Terms of Service & Privacy Policy

Section 1 — Definitions

1.1 "Account" means a registered user profile created with Nourva, whether free, trial, or paid.
1.2 "AI Models" means the artificial intelligence systems, including general-purpose AI models, large language models, vision models, and audio models, used by Nourva to generate Outputs.
1.3 "Content" means any text, images, files, documents, code, prompts, and other materials submitted by you to Nourva or generated by Nourva at your request.
1.4 "Output" means responses, documents, images, code, analyses, recommendations, plans, and any other materials generated by Nourva in response to your inputs.
1.5 "Subscription" means a paid plan granting you specified usage credits and feature access for a defined billing period.
1.6 "Confidential Information" means non-public information disclosed by either party that is marked or reasonably understood to be confidential.
1.7 "Applicable Data Protection Law" means all laws, regulations, and binding guidance relating to the processing of personal data, including the GDPR (EU 2016/679), UK GDPR, UK Data Protection Act 2018, EU AI Act (Regulation 2024/1689), CCPA/CPRA (California), VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), PIPEDA (Canada), Privacy Act 1988 (Australia), PDPA (Singapore), DPDP Act 2023 (India), LGPD (Brazil), PDPL (Saudi Arabia, Royal Decree M/19), Federal Decree-Law No. 45 of 2021 (UAE), POPIA (South Africa), APPI (Japan), and PIPL (China).
1.8 "End User" means the natural person who interacts with Nourva, who must be eighteen (18) years of age or older.

Section 2 — Eligibility & Account Registration

2.1 Age Requirement. Nourva is intended exclusively for users who are eighteen (18) years of age or older. By accepting this Agreement, you represent and warrant that you are at least eighteen (18) years old. We do not knowingly collect, store, or process personal information from any individual under eighteen. If we discover that an account belongs to a minor under eighteen, we will terminate the account immediately and delete associated personal data within thirty (30) days, except where retention is required by law.

2.2 Legal Capacity. You represent and warrant that you have the legal capacity to enter into this Agreement under the laws of your jurisdiction of residence, and that you are not prohibited from receiving the Service under applicable laws.

2.3 Account Information. You agree to provide accurate, current, and complete information during registration, and to update such information promptly when it changes. You are solely responsible for all activity under your Account, including activities by any person you grant access to.

2.4 Single User Per Account. Your Account is personal to you. You may not share login credentials, transfer the Account to another person, or permit any third party to access your Account, except as expressly allowed in a business or enterprise plan.

2.5 Account Security. You are responsible for maintaining the confidentiality of your password and other credentials, for using strong authentication where available (including multi-factor authentication), and for promptly notifying us at [email protected] of any unauthorized access. We are not liable for losses resulting from your failure to safeguard credentials.

2.6 Sanctions Compliance. You represent that you are not located in, under the control of, or a national or resident of any country subject to United States embargo (including but not limited to Cuba, Iran, North Korea, Syria, the Crimea, Donetsk, and Luhansk regions), and that you are not on the U.S. Treasury Department's list of Specially Designated Nationals, the U.S. Commerce Department's Denied Persons List, or any equivalent sanctions list maintained by the European Union, United Kingdom, United Nations, or other relevant authority.

Section 3 — Description of Service

3.1 Nourva is a desktop artificial intelligence platform that provides users with AI-powered tools for personal productivity, including but not limited to: conversational AI, document generation, web automation, research assistance, specialist agents, mathematical reasoning, and design tools.

3.2 Nourva is delivered as a desktop application (Electron-based) that connects to cloud-based AI infrastructure provided by third-party AI Model providers. Nourva does not function offline; an active internet connection is required for nearly all features.

3.3 The Service is offered on a subscription basis with multiple tiers. Features, credits, and limits per tier are described on our website at https://nourva.ai/pricing and may be modified from time to time as set forth in Section 15.

3.4 We reserve the right, at our sole discretion, to modify, suspend, or discontinue any part of the Service at any time, with or without notice, although we will use reasonable efforts to notify users of material changes via in-app notice or email.

Section 4 — Artificial Intelligence Disclosure & Limitations

This Section is critical. Read it carefully.

4.1 You Are Interacting With AI. Pursuant to Article 50 of the European Union Artificial Intelligence Act (Regulation 2024/1689), California SB 1001, and equivalent transparency laws worldwide, we expressly inform you that all responses, outputs, advice, recommendations, content, and interactions provided by Nourva are generated by artificial intelligence systems, not by human beings. You are not communicating with a human professional, advisor, friend, or counselor.

