Policies, terms, and notices for Guardo

1. INFORMATION WE COLLECT

We collect the following types of information:

Personal Data

“Personal Data” is any information relating to a User that identifies or can be used to identify that User, either separately or in combination with other readily available data that is received by us. As a Primary Administrator, you voluntarily provide us this information when you initially establish an account on the Service. As of the effective date of this Privacy Policy, to establish an account for the Company, we ask you to provide all the information necessary to complete the sign-up form available on https://guardo.ai, including the Company’s name, website, address and your name, a work email that may be area or role based, work phone and position.

Company’s Data

“Company’s Data” is all other information added by the Company to operate, track, analyze, audit, and reconstruct AI agent interactions. Once the Company’s account is established, you (as Primary Administrator) will have the power to freely register, manually or by using integrations with a third-party software, all the other Administrators and configurations, providing information such as name, email, role, URL addresses, and notes.

We, as a Processor of the Company’s Data, are not responsible and have no available methods to validate if the Company’s Data is accurate and represents or not a natural person.

The Company and the Primary Administrator also represent and warrant that they will require Administrators to read this Privacy Policy.

Finally, when Administrative Users log on to their accounts, we will record their geo-location, IP address and/or unique device identifier and may tie it to their specific account.

We do not knowingly collect Personal Data through the sign-up form on our Site from anyone under age 16. If you are under 16, please do not leave your contact information on our Site. If you are a parent or guardian of a child under 16 years old and you learn that your child has left Personal Data on our Site, please contact us at legal@guardo.ai.

Except as described in this Privacy Policy, we do not request or knowingly receive Personal Data from Administrators or anyone else who is younger than the age of majority in their place of residence.

In addition, if an Administrator provides us feedback or contacts us (for support, for example), we will collect the data included in the communication.

Usage Information

When an Administrative User uses the Services, we may automatically record certain information from them including IP address or other device address or ID, web browser and/or device type, the actions performed on the Service, and the dates and times of the access or use of the Service. We also collect information regarding the Administrative User interaction with email messages, such as whether they open, click on, or forward a message. This information is gathered from Administrative Users only. We do not collect usage information or email tracking from Users.

Cookies

In order to personalize the Service, we use cookies, or similar technologies like single-pixel gifs and web beacons, to record log data. We use both session-based and persistent cookies. Session-based cookies last only while your browser is open and are automatically deleted when you close your browser. Persistent cookies last until you delete them or until they expire. They are unique and allow us to do analytics (as described below) and customization. You can refuse to use cookies by turning them off in your browser. You do not need to have cookies turned on to use most of the Services. You may, however, find that some areas on the Services are slower or do not function at all if cookies are disabled. To learn more about cookies generally, visit https://www.allaboutcookies.org.

Analytics

We use Google Analytics to measure and evaluate access to and traffic on the public area of the Site, and create user navigation reports for our Site administrators. Google operates independently from us and has its own privacy policy, which we strongly suggest you review. Google may use the information collected through Google Analytics to evaluate Users' and another visitor’s activity on our Site. For more information, see Google Analytics Privacy and Data Sharing.

We take measures to protect the technical information collected by our use of Google Analytics. The data collected will only be used on a need to know basis to resolve technical issues, administer the Site and identify visitor preferences; but in this case, the data will be in non-identifiable form. We do not use any of this information to identify Visitors or Users.

You may opt out from the collection of navigation information about your visit to the Site by Google Analytics by using the Google Analytics Opt-out feature.

2. HOW WE USE PERSONAL DATA

We use the Personal Data we collect as described above

To customize and analyze the Service.

To enhance your experience of Services.

To verify your eligibility for the Services.

To contact you regarding your account.

To prevent, detect and fight fraud or other illegal or unauthorized activities.

Address ongoing or alleged fraud on or though the Services and our related products and services;

Analyze data to better understand and design countermeasures against fraud;

Retain data related to fraudulent activities to prevent recurrence.

To ensure legal compliance.

Comply with legal requirements;

Assist law enforcement;

Enforce or exercise our rights.

