PRIVACY,
SECURITY & END USER LICENSE AGREEMENT

Last Updated: 10/20/26
Version: 2.0

IMPORTANT — READ
CAREFULLY

This Privacy, Security & End User License Agreement (this
“Agreement”) is the primary legal, privacy, and
security document governing the Scudio Service.

It serves as:

the End User License Agreement and Terms of Use
governing your use of the Software and Service;
the Privacy Notice describing how Scudio
collects, uses, processes, retains, discloses, and protects personal
information; and
the Security Notice describing the principal
safeguards and security practices applicable to the Service.

This Agreement is between you (“you,” “your,” the
“End User,” or “Customer”) and
Scudio LLC, a Delaware limited liability company,
including where applicable Scudio LLC doing business as
Emunet (“Scudio,” “we,” “us,” or
“our”).

It governs your access to and use of Scudio’s content-filtering
software, applications, device agents, browser extensions, mobile
applications, websites, account portals, classification systems,
processing services, updates, Documentation, support services, and
related products and features, collectively the
“Software” or “Service.”

The Software may be offered under the Emunet brand,
the Scudio name, or under the brand, name, logo,
domain, or product identity of an authorized Distribution Partner,
reseller, managed service provider, organization, school, community,
enterprise, or white-label provider.

Regardless of the brand displayed to you, Scudio owns or licenses the
underlying Scudio Software and technology, and this Agreement governs
your rights with respect to that underlying Software unless Scudio
expressly agrees otherwise in writing.

Privacy Notice
Versus Contract Terms

The license, acceptable-use, payment, intellectual-property,
warranty, liability, dispute-resolution, and similar provisions of this
Agreement are contractual terms.

The privacy and security provisions describe Scudio’s information
practices and responsibilities. Acceptance of this Agreement does not
replace any separate consent required by applicable privacy law. Where
applicable law requires consent for a particular type of processing,
Scudio or the applicable Customer or Administrator will rely on the
legally appropriate mechanism rather than treating acceptance of this
Agreement alone as consent.

Acceptance

BY CREATING AN ACCOUNT, PURCHASING OR RECEIVING A
SUBSCRIPTION, INSTALLING, ACCESSING, ENABLING, ACTIVATING, CONFIGURING,
OR USING THE SOFTWARE OR SERVICE — OR BY CLICKING “I AGREE,” “ACCEPT,”
OR A SIMILAR CONTROL — YOU AGREE TO THE CONTRACTUAL TERMS OF THIS
AGREEMENT.

If you do not agree, do not install, access, enable, activate,
configure, or use the Software.

If you accept this Agreement on behalf of a company, family, school,
institution, community, organization, reseller, managed service
provider, Distribution Partner, or other entity, you represent that you
have authority to do so.

SECTION 31 CONTAINS A BINDING ARBITRATION PROVISION AND
CLASS-ACTION WAIVER THAT MAY AFFECT YOUR LEGAL RIGHTS.

1. Definitions

1.1. Administrator

“Administrator” means a person or organization
authorized to install, activate, configure, administer, manage,
restrict, or control the Software, Filtering Standards, Managed Devices,
Managed Users, reporting features, or other administrative
functionality.

1.2. Branded Offering

“Branded Offering” means the Software as marketed,
named, branded, packaged, presented, or offered under any trade name,
trademark, domain, interface, logo, or product name, including Emunet,
Scudio, or a Distribution Partner’s brand.

1.3. Customer

“Customer” means the individual, family, household,
company, school, institution, organization, reseller, managed service
provider, Distribution Partner, or other person or entity that
purchases, subscribes to, receives, configures, administers, or
otherwise uses the Service.

1.4. Device

“Device” means a computer, mobile phone, tablet,
browser, router, endpoint, appliance, virtual machine, or other hardware
or software environment on which the Software operates or through which
Service functionality is provided.

1.5. Distribution
Partner

“Distribution Partner” means a third party
authorized by Scudio under a separate agreement to market, distribute,
resell, support, administer, offer, or present the Software under its
own brand, as a white-label or private-label product, as a co-branded
offering, or as part of another service.

1.6. Documentation

“Documentation” means user guides, administrator
guides, help content, onboarding materials, technical specifications,
support materials, and other documentation Scudio or an authorized
Distribution Partner makes available concerning the Service.

1.7. Filtering
Standards

“Filtering Standards” means categories, policies,
rules, blocklists, allowlists, exceptions, thresholds, classifications,
Device settings, user settings, organization settings, and other
configuration choices that determine how the Software evaluates,
classifies, permits, restricts, blocks, flags, logs, reports, or
otherwise handles content or activity.

1.8. Filtered Content

“Filtered Content” means websites, applications,
domains, URLs, images, video, text, files, media, communications,
metadata, network traffic, or other content or activity evaluated or
processed by the Software in applying Filtering Standards.

1.9. Managed Device

“Managed Device” means a Device on which the
Software is installed, activated, enabled, configured, filtered,
restricted, or administered.

1.10. Managed User

“Managed User” means a person whose Device, account,
network activity, application access, or access to content is subject to
filtering, classification, policy enforcement, restriction, reporting,
or other functionality provided through the Software.

The term “Managed User” does not mean that Scudio personnel
monitor or observe that person’s activity.

1.11. Edge Processing

“Edge Processing” means filtering, classification,
inspection, policy enforcement, or related processing performed locally
on or near a Managed Device, including through a local agent, service,
driver, extension, application, model, cache, or policy engine.

1.12. Processing Node

“Processing Node” means a local or remote computer,
server, gateway, appliance, virtual machine, cloud environment, relay,
enterprise system, or other computing environment used in connection
with the Software to classify, inspect, filter, route, process, or
enforce policies on traffic, content, metadata, or other data.

A Processing Node may be controlled by the Customer, another user, an
enterprise, Scudio, a Distribution Partner, or an authorized
infrastructure provider.

1.13. Remote Processing

“Remote Processing” means a deployment model in
which traffic, content, metadata, URLs, DNS requests, files, images,
video, network activity, or other data from a Device is transmitted,
routed, proxied, relayed, forwarded, or otherwise made available to a
Processing Node for automated filtering, classification, inspection,
policy enforcement, security, or related Service functionality.