4.2 AI Imperfection. AI systems are inherently imperfect. They can and do produce outputs that are: (a) factually incorrect ("hallucinations"); (b) outdated, biased, or contextually inappropriate; (c) misleading, incomplete, or contradictory; (d) offensive or unintended in tone; (e) inconsistent across sessions; (f) reflective of biases present in training data. You acknowledge and accept these limitations as inherent characteristics of AI technology.

4.3 Not Professional Advice. Nourva, including any specialist agent, persona, or feature within it (such as but not limited to LegalAgent, FinanceAgent, HealthAgent, BusinessStrategist, CareerConsultant, or any future specialist), provides general informational content only. Outputs from Nourva do not constitute and shall not be construed as: (a) Legal advice. Nourva is not a licensed attorney, law firm, or legal services provider in any jurisdiction. (b) Medical advice. Nourva is not a licensed physician, healthcare provider, medical device, or substitute for professional medical evaluation. (c) Financial, investment, tax, accounting, or insurance advice. Nourva is not a registered investment adviser under the U.S. Investment Advisers Act of 1940, a broker-dealer, a certified financial planner, a tax preparer, or a licensed financial professional in any jurisdiction. Nourva is not authorized by the U.S. Securities and Exchange Commission, the Saudi Capital Market Authority (CMA), the U.K. Financial Conduct Authority (FCA), the European Securities and Markets Authority (ESMA), or any equivalent regulator. (d) Psychological or mental health counseling. Nourva is not a licensed therapist, psychologist, psychiatrist, or counselor. (e) Engineering, architectural, scientific, or specialized technical advice requiring professional certification. You agree that you will consult a duly licensed professional in the relevant jurisdiction before making any decision in any of the foregoing domains, and you assume full responsibility for any decisions you make.

4.4 No Privileged Communication. Conversations, files, documents, and data exchanged with Nourva are not protected by attorney-client privilege, doctor-patient confidentiality, accountant-client privilege, clergy-penitent privilege, or any other legal privilege recognized in any jurisdiction. Such communications may be subject to subpoena, court order, regulatory request, or governmental demand. Do not share information with Nourva that you wish to keep legally privileged.

4.5 Critical Decisions Prohibition. Nourva must not be used as the sole decision-maker for: medical diagnoses, treatment, or emergency response; legal contracts or court filings; financial transactions involving material assets; hiring, firing, or compensation decisions; insurance underwriting; credit decisions; child custody or family law matters; criminal defense; tax filings; immigration applications; or any decision with significant legal, health, financial, or safety consequences. Nourva may inform such decisions, but human professional judgment is required.

4.6 Verification Duty. You agree to independently verify all factual claims, citations, statistics, dates, names, calculations, and recommendations produced by Nourva before relying on them. You bear sole responsibility for the consequences of acting on unverified Output.

4.7 Emergency Situations. Nourva is not designed for emergency use. In any emergency involving risk to life, health, safety, or property, immediately contact your local emergency services (911 in the United States, 112 in the European Union, 999 in the United Kingdom, 999 in Saudi Arabia and the UAE, or the equivalent number in your country). Do not rely on Nourva for emergency assistance.

4.8 Web Automation Risks. Nourva includes browser automation capabilities ("Arachne"). When you authorize Nourva to perform actions on your behalf in a web browser: (a) You take full responsibility for any action taken, including form submissions, purchases, communications, account creations, data deletions, or modifications; (b) You authorize Nourva to interact with websites and services using your credentials and identity, subject to the policies of those websites; (c) You acknowledge that web automation carries inherent risks, including unintended actions, account suspensions by third-party platforms, captcha failures, terms-of-service violations of third parties, and unforeseen consequences; (d) You are responsible for monitoring automated tasks and intervening when necessary; (e) Tokra is not liable for any loss, damage, or third-party action resulting from web automation Outputs you authorized.

4.9 Generated Content Watermarking. Where required by law (including the EU AI Act Article 50(2) and California SB 942), content generated or substantially modified by Nourva may include machine-readable markers indicating its synthetic origin. You agree not to remove, obscure, or circumvent such markers.

4.10 No Reliance. You acknowledge that you have not relied on any representation about the accuracy, reliability, or fitness for purpose of Nourva, and that your use is at your own risk.

