End User License Agreement

Version 2026-08.5 — Effective August 14, 2026

This End User License Agreement (the "Agreement") is a binding contract between Ploid AI Biotech, S.L., a Spanish limited liability company with Tax ID (CIF) B19786623 (EU OSS VAT identification number ESB19786623), registered office at Avenida Diagonal, 612 - P. 1 PTA. 3, 08021 Barcelona, Spain ("Ploid", "we", "us"), and the individual or entity accessing or using the Ploid platform (the "Services") ("you").

By registering an account, or by accessing or using the Services, you accept and agree to be bound by this Agreement. If you do not agree, do not register and do not use the Services. If you use the Services on behalf of an organization, you represent that you have authority to bind that organization, and "you" refers to that organization.

1. Parties, Definitions and Acceptance

1.1 "Services" means the Ploid software-as-a-service platform for bioinformatics and life-sciences analysis, including its web application, APIs, computational workflows, AI-assisted analysis features, and related documentation, as operated by Ploid on its own deployments.

1.2 "Customer Content" means data and materials you upload to or create in the Services, including datasets, files, scripts, workflow definitions, study materials, and the outputs and results the Services generate from them for you.

1.3 "Conversations" means the prompts, messages, and interaction history you exchange with the AI-assisted features of the Services.

1.4 "Plan" means the subscription plan applicable to your workspace at a given time, such as Free, Pro, Team, or an Enterprise plan. A trial period of a Plan is part of that Plan. Section 6.6 states how this Agreement treats enterprise and beta plans.

1.5 Acceptance. You accept this Agreement by registering an account or by using the Services. The version and effective date of this Agreement are stated above. We record the version you accepted and the time of acceptance.

1.6 Enterprise deployments and separate agreements. This Agreement applies to the Services as operated by Ploid on its own deployments. Where Ploid operates a dedicated deployment for your organization, or where your organization has a separate written agreement with Ploid, that agreement governs and supersedes this Agreement to the extent of any conflict, and this Agreement applies only to the extent that agreement does not. Accordingly, on any matter the separate agreement does not address, the corresponding terms of this Agreement apply as residual terms; Section 6.6 states the data-use terms that fill such a gap.

2. License Grant and Scope

2.1 Subject to this Agreement and payment of any applicable fees, Ploid grants you a limited, non-exclusive, non-transferable, non-sublicensable right to access and use the Services for your internal research and business purposes during the term of your Plan.

2.2 We may modify the Services over time, including adding, changing, or removing features. Material reductions of paid functionality will be handled as described in Section 13.

2A. Fees, Taxes and Invoicing

2A.1 Prices are exclusive of VAT. All prices quoted for Plans, seats and credits are net amounts and do not include value added tax or any equivalent turnover tax. Any such tax that applies is added to the price and charged in addition to it.

2A.2 How the tax is determined. We are established in Spain and registered for the EU One Stop Shop scheme. The tax charged depends on where you are established and on whether you supply a valid VAT identification number:

• customers in Spain are charged Spanish VAT, whether or not they supply a VAT number;
• business customers established in another EU Member State who supply a valid VAT identification number are not charged VAT by us; the supply is subject to the reverse charge and you account for the tax in your Member State;
• customers in another EU Member State who do not supply a valid VAT identification number are charged VAT at the rate of their Member State;
• customers established outside the EU are charged no EU VAT, without prejudice to any tax obligation arising in their own jurisdiction.

2A.3 Your VAT number. Supplying a VAT identification number is optional. If you supply one, you warrant that it is valid and issued to you, and that you are receiving the Services as a taxable person for business purposes. You may add, correct or remove it at any time through the billing portal linked from your workspace's billing settings. A change takes effect for invoices issued after it is made and does not alter invoices already issued.

2A.4 If the number turns out to be invalid. Where we have not charged VAT in reliance on a VAT identification number that is later found to be invalid or not issued to you, you remain responsible for the tax properly due, and we may invoice you for it together with any interest or penalty we incur as a result.

2A.5 Invoices. We issue an invoice for each subscription charge, credit purchase and overage settlement. Invoices show your billing details as they stand when the invoice is issued, including the VAT identification number and legal name on file. Keeping those details accurate and current is your responsibility.

3. Accounts and Eligibility

3.1 You must be at least 18 years old and provide accurate registration information. You are responsible for maintaining the confidentiality of your credentials and for all activity under your account.