To process your information as described in this Privacy Policy, we rely on the following legal bases:

Legitimate interests: We may use your information where we have legitimate interests to do so. For example, we analyze our users’ behavior to improve the Services, to prevent and detect fraud and misuse, and to market new products and services that we think will interest you;

Consent: From time to time, we may ask for your consent to use your information. You may withdraw your consent at any time by contacting us at legal@guardo.ai.

You may stop receiving promotional emails from us by clicking the unsubscribe link at the bottom of the promotional email. Communications related to important changes on Services are not considered promotional email.

3. HOW WE SHARE PERSONAL DATA

We will not sell, rent, or share Personal Data or Company’s Data with third parties except in the following ways:

We use third-party operational providers to help us operate and improve the Services. These third parties assist us with data hosting and maintenance, analytics, customer care, marketing, payment processing, debt collection and security operations. All of our service providers must adhere to confidentiality obligations that are consistent with this Privacy Policy.

Applicable law may require us and our service providers to disclose your information if: (i) reasonably necessary to comply with a legal process, such as a court order, subpoena or search warrant, government investigation or other legal requirements; or (ii) necessary for the prevention or detection of crime (subject in each case to applicable law).

We may also share information: (i) if disclosure would mitigate our liability in an actual or threatened lawsuit; (ii) as necessary to protect our legal rights and legal rights of our users, business partners or other interested parties; (iii) to enforce our agreements with you; and (iv) to investigate, prevent, or take other action regarding illegal activity, suspected fraud or other wrongdoing.

We may transfer your information if we are involved, whether in whole or in part, in a merger, sale, acquisition, divestiture, restructuring, reorganization, dissolution, bankruptcy or other change of ownership or control.

We may ask for your consent to share your information with third parties. When we do, we will make clear why we want to share the information.

4. HOW WE USE AND SHARE USAGE INFORMATION

We use the Usage Information for the following purposes: (i) to monitor the effectiveness of our Service; (ii) to monitor aggregate metrics such as use and demographic patterns; and (iii) to diagnose or fix technology problems reported by our Users or our employees; (iv) to provide usage trends reports (“Trends”) to support recommendation and statistics to our Users. In those cases, the information will be de-identified, and will only be based on general information combined through our algorithms with Usage Information.

Also, you authorize us to use, in aggregated form, the de-identified Usage Information to: (i) create, publish and sell any kind of public or private reports and other informational content; (ii) to assist such parties in understanding our Users’ interests, habits, and usage patterns for certain programs, content, services, advertisements, promotions, and/or functionality available through the Services; or (iii) for any other business or marketing purposes decided by us.

5. HOW WE PROTECT YOUR INFORMATION

We take the security of your Personal Data and Company’s Data seriously and use appropriate technical, administrative, and physical measures designed to protect your Personal Data against unauthorized or unlawful processing and against accidental loss, destruction or damage. This includes, for example, encryption, firewalls, password protection and other access and authentication controls. We also limit access to Personal Data and Company’s Data to employees who reasonably need access to it to provide products or services to you, or in order to do their jobs. However, because no security system can be 100% effective, we cannot completely guarantee the security of any information we may have collected from or about you.

6. HOW LONG WE RETAIN PERSONAL AND COMPANY’S DATA

We retain Personal Data and Company’s Data based on the following criteria:

a) Active Company’s Data: Company’s Data, including agent interaction data, configurations, and other data currently in use and not deleted on your account. Active Company’s Data is retained for as long as your account is active or until it’s manually removed from your account by an Administrator.

b) Active Company’s Data Backups: Mosyle Corporation performs full daily Backups for all Active Company’s Data and store such backups in a Recovery Datacenter for up to 15 days. After 15 days, the Backup is deleted. Based on this flow, any information manually removed from your account by an Administrator will still be retained as part of the Active Company’s Data Backup for up to 15 days.

c) Activity Logs: Mosyle Corporation logs relevant actions performed by Administrators when operating the features offered by the Services. Activity Logs are retained for as long as your account is active, and are part of the Active Company’s Data Backups for up to 15 days.