Section 5 — Subscription, Billing & Refunds

5.1 Subscription Tiers. Nourva offers free and paid subscription tiers. Current tiers, prices, credits, and feature lists are published at https://nourva.ai/pricing.

5.2 Pricing & Currency. All prices are listed in United States Dollars (USD) and are exclusive of any applicable taxes, value-added tax (VAT), goods and services tax (GST), sales tax, or similar charges. Such taxes will be added at checkout based on your billing location and applicable law.

5.3 Auto-Renewal. Paid subscriptions automatically renew at the end of each billing cycle (monthly or annually) at the then-current price unless you cancel at least twenty-four (24) hours before renewal. By providing payment information, you authorize Tokra to charge your payment method for recurring fees until you cancel.

5.4 Cancellation. You may cancel your subscription at any time through your Account settings. Cancellation takes effect at the end of the current billing period; you retain access until then. We do not provide partial refunds for unused time.

5.5 Refund Policy (Default — Non-EU/UK). Except where otherwise required by mandatory law, all payments are final and non-refundable. As a one-time goodwill exception, first-time subscribers may request a full refund within seven (7) days of initial purchase if usage is below ten percent (10%) of allocated credits.

5.6 Refund Policy (EU/UK Consumers). If you are a consumer residing in the European Union or United Kingdom, you have a statutory right to withdraw from this Agreement within fourteen (14) days of purchase under the EU Consumer Rights Directive 2011/83/EU and the UK Consumer Contracts Regulations 2013. However, by purchasing and immediately accessing Nourva (a digital service), you expressly request immediate performance, and you acknowledge that you thereby lose your right of withdrawal under Article 16(m) of the Directive once the service has been fully performed. Tokra will provide written confirmation of this acknowledgment at checkout.

5.7 Credits. Subscription credits expire at the end of each billing cycle and do not roll over unless explicitly stated for a particular tier. Credits have no monetary value, are non-transferable, and are not redeemable for cash.

5.8 Failed Payments. If a payment fails, we may suspend your access until the issue is resolved. Repeated failures may result in account termination.

5.9 Price Changes. We may change prices for new subscription periods. We will provide at least thirty (30) days' written notice (via email or in-app notification) before any price increase affecting your current subscription. Continued use after the effective date constitutes acceptance.

5.10 Promotional Pricing. Promotional discounts, free trials, and introductory offers are limited to first-time subscribers and may not be combined. Misuse of promotional offers (including creating multiple accounts) is grounds for termination.

5.11 Tax Identification. Business customers may submit a valid tax identification number (e.g., VAT ID, GST ID, EIN) at checkout. Provision of a valid B2B tax ID may shift VAT liability to you under the reverse charge mechanism, where applicable by law.

5.12 Disputes & Chargebacks. Disputes regarding charges must first be raised with us at [email protected]. Initiating a chargeback without first contacting us is grounds for immediate account termination, and we reserve the right to recover associated chargeback fees.

Section 6 — Acceptable Use Policy

You agree not to use Nourva, directly or indirectly, to:

6.1 Illegal Activity. Engage in or facilitate any unlawful activity under applicable law in your jurisdiction, the United States, the European Union, or any jurisdiction where the conduct or its effects occur.

6.2 Harm to Persons. Generate content or take actions that: (a) Threaten, harass, stalk, defame, or intimidate any person; (b) Promote violence, terrorism, self-harm, suicide, or harm to others; (c) Constitute hate speech, harassment, or discrimination based on race, ethnicity, national origin, religion, gender, sexual orientation, gender identity, age, disability, or other protected characteristics; (d) Sexually exploit or sexualize any minor (any individual under 18) — Tokra has zero tolerance for child sexual abuse material (CSAM) and reports such content to the National Center for Missing & Exploited Children (NCMEC) and equivalent authorities; (e) Provide instructions for weapons of mass destruction, biological/chemical/nuclear/radiological weapons, or attacks on critical infrastructure.

6.3 Fraud, Deception & Misrepresentation. (a) Impersonate any real person, organization, or entity, including Tokra or its personnel; (b) Generate non-consensual deepfakes, synthetic media of real persons, or misleading election or political content presented as authentic; (c) Generate false reviews, fake testimonials, fraudulent academic work, forged documents, or counterfeit identifications; (d) Engage in phishing, social engineering, or any deceptive practice intended to acquire personal information, credentials, or assets from third parties.