3.2 You must notify us without undue delay of any unauthorized use of your account. We may suspend accounts that present a security risk to the Services or other users.

4. Acceptable Use

4.1 General restrictions. You agree not to, and not to permit others to:

• use the Services in violation of applicable law or third-party rights;
• upload or process personal data, including human genetic or health data, without a valid legal basis and, where required, appropriate de-identification or pseudonymization (see Sections 4.3 and 7);
• attempt to gain unauthorized access to the Services, other users' workspaces, or the underlying infrastructure;
• interfere with or disrupt the integrity or performance of the Services, including submitting workloads intended to abuse, overload, or circumvent usage limits or metering;
• reverse engineer, decompile, or otherwise attempt to derive the source code of the Services, except to the extent such restriction is prohibited by law;
• resell, sublicense, or provide the Services to third parties as a service bureau without our prior written consent;
• use the Services to develop a competing product;
• use outputs of the Services to train machine-learning models that compete with the Services, except with our prior written consent.

4.2 Prohibited uses. The following are outside the intended purpose stated in Section 4A and are prohibited. You must not use the Services, or any output of the Services:

• to make, support, or inform a clinical decision about an identifiable person, including diagnosis, prognosis, screening, treatment selection, dosing, or medication management;
• as the sole or primary basis for any decision affecting the health or care of an identifiable person;
• as, or as a component of, a medical device or an in vitro diagnostic medical device, or in any activity requiring conformity assessment under Regulation (EU) 2017/745 or Regulation (EU) 2017/746;
• to produce a clinical report, a diagnostic finding, or a document presented as either;
• in any of the high-risk domains listed in Annex III of Regulation (EU) 2024/1689 (the AI Act) — including biometric categorization by sensitive attributes, employment and worker management, education and vocational training, access to essential private or public services, creditworthiness assessment, insurance risk assessment and pricing, critical infrastructure, law enforcement, migration and border control, and the administration of justice. This prohibition is absolute. The Services are not designed or documented for a high-risk deployment, and Ploid does not today maintain the conformity assessment, technical documentation, registration or post-market monitoring that Article 16 of the AI Act would require of the provider of such a system. If you need one of these uses, it requires a written amendment to this Agreement signed by both parties following a documented assessment under Article 6 of the AI Act. Nothing short of that amendment — including correspondence, a support response, or any other written statement by Ploid personnel — permits it;
• to present an output as authored by a person, or as clinically or diagnostically validated, or to remove or obscure the provenance information described in Section 8 of the AI Transparency Statement from content you circulate.

4.3 Human genetic, clinical and special-category data. You must not place identifiable human genetic, clinical, or other special-category personal data (Article 9 GDPR) in the Services unless you have a valid legal basis under Article 9(2), you have applied appropriate safeguards such as pseudonymization or de-identification before upload, your use remains within the intended purpose in Section 4A, and the workspace has been configured for human data before that data is placed in it. An owner or administrator makes that configuration, attesting to the Article 9(2) basis; it is what turns on the research-use-only notice the Services display and write into exported files. Leaving a workspace unconfigured does not relax any of the other conditions in this Section. Ploid does not inspect Customer Content and cannot detect a failure to meet these conditions; compliance is your responsibility as controller. Section 2.3 of the Data Processing Agreement states the corresponding processor-side position.

4A. Intended Purpose

4A.1 What the Services are for. The Services are a research platform for bioinformatics and life-sciences analysis, intended for use by qualified researchers for research and informational purposes. Their intended purpose, their capabilities, their known limitations, and the instructions for using them safely are set out in our AI Transparency Statement and Instructions for Use, which forms part of this Agreement.

4A.2 What they are not. The Services are not a medical device, do not provide medical, clinical, or diagnostic advice, and are not intended for any use listed in Section 4.2. No output is a clinical finding.

4A.3 Reading this Agreement against that purpose. The intended purpose is the reference point for Sections 4.2, 9A and 10. Using the Services outside it is a breach of this Agreement, and may also make you a provider of an AI system in your own right under Section 9A.

5. Customer Content and Ownership

5.1 You own your Customer Content. Nothing in this Agreement transfers ownership of Customer Content to Ploid.

5.2 You grant Ploid a worldwide, non-exclusive license to host, store, copy, transmit, process, and display Customer Content as necessary to (a) provide, maintain, and secure the Services; (b) comply with law; and (c) exercise the plan-specific rights described in Section 6.

