END USER SUBSCRIPTION AGREEMENT & EULA - TOA ("That One Assistant")

Last Updated: July 23, 2026

This End User License Agreement and Subscription Terms (this "Agreement") is a legally binding contract between you ("you," "User," or "End User") and That One Tech Company, LLC ("Licensor," "TOTC," "we," "us," or "our"), located and registered at 14800 Quorum Dr, Suite 415, Addison, Texas 75254, United States.

By accessing or using TOA, you agree to this Agreement. If you do not agree, do not access or use TOA.

VAT number: 92-2894872 (as provided by Licensor).

1) DEFINITIONS

1.1 "TOA" means the web-based software-as-a-service application known as Toa / That One Assistant, including related websites, dashboards, APIs (if any), updates, and documentation.

1.2 "Subscription" means the paid plan (or trial, if offered) that grants you access to TOA during an active subscription term.

1.3 "User Content" means all data and content you provide to TOA or authorize TOA to access, including emails, calendar items, contacts, attachments, connected files (such as documents in Google Drive or Microsoft OneDrive), prompts, account metadata, and other information.

1.4 "Generated Output" means content produced by TOA (for example, drafted emails, summaries, recommendations, task lists, schedules, or research-style responses).

1.5 "Third-Party Services" means external services you connect to TOA (e.g., Google/Gmail/Google Calendar/Google Contacts/Google Drive; Microsoft Outlook/Exchange/Calendar/OneDrive) and any related providers, platforms, or APIs.

1.6 "LLM Processors" means the third-party large language model providers that process inputs and context to generate Generated Output, as described in Section 7.1.

2) THE SERVICE

2.1 SaaS product. TOA is a web-based SaaS tool intended to help users manage work across email, calendar, and tasks, including drafting/sending emails and creating/updating calendar events when authorized.

2.2 No professional advice. TOA and Generated Output do not constitute legal, financial, medical, accounting, compliance, HR, or other regulated advice. You are responsible for verifying outputs before relying on them.

2.3 Changes. TOA may evolve over time. TOTC may add, remove, or modify features at any time, including to maintain security, performance, or compliance.

3) ACCESS; ELIGIBILITY; ACCOUNT SECURITY

3.1 Eligibility; age. You represent that you are at least eighteen (18) years of age, that you are legally able to enter into this Agreement, and that your use of TOA complies with applicable law. TOA is not directed to, offered to, or intended for use by minors. TOTC does not knowingly collect personal information from anyone under 18. If TOTC learns that an account is held by a person under 18, TOTC may suspend or terminate that account and delete the associated User Content.

3.2 Account security. You are responsible for maintaining the confidentiality of your login credentials and for all activity under your account. You must promptly notify TOTC of any suspected unauthorized access.

3.3 Administrators (if applicable). If you use TOA through an organization, administrators may have the ability to manage accounts, access, or settings according to your organization's arrangements with TOTC.

4) SUBSCRIPTION; BILLING; CANCELLATION

4.1 Active subscription required. Access to TOA requires an active, valid Subscription (including any trial period, if offered). If your Subscription ends or is terminated, your access may be suspended or disabled.

4.2 Payment terms. Subscription fees are due in advance for each billing period unless otherwise stated at checkout or in an order form. You authorize TOTC (and its payment processors) to charge your payment method on a recurring basis.

4.3 Trials. If a trial is offered, TOA may suspend access at the end of the trial unless you convert to a paid Subscription.

4.4 Cancellation and refunds. You may cancel according to the cancellation method presented in TOA or your billing portal. Fees are non-refundable except where required by applicable law or expressly stated in writing by TOTC.

4.5 Non-payment. If payment fails or becomes overdue, TOTC may suspend or revoke access to TOA until payment is received.

4.6 Price changes. TOTC may change pricing or plans with notice as required by law or platform policy. Continued use after changes take effect constitutes acceptance of the new pricing/plan terms.