6.4 Cybersecurity & Malicious Activity. (a) Develop, distribute, or deploy malware, ransomware, viruses, or any malicious code; (b) Conduct unauthorized penetration testing, vulnerability exploitation, or denial-of-service attacks; (c) Bypass security measures, rate limits, or content filters of Nourva, its sub-processors, or third-party services; (d) Reverse engineer, decompile, or attempt to discover the source code of Nourva except as expressly permitted by law.

6.5 Intellectual Property Violations. (a) Infringe copyrights, trademarks, patents, trade secrets, publicity rights, or any intellectual property right; (b) Generate substantial reproductions of copyrighted works (including song lyrics, books, articles, code) without authorization; (c) Generate content using protected characters, brands, or logos in a manner that violates owners' rights.

6.6 Privacy Violations. (a) Doxx, expose, or aggregate personal information about any individual without their consent; (b) Conduct surveillance or stalking, including via Arachne web automation; (c) Process personal data of others through Nourva without lawful basis.

6.7 Spam, Scraping & Abuse. (a) Send unsolicited bulk messages, spam, or commercial communications in violation of CAN-SPAM, GDPR, or local anti-spam laws; (b) Use Nourva to mass-scrape websites in violation of those websites' terms of service or applicable computer fraud laws; (c) Generate manipulated content for deceptive search engine optimization, review manipulation, or astroturfing.

6.8 Service Abuse. (a) Resell, sublicense, or commercially redistribute access to Nourva without an enterprise agreement; (b) Circumvent usage limits by creating multiple accounts; (c) Use automated tools to register, access, or extract data from Nourva at scale without prior written authorization.

6.9 Regulated Domains Without Compliance. (a) Use Nourva for healthcare diagnosis or treatment in a clinical setting without independent regulatory approval; (b) Use Nourva for credit decisions, insurance underwriting, employment screening, or other "consequential decisions" subject to the Colorado AI Act, EU AI Act high-risk classifications, or equivalent laws, without ensuring full compliance with such laws including human oversight and bias auditing; (c) Use Nourva to provide legal, medical, financial, or other professional services to third parties unless you are independently licensed and assume full professional liability.

6.10 Geographic Restrictions. Use Nourva from any country or for any party subject to U.S., EU, UK, or UN sanctions, or in violation of export control laws (including the U.S. Export Administration Regulations).

6.11 Reporting. If you discover any violation of this Acceptable Use Policy, please report it to [email protected]. Tokra investigates reports in good faith and takes action as appropriate.

6.12 Enforcement. Violations may result in warning, content removal, account suspension, account termination, forfeiture of unused credits, civil liability, and referral to law enforcement. We reserve the right to take any action we deem appropriate.

Section 7 — Intellectual Property

7.1 Tokra's IP. Nourva, including all software, designs, trademarks, logos, brand elements, documentation, and underlying technology, is owned by Tokra, LLC, its licensors, and its sub-processors. All rights are reserved. Nothing in this Agreement transfers ownership.

7.2 Limited License to You. Subject to your compliance with this Agreement and payment of applicable fees, Tokra grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable license to install and use Nourva on devices you own or control, solely for your personal, lawful use, during the term of your Subscription.

7.3 Your Content. You retain all ownership rights in Content you submit to Nourva. By submitting Content, you grant Tokra a limited, worldwide, non-exclusive, royalty-free license to host, store, transmit, process, display, and modify your Content solely for the purpose of operating, providing, securing, and improving the Service for you.

7.4 Output Ownership. As between you and Tokra, you own the Output generated for you by Nourva, subject to: (a) third-party rights (e.g., copyrights of source material reflected in Output); (b) Tokra's right to generate similar Output for other users; and (c) the limitations in Section 4. You are solely responsible for ensuring your use of Output complies with all laws and third-party rights.

7.5 No Training on Your Content. Tokra does not use your Content, prompts, conversations, files, documents, or memory to train any artificial intelligence model, whether owned by Tokra, its sub-processors, or any third party. Your content is processed solely to provide the Service to you. This commitment is contractually enforced with all AI Model providers (see Annex A).

7.6 Feedback. If you provide suggestions, ideas, feature requests, or feedback ("Feedback"), you grant Tokra a perpetual, irrevocable, worldwide, royalty-free license to use such Feedback without obligation or compensation. Feedback is not Confidential Information.

