Kario.ai End-User License Agreement

Effective Date: August 3, 2026

1. Scope

This Agreement is between you and Myriak LLC (“Myriak,” “we,” or “us”) and governs your use of the Kario.ai desktop and mobile applications and web portal (the “Application”).

If your organization (“Customer”) has provided your access, its agreement with Myriak, including any applicable Master Subscription Agreement (“MSA”), governs the subscription, Customer Data, and other commercial terms and this Agreement governs your individual use. If there is a conflict, the Customer’s agreement with Myriak controls.

2. License

Subject to this Agreement and, as applicable, Customer’s agreement with Myriak, Myriak grants you a limited, revocable, non-exclusive, non-transferable license to access and use the Application solely for authorized business purposes.

3. Acceptable Use

When accessing or using Kario.ai, you agree NOT to:

1. reverse engineer, decompile, disassemble, or attempt to derive the source code or underlying architecture of Kario.ai or its AI models;
2. bypass or circumvent security controls, authentication protocols, or usage limits;
3. share your credentials or allow another person to use your account;
4. introduce malicious code, interfere with the Application, or attempt unauthorized access;
5. capture, stream, or record audio, video, or data in violation of applicable local, state, federal, or international privacy, wiretapping, or recording consent laws;
6. input or upload data prohibited under Section 6 (Prohibited Data); or
7. use the Application in violation of applicable law or Customer policies.

4. Account Security

You are responsible for maintaining the confidentiality of your credentials and for all activity occurring under your account. You must notify Myriak and Customer’s administrator promptly upon becoming aware of any unauthorized use of your account or any other suspected security incident.

5. Recording of Communications and Participant Consent

The Application provides real-time ambient listening, transcription, and meeting analysis features.

User Responsibility. Before activating any live listening, recording, or transcription features, you must provide clear, prominent notice to all conversation participants. You are solely responsible for obtaining all legally required consents under applicable communication, wiretap, and privacy laws. This includes compliance with all-party consent requirements in jurisdictions such as California, Pennsylvania, Washington, the United Kingdom, and any other relevant domestic or international requirements.

• Compliance & Release. You may not activate these features where prohibited by law or by your company policy. To the maximum extent permitted by law, Myriak is not liable for claims arising from your failure to provide adequate notice or secure required participant consents.

6. Prohibited Data

You must not use the Application to capture or process:

• Protected Health Information subject to the Health Insurance Portability and Accountability Act of 1996, as amended (“HIPAA”);
• account login credentials, passwords, authentication tokens, or private encryption keys;
• government identifiers, such as Social Security numbers, passport numbers, or taxpayer identifiers;
• payment card data subject to the Payment Card Industry Data Security Standard (“PCI DSS”); or
• classified or export-controlled data, including data subject to the International Traffic in Arms Regulations (“ITAR”) or Export Administration Regulations (“EAR”).

If you become aware that prohibited data has been submitted, you must notify Customer's administrator and Myriak promptly so that appropriate remediation can be coordinated.

7. Artificial Intelligence (AI)

Use of AI. Kario.ai provides real-time in-call assistance, suggested talking points, automated note-taking, knowledge-base retrieval, and post-call summaries powered by artificial intelligence (“Outputs”).

Outputs may be inaccurate, incomplete, or outdated. They do not constitute legal, financial, medical, or other professional advice. Myriak does not warrant the accuracy, completeness, or suitability of Outputs.

You must independently verify all material facts, prices, promises, and commitments before communicating them or relying on them. You remain responsible for all statements, decisions, and commitments made while using the Application.

Model Training. Unless opted out through Myriak’s Products, Myriak may use information provided by the User to Myriak for the development and improvement of its Services and applicable artificial intelligence functionalities, where such information has been aggregated and de-identified. Such aggregated and de-identified information does not identify specific individuals and does not constitute Personal Data. Myriak will not attempt to re-identify such aggregated and de-identified information.

8. Data and Intellectual Property

Myriak IP. Myriak and its licensors retain all right, title, and interest in and to Kario.ai, including all software code, algorithms, visual interfaces, documentation, trademarks, and system improvements. No rights are granted to you except as expressly set forth herein.

Customer Data. As between Myriak and Customer, Customer retains all rights it has in information submitted through the Application. Outputs will be treated as Customer Data under the applicable agreement between Myriak and Customer.

Processing. Myriak may process Customer Data as necessary to provision, operate, secure, support, maintain, and improve the Application and services, subject to the applicable agreement between Myriak and Customer.

Usage Data. Myriak may collect and use telemetry, diagnostic, and usage data to operate, secure, support, analyze, and improve its products and services. Myriak may also use such data in aggregated or de-identified form for lawful business purposes.

Personal Information. Personal information Myriak collects about you as an individual user is described in the Privacy Policy.

Feedback. If you provide feedback or suggestions, Myriak may use such feedback without restriction or payment.

9. Termination

Your right to use the Application depends on Customer’s authorization and its active agreement with Myriak. Your access will cease automatically if that agreement expires or terminates, or if your account is revoked, suspended, or deprovisioned by Customer or Myriak.

