Kezzlab Site Manager Software Licence and Subscription Agreement Agreement code: CONDUIT-SAAS Version: 0.2 Effective date: 16 September 2026 Commercial drafting draft — not legal advice. The Supplier's full legal name, ABN, address and notice email must be inserted, and Australian commercial, privacy and tax counsel must review this agreement before production use. This Agreement is between the legal entity operating Kezzlab Site Manager and identified as the supplier in the applicable Order, invoice or account confirmation (Supplier, we, us) and the legal entity named as the organisation when the account is created or in the applicable Order (Customer, you). The individual accepting this Agreement confirms that they have authority to bind the Customer. 1. Agreement and definitions This Agreement starts when an authorised representative accepts it electronically, creates a Customer workspace, or accepts an Order that incorporates it, whichever occurs first. An Order means a plan selection, checkout record, quote, order form or invoice accepted by the Customer. Customer Data means information, files and records submitted to or generated for the Customer through the Service. Authorised User means a person the Customer permits to use its workspace. Privacy Laws means privacy, data-protection and data-breach laws that apply to a party. - If an Order expressly conflicts with this Agreement, the Order prevails only for that conflict. - Product descriptions, policies or service documentation apply only where this Agreement or an Order expressly incorporates them. 2. Service and licence During the trial or paid subscription term, the Supplier grants the Customer a limited, non-exclusive, non-transferable right for its Authorised Users to access and use Kezzlab Site Manager for the Customer's internal business operations within the scope of the selected plan. The Small Business plan is for one business location and the stated user limit. The Site / Depot plan is charged per site within the scope stated in the Order. Corporate licensing is custom-priced for organizations with 10 or more sites and is subject to an agreed Order. Current scope, inclusions and fees displayed before checkout form part of the Order. - The Customer may allow its employees and contractors to be Authorised Users where they need access for the Customer's business. - The Customer must not resell, sublicense or provide the Service as a bureau service unless an Order expressly allows it. 3. Trial, term and renewal A new workspace may receive the trial period shown at registration. Unless an Order states otherwise, a paid subscription runs for 12 months and renews for successive 12-month periods until either party gives notice of non-renewal or the Customer cancels renewal through the available account controls before the current period ends. The Supplier will give at least 30 days' notice of a fee increase that applies on renewal. If the Customer does not agree to that increase, it may prevent renewal without an early-termination charge. 4. Fees, GST and payment The Customer must pay the fees shown in the accepted Order. Unless stated otherwise, prices are in Australian dollars, exclude GST and are billed annually. If GST is lawfully payable, the Customer must pay it after receiving a valid tax invoice. Adjustments will be documented where required by law. The Customer authorises the payment provider to process recurring charges for an automatically renewing subscription. Failed or overdue payments may result in proportionate access restrictions after reasonable notice and an opportunity to remedy, except where immediate action is reasonably necessary to prevent fraud or security harm. 5. Accounts and Customer responsibilities The Customer is responsible for its Authorised Users, the accuracy and legality of Customer Data, configuring access appropriately, and keeping account credentials and authentication methods secure. The Customer must promptly notify the Supplier of suspected unauthorised access. The Customer remains responsible for professional, operational, safety, employment, quality and regulatory decisions made using the Service, including reviewing records, calculations, reports and alerts before relying on them. 6. Acceptable use The Customer and its Authorised Users must not use the Service unlawfully, infringe another person's rights, introduce malicious code, defeat access controls, interfere with the Service, probe it without written permission, or attempt to derive source code except to the extent a law gives a non-excludable right to do so. Reasonable use limits may be applied where necessary to protect service stability or other customers. The Supplier will use proportionate measures and, where practicable, notify the Customer before materially restricting ordinary use. 7. Customer Data As between the parties, the Customer retains ownership of Customer Data. The Customer gives the Supplier and its subprocessors a limited right to host, copy, transmit, back up, transform and otherwise process Customer Data only as reasonably necessary to provide, secure, support and improve the Service, comply with the Customer's documented instructions, or meet legal obligations. The Supplier will not sell Customer Data. Any use of identifiable Customer Data to train a general-purpose artificial-intelligence model beyond providing the Service requires prior disclosure and the Customer's express agreement. Aggregated or de-identified information may be used for security, reliability and product analytics only where it cannot reasonably identify the Customer or an individual. 8. Privacy and data processing Each party must comply with the Privacy Laws that apply to it. The Supplier will process personal information for the agreed service purposes, apply access controls and confidentiality obligations, and assist the Customer with reasonable requests relating to access, correction, complaints, assessments and regulatory obligations where the Supplier holds relevant information. The Supplier will disclose material hosting regions, support-access locations and subprocessors in the Order or service documentation. Where personal information is accessed or disclosed outside Australia, each party will take the steps required of it under applicable Privacy Laws. The parties acknowledge that contractual labels do not remove either party's own statutory obligations. 9. Security and data incidents The Supplier will maintain technical and organisational safeguards reasonably appropriate to the nature and sensitivity of Customer Data and the risks of unauthorised access, loss, misuse, interference, modification or disclosure. The Supplier will notify the Customer without undue delay after confirming a security incident affecting Customer Data, provide available material information on scope and likely impact, take reasonable containment and remediation steps, and reasonably cooperate with legally required assessments and notices. Each party remains responsible for deciding and performing its own legal notification duties. 