1.14. Partner Terms

“Partner Terms” means additional billing terms,
service terms, support terms, privacy notices, community standards, or
policies established by a Distribution Partner in connection with a
Branded Offering.

1.15. Personal
Information

“Personal Information” means information that
identifies, relates to, describes, is reasonably capable of being
associated with, or can reasonably be linked to an identifiable person
or household, as defined by applicable privacy law.

1.16. Service Data

“Service Data” means information processed,
generated, transmitted, stored, collected, or otherwise handled by or
through the Service, including account information, Device information,
configuration information, policy information, telemetry, diagnostic
information, security events, classifications, reports, or other
information described in this Agreement.

Not all Service Data is collected or retained by Scudio. Depending on
the deployment, information may be processed transiently, remain only on
a Device, reside in Customer-controlled infrastructure, be available
only to an Administrator, or be processed without permanent
retention.

1.17. Subscription

“Subscription” means the free, paid, trial, pilot,
evaluation, personal, family, business, organizational, school,
enterprise, reseller, white-label, or other plan, term, user count,
Device count, or service level under which use of the Software is
authorized.

2. Scudio,
Emunet, and White-Label Offerings

2.1. Emunet

Emunet is a Scudio trade name, product brand, or
doing-business-as name.

References to Emunet in connection with the Software mean Scudio
operating under that brand.

2.2. White-Label
and Co-Branded Products

Scudio may make the Software available through Distribution Partners
under other names, trademarks, logos, domains, community names, or
product identities.

Changing the branding does not change Scudio’s ownership or licensing
of the underlying Software.

2.3. Distribution
Partners

A Distribution Partner is separate from Scudio unless a written
agreement expressly provides otherwise.

Distribution Partners may provide billing, sales, onboarding,
support, policy administration, account administration,
community-specific standards, or other services.

A Distribution Partner may not modify this Agreement or make
warranties or commitments on Scudio’s behalf unless specifically
authorized by Scudio in writing.

2.4. Partner Terms
and Privacy Practices

A Distribution Partner may have Partner Terms concerning its own
pricing, support, billing, refunds, policies, administrative practices,
or data-processing activities.

Where a Distribution Partner independently determines why and how it
processes Personal Information, its privacy notice governs those
independent activities.

This Agreement governs Scudio’s own information practices and the
underlying Scudio Software.

2.5. Rebranding and
Migration

Scudio may rename, rebrand, replace, migrate, or discontinue a
Branded Offering, including transitioning users among brands, domains,
products, or authorized Distribution Partners, subject to applicable law
and written contractual commitments.

3. License Grant

3.1. License

Subject to compliance with this Agreement and payment of applicable
fees, Scudio grants you a limited, revocable, non-exclusive,
non-transferable, and non-sublicensable license to use the Software on
the Devices and during the term authorized by your Subscription.

3.2. Permitted Purpose

The Software may be used for lawful filtering, classification, policy
enforcement, Device protection, Device management, restriction,
security, and Customer-configured administrative, logging, alerting, or
reporting functionality.

3.3. Licensed, Not Sold

The Software is licensed rather than sold.

Scudio and its licensors retain all rights not expressly granted.

3.4. Updates

Scudio may automatically provide or deploy updates, patches, new
versions, model updates, classification updates, security updates,
certificate updates, driver updates, policy updates, compatibility
changes, or configuration changes.

Updates become part of the Software and are governed by this
Agreement.

3.5. Required Updates

Some updates may be required for security, filtering effectiveness,
compatibility, integrity, or continued operation.

Failure to maintain required updates may cause functionality to be
reduced, unavailable, or unsupported.

4.
Authority, Managed Users, and Administrative Controls

4.1. Authority to
Install

By installing, enabling, activating, configuring, or using the
Software on a Device, you represent that you own the Device or otherwise
have authority to install, configure, and manage the Software on it.

Where the Software is used to manage another individual’s Device or
activity, you are responsible for having any rights, permissions,
notices, consents, or other legal authority required for that use.

4.2. Filtering Requires
Processing

The Software may technically inspect, analyze, classify, route, or
otherwise process websites, applications, URLs, domains, images, video,
text, files, metadata, network traffic, or other content or activity in
order to apply Filtering Standards and provide the Service.

Automated processing is not the same as human
monitoring.

The fact that the Software processes content does not by itself mean
that Scudio, an Administrator, or another person sees, reads, watches,
or records that content.

4.3. Administrative
Visibility

Depending on the Customer’s configuration, Subscription, and
deployment, Administrators may receive reports, alerts, filtering
events, policy events, Device status, logs, or other administrative
information.

This administrative visibility is a separate function from the
automated processing required to perform filtering.

4.4. Scudio Is
Not the Customer’s Supervisor

Scudio supplies filtering, classification, security,
policy-enforcement, and related technology.

Scudio does not independently observe Managed Users for the purpose
of supervising their behavior, determining whether their conduct is
appropriate, or creating behavioral profiles for unrelated purposes.

Customers and Administrators are responsible for providing notices
and obtaining consent or other authorization where required by law
before enabling filtering, administrative reporting, logging, Device
management, encrypted-traffic inspection, or similar functionality for
another person.

4.6. Minors

Where the Managed User is a minor, the Administrator represents that
the Administrator is the parent or legal guardian, is acting under
appropriate parental or institutional authority, or otherwise has lawful
authority to configure and use the Service for that minor.

4.7.
Employees, Students, and Organizational Users

Where the Software is deployed in an employment, school,
institutional, enterprise, community, or organizational environment, the
Customer is responsible for applicable policies, notices, permissions,
labor requirements, educational requirements, privacy obligations, and
other legal requirements.

4.8. Administrator
Responsibility

Administrators may have substantial control over Managed Devices,
Filtering Standards, application access, certificates, VPNs, settings,
reporting, and other functions.

Customers are responsible for granting administrative access only to
appropriate and authorized persons.

4.9. Prohibited
Surveillance

The Service may not be used for unlawful surveillance, interception,
stalking, tracking, or monitoring.

5.
Nature and Limitations of Filtering Technology

5.1. Filtering Is Not
Perfect

The Software may use rules, categories, blocklists, allowlists,
heuristics, artificial intelligence, machine learning, computer vision,
natural-language processing, metadata, local models, remote models, and
other automated technologies.

Filtering and automated classification are inherently imperfect.