5) LICENSE; PERMITTED USE; RESTRICTIONS

5.1 Limited license. Subject to this Agreement and an active Subscription, TOTC grants you a limited, non-exclusive, non-transferable, non-sublicensable, revocable right to access and use TOA for your personal or internal business purposes.

5.2 Restrictions. You may not (and may not allow anyone else to):

copy, modify, create derivative works of, reverse engineer, decompile, or disassemble TOA or attempt to derive its source code;

bypass or circumvent access controls, security features, rate limits, or usage restrictions;

access TOA to build, train, or benchmark a competing product (except as permitted by law);

use TOA in a way that interferes with, disrupts, or harms TOA, other users, or TOTC.

5.3 No redistribution. You may not resell, sublicense, lease, rent, or provide access to TOA to third parties unless explicitly allowed in a written agreement with TOTC.

6) USER CONTENT; THIRD-PARTY SERVICES; PERMISSIONS

6.1 Your responsibility for content and permissions. You are responsible for ensuring you have all rights and permissions needed to provide User Content to TOA and to authorize TOA to access Third-Party Services (including any personal data of others).

6.2 Third-Party Services terms. Your use of Google, Microsoft, and other Third-Party Services is governed by their terms and policies. You agree to comply with those terms.

6.3 Automated access and actions. When you authorize TOA to send emails, manage calendar events, or connect Third-Party Services, you are responsible for the content, recipients, attachments, and outcomes. To complete an action you request, or to gather context the AI determines is needed for your desired outcome, TOA may open, read, or review emails, attachments, and connected files that you have not individually opened or individually approved, including emails you have merely referenced. Where TOA presents an approval step for a given action, you should review and confirm before proceeding; not all actions include a separate approval step.

6.4 Google API Limited Use. TOA’s access, use, and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. TOA does not use Google Workspace data (including Gmail, Google Calendar, Google Contacts, and Google Drive data), or data derived from it, to develop, improve, or train generalized artificial intelligence or machine learning models beyond your own personalized experience, and does not transfer such data to any third party for the purpose of training that third party’s models.

6.5 Connected file storage (Google Drive / Microsoft OneDrive). By accepting this Agreement and connecting your Google or Microsoft account, you authorize TOA to access the applicable service. This authorization is given when you accept the conditions of this Agreement and log in and grant TOA the requested permissions and scopes; it remains in effect until you revoke those permissions or disconnect the account. Once authorized, TOA connects to your Google Drive or Microsoft OneDrive so that you can browse and attach existing files to emails, and so that TOA can save email attachments back to those services at your direction. Files you retrieve, or that TOA reviews for context, are processed by the LLM Processors as described in Section 7.1.

6.6 Email sending and calendar actions. When you authorize TOA to send emails or manage calendar events, you are responsible for the content, recipients, attachments, and outcomes.

7) AI PROCESSING; SUBPROCESSORS; PROFILE DATA

7.1 AI processing; TOA is a conduit, not the model. TOA is a tool and interface; it is not itself a large language model. To generate drafts, replies, summaries, task extraction, and similar Generated Output, TOA routes your prompts, inputs, and necessary context to a third-party LLM Processor. This may include the text you enter, email content, attachment content, calendar events, contact information, and connected Google Drive/OneDrive files. TOA’s sole LLM Processor is Anthropic, PBC, which operates the Claude models TOA uses (currently Claude Sonnet 4.6) and acts as the data processor for your prompts and outputs under Anthropic’s Commercial Terms of Service and Data Processing Addendum. TOA accesses those models through Microsoft Azure AI Foundry using the Anthropic-hosted deployment configuration. Under that configuration, Microsoft provides the Foundry access layer, authentication, and billing, and collects billing, usage, and transaction information relating to your use; model inference is performed on infrastructure operated by Anthropic. Your prompts, inputs, and outputs are therefore processed on Anthropic-operated infrastructure rather than within a Microsoft Azure region, and may be processed in locations outside any Azure geography, including data centers located in the United States. TOTC does not offer data residency guarantees for AI processing, and TOA should not be used where your own obligations require that content remain within a specific jurisdiction. Content flagged by automated safety systems may be reviewed by Anthropic personnel on an exceptions basis to investigate potential safety violations. TOTC may update the specific Claude model version it uses without amending this Agreement, provided the processor, hosting configuration, and data commitments described in this Section and in Section 7.2 remain unchanged. Your prompts, inputs, and context are processed solely to perform the function you requested. They are not used to train or improve any AI provider’s models. Provider-side retention is limited to the period stated in the applicable provider terms, which is generally short-term and limited to operational and abuse-monitoring purposes; the current retention posture for each provider is described in Section 7.2.