7.7 Trademark Use. "Nourva," "Tokra," "Arachne," and associated logos are trademarks of Tokra, LLC. You may not use these marks without prior written permission, except for accurate factual reference.

7.8 DMCA & Copyright Complaints. If you believe content available through Nourva infringes your copyright, send a notice to our designated agent at [email protected] containing the information required by 17 U.S.C. § 512(c)(3). We will respond as required by law. Repeat infringers will have accounts terminated.

Section 8 — Automated Decision-Making (GDPR Article 22)

8.1 Where Nourva makes automated decisions that produce legal or similarly significant effects on you (such as eligibility, billing tier assignment, account suspension, or content moderation), you have the right under GDPR Article 22, UK GDPR, and equivalent laws to: (a) Receive meaningful information about the logic involved; (b) Request human review of the decision; (c) Express your point of view; (d) Contest the decision.

8.2 To exercise these rights, contact us at [email protected]. We will respond within thirty (30) days.

8.3 Standard Service operations (such as generating Outputs in response to your prompts) are not "automated decisions" within the meaning of Article 22, as they do not produce legal effects requiring human-equivalent judgment.

Section 9 — Privacy Policy

This Section 9 constitutes our Privacy Policy and forms an integral part of this Agreement. It complies with GDPR, UK GDPR, CCPA/CPRA, PDPL (Saudi Arabia), PIPEDA, LGPD, DPDP Act 2023 (India), and other Applicable Data Protection Laws.

9.1 Data Controller — Tokra, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA. Email: [email protected]. For EU/UK users, our designated representative will be appointed prior to material EU/UK operations and disclosed at https://nourva.ai/legal/eu-representative.

9.2 Personal Data We Collect — Identity (name, email, country), Authentication (hashed password, session tokens, device IDs), Payment (last-4 of card via Stripe), Content (prompts, files, outputs, memory), Usage (feature interactions, error logs), Technical (IP, OS, app version, hardware ID), Communications (support tickets, feedback).

9.3 Legal Bases (GDPR/UK GDPR) — (a) Contract: deliver the Service; (b) Legitimate interests: secure systems, prevent fraud, defend legal claims; (c) Consent: marketing & optional analytics — withdrawable; (d) Legal obligation: tax, accounting, lawful authority requests.

9.4 How We Use Your Data — Provide & maintain Nourva; process payments; authenticate; secure your account; communicate notices; provide support; detect fraud; comply with law; defend legal rights; with consent, send marketing. We do not sell your personal data. We do not share it with advertisers. We do not use it to train AI models.

9.5 Sub-Processors — Listed in Annex A and at https://nourva.ai/legal/sub-processors. Material changes notified 30 days in advance.

9.6 International Data Transfers — Standard Contractual Clauses (EU-approved), UK IDTA / UK Addendum, adequacy decisions where applicable, plus other lawful mechanisms. PDPL Article 29 cross-border transfer requirements respected for Saudi data.

9.7 Data Retention — Active account: while open. Closed account: 30 days then deleted (except where retention required). Conversation/prompt history: 30 days post-deletion request. Billing records: 7 years (tax law). Consent records: 5 years minimum (GDPR Art. 7). Security & audit logs: 2 years. Marketing data: until consent withdrawn. Legal-hold data: duration of dispute.

9.8 Your Privacy Rights — Subject to identity verification, you have the right to: access (GDPR Art. 15, CCPA §1798.100), rectify (Art. 16), delete (Art. 17, CCPA §1798.105), restrict processing (Art. 18), data portability (Art. 20), object (Art. 21), withdraw consent (Art. 7(3)), opt out of "sale/sharing" (CCPA — note: we do not sell or share), limit sensitive PI use (CPRA), non-discrimination for exercising rights, and lodge a complaint with your supervisory authority (national DPA / ICO / SDAIA / etc.). Email [email protected] or use Account → Privacy panel. Response within 30 days (extendable up to 2 months for complex requests, with notice).

9.9 Children's Privacy — Nourva is not directed at and does not knowingly collect data from anyone under eighteen (18). If you believe a minor has provided us data, contact [email protected] for immediate deletion.

9.10 Security Measures — TLS 1.3 in transit, AES-256-GCM at rest for sensitive data, on-device encryption for memory database, hashed passwords (bcrypt/argon2), MFA available, role-based access controls, regular security audits and penetration testing, formal incident response. No system is 100% secure — you participate by using strong passwords, enabling MFA, and reporting suspicious activity.