The Software may fail to block unwanted content and may incorrectly
block, delay, restrict, classify, or flag legitimate content.

5.2. Human Judgment

The Service assists rather than replaces human judgment, parental
involvement, educational supervision, religious guidance, organizational
policies, employment policies, or compliance programs.

5.3. Automated
Classification

AI-generated classifications, categories, confidence values, alerts,
and other automated outputs are predictions and may be incomplete,
inconsistent, delayed, over-inclusive, under-inclusive, or
inaccurate.

5.4. Edge and Remote
Models

Some deployments perform most computational filtering directly on the
Managed Device.

Other deployments may use Remote Processing, including where:

a Device lacks sufficient processing capability;
centralized enterprise filtering is desirable;
filtering is performed through a gateway or appliance;
another computer or server performs computationally intensive
analysis;
a Distribution Partner provides an authorized processing
environment; or
remote or hybrid processing otherwise improves the operation of
the Service.

5.5. External
Dependencies

Software performance can be affected by browsers, operating systems,
VPNs, networks, DNS providers, websites, applications, device
manufacturers, app stores, security products, cloud infrastructure,
encryption technologies, or other systems outside Scudio’s control.

6.
Technical Components and System-Level Operation

6.1. Technical
Components

Depending on platform and configuration, the Software may install,
operate, modify, or use components including device agents, drivers,
services, background processes, browser extensions, mobile applications,
VPN profiles, DNS settings, proxies, routing rules, firewall rules,
certificates, certificate stores, device-management profiles,
supervised-device settings, network extensions, packet filters, local
databases, caches, policy engines, security components, and update
services.

6.2. Authorization

You authorize the Software to configure, operate, update, enforce,
disable, remove, or modify such components where reasonably necessary to
provide, secure, maintain, troubleshoot, support, improve, or update the
Service.

6.3. Processing
Location

Processing may occur:

locally on the Managed Device;
on another Device controlled by the Customer;
on an enterprise or Customer Processing Node;
within Distribution Partner infrastructure;
within Scudio-operated infrastructure;
through an authorized infrastructure provider; or
through a combination of these methods.

6.4. Remote Routing

Where Remote Processing is enabled, traffic or content may be routed,
proxied, tunneled, relayed, forwarded, or otherwise transmitted to a
Processing Node so automated filtering or classification can occur.

6.5.
Processing Does Not Necessarily Mean Storage

Routing content through a Processing Node does not itself mean that
content is permanently stored, entered into browsing-history logs,
reported to an Administrator, or viewed by Scudio personnel.

Those functions depend on the deployment and configuration and are
described further in Sections 9 through 14.

6.6.
Customer-Controlled Infrastructure

Where a Customer, organization, enterprise, household, school, or
Distribution Partner controls a Processing Node, that party is
responsible for the security, availability, access controls,
configuration, backups, and lawful operation of that infrastructure
except where Scudio expressly assumes a responsibility in writing.

6.7. Encrypted Traffic

Filtering may require certificates, VPN profiles, proxy
functionality, DNS settings, local inspection, routing changes, or
similar mechanisms to classify or control encrypted traffic.

6.8. Device and Network
Effects

Filtering may affect browser behavior, network routing, DNS
resolution, VPN functionality, certificate trust, application
compatibility, connection speed, latency, bandwidth, battery
consumption, memory, storage, CPU/GPU utilization, or operating-system
behavior.

6.9. Compatibility

Scudio does not guarantee compatibility with every website,
application, Device, browser, VPN, network, operating system, security
product, or configuration.

6.10. Remote Processing
Availability

Remote Processing may depend on network connectivity, Processing Node
availability, bandwidth, latency, cloud services, Customer
infrastructure, Distribution Partner infrastructure, and third-party
services.

6.11. Failure Behavior

Depending on the deployment, configuration, and Filtering Standards,
failures may cause traffic to be blocked, allowed, evaluated using
cached policies, evaluated using default policies, or temporarily
unavailable.

6.12. Backups

Customers are responsible for appropriate backups of Devices, data,
configurations, and Customer-controlled Processing Nodes.

7. Tamper
Resistance and Anti-Bypass Security

The Software may contain self-protection, anti-bypass, watchdog,
integrity-checking, service-restart, driver-protection, secure-update,
activation, Device-identity, certificate-validation,
uninstall-protection, or similar security mechanisms.

You may not bypass, defeat, corrupt, spoof, disable, improperly
modify, or interfere with these mechanisms except through authorized
controls.

Scudio may restrict functionality, suspend access, revoke licenses,
block activation, or take reasonable technical measures where it
reasonably believes the Software is being attacked, bypassed,
counterfeited, tampered with, or abused.

8. Acceptable Use and
Restrictions

You may not:

(a) copy, modify, translate, adapt, or create unauthorized derivative
works of the Software;

(b) reverse engineer, decompile, disassemble, derive, extract,
replicate, or attempt to discover the Software’s source code,
architecture, algorithms, AI or machine-learning models, model weights,
rules, heuristics, signatures, classifications, protocols, trade
secrets, or underlying technology except where applicable law expressly
prohibits this restriction;

(d) resell, sublicense, distribute, host, rent, lease, or
commercially provide the Software except as separately authorized by
Scudio;

(e) remove or alter proprietary notices or technical identifiers;

(f) use the Software or its output to develop, train, benchmark,
validate, test, or improve a competing filtering or classification
product without Scudio’s written permission;

(g) use the Service unlawfully or in violation of applicable
third-party rights;

(h) attack, scrape, overload, compromise, or perform unauthorized
security testing against Scudio systems;

(i) use the Software for unlawful surveillance, harassment, stalking,
fraud, credential theft, malware, or abuse;

(j) use the Service in life-critical environments where failure could
directly result in death, serious injury, or critical infrastructure
failure; or

(k) continue using the Software after your license has expired or
been revoked.

9. Privacy Notice —
Scope and Roles

This Section and Sections 10 through 17 constitute Scudio’s general
Privacy and Security Notice.

9.1. Services Covered

These privacy provisions apply to:

Scudio and Emunet websites;
account and administrative portals;
Scudio and Emunet Software;
device agents and applications;
Processing Nodes operated by Scudio;
support services;
communications with Scudio; and
other Scudio-operated Service functionality.

9.2. Scudio’s Role

The role Scudio plays depends on the deployment.