Myriak may suspend or terminate your access, with or without prior notice, if you violate this Agreement, Customer requests or authorizes the action, suspension is required by law, or Myriak reasonably determines that your use presents a security, legal, or operational risk. Myriak will notify Customer’s administrator where reasonably appropriate.

10. Disclaimer of Warranties

THE APPLICATION AND OUTPUTS ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TO THE MAXIMUM EXTENT PERMITTED BY LAW, MYRIAK DISCLAIMS ALL EXPRESS, IMPLIED, AND STATUTORY WARRANTIES, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, AND NON-INFRINGEMENT.

MYRIAK DOES NOT WARRANT THAT THE APPLICATION WILL BE UNINTERRUPTED, ERROR-FREE, SECURE, OR COMPATIBLE WITH EVERY SYSTEM, OR THAT OUTPUTS WILL BE ACCURATE OR COMPLETE.

SOME JURISDICTIONS DO NOT ALLOW THE EXCLUSION OF IMPLIED WARRANTIES, SO SOME OF THE ABOVE EXCLUSIONS MAY NOT APPLY TO YOU.

11. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW, MYRIAK AND ITS AFFILIATES, LICENSORS, AND SUPPLIERS WILL NOT BE LIABLE TO YOU FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOST PROFITS, LOST REVENUE, LOST BUSINESS, LOSS OF GOODWILL, OR LOSS OR CORRUPTION OF DATA, ARISING OUT OF OR RELATING TO THIS AGREEMENT OR THE APPLICATION, WHETHER IN CONTRACT, TORT, OR OTHERWISE, EVEN IF MYRIAK HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

TO THE EXTENT A CLAIM IS NOT GOVERNED BY CUSTOMER’S AGREEMENT WITH MYRIAK, MYRIAK’S TOTAL AGGREGATE LIABILITY TO YOU ARISING OUT OF OR RELATING TO THIS AGREEMENT OR THE APPLICATION WILL NOT EXCEED $100. NOTHING IN THIS AGREEMENT EXCLUDES OR LIMITS LIABILITY TO THE EXTENT IT CANNOT LAWFULLY BE EXCLUDED OR LIMITED.

12. Apple App Store Terms

If you obtained the Application through Apple’s App Store, the following additional terms apply:

• This Agreement is between you and Myriak, not Apple. Myriak, and not Apple, is solely responsible for the Application and its content.
• Your license to the Application is non-transferable and limited to use on Apple-branded products that you own or control, as permitted by the Apple Media Services Usage Rules, except that the Application may be accessed and used by other accounts associated with the purchaser through Family Sharing or volume purchasing where permitted.
• Myriak is responsible for providing any maintenance and support required under this Agreement or applicable law. Apple has no obligation to provide maintenance or support for the Application.
• Myriak is responsible for any warranties concerning the Application to the extent they have not been effectively disclaimed. If the Application fails to conform to an applicable warranty, you may notify Apple, and Apple will refund the purchase price, if any. To the maximum extent permitted by law, Apple has no other warranty obligation regarding the Application, and Myriak is responsible for any other claims, losses, liabilities, damages, costs, or expenses arising from such failure.
• Myriak, and not Apple, is responsible for addressing claims relating to the Application or your possession or use of it, including product-liability claims, claims that the Application does not comply with applicable legal or regulatory requirements, and claims arising under consumer-protection, privacy, or similar laws.
• If a third party claims that the Application or your possession or use of it infringes that party’s intellectual-property rights, Myriak, and not Apple, is responsible for investigating, defending, settling, and resolving that claim.
• You must comply with all applicable third-party terms when using the Application. You represent and warrant that you are not located in a country or region subject to a United States government embargo or designated by the United States government as supporting terrorism, and that you are not listed on any United States government list of prohibited or restricted parties.
• Apple and its subsidiaries are third-party beneficiaries of this Agreement. Upon your acceptance of this Agreement, Apple will have the right, and will be deemed to have accepted the right, to enforce this Agreement against you as a third-party beneficiary.

13. Changes

Myriak may modify this Agreement by posting the revised terms in the Application or otherwise providing notice. Material changes will be effective no earlier than thirty (30) days after notice. Your continued use of the Application after the effective date of a revision constitutes acceptance of that revision to the extent permitted by law.

14. Miscellaneous

Entire Agreement. This Agreement, together with Customer's agreement with Myriak, constitutes the entire agreement concerning your individual use of the Application and supersedes all prior or contemporaneous understandings on that subject.

Governing Law. This Agreement is governed by the laws of the State of California, without regard to its conflict-of-law principles.

Severability. If any provision is unenforceable, the remaining provisions will remain in effect.

No Waiver. Myriak’s failure to enforce any provision of this Agreement is not a waiver.

Assignment. You may not assign this Agreement without Myriak’s prior written consent.

15. Contact

Myriak LLC
500 North Brand Boulevard, Suite 890
Glendale, CA 91203
United States

Kario.ai End User & Meeting Participant Privacy Notice

Effective Date: August 3, 2026

1. Scope

This End User & Meeting Participant Privacy Notice (“Notice”) applies to Kario.ai End Users and Meeting Attendees whose Conversation Data and personal information are processed by the Kario.ai platform.

