miro may modify the Policies to reflect new features or changing practices, provided that such modifications will not materially decrease Miro's overall obligations or Customer's rights under the relevant Policy. The terms in any past, contemporaneous or future Customer purchase order, business form or vendor management portal will not amend or modify this Agreement and are expressly rejected by Miro; any of these documents are for administrative purposes only and have no legal effect.

17.717.7. Waivers and Severability. A waiver of any right or remedy must be signed by the waiving party's authorized representative in order to be effective and cannot be implied from conduct and shall not be deemed a waiver of any subsequent right or remedy. Any delay or failure to exercise any right of remedy shall not waive that right or remedy. If any provision of this Agreement is held invalid, illegal or unenforceable, it will be limited to the minimum extent necessary so the rest of this Agreement remains valid and in effect.

17.817.8. Force Majeure. Neither party is liable for any delay or failure to perform any obligation under this Agreement (except for a failure to pay fees which shall still be due and payable but may be deferred until payment of fees is possible following the resolution of the force majeure event) due to events beyond its reasonable control, such as a strike, blockade, war, act of terrorism, riot, Internet or utility failures, refusal of government license or natural disaster.

17.917.9. Subcontractors. Miro may use subcontractors and permit them to exercise Miro's rights, but Miro remains responsible for their compliance with this Agreement and for its overall performance under this Agreement. Notwithstanding the foregoing, this does not limit Customer's rights under the DPA with respect to sub-processors.

17.1017.10. Independent Contractors. The parties are independent contractors, not agents, partners or joint venturers, and nothing in this Agreement or any Order entered into pursuant to this Agreement is intended to or shall operate to create a partnership between the parties or authorize either party to act as agent for the other.

17.1117.11. Compliance with Laws. Each party's respective provision and use of the Software and Services shall comply with Laws, including applicable anti-bribery and anti-money laundering laws and regulations. Miro shall comply with principles outlined in its Code of Conduct available at https://miro.com/legal/code-of-conduct/.

17.1217.12. Export. Each party agrees to comply with all relevant U.S. and foreign export and import control Laws or regulations applicable to its performance under this Agreement. Each party represents and warrants that (a) it is not listed on any Sanctions Authority's list of prohibited or restricted parties; (b) it is not subject to any sanctions or trade restrictions, or any other applicable economic sanctions or trade restrictions administered or enforced by a Sanctions Authority; and (c) it is not located in, does not operate in, and is not a national of a country that is subject to an embargo administered or enforced by a Sanctions Authority or that has been designated by the U.S. government as a "terrorist supporting" country. Customer agrees (a) not to access or use any of the Services in violation of any U.S. export embargo, prohibition or restriction, or any other applicable trade restrictions and (b) that it will not submit to any of the Services any information controlled under the U.S. International Traffic in Arms Regulations.

17.1317.13. Open Source. The Software may incorporate third-party open source software ("OSS"), as listed in the Documentation or by Miro upon request. To the extent required by the OSS license, that license will apply to the OSS on a stand-alone basis instead of this Agreement. Customer's internal use of the unmodified Software as authorized in this Agreement will not require Customer to comply with the terms of the OSS licenses.

17.1417.14. Insurance. During the Subscription Term, Miro will carry industry standard insurance, (e.g. General Commercial Liability, Errors and Omissions (including Cyber), Worker's Compensation), appropriate for the Services provided hereunder.

17.1517.15. Government End-Users. This section is applicable to U.S. government Users only. Elements of the Services are commercial computer software. If the User or licensee of the Services is an agency, department, or other entity of the United States Government, the use, duplication, reproduction, release, modification, disclosure, or transfer of any of the Services or any related documentation of any kind, including technical data and manuals, is restricted by the terms of this Agreement in accordance with Federal Acquisition Regulation 12.212 for civilian purposes and Defense Federal Acquisition Regulation Supplement 227.7202 for military purposes. The SaaS Service was developed fully at private expense. All other use is prohibited.

1818. Definitions.

·"Affiliate" means an entity that, directly or indirectly, owns or controls, is owned or controlled by, or is under common ownership or control with a party, where "ownership" means the beneficial ownership of fifty percent (50%) or more of an entity's voting equity securities or other equivalent voting interests and "control" means the power to direct the management or affairs of an entity.