Where Scudio determines why and how Personal Information is used —
for example, operating its websites, maintaining customer accounts,
licensing the Software, securing the Service, or handling support —
Scudio generally acts as the controller,
business, or equivalent entity under applicable privacy
law.

Where an enterprise, school, organization, Customer, or Distribution
Partner determines how Managed User information should be filtered,
logged, retained, or reported and Scudio processes that information on
its behalf, Scudio may act as a processor,
service provider, contractor, or
equivalent entity.

Scudio may perform both roles with respect to different categories of
information in the same deployment.

9.3. Customer and
Administrator Roles

Customers and Administrators may independently determine Filtering
Standards, Administrator permissions, reporting, retention, Processing
Nodes, and other configuration choices.

Where they independently determine the purposes and means of
processing, they are responsible for the privacy obligations associated
with those decisions.

9.4. Distribution
Partners

A Distribution Partner may independently control account, billing,
customer-support, administrative, or other information.

Its separate privacy notice may apply to information it independently
controls.

10. Personal
Information We Process

Depending on how the Service is used, Scudio may process the
following categories.

10.1. Account and
Contact Information

This may include name, email address, telephone number, organization,
account identifier, role, username, Customer relationship, Distribution
Partner relationship, and similar account information.

10.2.
Subscription and Transaction Information

This may include plan, Subscription status, invoices, transaction
history, renewal status, and payment status.

Full payment-card or banking credentials may be collected directly by
a payment processor or Distribution Partner rather than Scudio.

10.3. Device and
Technical Information

This may include Device type, manufacturer, model, operating system,
operating-system version, browser, Software version, hardware
characteristics, installation identifiers, IP address, network type,
language, region, and similar technical information.

10.4. Product Telemetry

This may include error reports, crashes, faults, diagnostic events,
performance metrics, feature status, configuration state, update state,
license status, activation status, security events, integrity events,
and similar operational information.

Routine telemetry is not intended to contain the substance of
a Managed User’s private communications, files, browsing content,
images, video, or messages.

10.5. Filtering and
Policy Information

This may include Filtering Standards, policy assignments, categories,
exceptions, policy decisions, blocked or permitted events, configuration
changes, classifications, and related operational information.

Whether Scudio receives or retains such information depends on the
deployment.

10.6. Remote Processing
Content

Where Remote Processing is enabled, content required to make a
filtering decision may transit through or be processed on a Processing
Node.

This may include URLs, domains, metadata, text, images, video, files,
DNS requests, network traffic, or related information.

Remote Processing content may be processed transiently and need not
be retained after the filtering decision.

10.7. Support and
Diagnostic Information

When a Customer or Administrator seeks support, Scudio may receive
correspondence, screenshots, logs, diagnostic files, technical details,
or other information voluntarily provided for troubleshooting.

Additional diagnostic sharing may be enabled by a user or
Administrator for a support session or other authorized purpose.

10.8. Unblock and
Reclassification Requests

Where a user or Administrator asks Scudio or an Administrator to
review, allow, unblock, or reclassify a resource, Scudio may receive the
URL, domain, application identifier, resource identifier, existing
classification, request reason, and related context necessary to process
the request.

10.9. Mobile Application
Inventory

On supported mobile platforms, the Software may transmit information
identifying installed applications when necessary to categorize those
applications and determine how Filtering Standards apply.

Where an application inventory is transmitted solely for
categorization, Scudio uses it for that categorization and does not
retain the inventory after the categorization process is completed.

10.10. Website
Information

When a person visits a Scudio or Emunet website, Scudio or its
infrastructure providers may receive information ordinarily transmitted
by a browser or web server, such as IP address, browser information,
Device information, pages requested, timestamps, referral information,
security events, and similar website logs.

10.11. Communications and
Requests

If you contact sales, support, submit a form, sign up for early
access, request information, or otherwise communicate with Scudio, we
process the information contained in that communication.

10.12. License and
Integrity Information

Scudio may use installation identifiers, license identifiers, build
identifiers, digital fingerprints, integrity signatures, or similar
technical data to authenticate legitimate installations, enforce
licensing, protect Software integrity, and detect tampering or
counterfeit copies.

These identifiers are not designed to contain the substance of
Managed User communications or browsing content.

10.13. Potentially
Sensitive Content

Because the Service filters arbitrary internet content, automated
filtering may technically process material that could contain or reveal
sensitive information.

Scudio does not use Managed User browsing or content to create
unrelated profiles concerning health, religion, sexual orientation,
political views, or other sensitive characteristics, and does not use
such information for targeted advertising.

11. Sources of Personal
Information

Scudio may obtain Personal Information:

(a) directly from Customers, Administrators, End Users, website
visitors, or people communicating with Scudio;

(b) automatically from the Software, Devices, websites, Processing
Nodes, or account systems;

(d) from Distribution Partners through which a Branded Offering is
provided;

(e) from payment, hosting, support, security, communications,
authentication, or other service providers; and

(f) from other sources where permitted by law and reasonably
necessary to provide or protect the Service.

12. Why We Use Personal
Information

Scudio may process Personal Information as reasonably necessary
to:

12.1. Provide the
Service

Create and manage accounts, activate licenses, configure Devices,
perform filtering, classify content, enforce Filtering Standards,
operate Processing Nodes, provide administrative functionality, and
deliver requested features.

12.2. Perform
Filtering and Classification

Analyze content automatically so the Software can determine how
applicable Filtering Standards should be applied.

12.3. Operate Remote
Processing

Route and process content through a Processing Node where Remote
Processing is selected or required for the applicable deployment.

12.4. Support Customers

Respond to support inquiries, diagnose problems, reproduce defects,
investigate failures, and resolve technical issues.

12.5.
Handle Access and Reclassification Requests

Review and respond to requests to unblock, permit, categorize, or
reclassify resources.

12.6. Secure the
Service

Detect and prevent unauthorized access, fraud, abuse, circumvention,
tampering, counterfeiting, malware, attacks, and other security or
integrity threats.

12.7. Maintain and
Improve Reliability

Measure Software performance, identify crashes and defects, maintain
compatibility, optimize processing, and improve reliability and
filtering effectiveness.

12.8. Manage Commercial
Relationships

Administer Subscriptions, billing, renewals, Distribution Partner
relationships, enterprise deployments, and related business
operations.