9.11 Data Breach Notification — Awareness of a breach with risk to your rights triggers: (a) notification to the relevant supervisory authority within 72 hours (GDPR Art. 33, PDPL Art. 21); (b) notification to affected users without undue delay where risk is high (Art. 34) via email and in-app notice; (c) public statement at https://nourva.ai/security where appropriate.

9.12 Cookies & Similar Technologies — The Nourva desktop application uses minimal local storage for session tokens and preferences only — no advertising cookies. Our website uses essential cookies and, with your consent, analytics cookies. Granular control is available via the cookie banner. Full Cookie Policy at https://nourva.ai/cookies.

9.13 California (CCPA/CPRA) — Categories collected: Identifiers, commercial info, internet activity, geolocation (city-level), professional info, inferences. Categories disclosed for business purposes: all above to sub-processors (Annex A). We do not sell or share. Sources: directly from you, automatic from device. Rights as listed in 9.8.

9.14 Saudi Arabia (PDPL) — PDPL Royal Decree M/19 rights apply. Cross-border transfers comply with Article 29. Complaints: SDAIA (sdaia.gov.sa). Nourva aligns AI governance with the SDAIA AI Adoption Framework (Nov 2025).

Section 10 — Confidentiality

10.1 Each party agrees to protect the other's Confidential Information using at least the same degree of care it uses to protect its own confidential information of similar nature, but in no event less than reasonable care.

10.2 Confidential Information does not include information that: (a) was rightfully in the recipient's possession before disclosure; (b) is or becomes publicly known without breach; (c) is independently developed without use of Confidential Information; (d) is rightfully received from a third party without confidentiality obligation; or (e) must be disclosed by law or court order (provided prompt notice is given where lawful).

10.3 Confidentiality obligations survive termination of this Agreement for five (5) years, except for trade secrets, which remain confidential for as long as they qualify as such under applicable law.

Section 11 — Disclaimers of Warranties

11.1 THE SERVICE IS PROVIDED "AS IS" AND "AS AVAILABLE," WITHOUT WARRANTY OF ANY KIND, EXPRESS, IMPLIED, OR STATUTORY, including, without limitation, warranties of merchantability, fitness for a particular purpose, title, non-infringement, accuracy, reliability, completeness, uninterrupted operation, error-free performance, or freedom from harmful components.

11.2 Without limiting the foregoing, Tokra makes no warranty that: (a) Nourva will meet your requirements; (b) Outputs will be accurate, reliable, or appropriate for any purpose; (c) the Service will be uninterrupted, secure, or free from errors or vulnerabilities; (d) defects will be corrected; (e) Nourva is compatible with your hardware, software, or workflow; (f) third-party content or links are accurate or trustworthy.

11.3 You assume all risk of using Output for any purpose. No advice or information obtained from Tokra creates any warranty not expressly stated in this Agreement.

11.4 Statutory Limits. Some jurisdictions (including parts of the EU, UK, Australia, and certain U.S. states) do not allow the exclusion of certain warranties. To the extent legally required, statutory warranties remain in force, but only to the minimum extent mandated. Nothing in this Section excludes liability for fraud, gross negligence, willful misconduct, or personal injury caused by negligence.

Section 12 — Limitation of Liability

12.1 EXCLUSION OF INDIRECT DAMAGES. To the maximum extent permitted by law, in no event shall Tokra, its affiliates, officers, directors, employees, agents, or sub-processors be liable for any indirect, incidental, consequential, special, exemplary, or punitive damages — including loss of profits, revenue, business, opportunity, goodwill, data, use, content, or substitute service — even if advised of the possibility.

12.2 CAP ON LIABILITY. Tokra's aggregate liability arising from or related to this Agreement or your use of Nourva, regardless of theory (contract, tort, statutory, or otherwise), shall not exceed the greater of: (a) the total amount you paid to Tokra in the twelve (12) months preceding the event giving rise to liability, or (b) one hundred U.S. dollars ($100).

12.3 BASIS OF BARGAIN. You acknowledge that the disclaimers, limitations, and allocations of risk in Sections 11 and 12 are essential elements of the bargain. Without them, Tokra would not provide the Service at the prices charged.