7.2 Subprocessors. TOTC engages a limited number of third parties to process User Content on our behalf in order to deliver TOA. As of the Last Updated date above, our subprocessors are:

Anthropic, PBC – large language model inference (generation of Generated Output);

Microsoft Corporation – cloud hosting of the TOA application, database, and supporting infrastructure on Microsoft Azure, and the Microsoft Azure AI Foundry access layer, authentication, and billing, including collection of usage and transaction metadata;

Google LLC and Microsoft Corporation – only where you connect those accounts as Third-Party Services under Sections 6.2 and 6.5.

The list set out in this Section is the authoritative list of subprocessors that process User Content, and it is current as of the Last Updated date shown at the beginning of this Agreement. TOTC will not engage a new subprocessor to process User Content without first amending this Section and providing notice through TOA, by email to the account owner, or both. Except where a replacement must be made sooner for security, legal, or continuity-of-service reasons, that notice will be given at least thirty (30) days before the new subprocessor begins processing User Content; where a faster replacement is required, notice will be given as promptly as reasonably practicable. If you object to a new subprocessor, your remedy is to terminate your Subscription under Section 17.2 before that subprocessor begins processing your User Content. Each subprocessor is bound by written terms requiring confidentiality, use limited to providing the service, and a prohibition on using User Content to train generalized artificial intelligence or machine learning models. Processing location and retention posture for each subprocessor are described in Section 7.1.

7.3 Profile and personalization data. During registration, and at any time afterward through your settings, you may provide profile information used to personalize TOA’s behavior, including your industry classification, preferred communication tone, and any additional information you choose to enter in a free-text field. You acknowledge that this profile information is persistent, is not deleted by the routine session and conversation purges described in Section 12.3, and is transmitted to the LLM Processor identified in Section 7.1 as context with each request you make, for as long as it remains in your profile. You must not enter into any free-text profile field: health or medical information about yourself or any other person; financial account, payment card, or government identification numbers; credentials, passwords, or security tokens; or information about identifiable third parties that you are not permitted to disclose. You may review, edit, or clear your profile information at any time through your account settings, and doing so removes it from the context transmitted with future requests. TOTC does not monitor the contents of free-text profile fields, and you remain solely responsible for what you enter.

7.4 Sensitive and medical content; HIPAA. Unless otherwise specified in writing by TOTC, TOTC does not intend use of TOA to create obligations under the Health Insurance Portability and Accountability Act, as amended (“HIPAA”), and makes no representations that TOA satisfies HIPAA requirements. TOTC is not a “covered entity” or “business associate” as those terms are defined in HIPAA, and does not enter into Business Associate Agreements. If you are (or become) a covered entity or business associate as defined in HIPAA, you will not use TOA for any purpose or in any manner involving the transmission of protected health information (“PHI”) to TOTC or to any LLM Processor or subprocessor identified in Sections 7.1 and 7.2 unless you have received prior written consent to such use from TOTC. Because TOA reads, drafts from, and routes the contents of the mailboxes, calendars, attachments, and connected files you authorize it to access, you are solely responsible for ensuring that no PHI is present in, or introduced into, any account or content you connect to TOA. If you submit PHI to TOA without TOTC’s prior written consent, you do so at your own risk and in breach of this Agreement, and TOTC disclaims all liability arising from that submission. TOA is not offered for use by businesses operating in the healthcare, medical, or health-insurance sectors, and TOA’s registration process does not permit selection of those industry classifications. Selecting an inaccurate industry classification, or otherwise misrepresenting the nature of your business, to obtain or retain access to TOA is a material breach of this Agreement. This Section is in addition to, and does not limit, your indemnification obligations under Section 16.