5.3 You are responsible for your Customer Content, including having all rights and permissions needed to upload and process it in the Services.

6. Data Use by Plan

Your Plan determines how Ploid may use Customer Content and Conversations beyond operating the Services. This section is the operative data-use term of this Agreement.

6.1 Processing to provide the Services (all Plans). Ploid always processes Customer Content and Conversations as needed to operate the Services you request — for example storing datasets, executing workflows, generating analyses, providing support you ask for, metering usage, securing the platform, and complying with law. This operational processing is not "training" and applies on every Plan.

6.2 Summary.

Where a separate agreement is silent on data use, the Team Plan row applies. Beta plans are treated as Team. See Section 6.6.

6.3 Free Plan. If you use the Services on a Free Plan, you grant Ploid the right to use your Customer Content and Conversations to train, fine-tune, evaluate, and improve Ploid's models, features, and services. Where practicable we apply de-identification or aggregation, but you should not upload material to a Free workspace that may not be used for these purposes.

6.4 Pro Plan. On a Pro Plan, Ploid does not use your Customer Content to train models. Ploid may use your Conversations (including associated telemetry such as feature usage and error signals) to improve Ploid's models, features, and services.

6.5 Team Plan. On a Team Plan, Ploid does not use your Customer Content or your Conversations for training or model improvement. Ploid only collects and uses information about your workspace in anonymized and aggregated form — such as performance metrics, reliability data, and feature-usage statistics that do not identify you, your users, or your data — to improve the performance, stability, and security of the Services.

6.6 Enterprise and other plans.

(a) Enterprise plans and dedicated deployments. Data use is governed by the separate written agreement between Ploid and your organization. Consistent with Section 1.6, this Section 6 applies to any data use that agreement does not address: where that agreement is silent, the Team Plan terms of Section 6.5 apply, so Ploid does not use your Customer Content or Conversations for training or model improvement, and uses only anonymized, aggregated information about your workspace. Silence in a separate agreement is never consent to a broader use of your data than the Team Plan permits.

(b) Beta plans. A workspace on a beta plan without a separate written agreement is treated as a Team Plan for the purposes of this Section 6. Beta workspaces were onboarded with production research data and were never offered the Free Plan bargain, so the Free Plan terms of Section 6.3 do not apply to them.

6.7 Plan changes. The data-use terms of your Plan apply prospectively from the moment the Plan takes effect. Upgrading to a more protective Plan (for example Free to Pro) stops the broader uses going forward; it does not retroactively unwind uses already made, and it does not require the removal of improvements already incorporated into models or services. Downgrading applies the broader terms only to Customer Content and Conversations processed after the downgrade.

6.8 No training on Customer Content (Pro, Team and Enterprise Plans). This paragraph states in one place what Sections 6.4 to 6.6 and Section 9.2 already provide, so that it can be relied on without assembling it. It creates no new right and narrows nothing.

(a) On the Pro, Team and Enterprise Plans, Ploid does not use your Customer Content to train, fine-tune, or evaluate any model. On the Team and Enterprise Plans the same applies to your Conversations. Enterprise Plans are governed by the separate agreement, which under Section 6.6(a) falls back to the Team Plan terms where it is silent.

(b) On every Plan, including the Free Plan, the third-party providers Ploid engages for model inference are contractually prohibited from using data submitted through their APIs to train their own models, and the Services are configured accordingly. Section 5.2 of the Data Processing Agreement restates this.

(c) The Free Plan is the exception to (a). Section 6.3 grants Ploid the right to use Free Plan Customer Content and Conversations for training and model improvement. That is the bargain of the Free Plan. Do not place material in a Free workspace that may not be used for those purposes, and do not read this paragraph as an unqualified commitment across all Plans: it is not one.

(d) Operational processing to deliver the Services (Section 6.1) is not training and is unaffected by this paragraph.

7. Privacy and Data Protection

7.1 Ploid processes personal data in accordance with applicable data protection law, including Regulation (EU) 2016/679 (GDPR), and with Ploid's Privacy Policy, which describes the categories of data we process as controller and how to exercise your rights.