12.4 EU/UK Consumer Carve-Out. Nothing in Sections 11 or 12 limits liability that cannot be excluded under mandatory law applicable to consumers in the EU, UK, Australia, or other jurisdictions, including liability for: (a) gross negligence; (b) willful misconduct; (c) personal injury or death caused by negligence; (d) fraud or fraudulent misrepresentation; (e) statutory consumer rights that cannot be waived. For consumers protected by such laws, the cap in 12.2 does not apply to those non-excludable categories.

12.5 Statute of Limitations. Any claim arising out of or related to this Agreement must be filed within one (1) year of the cause of action arising, or it is permanently barred, except where applicable law mandates a longer period.

Section 13 — Indemnification

13.1 By You. You agree to defend, indemnify, and hold harmless Tokra, its affiliates, officers, directors, employees, agents, and licensors from and against any claims, damages, liabilities, costs, and expenses (including reasonable attorneys' fees) arising from or related to: (a) your use or misuse of Nourva; (b) your Content or Outputs you generate, share, distribute, or rely upon; (c) your violation of this Agreement, the Acceptable Use Policy, or any applicable law; (d) your violation of third-party rights (intellectual property, privacy, contractual, or other); (e) web automation actions you authorized via Arachne; (f) any claim that your use of Nourva caused harm to a third party.

13.2 This obligation does not apply to claims arising from Tokra's gross negligence, willful misconduct, or breach of its obligations under this Agreement. EU/UK consumers are not bound by this Section to the extent prohibited by mandatory law.

Section 14 — Governing Law & Dispute Resolution

14.1 Governing Law. This Agreement is governed by the laws of the State of Delaware, United States of America, without regard to its conflict-of-laws principles. The United Nations Convention on Contracts for the International Sale of Goods is excluded.

14.2 Informal Resolution. Before initiating any formal proceeding, you agree to contact us at [email protected] and attempt good-faith resolution for at least sixty (60) days.

14.3 Binding Arbitration. Any dispute, claim, or controversy arising out of or relating to this Agreement or Nourva that is not resolved informally shall be resolved by final and binding arbitration administered by the American Arbitration Association (AAA) under its Commercial Arbitration Rules and, where applicable, the Consumer Arbitration Rules. Arbitration shall be conducted by a single arbitrator in Wilmington, Delaware, in the English language. Judgment on the award may be entered in any court of competent jurisdiction.

14.4 Class Action Waiver. YOU AND TOKRA AGREE THAT EACH MAY BRING CLAIMS ONLY IN AN INDIVIDUAL CAPACITY, NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, OR REPRESENTATIVE PROCEEDING. Where prohibited by mandatory law (including for EU/UK consumers), this waiver does not apply.

14.5 Exception — Equitable Relief. Either party may seek injunctive or equitable relief in court for IP infringement, breach of confidentiality, or misuse before or during arbitration.

14.6 Exception — Small Claims. You may pursue qualifying claims in small claims court in your local jurisdiction in lieu of arbitration.

14.7 EU/UK Consumer Protection. If you are an EU or UK consumer, you retain the right to bring proceedings in the courts of your country of residence as required by Regulation (EU) 1215/2012 (Brussels I Recast) or equivalent UK law. Mandatory consumer protection laws of your country of residence apply notwithstanding the choice of Delaware law.

14.8 Saudi Arabia Users. Saudi Arabian users may, in addition to the above, lodge complaints with SDAIA regarding personal data matters.

Section 15 — Modifications to This Agreement

15.1 We may modify this Agreement to reflect changes in law, the Service, or business practices. For material changes, we will provide notice at least thirty (30) days in advance via email and/or in-app notification.

15.2 Continued use after the effective date constitutes acceptance. If you do not accept, you must stop using Nourva and may cancel under Section 5.

15.3 Material changes to data processing practices are subject to fresh consent under GDPR Article 7.

15.4 A change log is maintained at https://nourva.ai/legal/changelog.

Section 16 — General Provisions

16.1 Entire Agreement. This Agreement (including all referenced policies and Annexes) constitutes the entire agreement between you and Tokra regarding Nourva, superseding all prior or contemporaneous communications.

16.2 Severability. If any provision is held invalid or unenforceable, the remainder remains in full effect, and the invalid provision shall be modified to the minimum extent necessary to make it enforceable while preserving original intent.