d) Support Logs: When you create a support ticket, depending on the complexity of the question or request, it may be necessary for engineers on Mosyle Corporation’s Technical Support team to prepare and implement special logs that will be used to support you. Those logs may include Company’s Data. Support Logs will be retained for up to 15 days. Logs are part of the Active Company’s Data Backups described in section 6 “b” above and after the deletion from the production environment, Administrator Logs may be part of the Active Company’s Data Backups for up to 15 days.

e) Support Ticket Attachments: When you create a support ticket, our Services give you the option to attach files to the ticket. Mosyle Corporation doesn’t expect to receive any sensitive or protected information from Support Ticket Attachments, including any Company’s Data. If you need to submit any proprietary information as an attachment of a Support Ticket, please share that with our Support Team before any submission so you can receive correct instructions. Support Ticket Attachments may be retained for up to 30 days and will not be part of any backup.

As an exception, we may retain Personal and Company’s Data for periods that are longer than the periods described on this Section 6 based on the following reasons:

Whether there is a legal obligation to which we are subject (for example, certain laws require us to keep records of your transactions for

7. YOUR CHOICES ABOUT YOUR INFORMATION

We respect your privacy rights and provide you with reasonable access to the Personal Data that you may have provided through your use of the Services. If you wish to access or amend any other Personal Data we hold about you, you may contact us by opening a new support ticket or emailing us at legal@guardo.ai. At your request, we will have any reference to you deleted or blocked in our database.

As a Primary Administrator, if you want to delete the Personal Data you provided to us in order to have an account with us for the Company you represent, we will need to receive from you the necessary information to set another person with the Company you represent to act as the Primary Administrator. By doing that, you represent and warrant that you obtained the necessary approvals from this person and required him/her to read our Privacy Policy.

You, as a Primary Administrator, may update, correct, or delete your Account information and preferences at any time by opening a new support ticket.

Please note that while any changes you make will be reflected in active user databases instantly or within a reasonable period of time, we may retain all information you submit for backups, archiving, prevention of fraud and abuse, analytics, satisfaction of legal obligations, or where we otherwise reasonably believe that we have a legitimate reason to do so.

You may decline to provide Personal Data, in which case we will not be able to establish an account to the Company you represent or provide our Services to your Company.

At any time, you may object to the processing of your Personal Data, on legitimate grounds, except if otherwise permitted by applicable law. If you believe your right to privacy granted by applicable data protection laws has been infringed upon, please contact us at legal@guardo.ai.

You also have a right to lodge a complaint with data protection authorities.

This provision does not apply to potential Personal Data that is part of Company’s Data. In this case, the management of the Company’s Data is subject to the Company’s own Privacy Policy, and any request for access, correction or deletion should be made to the Company responsible for the uploading and storage of such data into our Service.

Based on the permissions granted by the Primary Administrator, Administrative Users can at any time update, correct, or delete any information, including potential Personal Data, that is part of the Company’s Data registered, uploaded and stored into our Service.

We have no direct relationship with the Users created by the Company by the upload and storage of the Company’s Data, whose potential Personal Data it may process on behalf of a Company. An individual who seeks access, or who seeks to correct, amend, delete inaccurate data should direct his or her query to the Company or Administrative User they deal with directly.

If the Company requests us to remove the data, we will respond to its request within thirty (30) days. We will delete, amend or block access to any Personal Data and Company’s Data that we are storing only if we receive a written request to do so from the Primary Administrator who is responsible for such Account, unless we have a legal right to retain such Personal Data or Company’s Data. We reserve the right to retain a copy of such data for archiving purposes, or to defend our rights in litigation.

8. CROSS-BORDER DATA TRANSFERS

Sharing of information sometimes involves cross-border data transfers to or from the United States of America and other jurisdictions. For example, when the Services are available to users in the European Economic Area (“EEA”), Personal Data is transferred to the United States. We use the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) and standard contractual clauses approved by the European Commission to validate transfers of EEA residents’ personal information from the EEA to other countries. Standard contractual clauses are commitments between companies transferring personal information of EEA residents to protect the privacy and security of the transferred personal information. Please see Section 9 for information about our participation in the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF).

