Doneven Ventures LLC d/b/a DV Technologies

ACCEPTABLE USE POLICY

Rules governing use of the DV Operating System

Version 2.0 | Effective Date: January 1, 2026 | Last Updated: January 1, 2026

This Acceptable Use Policy ("AUP") governs use of the Services provided by Doneven Ventures LLC d/b/a DV Technologies ("Company"). This AUP is incorporated into and forms part of the Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service.

By accessing or using the Services, you agree to comply with this AUP. Failure to comply may result in suspension or termination of access, without prejudice to any other remedies available to Company.

1. PROHIBITED ACTIVITIES

You agree not to use the Services, and not to permit any Authorized User, Portal Recipient, or third party to use the Services, to:

• 1. Violate any applicable law, regulation, or ordinance, including data protection, privacy, communications, consumer protection, export control, contractor licensing, and intellectual property laws.

• 2. Upload, transmit, or store content that is unlawful, harmful, threatening, abusive, harassing, defamatory, vulgar, obscene, invasive of privacy, hateful, or otherwise objectionable.

• 3. Infringe, misappropriate, or violate the intellectual property, privacy, publicity, or other rights of any third party.

• 4. Transmit viruses, malware, ransomware, or other malicious code.

• 5. Attempt to gain unauthorized access to the Services, other accounts, or connected systems, including through password mining, credential stuffing, phishing, or token guessing.

• 6. Interfere with, disrupt, or create an undue burden on the Services or connected networks.

• 7. Send unsolicited commercial communications (spam) or engage in phishing, spoofing, or social engineering.

• 8. Impersonate any person or entity, or misrepresent an affiliation, including configuring any AI Feature to represent itself as a human being.

• 9. Collect, harvest, or store personal information about other users or third parties without express consent and in compliance with applicable law.

• 10. Process or store protected health information, biometric identifiers, government identification numbers, full payment card or financial account numbers, consumer credit information, precise continuous location data, information about individuals under 16, or any other category of data for which the Services are not authorized, unless expressly authorized in writing by Company under additional terms.

• 11. Use any automated system (bots, scrapers, spiders) to access the Services beyond a rate a human could reasonably produce, except as expressly permitted.

• 12. Reverse engineer, decompile, disassemble, or attempt to discover the source code or underlying structure of the Services, except where such restriction is prohibited by law.

• 13. Use the Services to develop, train, or improve a competing product or service, or to benchmark the Services without Company's prior written consent.

• 14. Resell, sublicense, or provide access to the Services to any third party except as expressly permitted under the Terms of Service.

• 15. Share, publish, post, or otherwise distribute a client, subcontractor, or vendor portal link publicly, or send a portal link to a recipient other than the intended party.

• 16. Circumvent, disable, or misrepresent any consent, disclosure, opt-out, rate limit, quiet hours, or audit logging control built into the Services.

• 17. Use the Services to monitor Authorized Users outside of working hours, in a manner not disclosed to them, or in violation of applicable labor or employee privacy law.

2. CALL RECORDING, MONITORING, AND TRANSCRIPTION

If you enable call recording, monitoring, or transcription, you shall:

• Determine whether the jurisdictions of all call participants require one-party or all-party consent, and comply with the strictest applicable standard. California, Connecticut, Delaware, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Oregon, Pennsylvania, and Washington impose heightened consent requirements. This list is provided for convenience only and is not legal advice.

• Provide a clear and conspicuous disclosure at the beginning of every recorded call, before any substantive conversation, identifying that the call is being recorded and, where applicable, transcribed and analyzed by automated systems.

• Immediately cease recording if any participant objects, and provide a non-recorded path to continue the conversation.

• Not record calls that are likely to involve privileged, medical, or other legally protected content.

• Restrict internal access to recordings and transcripts to personnel with a legitimate business need.

• Maintain records sufficient to demonstrate compliance.

You may not enable recording for any inbound or outbound line without first confirming that a compliant disclosure is in place.

3. MESSAGING, CALLING, AND EMAIL

If you use the Services to send SMS, place calls, or send email, you shall:

• Obtain and document prior express consent from each recipient as required by the Telephone Consumer Protection Act, state telemarketing statutes, and carrier policy.

• Not message or call numbers on the National Do Not Call Registry or on any internal suppression list, absent an applicable exemption.

• Register messaging campaigns and brands with carriers where required, including A2P 10DLC registration, and use only registered sender identities.

• Honor opt-out requests immediately and permanently, including replies of STOP, END, QUIT, CANCEL, UNSUBSCRIBE, and equivalents.

• Respect quiet hours, generally 8:00 a.m. to 9:00 p.m. in the recipient's local time zone, and any stricter state requirement.

• Not use purchased, rented, scraped, or otherwise third-party sourced contact lists.

• Include accurate sender identification and a valid physical postal address in commercial email, and honor unsubscribe requests within ten (10) business days, as required by CAN-SPAM.

• Not send content prohibited by carriers, including content relating to controlled substances, firearms, gambling, high-risk financial products, or adult material.

• Maintain complaint rates and opt-out rates within industry-standard thresholds.

Company may throttle, suspend, or terminate messaging capability on any account that generates excessive complaints, carrier violations, or opt-out failures.

4. ARTIFICIAL INTELLIGENCE USE

You shall not use AI Features to: generate content that is unlawful, deceptive, defamatory, harassing, or infringing; make or materially inform decisions producing legal or similarly significant effects about an individual without meaningful human review; represent AI-generated output as human-authored where disclosure is required or the omission would be deceptive; operate an automated voice or messaging agent without clear disclosure that the recipient is interacting with an automated system and a prompt path to a human; rely on AI output as legal, tax, accounting, insurance, engineering, code compliance, or licensing advice; adopt an AI-generated document, contract, estimate, transcript, summary, or score into a business record without human review and verification; or attempt to extract, reproduce, or reverse engineer any underlying model, prompt, or system instruction.

5. CUSTOMER RESPONSIBILITIES

Customer is solely responsible for: (a) all content and Customer Data submitted to the Services; (b) ensuring that its use of the Services, including AI Features, messaging, and recording, complies with all applicable laws; (c) obtaining all necessary consents and providing all required notices, including to its own Authorized Users with respect to time tracking, activity logging, and job site check-in location capture; (d) reviewing and verifying all AI-generated output before relying on it; (e) maintaining appropriate security measures for account credentials and devices, and promptly deprovisioning departed personnel; (f) assigning each Authorized User the least-privileged role appropriate to their duties; (g) configuring retention periods for recordings and transcripts consistent with its own legal obligations; and (h) promptly notifying Company at security@dvtechnologies.com of any suspected unauthorized access, credential compromise, or leaked portal link.

6. MONITORING AND ENFORCEMENT

Company reserves the right, but does not assume the obligation, to monitor use of the Services for compliance. Company may investigate suspected violations and may remove or disable access to content, or suspend or terminate accounts that violate this AUP or the Terms. Where a violation presents an immediate risk of harm, legal exposure, or service disruption, Company may suspend the affected capability or account immediately and without prior notice, and will notify Customer promptly thereafter.

7. REPORTING AND CHANGES

Report violations to legal@dvtechnologies.com. Report security vulnerabilities to security@dvtechnologies.com. Company will not pursue legal action against good-faith security research conducted without accessing, modifying, or exfiltrating other parties' data, and reported privately before any disclosure. Company may update this AUP from time to time. Material changes are effective upon posting or notice. Continued use after the effective date constitutes acceptance.

© 2026 Doneven Ventures LLC d/b/a DV Technologies. All rights reserved.

legal@dvtechnologies.com | [Principal Place of Business Address], California