16.3 No Waiver. Failure to enforce any right is not a waiver. Waivers must be in writing.

16.4 Assignment. You may not assign this Agreement without our written consent. We may assign freely, including in a merger, acquisition, or sale of substantially all assets, with notice to you.

16.5 Force Majeure. Neither party is liable for delays or failures caused by events beyond reasonable control, including acts of God, war, terrorism, riots, embargoes, government action, pandemics, internet outages, third-party service disruptions, or natural disasters.

16.6 Notices. Notices to you may be sent to your registered email or via in-app notification. Notices to Tokra must be sent to: Tokra, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA, with copy to [email protected].

16.7 Relationship. Nothing in this Agreement creates a partnership, joint venture, agency, employment, or fiduciary relationship.

16.8 Third-Party Beneficiaries. Sub-processors are intended third-party beneficiaries of Sections 6, 7, and 12. Otherwise, no third party has rights under this Agreement.

16.9 Survival. Sections 4, 5.5–5.12, 6, 7, 9, 10, 11, 12, 13, 14, 16.4–16.10, and Annexes survive termination.

16.10 Language. This Agreement is written in English. English is the controlling language. Any translations are for convenience only; in case of conflict, the English version prevails.

16.11 Bankruptcy & Successor Events. In the event of Tokra's insolvency, bankruptcy, acquisition, merger, or sale of assets, your rights under this Agreement and your data are transferred to the successor entity, subject to your right to terminate and request data deletion under Section 9.8.

16.12 Headings. Section headings are for convenience only and do not affect interpretation.

16.13 Contact — General: [email protected] · Privacy: [email protected] · Legal: [email protected] · Abuse: [email protected] · Security: [email protected] · Mailing: Tokra, LLC, 131 Continental Dr, Suite 305, Newark, DE 19713, USA.

Annex A — Sub-Processor Categories

We engage sub-processors under written contracts that obligate them to data protection standards equivalent to ours. To preserve operational flexibility and protect commercially sensitive vendor relationships, the public list is presented by category. A current detailed list of sub-processors, including specific entity names, contact information, locations, and applicable privacy notices, is available within seven (7) business days of a written request to [email protected]. Customers under signed Data Processing Agreements (DPAs) receive automatic notification of additions or material changes at least thirty (30) days in advance.

Annex B — Regional Addendum

B.1 European Economic Area & United Kingdom — GDPR / UK GDPR rights apply as detailed in Section 9.8. EU AI Act Article 50 transparency met via Section 4. Standard Contractual Clauses govern non-adequate transfers. 14-day withdrawal under Directive 2011/83/EU per Section 5.6. Local consumer protection law applies to mandatory provisions.

B.2 United States — California (CCPA/CPRA) — Notice at Collection, Right to Know, Right to Delete, Right to Correct, Right to Limit Sensitive Personal Information, Right to Opt-Out of Sale/Sharing apply. We do not sell or share. Authorized agents may submit requests with verifiable authorization.

B.3 United States — Other States — VCDPA (Virginia), CPA (Colorado), CTDPA (Connecticut), UCPA (Utah), Texas, Oregon, Montana, and similar state privacy laws confer rights substantially equivalent to those in Section 9.8.

B.4 Saudi Arabia (PDPL) — Royal Decree M/19 PDPL rights apply. Cross-border transfers comply with Article 29. SDAIA AI Adoption Framework (Nov 2025) governance principles adopted. Complaints: SDAIA at sdaia.gov.sa.

B.5 United Arab Emirates — Federal Decree-Law No. 45 of 2021 on Personal Data Protection rights apply, including data subject rights and breach notification.

B.6 Canada (PIPEDA) — Privacy rights under PIPEDA and provincial laws (PIPA Alberta, PIPA BC, Quebec Law 25) apply.

B.7 Australia (Privacy Act 1988) — Australian Privacy Principles (APPs) apply; complaints may be lodged with the OAIC.

B.8 India (DPDP Act 2023) — Rights of Data Principals under the Digital Personal Data Protection Act apply, including notice, consent, access, correction, erasure, and grievance redressal. Significant Data Fiduciary obligations met where applicable.

B.9 Brazil (LGPD) — LGPD rights apply, including access, correction, anonymization, portability, deletion, and revocation of consent.

B.10 Singapore (PDPA) — Personal Data Protection Act rights apply; complaints to the PDPC.

B.11 Other Jurisdictions — Where local mandatory law confers rights or imposes obligations not addressed above, those provisions govern to the minimum extent required.