9. OUR PARTICIPATION IN THE DATA PRIVACY FRAMEWORK

Mosyle Corporation complies with the EU-U.S. Data Privacy Framework (EU-U.S. DPF), the UK Extension to the EU-U.S. DPF, and the Swiss-U.S. Data Privacy Framework (Swiss-U.S. DPF) as set forth by the U.S. Department of Commerce. Mosyle Corporation has certified to the U.S. Department of Commerce that it adheres to the EU-U.S. Data Privacy Framework Principles (EU-U.S. DPF Principles) with regard to the processing of personal data received from the European Union in reliance on the EU-U.S. DPF and from the United Kingdom (and Gibraltar) in reliance on the UK Extension to the EU-U.S. DPF. Mosyle Corporation has certified to the U.S. Department of Commerce that it adheres to the Swiss-U.S. Data Privacy Framework Principles (Swiss-U.S. DPF Principles) with regard to the processing of personal data received from Switzerland in reliance on the Swiss-U.S. DPF. If there is any conflict between the terms in this privacy policy and the EU-U.S. DPF Principles and/or the Swiss-U.S. DPF Principles, the Principles shall govern.

To learn more about the Data Privacy Framework (DPF) program, and to view our certification, please visit https://www.dataprivacyframework.gov/.

With respect to EU, UK, or Swiss Personal Data received or transferred pursuant to the Data Privacy Frameworks, Mosyle Corporation is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. Definitions. In this section, the following terms have the following meanings:

“EU Personal Data” means any information relating to a EU User that identifies or can be used to identify that EU User, either separately or in combination with other readily available data that is received by Mosyle Corporation in the U.S. from the EEA, UK or Switzerland in connection with the Services, including information provided offline, including Sensitive Personal Data.

“Sensitive Personal Data” means EU Personal Data regarding an individual’s racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data that uniquely identifies an individual, physical or mental health, or sexual life or orientation.

“EU User” means a User who resides in the EEA, UK or Switzerland. Data Privacy Framework Principles. Mosyle Corporation commits to processing EU Personal Data in accordance with the DPF Principles as follows:

(1) Notice

Prior to collecting EU Personal Data, Mosyle Corporation notifies EU Users about the categories of EU Personal Data that Mosyle Corporation collects and the purposes for collection and use of their EU Personal Data. Mosyle Corporation will only process EU Personal Data in ways that are compatible with the purpose for which Mosyle Corporation collected it or for purposes later authorized.

We use the EU Personal Data that we collect from EU Users of the Services as described in this Privacy Policy. Before Mosyle Corporation uses EU Personal Data for a purpose that is materially different from the purpose for which Mosyle Corporation collected it or that was later authorized, Mosyle Corporation will provide EU Users with the opportunity to opt out.

(2) Choice

If Mosyle Corporation collects Sensitive Personal Data, we will obtain explicit opt-in consent whenever the DPF requires. Mosyle Corporation will obtain opt-in consent before EU Personal Data is disclosed to third parties other than those described in this Privacy Policy, before EU Personal Data is used for a different purpose than that purpose for which it was collected or later authorized, and whenever the DPF requires.

Please see the YOUR CHOICES ABOUT YOUR INFORMATION section above for more information about how to exercise your choices.

(3) Accountability for Onward Transfer

Mosyle Corporation shares EU Personal Data collected through the Services as described above.

If Mosyle Corporation transfers Personal Data to a third party, Mosyle Corporation takes reasonable and appropriate steps to ensure that each third-party transferee processes Personal Data transferred in a manner consistent with Mosyle Corporation’s obligations under the DPF Principles. Mosyle Corporation will ensure that each transfer is consistent with any notice provided to EU Users and any consent they have given. Mosyle Corporation requires a written contract with any third party receiving EU Personal Data that ensures that the third party (i) processes the Personal Data for limited and specified purposes consistent with any consent provided by EU Users, (ii) provides at least the same level of protection as is required by the DPF Principles, (iii) notifies Mosyle Corporation if it cannot comply with the DPF; and (iv) ceases processing EU Personal Data or takes other reasonable and appropriate steps to remediate.

As noted above, under certain circumstances, Mosyle Corporation may be required to disclose EU Personal Data in response to valid requests by public authorities, including for national security or law enforcement requirements.