8) ACCEPTABLE USE; PROHIBITED ACTIVITIES

You agree not to use TOA to:

send spam, unsolicited bulk messages, or unlawful marketing; run pyramid schemes; or facilitate fraud;

violate privacy, publicity, or intellectual property rights;

transmit malware, harmful code, or exploit vulnerabilities;

attempt unauthorized access to systems or accounts;

misuse, steal, copy, disclose, or attempt to derive TOTC credentials, secrets, tokens, or other sensitive security materials.

CAN-SPAM and electronic communications compliance: You are solely responsible for complying with applicable email and electronic communications laws (including the CAN-SPAM Act and similar laws).

9) GENERATED OUTPUT; RELIANCE; HUMAN REVIEW

9.1 No guarantee. Generated Output may be inaccurate, incomplete, or inappropriate. You must evaluate and verify outputs before use.

9.2 No sole reliance. You agree not to rely solely on Generated Output for decisions involving legal, financial, medical, safety, compliance, or other high-stakes matters.

9.3 User responsibility. You are responsible for all decisions and actions you take based on Generated Output, including communications sent and calendar events created/modified.

10) SECURITY; COMPLIANCE STATEMENTS

10.1 CASA Tier 2. TOA has completed Cloud Application Security Assessment (CASA) Tier 2 verification. TOTC maintains this verification on the renewal cycle required by Google.

10.2 No absolute security guarantee. While TOTC maintains safeguards designed to protect data, no system can guarantee absolute security. You acknowledge and accept the inherent risk of online services.

10.3 Your security obligations. You are responsible for maintaining secure devices, strong passwords, and appropriate account controls.

10.4 Security incident notification. If TOTC becomes aware of a security incident that TOTC reasonably determines has resulted in the unauthorized access to, acquisition of, disclosure of, or destruction of your User Content, TOTC will notify you without unreasonable delay and within the time required by applicable law. Notice will be sent to the email address associated with your account or, for organizational accounts, to the designated administrator, and will describe the nature of the incident, the categories of data involved, the steps TOTC has taken or is taking in response, and any recommended actions on your part, to the extent that information is known at the time of notice. TOTC may delay notice where a law enforcement agency determines that notice would impede a criminal investigation, or where delay is necessary to restore the integrity of affected systems. TOTC’s notification under this Section is not an acknowledgment of fault or liability. You are responsible for notifying your own clients, employees, or other affected individuals where your own legal obligations require it.

11) VOICE DICTATION (IF ENABLED BY YOU)

11.1 Optional feature. TOA may offer voice dictation functionality only when you activate it. Voice dictation is intended to convert your speech into text for your use within TOA.

11.2 Permissions. If you enable dictation, you authorize TOA to access your device microphone to process audio input for dictation while the feature is active, subject to your device/OS permission settings.

11.3 No always-on voice engine. TOA does not provide an always-on "voice engine" under this Agreement; dictation operates only when activated by you.

11.4 Privacy and handling. Any collection, processing, retention (if any), and sharing of dictation-related data is governed by TOTC's privacy policy and your settings.

12) PRIVACY; DATA USE

12.1 Privacy policy. TOA's collection and use of personal data is governed by TOTC's privacy policy: https://www.usetoa.com/privacy-policy

12.2 Telemetry and diagnostics. TOA may collect technical data (e.g., device/browser info, logs, diagnostics, performance metrics) to provide the service, support, security, and improvements, consistent with the privacy policy and applicable law.