12.9. Communicate

Send account, security, operational, billing, support, legal, and
service communications.

Where legally permitted, Scudio may also send product or marketing
communications. Recipients may opt out of non-essential marketing
communications.

12.10. Comply With
Law and Protect Rights

Comply with legal obligations, respond to lawful requests, enforce
agreements, establish or defend legal claims, and protect Scudio, its
Customers, users, and others.

12.11.
Aggregated and De-Identified Information

Scudio may create and use aggregated or de-identified information for
analytics, product improvement, security, research, operational
planning, or other lawful purposes.

Scudio will not attempt to re-identify information that applicable
law requires to remain de-identified except as permitted for testing
privacy safeguards.

13. How Information Is
Disclosed

Scudio does not sell Personal Information.

Scudio also does not share Managed User browsing activity or
private content for cross-context behavioral advertising or targeted
advertising.

Personal Information may be disclosed in the following
circumstances.

13.1. Service Providers

Scudio may provide information to vendors that perform functions such
as cloud hosting, infrastructure, payment processing, customer support,
communications, authentication, security, analytics, or Software
distribution.

They may process information only for authorized purposes and subject
to applicable contractual and legal requirements.

13.2. Customers and
Administrators

Where configured, information may be made available to the Customer
or Administrator responsible for a Managed Device or Managed User.

13.3. Distribution
Partners

Information reasonably necessary to provide, administer, support,
bill, or secure a Branded Offering may be shared with an applicable
Distribution Partner.

13.4. At Your Direction

Scudio may disclose information when requested or authorized by you
or an appropriate Administrator.

13.5. Legal Requirements
and Safety

Scudio may disclose information where reasonably necessary to comply
with applicable law, a lawful legal process, or governmental request, or
to protect rights, security, integrity, or safety.

13.6. Business
Transactions

Information may be transferred as part of a merger, acquisition,
financing, restructuring, sale of assets, change of control, or similar
corporate transaction, subject to applicable law.

14.
Administrator Visibility and Scudio Access

14.1.
Administrator Visibility Is Configuration-Dependent

Some deployments may provide little or no detailed activity
reporting.

Other deployments may provide Administrators with filtering events,
alerts, reports, blocked or permitted activity, policy exceptions,
Device status, or other information.

14.2.
Administrator Access Is Not Scudio Access

Information visible to an Administrator is not necessarily visible to
Scudio.

Likewise, information transiently processed by Scudio infrastructure
to make an automated filtering decision is not necessarily provided to
an Administrator.

14.3. Managed User
Expectations

Where reporting or logging has been enabled by the Customer, activity
on a Managed Device, managed browser, managed network, or managed
account may be visible to the applicable Administrator.

14.4. No Routine
Human Review by Scudio

Scudio personnel do not routinely watch, read, or manually review
Managed Users’ browsing or private content.

Human access to identifiable content may occur where reasonably
necessary and authorized, including:

(a) support requested by the Customer or Administrator;

(b) troubleshooting a particular technical problem;

(d) processing an unblock or reclassification request;

(e) maintaining or protecting the Service;

(f) where the Customer or Administrator has expressly authorized the
access; or

(g) where required by law.

14.5. Limited Access

Where Scudio personnel have access to Service Data, access is limited
according to job responsibilities, technical controls, legitimate
operational purposes, and applicable security practices.

15. Website
Technologies and Cookies

Scudio websites may use cookies, local storage, server logs, or
similar technologies necessary to operate websites, maintain sessions,
remember preferences, prevent abuse, authenticate users, and protect
security.

Scudio may also use analytics or similar technologies to understand
website performance and usage.

Where applicable law requires consent or an opt-out for non-essential
cookies or similar technologies, Scudio will provide the required notice
or choice.

If Scudio later uses technology that constitutes a sale or sharing of
Personal Information or targeted advertising under applicable law,
Scudio will provide any legally required opt-out mechanism before or
when that practice applies.

16. Data Retention

Scudio retains Personal Information only for as long as reasonably
necessary for the purposes described in this Agreement, including to
provide the Service, maintain security, satisfy legal obligations,
resolve disputes, and enforce agreements.

Retention varies by category and deployment.

16.1. Account and
Subscription Information

Generally retained for the duration of the account or commercial
relationship and for a reasonable period afterward where needed for
legal, accounting, fraud-prevention, or dispute-resolution purposes.

16.2. Billing and
Transaction Records

Retained as reasonably necessary to satisfy tax, accounting,
contractual, fraud-prevention, and legal requirements.

16.3. Operational
Telemetry

Retained for periods reasonably necessary to maintain, secure,
diagnose, and improve the Software, after which it may be deleted or
aggregated.

16.4. Support
Information

Retained for as long as reasonably necessary to resolve the support
matter, maintain an appropriate support history, improve support, and
protect legal rights.

Additional diagnostic information voluntarily provided for
troubleshooting is retained only for as long as reasonably necessary for
the relevant support, engineering, security, or legal purpose.

16.6. Unblock
and Reclassification Requests

Retained as reasonably necessary to process the request, maintain
classification quality, prevent abuse, and support related
administrative workflows.

16.7. Mobile Application
Inventory

Where an installed-application inventory is transmitted solely for
categorization, Scudio does not retain the inventory after the
categorization is completed.

16.8. Remote Processing
Content

Content routed for automated Remote Processing may be processed
transiently without permanent storage.

Where retention is required by an enabled feature, such as logging,
reporting, diagnostics, security, or Customer configuration, retention
is governed by that feature, applicable settings, and the purposes
described in this Agreement.

16.9.
Customer-Controlled Information

Where information is stored in Customer- or Distribution
Partner-controlled infrastructure, the party controlling that
infrastructure determines retention, subject to its legal obligations
and applicable agreements.

16.10. Security and
Integrity Information

Security, fraud, licensing, anti-tampering, and integrity information
may be retained for as long as reasonably necessary to protect the
Service, enforce rights, investigate abuse, and maintain security.

16.11. Legal Holds

Information may be retained longer where required by law, court
order, regulatory obligation, litigation hold, or reasonably necessary
to establish, exercise, or defend legal claims.

17. Privacy Rights and
Choices

Depending on where you live and the law that applies, you may have
rights concerning Personal Information that Scudio controls.