Mosyle Corporation remains liable under the DPF Principles if an agent processes EU Personal Data in a manner inconsistent with the Principles unless Mosyle Corporation is not responsible for the event giving rise to the damage.

(4) Security

Mosyle Corporation takes appropriate measures to protect EU Personal Data from loss, misuse and unauthorized access, disclosure, alteration, unavailability and destruction. In determining these measures, Mosyle Corporation takes into account the risks involved in the processing and the nature of the EU Personal Data.

(5) Data Integrity and Purpose Limitation

Mosyle Corporation takes reasonable steps to ensure that such EU Personal Data is reliable for its intended use, accurate, complete and current. Mosyle Corporation adheres to the DPF Principles for as long as it retains EU Personal Data in identifiable form. Mosyle Corporation takes reasonable and appropriate measures to comply with the requirement under the DPF to retain EU Personal Data in identifiable form only for as long as it serves a purpose of processing.

Mosyle Corporation limits the collection of EU Personal Data to information that is relevant for processing. Mosyle Corporation does not process EU Personal Data in a way that is incompatible with the purpose for which it was collected or subsequently authorized by an EU User.

(6) Access

An EU User has the right to access their EU Personal Data and to correct, amend, limit use of or delete the EU Personal Data if the Personal Data is inaccurate or processed in violation of the DPF Principles. Mosyle Corporation is not required to grant the rights to access, correct, amend and delete EU Personal Data if the burden or expense of providing access, correction, amendment or deletion is disproportionate to the risks to the EU User’s privacy or if the rights of persons other than the EU User would be violated.

(7) Recourse, Enforcement, and Liability

In compliance with the DPF Principles, Mosyle Corporation commits to resolve complaints about your privacy and our collection or use of your Personal Data transferred to the United States pursuant to the DPF. European Union, UK, and Swiss individuals with Data Privacy Framework inquiries or complaints should first contact Mosyle Corporation at legal@guardo.ai.

In compliance with the EU-U.S. DPF and the UK Extension to the EU- U.S. DPF and the Swiss-U.S. DPF, Mosyle Corporation commits to cooperate and comply respectively with the advice of the panel established by the EU data protection authorities (DPAs) and the UK Information Commissioner’s Office (ICO) and the Swiss Federal Data Protection and Information Commissioner (FDPIC) with regard to unresolved complaints concerning our handling of personal data received in reliance on the EU-U.S. DPF and the UK Extension to the EU-U.S. DPF and the Swiss-U.S. DPF.

If your DPF complaint cannot be resolved through the above channels, under certain conditions, you may invoke binding arbitration for some residual claims not resolved by other redress mechanisms. See Data Privacy Framework Annex 1 at https://www.dataprivacyframework.gov/framework-article/ANNEX-I-introduction.

Mosyle Corporation commits to periodically review and verify its compliance with the Data Privacy Framework Principles and to remedy any issues arising out of failure to comply with the DPF Principles. Mosyle Corporation acknowledges that its failure to provide an annual self-certification to the U.S. Department of Commerce will remove it from the Department’s list of Data Privacy Framework participants.

10. YOUR CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you can request a notice disclosing the categories of Personal Data about you that we have shared with third parties for their direct marketing purposes during the preceding calendar year. At this time, Mosyle Corporation does not share Personal Data with third parties for their direct marketing purposes.

11. CHILDREN UNDER 16

The Services are not intended to be managed by individuals under the age 16. If we become aware that person managing our Services and submitting information is under age 16, we will delete the information as soon as possible. Except as described in this Privacy Policy, we do not request or knowingly receive Personal Data from Administrators or anyone else who is younger than the age of majority in their place of residence.

12. CHANGES TO THIS PRIVACY POLICY

The Effective Date at the top of this page indicates when this Privacy Policy was last revised. Unless applicable law prevents or a change is needed to protect the privacy or security of our users, we will notify you before any material change takes effect so that you have time to review the changes before they are effective. The previous version of this Privacy Policy will apply until the Effective Date. Your use of the Services after the Effective Date means that you accept the Privacy Policy as revised.

13. QUESTIONS

If you ever have questions about our online Privacy Policy, please contact us via email at legal@guardo.ai.

