SENTIMENTO TECHNOLOGIES LIMITED

MonoClaw – ACCEPTABLE USE POLICY

This Acceptable Use Policy (“AUP”) governs your use of the MonoClaw software, the Configuration Services, and any third‑party services (including any hosted inference provider, messaging platform, payment processor, identity provider, or telemetry service) that you connect to MonoClaw (collectively, the “Services”). By executing the Master Configuration Services, Bailment and Software Licence Agreement (the “Master Agreement”) and accessing the Services, you agree to comply with this AUP. This AUP is incorporated by reference into the Master Agreement.

1. Definitions

Capitalised terms not defined herein have the meanings given in the Master Agreement:

“Authorized Jurisdiction”: The Hong Kong Special Administrative Region only.
“Sanctions Lists”: The OFAC Specially Designated Nationals and Blocked Persons List, the EU Consolidated Financial Sanctions List, the UN Security Council Consolidated List, and the US Commerce Department Entity List, each as updated from time to time.
“Military End User”: Has the meaning given in US Export Administration Regulations §744.17.
“Hosted Inference Provider”: Any third‑party service the Client elects to connect to MonoClaw for the purpose of performing remote large‑language‑model inference (including, by way of non‑exhaustive example, OpenRouter Inc., Anthropic PBC, Google LLC, OpenAI OpenCo LLC, DeepSeek, Alibaba Cloud, and similar providers reachable from the Dashboard or configured locally by the Client).
“Messaging Platform”: Any third‑party messaging service that the Client elects to connect to MonoClaw via the in‑product onboarding flow (including, by way of non‑exhaustive example, Telegram, Signal, WhatsApp, Slack, Discord, Matrix, email, SMS, and similar).
“Third‑Party Terms”: The terms of service, acceptable use policies, and privacy policies of Apple Inc., Stripe Inc., Google LLC, Supabase Inc., and any Hosted Inference Provider, Messaging Platform, or model provider the Client connects to MonoClaw.

2. Eligibility

You may only use the Services if you:

(a) Are a bona fide resident of Hong Kong or a company duly incorporated under the Companies Ordinance (Cap. 622);

(b) Maintain your principal place of business or residence exclusively within the Authorized Jurisdiction;

(d) Are not a national, resident, or organized under the laws of any comprehensively sanctioned jurisdiction (currently Cuba, Iran, North Korea, Syria, and the Crimea, Donetsk, and Luhansk regions of Ukraine), nor a Military End User.

3. Permitted Uses

The Services are designed for civilian commercial, professional support, academic research, and internal business operations. MonoClaw is delivered as a local‑first executive assistant: bundled local inference is the default; any connection to a Hosted Inference Provider, Messaging Platform, or other external service is optional and entirely under the Client’s control.

4. Prohibited Uses

You must NOT use the Services, including any models or platforms you connect to MonoClaw, for:

(a) Illegal Activities

Any activity violating Hong Kong law or the laws of your jurisdiction.
Fraud, scams, money laundering, or terrorist financing.

(b) Harmful Content

Generation of unlawful sexually explicit content involving minors.
Generation of deceptive synthetic media (“deepfakes”) for fraud, impersonation, electoral interference, or other forms of political manipulation.
Harassment, hate speech, or incitement of violence.

(c) Professional Regulated Activities Without Supervision

Automated legal advice, document preparation for legal proceedings, or solicitor–client communications without qualified lawyer supervision.
Automated medical diagnosis, prognosis, treatment recommendations, or clinical decisions without qualified healthcare professional supervision.
Accounting, audit, or tax advice upon which reliance may be placed without qualified accountant or licensed tax adviser supervision.
Immigration consultation or advice regarding visa status without qualified legal supervision.
Financial advice or investment recommendations regulated by the Securities and Futures Commission without an appropriate SFC‑licensed supervising practitioner.

(d) High‑Risk Applications

Weapons development, military or naval applications, or intelligence operations.
Mass surveillance, facial recognition for law enforcement, social scoring systems, or data analytics for internal security forces.
Operation of critical infrastructure (nuclear facilities, air traffic control, emergency services, water or power grids) without appropriate fail‑safes and human oversight.

