BLUEPINKSECURITY INC. / PUBLIC LEGAL DOCUMENT

Website & AI Interaction Terms

Public access to bluepinksecurity.com and TIAP

1. Company and scope

These Website & AI Interaction Terms (“Terms”) apply to access to bluepinksecurity.com, its institutional content and TIAP, Bluepinksecurity’s conversational AI agent and interactive orb. The operator is Bluepinksecurity Inc., a Delaware corporation (“BPS,” “we” or “us”). These Terms cover visitor interactions and informational features. Enterprise products, commercial services, XC integrations, research collaborations, employment arrangements and advisory engagements are governed by their respective written agreements when offered and entered into.

2. Information and stage of development

BPS is a Delaware-incorporated startup pursuing organizational superintelligence with intelligence and cybersecurity engineered together. The website may discuss ongoing research, conceptual systems, prototypes, proposed capabilities and future commercial directions. Their description provides institutional information and does not constitute a guarantee of present availability, certification, performance, delivery, investment terms or regulatory authorization. Only a written commitment issued by an authorized BPS representative can establish a binding commercial obligation.

3. Appropriate use and age

Use the website and TIAP lawfully and with respect for the rights of BPS and others. TIAP is intended for individuals aged 18 or older engaged in professional, research, institutional or other legitimate enquiries. You are responsible for information you choose to provide and for obtaining any necessary authority to share it. Access may be limited where necessary to protect the service, comply with law or address misuse.

4. Conversational AI and human review

TIAP is an AI system. It may generate inaccurate, incomplete or outdated information. Its responses are educational and exploratory, tailored to the visitor's question, and are subject to human verification for consequential use. TIAP cannot autonomously bind BPS to a contract, confirm an investor allocation, make an employment offer, provide regulated professional advice or certify a security posture. Material requests may be referred to the appropriate team for independent review.

5. Voice, transcripts and visitor choices

A visitor chooses whether to activate the microphone or use any available text or contact route. Live voice processing is needed to interpret spoken requests. Microphone permission is a device-level control; any legally required consent for recording, marketing or another distinct purpose is collected separately. The current TIAP voice-service configuration has voice recording disabled and audio deletion enabled, with a 30-day conversation-retention setting. Processing of transcripts, contact details and records of enquiries is described in the Privacy Policy. You may end a conversation at any time.

6. Enquiries and marketing

Visitors may voluntarily give a name, organization, email address and the purpose of a requested response. We use confirmed details to address that enquiry, subject to applicable privacy law. Newsletters, events, research updates and product communications are a separate marketing purpose. BPS seeks advance opt-in consent wherever required and permits an unsubscribe from each promotional email. Local law may permit certain professional outreach under another lawful basis. An unsubscribe changes marketing preferences and does not cancel an unrelated response specifically requested by the visitor.

7. Information security and restrictions

Protect credentials, confidential business information, personal health details and sensitive documents by refraining from submitting them to TIAP. Users must not attempt unauthorized access, malware distribution, service disruption, identity impersonation, secret extraction, unlawful surveillance or infringement of intellectual property. Good-faith vulnerability reports may be sent through the contact route; production testing and access to BPS systems require authorization.

8. Content ownership and license

BPS and its licensors retain ownership of the website, marks, software, visual design, research materials and proprietary content, subject to applicable law. We grant a limited, personal, revocable permission to access and read public material for legitimate purposes. This permission excludes any right to commercialize, redistribute proprietary software, exploit confidential research or use BPS branding without authorization. You retain applicable rights in your own submitted content and grant only the processing permissions reasonably needed to handle your enquiry and legal obligations.

9. Third-party technology

TIAP may use external hosting, speech processing, transcription and AI inference providers. Functionality and response times can be affected by those dependencies. BPS's collection practices and provider categories are described in the Privacy Policy. Contractual protections and statutory data protection responsibilities continue to apply.

10. Availability and modifications

We may maintain, improve, suspend or modify the website and TIAP for business, safety, security or legal reasons. We publish updated Terms with a revised date and provide further notice or request consent where required. No uninterrupted-access guarantee is made for this public institutional experience.

11. Warranties and liability

To the maximum extent legally permitted, the public website and TIAP are offered on an “as available” basis without contractual warranty of accuracy, uninterrupted operation or fitness for a particular purpose. For claims related solely to the free public website or TIAP and arising outside a separately executed agreement, BPS's aggregate contractual liability is limited to USD 100 where legally enforceable. Mandatory rights and liability that law prohibits parties from excluding or limiting remain unaffected. Commercial services, if engaged, have their own negotiated liability terms.

12. Law and dispute resolution

Delaware law governs these Terms to the extent permitted, without displacing mandatory laws that protect visitors in their respective jurisdictions. Delaware courts may hear disputes where jurisdiction and venue clauses are enforceable. Available statutory consumer and privacy remedies, as well as regulatory complaint rights, remain unaffected.

13. Contact and governing documents

For questions about these Terms or the handling of personal information in TIAP, contact Bluepinksecurity Inc. at dpo@bluepinksecurity.com. Our Privacy Policy is at https://bluepinksecurity.com/legal/privacy. Cookies and similar technologies are addressed at https://bluepinksecurity.com/legal/cookies. Enterprise data processing is addressed by the relevant service agreement and DPA, if applicable. Last updated: 18 October 2026.

ISSUED BY BLUEPINKSECURITY INC.

Data protection and legal enquiries: dpo@bluepinksecurity.com

Last updated: 18 October 2026