7.2 For personal data contained in Customer Content, you act as controller (or as processor for your own customers) and Ploid acts as processor, processing such data on your documented instructions as expressed through your use of the Services and this Agreement. Ploid's processor obligations are set out in our Data Processing Agreement, which forms part of this Agreement and applies wherever Customer Content contains personal data. The providers Ploid engages to process such data are listed at Subprocessors.

7.3 The Services are designed for research data. Section 4.3 states the conditions on which identifiable human genetic, clinical, or other special-category personal data may be placed in the Services, and Section 4.2 prohibits every clinical use of it.

8. Intellectual Property

8.1 Ploid and its licensors retain all rights, title, and interest in and to the Services, including all software, models, interfaces, and documentation. No rights are granted except as expressly stated in this Agreement.

8.2 You may provide feedback about the Services; Ploid may use it without restriction or obligation.

8.3 As between the parties and to the extent permitted by law, outputs generated by the Services from your Customer Content are part of your Customer Content (Section 5).

9. Third-Party Services and Models

9.1 The Services incorporate third-party infrastructure (such as cloud computing and storage providers) and third-party AI models accessed via their commercial APIs. Your Customer Content and Conversations may be transmitted to such providers as necessary to provide the Services.

9.2 Ploid selects providers whose commercial terms prohibit them from using customer data submitted via API to train their own models, and configures the Services accordingly. Third-party components remain subject to their own terms where they apply directly to you.

9.3 Open-source software and public scientific pipelines (for example community workflow repositories) used within the Services remain subject to their own licenses. A list of the principal open-source and third-party components incorporated in or operated as part of the Services, together with their licenses, is available in our Open-Source Software Notices.

9A. AI Transparency and Provider Obligations

9A.1 Ploid is the provider. For the purposes of Regulation (EU) 2024/1689 (the AI Act), Ploid is the provider of the AI system made available through the Services. Our transparency disclosures, together with the instructions for use, are published at AI Transparency Statement and Instructions for Use. That document applies to every deployment, including deployments Ploid operates exclusively for one organization.

9A.2 Disclosure in operation. The Services disclose to the people interacting with them that they are interacting with an AI system, and on whose behalf that system acts. Where Ploid operates a dedicated deployment for your organization, that disclosure names your organization as the entity on whose behalf the system is operated. You must not disable, obscure, or remove those disclosures, or the provenance information carried by generated content.

9A.3 When you become a provider. Under Article 25(1) of the AI Act, you become the provider of an AI system, in place of Ploid, if you:

(a) put the Services or an output-generating component of them on the market or into service under your own name or trade mark;

(b) make a substantial modification to the Services; or

(c) modify the intended purpose stated in Section 4A such that the system becomes a high-risk AI system, including by deploying it in an Annex III domain listed in Section 4.2.

9A.4 Consequences. If Section 9A.3 applies, you assume the full obligations of a provider under Article 16 of the AI Act — among them risk management, data governance, technical documentation, record-keeping, conformity assessment, registration, and post-market monitoring — for the system as you have put it on the market. Ploid does not assume them on your behalf and does not provide the technical documentation a high-risk system requires. You will notify us in writing before doing anything within Section 9A.3, and you will indemnify us against claims arising from it.

9A.5 The limit of this allocation. Sections 9A.3 and 9A.4 allocate responsibility between you and Ploid, and provide a basis for indemnification between us. They do not, and cannot, displace either party's obligations toward supervisory or market-surveillance authorities, or toward the people affected by the system. A regulator is not bound by how we have allocated matters here.

10. Availability, Beta Features and Disclaimers

10.1 We aim for high availability but do not guarantee that the Services will be uninterrupted or error-free. Maintenance windows may be scheduled and, when practical, announced in the application.

10.2 Features identified as beta, preview, or experimental are provided as-is and may change or be withdrawn at any time.

10.3 Research use only. The Services are intended for research and informational purposes, as stated in Section 4A. They are not a medical device, do not provide medical or diagnostic advice, and must not be used as the sole basis for clinical decisions. Section 4.2 lists the uses this prohibits, and Section 2 of the AI Transparency Statement states the intended purpose in full.

10.4 Accuracy of AI-generated output. Outputs are generated by large language models and are probabilistic: the same request may produce different results on different runs. They may be wrong in ways that are not apparent from the output itself. In particular, and without limitation:

• literature citations may be fabricated, or may exist but not support the claim they are attached to;
• variant calls, effect sizes, and similar findings may be stated with more confidence than the underlying evidence supports, and measures of uncertainty may be absent unless requested;
• statistical methods may be applied without their assumptions being checked;
• analysis code may run to completion, and produce well-formed results, on incorrect inputs, units, or groupings; and
• in a long conversation, a constraint you set earlier may stop being applied without notice.