These may include rights to:

(a) know whether Scudio processes your Personal Information;

(b) request access to Personal Information;

(d) correct inaccurate Personal Information;

(e) request deletion;

(f) receive certain Personal Information in a portable format;

(g) restrict or object to certain processing;

(h) withdraw consent where processing is based on consent;

(i) opt out of the sale of Personal Information, targeted
advertising, or certain profiling where such rights apply;

(j) limit certain uses of sensitive Personal Information where
applicable;

(k) appeal certain privacy-request decisions where applicable;
and

(l) receive equal service and not be unlawfully discriminated against
for exercising applicable privacy rights.

Scudio currently does not sell Personal Information and does not
share Personal Information for cross-context behavioral advertising.

Scudio does not use Managed User browsing or content for targeted
advertising.

17.2. Exercising Rights

Privacy requests may be submitted by:

Email: info@scudio.ai
Telephone: 888-238-4145

Scudio may need to verify your identity and authority before
fulfilling a request.

17.3.
Data Controlled by a Customer or Administrator

If Scudio processes information solely on behalf of an enterprise,
school, organization, Distribution Partner, or other Customer, you may
need to submit your request directly to that Customer because it
controls the relevant information.

Scudio will provide reasonable assistance to Customers where required
by law or contract.

17.4. Authorized Agents

Where applicable law permits an authorized agent to submit a request,
Scudio may require evidence of the agent’s authority and may
independently verify the requester’s identity.

17.5. Appeals

Where applicable law provides a right to appeal a privacy-request
decision, instructions for appeal will be included in Scudio’s
response.

17.6. Complaints

Individuals in jurisdictions with a privacy or data-protection
regulator may have the right to lodge a complaint with the applicable
authority.

18. Children and
Minors

The Service is designed primarily to be purchased, configured, and
administered by adults, parents, guardians, businesses, schools,
organizations, or other authorized Administrators.

The fact that the Software filters a Device used by a child does not
mean the child is expected to create or administer a Scudio account.

18.1. Children Under 13

Children under 13 should not independently create accounts or provide
Personal Information directly to Scudio unless the collection is
authorized in accordance with applicable law.

Where Scudio knowingly collects Personal Information online directly
from a child under 13 in circumstances covered by the Children’s Online
Privacy Protection Act or similar law, Scudio will obtain required
parental authorization or otherwise handle the information in accordance
with applicable law.

18.2. Parent and Guardian
Rights

Where applicable law provides parents or guardians rights concerning
a child’s Personal Information controlled by Scudio, they may contact
Scudio using the contact information in Section 36.

18.3.
Customer-Managed Child Information

Where Scudio processes information relating to a minor solely on
behalf of a parent, school, organization, or other Customer, that
Customer is responsible for establishing the appropriate authority for
the deployment, and Scudio processes that information subject to the
Customer’s lawful instructions and applicable law.

19. Security

Scudio uses administrative, technical, and organizational safeguards
designed to protect Personal Information and the Service against
unauthorized access, acquisition, alteration, destruction, loss, misuse,
or disclosure.

Depending on the system and risk involved, safeguards may
include:

19.1. Access Controls

Limiting access to systems and information according to
authorization, role, operational need, and least-privilege principles
where appropriate.

19.2. Account and Device
Security

Authentication, Device identity, license validation, certificate
validation, session controls, and other mechanisms appropriate to the
applicable system.

19.3. Software
Integrity

Secure-update mechanisms, integrity validation, anti-tamper controls,
Software signing, watchdog functionality, and related protections where
applicable.

19.4. Infrastructure
Security

Security controls designed to protect systems that store or process
Scudio-controlled information, including safeguards appropriate to the
sensitivity and risk of the information.

19.5. Data Minimization

Designing the Service to avoid unnecessary collection or retention of
Managed User content and to favor local or transient processing where
appropriate.

19.6. Personnel
and Administrative Safeguards

Restricting access to authorized personnel, maintaining appropriate
confidentiality obligations, and managing security responsibilities.

19.7. Service
Providers

Selecting service providers with consideration for their ability to
protect relevant information and using appropriate contractual
safeguards where required.

19.8. Risk and Incident
Management

Maintaining procedures designed to identify, investigate, respond to,
and remediate security incidents or material system failures.

19.9. Security Testing
and Improvement

Reviewing and improving security controls as systems, threats,
technologies, and business circumstances evolve.

19.10. Disposal

Deleting or disposing of Personal Information when it is no longer
reasonably needed, subject to applicable retention obligations and
technical limitations such as backup cycles.

19.11. No Absolute
Security Guarantee

No technology or security program can guarantee complete
security.

Scudio therefore cannot guarantee that unauthorized access, security
incidents, or data loss will never occur.

19.12. Incident
Notification

Where applicable law requires notification of a data breach or
security incident, Scudio will provide required notifications to
affected parties or authorities.

20. International
Processing

Scudio is based in the United States.

Where Personal Information is transferred from another jurisdiction
to the United States or another country, Scudio will use transfer
mechanisms or safeguards required by applicable law.

Where the EU GDPR, UK GDPR, or similar laws apply, Scudio may process
Personal Information based on applicable legal bases such as performance
of a contract, legitimate interests, compliance with legal obligations,
or consent where consent is required.

Individuals in applicable jurisdictions may have additional rights
including access, rectification, erasure, restriction, portability,
objection, withdrawal of consent, and the right to complain to a
supervisory authority.

21. Fees, Subscription,
and Renewal

Access to some portions of the Service requires payment.

Applicable pricing, billing frequency, renewal, cancellation, refund
terms, Device limits, user limits, and Subscription features may be
specified during checkout, in an order form, in Partner Terms, or in
another applicable commercial agreement.

Unless otherwise stated, paid recurring Subscriptions may
automatically renew until canceled in accordance with the applicable
cancellation terms.

Fees are non-refundable except where expressly stated or required by
law.

Where billing is handled by a Distribution Partner, app store,
reseller, marketplace, or payment processor, its billing and refund
terms may apply.

22. Intellectual
Property

Scudio and its licensors own all rights, title, and interest in the
Software and related intellectual property, including source code,
object code, device agents, drivers, applications, services, models,
algorithms, AI systems, classification technology, rules, signatures,
databases, user interfaces, designs, Documentation, inventions,
know-how, trade secrets, trademarks, and related technology.