BILLING BASIS

Billing under the Subscription is charged based on the number of domain/subdomain licenses (“Licenses”). Each License represents one domain or subdomain integrated and monitored through Guardo.

Billing is based on the availability of Licenses and Services, and not based on actual usage of the Services.

For all effects related to billing:

• Active and unused Licenses are billed equally.
• Licenses correspond to the maximum number of domains/subdomains allowed under the Subscription.
• Billing is determined based on the highest number of Licenses associated with your account at the time of billing or during the applicable billing period, as determined by the Company.

To reduce Licenses and avoid future charges, you, through an authorized Administrator, must remove domain/subdomain integrations prior to the applicable billing cycle (“Proper Removal”). Failure to perform Proper Removal prior to billing will result in continued charges for such Licenses.

FREE ACCOUNT CONVERSION

Customers may use Guardo through a free account (“Free Account”) in accordance with the TOS. The Free Account is not subject to this Billing Policy and incurs no fees.

Upon conversion from a Free Account to a paid Subscription, the benefits associated with the Free Account, including the no-cost domain/subdomain License, terminate. From that point forward, all integrated domains/subdomains associated with the account — including any added or maintained during the Free Account period — are counted as Licenses and billed in accordance with this Policy.

No credit, refund, or proration is issued for the period during which any domain/subdomain was used under the Free Account prior to conversion.

MONTHLY SUBSCRIPTION

Customers may subscribe to Guardo through a monthly subscription (“Monthly Subscription”).

The only payment method accepted by the Company for a Monthly Subscription is a valid credit/debit card that you have registered with Guardo.

Subscription billing is based on the availability of Licenses and Services, not based on usage.

All monthly subscriptions are prepaid, and payment must be received by the Company before any billable product or service is provided or activated.

All recurring subscriptions are automatically invoiced and charged to the payment method on file.

Invoices are generated and the payment method is charged on a recurring monthly basis according to the Company’s billing cycle.

License Additions

If the customer adds a domain/subdomain and has no available Licenses:

• A new License must be purchased before the domain/subdomain is added.
• The Company will charge the customer immediately for the additional License based on the applicable prorated amount for the remainder of the billing period.
• If the customer is using automated integrations that add domains/subdomains, the Company may automatically issue an invoice and charge the payment method at the time of each new domain/subdomain registration.

All Licenses added will be billed for the entire billing period in which they are added, regardless of the actual number of days such License was in use during that period.

License Removal

Removing a domain/subdomain does not automatically reduce the number of paid Licenses for the current billing period.

All Licenses will be billed for the entire billing period during which such License was active at any time, regardless of the duration of use.

License count reductions only take effect in future billing cycles and do not generate refunds or credits.

Cancellation of Monthly Subscription

Customers must cancel their Monthly Subscription at least ten (10) days prior to the Company’s next scheduled billing date in order to avoid being charged for the next billing period.

In the event of cancellation, the customer will retain access to the Subscription features through the end of the current billing period.

The Company will not prorate or refund any portion of the subscription fees.

CANCELLATION OF THE PAYMENT METHOD ASSOCIATED WITH THE ACCOUNT IS NOT A VALID METHOD OF TERMINATING THE SUBSCRIPTION.

ANNUAL SUBSCRIPTION

Customers may subscribe to Guardo through an annual subscription (“Annual Subscription”).

The only payment method accepted by the Company for an Annual Subscription is a valid credit/debit card that you have registered with Guardo.

Subscription billing is based on the availability of Licenses and Services, not based on usage.

Annual Subscriptions are prepaid and billed in advance for the full subscription term.

License Additions

If the customer adds a domain/subdomain and has no available Licenses:

• A new License must be purchased before the domain/subdomain is added.
• The Company will charge the customer immediately for the additional License based on the applicable prorated amount for the remainder of the annual subscription term.
• The Company may automatically issue an invoice and charge the payment method at the time of each new domain/subdomain registration.

All Licenses added during an Annual Subscription will be billed for the entire remaining subscription term and will co-terminate with the existing subscription.

License Removal

Removing a domain/subdomain does not result in refunds, credits, or proration.

To avoid additional charges, Proper Removal must be completed prior to adding new Licenses.