Section 5 of the AI Transparency Statement describes these failure modes in more detail. You are responsible for reviewing and validating outputs, including the code and intermediate results that produced them, before relying on them, publishing them, or acting on them. Ploid claims no accuracy figure for interpretive output and has performed no clinical validation of the Services.

10.5 EXCEPT AS EXPRESSLY STATED IN THIS AGREEMENT AND TO THE MAXIMUM EXTENT PERMITTED BY LAW, THE SERVICES ARE PROVIDED "AS IS" WITHOUT WARRANTIES OF ANY KIND, WHETHER EXPRESS, IMPLIED, OR STATUTORY, INCLUDING WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT.

11. Limitation of Liability

11.1 TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR FOR LOSS OF PROFITS, REVENUE, DATA, OR GOODWILL, EVEN IF ADVISED OF THE POSSIBILITY.

11.2 TO THE MAXIMUM EXTENT PERMITTED BY LAW, PLOID'S TOTAL AGGREGATE LIABILITY UNDER THIS AGREEMENT IS LIMITED TO THE AMOUNTS YOU PAID TO PLOID FOR THE SERVICES IN THE TWELVE (12) MONTHS PRECEDING THE EVENT GIVING RISE TO THE CLAIM (OR ONE HUNDRED EUROS (EUR 100) IF YOU HAVE PAID NOTHING).

11.3 Nothing in this Agreement excludes or limits liability that cannot be excluded or limited under applicable law, including liability for willful misconduct or gross negligence, or affects statutory rights you hold as a consumer where they apply.

12. Term and Termination

12.1 This Agreement applies from your first acceptance and for as long as you use the Services.

12.2 You may stop using the Services at any time. If you own a team workspace, you can delete it from its settings, which purges the Customer Content it holds. To have your account itself closed and its data removed, ask us at privacy@ploid.ai — the Services do not carry a self-service account deletion, and we act on the request. Paid subscriptions run and renew as described at purchase.

12.3 We may suspend or terminate your access for material breach of this Agreement (including Section 4), for non-payment, where required by law, or where your use presents a security risk. Where reasonable, we will give notice and an opportunity to cure.

12.4 Upon termination, your right to use the Services ends. Data export and deletion follow the Privacy Policy, the deletion terms of the Data Processing Agreement, and any retention periods required by law. Sections 2A.4, 4A, 4.2 (as it applies to Outputs you retain after termination), 5.2 (to the extent needed to wind down), 6.7, 6.8, 8, 9A, 10, 11, 14, and 15 survive termination.

13. Changes to this Agreement

13.1 We may update this Agreement from time to time. When we do, we will publish the new version with a new version identifier and effective date, and notify you in the application on your next use.

13.2 Continued use of the Services after the effective date of an updated version constitutes acceptance of that version. If you do not agree to an update, you must stop using the Services; for paid Plans, material adverse changes entitle you to terminate and receive a pro-rata refund of prepaid, unused fees.

14. Governing Law and Jurisdiction

14.1 This Agreement is governed by the laws of Spain.

14.2 The courts of the city of Barcelona, Spain, have exclusive jurisdiction over disputes arising from this Agreement, except where mandatory consumer protection rules give you the right to bring or defend proceedings in another forum.

15. Contact

Ploid AI Biotech, S.L. Avenida Diagonal, 612 - P. 1 PTA. 3, 08021 Barcelona, Spain CIF B19786623 (EU OSS VAT ID ESB19786623) Email: legal@ploid.ai

16. Related documents

The following documents are referenced above and form part of, or explain, this Agreement:

• AI Transparency Statement and Instructions for Use — the intended purpose, what the AI agent can and cannot do on its own, its known limitations, and how generated content is marked (Sections 4A and 9A)
• Privacy Policy — how Ploid processes personal data as controller, and how to exercise your rights (Section 7.1)
• Data Processing Agreement — Ploid's Article 28 processor terms for personal data inside Customer Content (Section 7.2)
• Subprocessors — the providers Ploid engages, their role and their location (Section 7.2)
• Open-Source Software Notices — the third-party components incorporated in or operated as part of the Services (Section 9.3)