22.1. Feedback

If you provide feedback, ideas, suggestions, bug reports, feature
requests, or recommendations, Scudio may use that feedback without
restriction or compensation.

22.2.
Technical Identifiers and Anti-Counterfeiting

The Software may contain license identifiers, build identifiers,
digital fingerprints, integrity signatures, watermarks, or similar
technical mechanisms used to authenticate Software, enforce licensing,
protect integrity, and detect unauthorized copying or alteration.

These mechanisms are not designed to contain Managed Users’ private
browsing content or communications.

You may not remove, spoof, disable, or interfere with them.

23. Third-Party
Services and Components

The Service may depend on or interoperate with third-party operating
systems, browsers, cloud infrastructure, payment processors, app stores,
identity systems, analytics tools, security providers, open-source
components, or other services.

Third-party services may be governed by their own terms and privacy
notices.

Scudio is not responsible for third-party outages, restrictions,
policy changes, platform changes, security failures, or other conduct
outside Scudio’s reasonable control.

24. Beta,
Preview, Trial, and Evaluation Features

Scudio may provide beta, experimental, preview, pilot, trial,
early-access, or evaluation functionality.

Such functionality may be incomplete, unstable, modified, limited, or
discontinued.

To the maximum extent permitted by law, experimental functionality is
provided “as is” without special service-level, warranty, or support
commitments unless otherwise stated in writing.

25. Term, Suspension,
and Termination

This Agreement remains effective for as long as you use the Service
or retain a valid Subscription or license.

You may terminate by discontinuing use and, where appropriate,
uninstalling the Software, subject to applicable billing, Subscription,
Partner, or Administrator requirements.

Scudio may suspend or terminate access for material breach,
nonpayment, fraud, abuse, unlawful conduct, security risk, tampering,
circumvention, or other material violation of this Agreement.

Upon termination, the license to use the Software ends.

Provisions concerning privacy obligations, accrued fees, intellectual
property, restrictions, disclaimers, limitations of liability,
indemnification, confidentiality, governing law, dispute resolution, and
other provisions that by their nature should survive will survive
termination.

26. Support and Service
Levels

Support may be provided by Scudio, Distribution Partners, resellers,
Documentation, email, remote support tools, account portals, or other
channels.

Unless a written agreement expressly provides otherwise, no
particular response time, uptime commitment, service-level agreement, or
service credit is guaranteed.

Scudio is not required to support obsolete or unsupported Devices,
rooted or jailbroken Devices, tampered installations, malware-infected
systems, unauthorized configurations, expired Subscriptions, or failures
caused by systems outside Scudio’s control.

27. Disclaimer of
Warranties

TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SOFTWARE AND SERVICE ARE
PROVIDED “AS IS” AND “AS
AVAILABLE.”

SCUDIO DISCLAIMS IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A
PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, QUIET ENJOYMENT, ACCURACY,
AVAILABILITY, SECURITY, AND OTHER IMPLIED OR STATUTORY WARRANTIES TO THE
MAXIMUM EXTENT PERMITTED BY LAW.

SCUDIO DOES NOT GUARANTEE THAT THE SOFTWARE WILL:

(a) block every unwanted item;

(b) permit every desired item;

(d) prevent every bypass;

(e) identify every risk;

(f) operate without interruption;

(g) work with every Device, website, application, network, or
configuration; or

(h) operate without delay, degradation, failure, or misclassification
in either Edge Processing or Remote Processing.

Scudio does not warrant that the Software by itself satisfies any
particular legal, religious, educational, parental, organizational,
employment, regulatory, or compliance requirement.

28. Limitation of
Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, SCUDIO AND ITS AFFILIATES,
LICENSORS, SUPPLIERS, DISTRIBUTION PARTNERS, SERVICE PROVIDERS,
OFFICERS, DIRECTORS, EMPLOYEES, AND AGENTS WILL NOT BE LIABLE FOR
INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, PUNITIVE, OR
ENHANCED DAMAGES OR FOR LOST PROFITS, LOST REVENUE, LOST BUSINESS, LOST
DATA, LOSS OF GOODWILL, OR LOSS OF USE ARISING FROM THE SOFTWARE OR
SERVICE.

Without limiting the foregoing, Scudio will not be liable to the
maximum extent permitted by law for harm resulting from:

(a) content the Software failed to block or detect;

(b) legitimate content that was blocked or misclassified;

(d) Customer-configured logging, reporting, administrative
visibility, or Device control;

(e) Administrator actions or omissions;

(f) Customer credential or Device compromise;

(g) incompatibility with third-party software, Devices, websites,
networks, VPNs, certificates, proxies, or operating systems;

(h) Customer- or Partner-controlled infrastructure;

(i) Processing Node outages, failures, or misconfiguration outside
Scudio’s control;

(j) Customer-selected routing, VPN, DNS, proxy, gateway, certificate,
or Remote Processing configurations;

(k) latency, reduced speed, connectivity failure, or degraded
application performance associated with filtering or Remote Processing;
or

(l) incidental or transient processing of content necessary to
perform filtering, diagnostics, support, security, categorization, or an
unblock request.

Liability Cap

TO THE MAXIMUM EXTENT PERMITTED BY LAW, SCUDIO’S TOTAL AGGREGATE
LIABILITY ARISING FROM OR RELATING TO THE SERVICE OR THIS AGREEMENT WILL
NOT EXCEED THE GREATER OF:

(A) THE AMOUNTS ACTUALLY PAID TO SCUDIO FOR THE AFFECTED
SERVICE DURING THE SIX (6) MONTHS BEFORE THE EVENT GIVING RISE TO THE
CLAIM; OR

(B) FIFTY U.S. DOLLARS ($50).

Where applicable law does not allow a particular limitation, the
limitation applies only to the maximum extent legally permitted.

29. Indemnification

To the extent permitted by law, you agree to defend, indemnify, and
hold harmless Scudio and its affiliates, licensors, suppliers,
Distribution Partners, service providers, officers, directors,
employees, and agents from third-party claims and resulting liabilities,
damages, losses, costs, and reasonable attorneys’ fees arising from:

(a) your unlawful use or misuse of the Service;

(b) your violation of this Agreement;

(d) failure to provide notices or obtain consent required for your
deployment;

(e) your administrative reporting, logging, Device management, or
filtering configuration;

(f) information stored in or disclosed from infrastructure you
control;

(g) Filtering Standards or policies you configure;

(h) disputes between Customers, Administrators, Managed Users,
employees, schools, parents, organizations, or Distribution
Partners;

(i) Processing Nodes or infrastructure you own or control; or

(j) your failure to secure or lawfully operate infrastructure for
which you are responsible.