(e) Interference with Services

Reverse engineering of the MonoClaw runtime, the bundled skill library, or any Sentimento‑authored configuration (except as expressly permitted by law).
Circumvention of security measures or authentication systems.
Distribution of malware, viruses, worms, or ransomware through the Services.
Use of the Dashboard or the Native Signing System for any purpose other than the Client’s own contractual relationship with Sentimento.

5. Third‑Party Service Configuration and Security

(a) Hosted Inference Providers (optional): Bundled local inference is the default. If the Client elects to connect a Hosted Inference Provider, the Client must establish and maintain an account directly with that provider. Sentimento processes any provider credential the Client uploads to the Dashboard solely to configure the Client Hardware during the Configuration Period, and permanently destroys all copies of that credential within twenty‑four (24) hours of confirmation of the final payment pursuant to Clause 4.6 of the Master Agreement.

(b) Messaging Platforms (optional, post‑shipment): Bundled local operation is the default; no messaging platform is required for the Services to function. If the Client elects to enable a Messaging Platform, the Client is responsible for creating and maintaining any third‑party account or credential that platform requires (including bot tokens, app passwords, OAuth grants, and similar) and for keeping its handle or identifier stable for the duration of any allow‑list configuration. The Client may reconfigure or replace its messaging identifier at any time using the in‑product onboarding tooling.

(c) Funding: The Client is solely responsible for maintaining adequate funds in, and for the operational status of, any Hosted Inference Provider account or other paid third‑party service it connects to MonoClaw. Sentimento has no liability for service interruptions caused by insufficient credit, expired keys, account suspension, or provider‑side outages.

(d) Credential Security: The Client must not share third‑party credentials with anyone outside the Client’s organisation. The Client is solely responsible for all activity occurring under its credentials and for securing Client Hardware against unauthorised access after delivery.

6. Upstream Licensor Compliance

Your use of the Services is subject to Third‑Party Terms. You must comply with:

The terms of service, acceptable use policy, and privacy policy of any Hosted Inference Provider you connect.
The terms of any model provider whose models you invoke through a Hosted Inference Provider or by direct API (including Meta, Google, Alibaba, DeepSeek, MiniMax, OpenAI, Anthropic, and any other provider you select).
The terms of any Messaging Platform you enable.
The Apple macOS Software Licence Agreement, acknowledging that the Configuration Services performed by Sentimento may void or limit Apple’s Limited Warranty.
The MIT licence and upstream notices applicable to the MonoClaw runtime, which is derived in part from the Nous Research Hermes Agent and other MIT‑licensed open‑source components as identified in the runtime’s NOTICE and UPSTREAM files.

Breach of any Third‑Party Terms may result in immediate termination of the Client’s licence to use the affected MonoClaw components and triggers the indemnification obligations set out in the Master Agreement.

7. Confidentiality of the Sentimento Receiving Address

The Sentimento Receiving Address provided via the Dashboard is Strictly Confidential Information under Clause 12.6 of the Master Agreement. Unauthorised disclosure incurs liquidated damages of HKD $50,000 per instance, acknowledged by the Client as a genuine pre‑estimate of loss. The Client may use this address solely to dispatch the Client Hardware identified in the applicable Order Form to Sentimento for the Configuration Services.

8. Data Protection

The Client warrants that any Personal Data it provides to Sentimento or processes through the Services is processed lawfully under the Personal Data (Privacy) Ordinance (Cap. 486) and that the Client has obtained any necessary consents and given any necessary notifications to data subjects. Sentimento processes data on behalf of the Client as detailed in Schedule C (Data Processing Agreement) of the Master Agreement.

9. Consequences of Breach

Breach of this AUP constitutes a material breach of the Master Agreement, entitling Sentimento to:

(a) Immediate suspension of Configuration Services or technical support;

(b) Termination of the Master Agreement without refund;

(d) Injunctive relief to prevent further misuse.

10. Indemnification

The Client shall indemnify Sentimento against all claims, losses, fines, and expenses (including legal fees) arising from the Client’s breach of this AUP, violation of Third‑Party Terms, or unauthorised disclosure of Confidential Information.

11. Updates

Sentimento may update this AUP from time to time. The current version is published at the URL above. For active Orders, the version current at the date of the Order Form governs unless the Client expressly accepts a later version via the Dashboard. Continued use after the posting of a new version constitutes acceptance with respect to subsequent activity.

12. Governing Law

This AUP is governed by the laws of the Hong Kong Special Administrative Region.

Effective From: April 1, 2026