·"Agreement" means this MCA together with all Orders, exhibits, Policies, and the DPA.

·"Board" means an online workspace or other element of the SaaS Service displaying Customer Content.

·"Customer Content" means any data, content, or materials that Customer (including its Users) submits to or creates within the SaaS Services (including through the use of any recording functionality provided as part of the SaaS Service) including from Third-Party Platforms.

·"Customer Materials" means materials, systems, and other resources that Customer provides to Miro in connection with Technical Services.

·"DPA" means the Data Processing Addendum between the parties, the current version of which is at https://miro.com/legal/customer-data-processing-addendum/.

·"Documentation" means Miro's usage guidelines and standard technical documentation for the Service, the current version of which is at https://help.miro.com/hc.

·"High-Risk Activities" means activities where use or failure of the Services could lead to death, personal injury, or environmental damage, including life support systems, emergency services, nuclear facilities, autonomous vehicles, or air traffic control.

·"Laws" means all local, state, federal and international laws, regulations, and conventions, including those related to data privacy and data transfer, international communications, and export of technical or personal data applicable to Miro and Customer in their respective use and provision of the Services.

·"Order" means an order for access to and/or provision of Services that references this MCA, that is executed by the Customer and accepted by Miro.

·"Policies" means the Privacy Policy, Security Policy, Support Policy, and SLA.

·"Privacy Policy" means the Privacy Policy, the current version of which is at https://miro.com/legal/privacy-policy/

·"Prohibited Data" means any (a) special categories of data enumerated in European Union Regulation 2016/679, Article 9(1) or any successor legislation, (b) patient, medical or other protected health information regulated by the Health Insurance Portability and Accountability Act (as amended and supplemented) ("HIPAA"), (c) credit, debit or other payment card data subject to the Payment Card Industry Data Security Standards (PCI DSS), (d) other information subject to privacy regulation or protection under specific Laws such as the Children's Online Privacy Protection Act or related rules or regulations, I social security numbers, driver's license numbers or other government ID numbers or (f) any medical data, financial data, data about minors, or other sensitive personal data protected under Laws.

·"Reseller" means a third party that (i) has a valid agreement with Miro governing its provision of reseller services (including without limitation billing agent services) to Miro and (ii) has been authorized by Miro to resell (or act as billing agent with regard to) the Services.

·"SaaS Service" means Miro's proprietary cloud service, as identified in the relevant Order and as modified from time to time by Miro. The SaaS Service includes the Software and Documentation but does not include any Technical Services deliverables or Third-Party Platforms"

·"Sanctions Authority" means the United States, United Kingdom, and European Union and their respective governmental, judicial, or regulatory institutions, agencies, departments, and authorities.

·"Security Policy" means the Miro Security Policy, the current version of which is available at https://miro.com/legal/documents/Miro-Security-Policy.pdf

·"Services" means the SaaS Services, the Technical Services, and any other services Miro may provide to Customer under this Agreement.

·"SLA" means the Miro Service Level Agreement, the current version of which is at https://miro.com/legal/documents/Miro-Service-Level-Agreement.pdf.

·"Software" means any Miro client software, scripts, apps, or other code provided to Customer by Miro for use with the Service.

·"Subscription Term" means the term for Customer's use of the SaaS Service as identified in an Order.

·"Support" means support for the SaaS Service provided to Customer as described in the Support Policy. Customer will receive support at no additional cost. If Customer elects to purchase enhanced or premium support, this will be identified in the applicable Order.

·"Support Policy" means the Miro Support Policy, the current version of which is at https://miro.com/legal/documents/Miro-Support-Policy.pdf

·"Technical Services" means any training, enablement or other technical services provided by Miro related to the SaaS Service, as identified in an Order.

·"Third-Party Platform" means any platform, add-on, service, product, app, or integration not provided by Miro that Customer elects to integrate or enable for use with the Services.

·"Usage Data" means data relating to Customer's use and consumption of the Services including Miro's technical logs, data, and learnings about Customer's use of the Services, but excluding Customer Content.

·"User" means any individual aged 16 or older who Customer permits or invites to access and use the SaaS Service as further described in the Documentation, which may include Customer's and its Affiliates' employees, consultants, contractors or other third parties.