Scudio may assume control of the defense of an indemnified claim.

30. Confidentiality

If Scudio provides you with non-public technical, security, pricing,
roadmap, beta, business, or other information that is identified or
reasonably understood to be confidential, you must protect it from
unauthorized disclosure and use it only for its intended purpose.

This restriction does not apply to information independently
developed, lawfully received without confidentiality obligations, or
publicly available without breach.

31.
Dispute Resolution, Arbitration, and Class-Action Waiver

31.1. Informal
Resolution

Before commencing formal proceedings, you and Scudio agree to attempt
in good faith to resolve the dispute through written notice and at least
thirty (30) days for informal resolution.

31.2. Arbitration

Except for eligible small-claims matters and claims seeking
injunctive or equitable relief concerning intellectual property,
confidentiality, security, anti-circumvention, or unauthorized access,
disputes arising from the contractual portions of this Agreement or the
Service will be resolved by binding arbitration administered by the
American Arbitration Association under its applicable
rules.

The arbitration will be conducted by one arbitrator in English and,
unless applicable law requires otherwise, will be seated in
Orange County, New York.

31.3. Class-Action
Waiver

TO THE MAXIMUM EXTENT PERMITTED BY LAW, YOU AND SCUDIO AGREE TO
RESOLVE CLAIMS ON AN INDIVIDUAL BASIS AND WAIVE PARTICIPATION IN CLASS
ACTIONS, CLASS ARBITRATIONS, COLLECTIVE ACTIONS, PRIVATE ATTORNEY
GENERAL ACTIONS, OR REPRESENTATIVE PROCEEDINGS.

31.4. Arbitration
Opt-Out

You may opt out of this arbitration provision by sending written
notice to:

info@scudio.ai

within thirty (30) days after first accepting the applicable
Agreement.

31.5. Jury Trial

To the extent a dispute properly proceeds in court, the parties waive
jury trial to the maximum extent permitted by law.

Nothing in this Section limits privacy or consumer rights that
applicable law does not permit to be waived.

32. Governing Law and
Venue

Except where applicable privacy, consumer-protection, or other law
requires otherwise, this Agreement is governed by the laws of the
State of New York, without regard to conflict-of-laws
principles.

For matters not subject to arbitration, the parties consent, to the
extent permitted by law, to the state and federal courts having
jurisdiction in Orange County, New York.

The United Nations Convention on Contracts for the International Sale
of Goods does not apply.

33. Injunctive Relief

Unauthorized copying, counterfeiting, disclosure, reverse
engineering, tampering, bypassing, misuse of confidential information,
or interference with Scudio’s intellectual property or security
mechanisms may cause irreparable harm.

Scudio may seek injunctive or equitable relief where legally
available.

34.
Changes to This Agreement and Privacy Notice

Scudio may update this document as the Service, processing
architecture, business, laws, or privacy practices evolve.

The current version will display a revised Last
Updated date.

Material changes may also be communicated through email, in-product
notification, an account portal, Distribution Partner notification, or
another reasonable method.

Where applicable law requires affirmative consent for a change,
continued use alone will not substitute for that required consent.

Otherwise, continued use of the Service after revised contractual
terms become effective constitutes acceptance of those revised
contractual terms.

35. General Provisions

35.1. Single Source of
Truth

As of its Effective Date, this document is intended to serve as
Scudio’s primary public Privacy Policy, Security Notice, Terms
of Use, and End User License Agreement for the Service.

It supersedes prior public versions of Scudio or Emunet privacy
policies, security statements, general Terms of Service, and EULAs
concerning the same Service, except where a later or more specific
written agreement expressly provides otherwise.

Enterprise agreements, order forms, data-processing agreements,
Distribution Partner agreements, and other negotiated written agreements
may supplement this document and may control where they expressly state
that they override a provision.

35.2. Entire Agreement

For contractual matters, this Agreement together with applicable
order forms, Subscription terms, Partner Terms, and other incorporated
agreements constitutes the agreement between you and Scudio concerning
the Service.

35.3. Severability

If a provision is unenforceable, it will be limited or modified to
the minimum extent necessary while the remainder remains effective.

35.4. No Waiver

Failure to enforce a provision does not waive that provision.

35.5. Assignment

You may not assign your contractual rights under this Agreement
without Scudio’s consent.

Scudio may assign this Agreement in connection with an affiliate
transaction, financing, restructuring, merger, acquisition, change of
control, asset sale, or transfer of the Service.

35.6. Relationship

Nothing in this Agreement creates a partnership, employment
relationship, joint venture, fiduciary relationship, franchise, or
general agency relationship.

35.7. Force Majeure

Scudio is not responsible for failure or delay caused by
circumstances outside its reasonable control, including natural
disasters, war, terrorism, widespread power or network failures,
cyberattacks, governmental action, legal restrictions, cloud-provider
outages, platform restrictions, operating-system changes, or other
third-party failures.

35.8. Electronic
Acceptance

Electronic acceptance of the contractual portions of this Agreement
has the same effect as a handwritten acceptance to the extent permitted
by law.

36. Contact
Information

For questions, privacy requests, security inquiries, legal notices,
or questions concerning this Agreement:

Scudio LLC
Doing business as Emunet

Website: https://emunet.com
General Contact: info@emunet.com
Privacy & Legal: info@scudio.ai
Telephone: 888-238-4145

If you use a Branded Offering through a Distribution Partner, you may
also contact that Distribution Partner regarding accounts,
administrative policies, billing, or Personal Information that the
Distribution Partner independently controls.

By using the Service, you acknowledge that you have been
provided this Privacy and Security Notice. By creating an account,
purchasing a Subscription, installing the Software, or otherwise
accepting the contractual terms as described above, you agree to the End
User License and Terms contained in this document.

PRIVACY, SECURITY & END USER LICENSE AGREEMENT

IMPORTANT — READ CAREFULLY

Privacy Notice Versus Contract Terms