10. Artificial-intelligence and automated features AI-assisted features may generate incomplete, inaccurate or unsuitable suggestions. They are tools for authorised human review and do not replace professional judgement, required approvals or legal and safety checks. The Customer must review an AI-generated action before it is approved, imported or relied on. The Supplier will provide reasonable information about material AI data handling in the applicable product or privacy documentation and will not represent an AI output as guaranteed to be correct. 11. Intellectual property The Supplier and its licensors retain all intellectual-property rights in the Service, software, documentation, designs and underlying technology, excluding Customer Data. No rights are granted except those expressly stated in this Agreement. If the Customer voluntarily provides feedback, it permits the Supplier to use that feedback without restriction or payment, but the Supplier must not identify the Customer publicly without permission. 12. Confidentiality Each party must protect the other party's confidential information using at least reasonable care and use it only to perform or receive the Service. This does not cover information that is public without breach, already lawfully known, independently developed, or lawfully received without confidentiality restrictions. A party may disclose confidential information where legally required after giving notice where lawful and reasonably practicable. These obligations continue after termination while the information remains confidential. 13. Availability, changes and support The Supplier will use reasonable care and skill in providing the Service and will aim to minimise avoidable disruption. Planned maintenance, emergency maintenance, internet failures, third-party services and events outside reasonable control may affect availability. Any specific service level must be stated in an Order. The Supplier may improve or change the Service, but will give reasonable advance notice where a change materially removes paid functionality during a current term. If that materially adverse change is not reasonably necessary for law, security or service integrity and cannot be remedied, the Customer may terminate the affected Service and receive a pro-rata refund of prepaid fees for the unused period. Support is provided as described in the Order or current service documentation. 14. Suspension The Supplier may suspend affected access only to the extent reasonably necessary for a serious security risk, unlawful use, material breach, non-payment, or to protect the Service or others. Except in an urgent case, the Supplier will give notice and a reasonable opportunity to remedy. The Supplier will restore access promptly after the reason for suspension is resolved. 15. Termination and data return Either party may terminate for a material breach that is not remedied within 30 days after written notice, or immediately if the other party becomes insolvent where the law permits. The Customer may also cancel renewal in accordance with clause 3. During the term, the Customer may use available export functions. For at least 30 days after termination, the Supplier will make a reasonable export of Customer Data available on request where technically practicable and lawful. After that period the Supplier may delete or de-identify Customer Data, subject to legal retention requirements and secure backup cycles. The Customer should retain independent copies of records it is legally required to keep. 16. Warranties and non-excludable rights The Supplier warrants that it will provide the Service with due care and skill and that the Service will materially conform to its current documentation when used as intended. The Customer must give enough detail for the Supplier to investigate a claimed defect and allow a reasonable opportunity to remedy it. Nothing in this Agreement excludes, restricts or modifies a guarantee, right or remedy that cannot lawfully be excluded, including under the Australian Consumer Law. Subject to those rights and the express promises in this Agreement, the Supplier does not guarantee that the Service will be uninterrupted, error-free or suitable for an undisclosed purpose. 17. Liability and third-party claims To the extent permitted by law, neither party is liable to the other for indirect or consequential loss that was not reasonably foreseeable when the Agreement was made. Each party must take reasonable steps to mitigate loss. Subject to the next paragraph, each party's aggregate liability arising from this Agreement is limited to the fees paid or payable for the affected Service in the 12 months before the event giving rise to the claim. This cap does not apply to liability that cannot lawfully be limited, fraud, wilful misconduct, death or personal injury caused by negligence, breach of confidentiality or Privacy Laws, or infringement of the other party's intellectual-property rights. The Customer is responsible for a third-party claim to the extent it is caused by unlawful Customer Data or the Customer's deliberate material breach. The Supplier is responsible for a third-party claim that the unmodified Service, when used as permitted, infringes Australian intellectual-property rights. The responsible party controls the defence, must keep the other informed, and cannot agree to an admission or non-monetary obligation for the other without consent. 18. Disputes Before starting court proceedings, a party must give written details of the dispute and senior representatives must try in good faith to resolve it for at least 20 business days. Either party may seek urgent interim relief at any time. This clause does not restrict a non-excludable statutory right or a complaint to a regulator. 19. Changes to this Agreement The Supplier may issue a new version for a future Order, renewal or trial continuation. Material changes will be presented in a clear form and require acceptance before they bind the Customer, unless a change is strictly required by law and cannot reasonably await acceptance. The Supplier will not silently rewrite an accepted version. Each electronic acceptance is linked to the exact version and document hash accepted. If a materially adverse change is proposed for a renewal and the Customer does not agree, the Customer may prevent renewal without an early-termination charge. 20. General The parties consent to electronic contracting, signatures and notices. Notices may be sent to the account or Order email address and are taken received when delivered without a failure notice, subject to any mandatory legal rule. Each party must keep its notice details current. Neither party may assign this Agreement without the other's consent, not to be unreasonably withheld, except to a related body corporate or as part of a genuine sale or restructure where the assignee can perform the Agreement and written notice is given. Neither party is liable for delay caused by events outside its reasonable control, but payment obligations already due are not excused. If a term is unenforceable it is severed only to the minimum extent necessary. A waiver must be clear and does not waive a later breach. This Agreement and the applicable Order form the entire agreement about the Service and do not create a partnership, agency or employment relationship. This Agreement is governed by the laws of Western Australia and the parties submit to the courts of Western Australia and Commonwealth courts with jurisdiction there, subject to any non-excludable right to bring a claim elsewhere.