The notice supplements the Myriak LLC Privacy Policy, which governs all other processing by Myriak.

“Conversation Data” means audio, text, or metadata in a recorded call, audio or video conference, or ambient meeting.

"End User" means an individual authorized by a subscribing organization to use Kario.ai, including sales representatives, account executives, and platform administrators.

"Meeting Attendee" means any other participant in a recorded call or ambient meeting processed by Kario.ai, including prospects, customers, and other attendees.

2. Information Processed

Depending on the features configured by the subscription organization, Kario.ai processes the following categories of information:

• Audio & Visual Data: Live call audio, ambient microphone feeds, video streams, and spoken conversation content.
• Transcripts & Generated Artifacts: Automated text transcripts, real-time AI prompts, call summaries, action items, and sales insights.
• Integrated Workspace Data: Data queried or synced from connected customer tools, including CRM systems (e.g., Salesforce, HubSpot), internal communication channels (e.g., Slack), and calendar invitations.
• Account and Technical Data: App performance logs, latency metrics, OS details, device identifiers, and ambient audio connection state.

Myriak is the Data Processor (Service Provider) and the subscribing organization is the Data Controller (Business) with respect to Audio & Visual Data, Transcripts & Generated Artifacts, and Integrated Workspace Data.

Myriak is the Controller for Account and Technical Data, which it uses to operate and secure the service.

Kario.ai is not designed to process health information, payment card data, or other regulated sensitive categories.

3. Purpose of Processing

Kario.ai processes Conversation Data and Workspace Data exclusively to deliver its real-time sales enablement and automated workflow productivity service, including:

• Generating live context-aware prompts and answering technical queries during sales meetings.
• Producing automated meeting summaries, action item lists, and CRM field updates.
• Querying integrated knowledge repositories (e.g. Slack, web sources) to resolve product or pricing questions during live calls.
• Monitoring system latency and performance for quality assurance.

Account and technical data are processed to operate, secure, and bill for the service.

4. Meeting Consent & Opt-Out

• Notice. Kario.ai provides visual notification, and audio announcement where enabled, whenever live listening, recording, or transcription is active. Ambient audio is captured only while a session is active and is not captured when the session is stopped or the application is closed.
• Right to opt out. If you do not consent to being recorded or transcribed, you may request that the meeting host disable Kario.ai for the session, mute your audio, or decline to participate. A request to disable Kario.ai applies for the duration of the session.
• Responsibility for consent. The subscribing organization is responsible for providing notice to and obtaining any consent required from meeting participants under applicable federal and state recording and wiretap laws, including in all-party-consent jurisdictions such as California, Illinois, Pennsylvania, and Washington. Myriak provides the notice mechanisms described above; determination of legal sufficiency is the subscribing organization's responsibility.

5. Security and Data Retention

• Safeguards: We use physical, technical, and procedural safeguards to secure your information from unauthorized access and use, alteration, and destruction.
• Encryption: All customer conversation data processed by Kario.ai is encrypted in transit (TLS 1.2+) and at rest (AES-256) within secure enterprise cloud environments.
• Retention: Data retention schedules are defined and controlled by the subscribing enterprise customer.
• Sub-Processors: Kario.ai utilizes vetted third-party cloud hosting, transcription engine providers, and LLM inference infrastructure under strict data processing agreements.

6. AI Model Training

Unless opted out through Myriak’s Products, Myriak may use information provided by the User to Myriak for the development and improvement of its Services and applicable artificial intelligence functionalities, where such information has been aggregated and de-identified. Such aggregated and de-identified information does not identify specific individuals and does not constitute Personal Data. Myriak will not attempt to re-identify such aggregated and de-identified information.

7. Data Subject Rights & Contact

Requests concerning recordings, transcripts, summaries, action items, and other artifacts generated from a meeting must be directed to the organization hosting the meeting. Requests received by Myriak at privacy@myriak.com will be forwarded to that organization.

Rights of access, correction, deletion, and restriction in account data controlled by Myriak may be exercised by contacting privacy@myriak.com as described in our Privacy Policy.

8. Legal Bases and International Transfers (EEA/UK)

Where GDPR or UK GDPR applies, we process personal data based on consent (marketing, withdrawable anytime), our legitimate interests (analytics, security, recruiting, business development), contract performance, and legal obligations.

Data on the Kario.ai platform is processed in the United States.

Transfers of personal data from the EEA, United Kingdom, or Switzerland are governed by the Myriak Data Processing Addendum which incorporates the European Commission's Standard Contractual Clauses (SCCs) and where applicable, the UK International Data Transfer Addendum.

9. Changes

We may update this Notice; the Effective Date reflects the latest revision, and material changes will be posted at kario.ai/privacy and communicated to customers.

10. Contact

Questions or requests regarding this Privacy Notice may be directed to the Privacy Officer.

Privacy Officer, Myriak LLC — privacy@myriak.com