Automatic Renewal of Annual Subscription

Customers may cancel or modify their Annual Subscription at any time prior to the renewal deadline.

If the customer fails to cancel or modify the Annual Subscription at least fifteen (15) days prior to the expiration date, the Company will automatically renew the Annual Subscription and charge the payment method on file based on the number of Licenses associated with the account at that time or the minimum required number of Licenses, whichever is higher.

SUBSCRIPTION CHANGES

Customers may increase License quantities at any time.

License increases may result in immediate charges, including prorated charges where applicable.

License decreases are only effective in future billing cycles and do not result in refunds, credits, or proration.

INVOICES AND RECEIPTS

Invoices and receipts will be made available within the Subscription section of the Services.

Invoices are automatically generated and charged to the payment method on file.

Customers may access billing history including invoices, receipts, and License counts for prior billing periods.

TAXES

Applicable taxes may be added to subscription charges based on billing information and jurisdiction.

BILLING DISPUTES

If you believe that you have been incorrectly billed, you must contact us no later than thirty (30) days after the billing date on which the error appeared. Failure to notify us within this period will result in the waiver of your right to dispute the charge.

All billing disputes must include sufficient information to identify the account and the specific charge being disputed.

We will review all disputes in good faith and, if an error is confirmed, will correct it accordingly.

REFUNDS

All fees paid under the Subscription are non-refundable.

The Company does not provide refunds or credits for partial subscription periods, unused Licenses, or for periods during which the Services were available but not used.

The Company will not prorate or refund any portion of subscription fees under any circumstances, except where required by applicable law.

GENERAL TERMS

All billing operations are handled through third-party payment processors.

The Company reserves the right to modify pricing, billing structures, and License definitions at any time. Customers will be notified of any material changes.

Failure to pay any fees when due may result in suspension, restriction, or termination of Services in accordance with the Terms of Service.

QUESTIONS

If you have any questions regarding this Billing Policy, please contact us at:

Mosyle Corporation
legal@guardo.ai

Direct Dependencies

The third-party libraries below are imported directly by the Guardo server code.

@azure/identity (4.13.1)

The following software may be included in this product: @azure/identity. This software contains the following license and notice below:

MIT License

Copyright (c) Microsoft Corporation. All rights reserved.

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

@azure/keyvault-secrets (4.11.1)

The following software may be included in this product: @azure/keyvault-secrets. This software contains the following license and notice below:

MIT License

Copyright (c) Microsoft Corporation. All rights reserved.

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

express (4.22.1)

The following software may be included in this product: express. This software contains the following license and notice below:

(The MIT License)

Copyright (c) 2009-2014 TJ Holowaychuk <tj@vision-media.ca>

Copyright (c) 2013-2014 Roman Shtylman <shtylman+expressjs@gmail.com>

Copyright (c) 2014-2015 Douglas Christopher Wilson <doug@somethingdoug.com>

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

pg (8.12.0)

The following software may be included in this product: pg. This software contains the following license and notice below:

Copyright (c) 2010 - 2024 Brian Carlson (brian.m.carlson@gmail.com)

All rights reserved.

MIT License

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

openai (2.36.0)

The following software may be included in this product: openai. This software contains the following license and notice below:

Apache License, Version 2.0

Copyright 2025 OpenAI

Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at:

http://www.apache.org/licenses/LICENSE-2.0

Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the specific language governing permissions and limitations under the License.

azure-identity (1.25.3)

The following software may be included in this product: azure-identity. This software contains the following license and notice below:

MIT License

Copyright (c) Microsoft Corporation. All rights reserved.

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

azure-keyvault-secrets (4.11.0)

The following software may be included in this product: azure-keyvault-secrets. This software contains the following license and notice below:

MIT License

Copyright (c) Microsoft Corporation. All rights reserved.

Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files (the "Software"), to deal in the Software without restriction, including without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions:

The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software.

THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.

Transitive Subdependencies

The packages below are brought into the production runtime by the direct dependencies listed above. They are not imported by the Guardo server code directly, but they are part of the deployed dependency graph. Each row links to the license file for that package; the full license text governing each package is available at the linked URL.