12.3 Session data retention and scheduled purge. TOA holds session data – the transient working context TOA assembles to carry out your requests, including cached message text, attachment and connected-file content pulled in for context, prompt and response records, and associated temporary artifacts – only for as long as needed to complete the requested action and to maintain your active working session. Session data is ordinarily released as each session closes. In addition, and as a safeguard against failure of that ordinary process, TOTC runs a scheduled purge that automatically and permanently deletes session data that is no longer associated with an active session. AI conversation records are automatically and permanently deleted once they exceed thirty (30) days of age, by a pruning job that runs on a daily cycle; because that job runs on a fixed schedule rather than continuously, an individual record may persist for a short period past the thirty-day mark before it is removed. Expired authentication tokens are pruned on an hourly cycle. These purges operate as a full clear of the affected data rather than an archival step. TOTC may adjust the timing of a given purge run to accommodate maintenance, incident response, or legal-hold obligations, but does not retain session data beyond the period reasonably necessary for the purposes described in this Section. This purge is a backstop control and is not a substitute for your own recordkeeping: TOTC does not warrant that session data will remain available or recoverable, and you should not rely on TOA as a system of record. Records that TOTC is required to keep for billing, security, audit, or legal-compliance purposes, and data held within your connected Third-Party Services, are governed by the privacy policy and by those services’ own retention terms rather than by this Section.

13) INTELLECTUAL PROPERTY

13.1 TOTC ownership. TOA and all related intellectual property are owned by TOTC and its licensors. No rights are granted except as expressly stated.

13.2 Feedback. If you submit suggestions or feedback, you grant TOTC a non-exclusive, worldwide, royalty-free license to use, reproduce, modify, distribute, and otherwise exploit that feedback for any purpose without compensation.

14) WARRANTIES; DISCLAIMERS

14.1 As-is / as-available. TOA is provided "AS IS" and "AS AVAILABLE." To the maximum extent permitted by law, TOTC disclaims all warranties, whether express, implied, or statutory, including implied warranties of merchantability, fitness for a particular purpose, title, and non-infringement.

14.2 No uninterrupted service. TOTC does not warrant that TOA will be uninterrupted, error-free, or compatible with all devices, browsers, networks, or Third-Party Services.

15) LIMITATION OF LIABILITY

15.1 No indirect damages. To the maximum extent permitted by law, TOTC will not be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, including loss of profits, loss of business, loss of data, or business interruption.

15.2 Liability cap. To the maximum extent permitted by law, TOTC’s total liability arising out of or related to TOA or this Agreement will not exceed the amount paid by you to TOTC for the Subscription in the twelve (12) months preceding the event giving rise to the claim, or $100, whichever is greater.

15.3 Generated Output and user actions. TOTC is not liable for decisions, actions, or outcomes resulting from your use of Generated Output, including emails sent, attachments transmitted, calendar events created/modified, or reliance on recommendations.

16) INDEMNIFICATION

You agree to indemnify, defend, and hold harmless TOTC and its officers, directors, employees, contractors, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable attorneys’ fees) arising out of or related to:

your use of TOA;

your User Content;

communications sent through TOA (including emails and attachments);

your violation of this Agreement, applicable law, or Third-Party Services terms.

17) SUSPENSION; TERMINATION

17.1 Suspension. TOTC may suspend or restrict access to TOA immediately if TOTC reasonably believes you have violated this Agreement, pose a security risk, or your use is harmful to TOA, TOTC, other users, or third parties.

17.2 Termination by you. You may terminate by canceling your Subscription and ceasing use of TOA.

17.3 Termination by TOTC. TOTC may terminate this Agreement and your access to TOA for continued or material breaches, non-payment, legal compliance reasons, or as otherwise permitted by law.

17.4 Effect of termination. Upon termination, your right to access TOA ends. Sections that by their nature should survive will survive (including IP, disclaimers, limitation of liability, indemnification, and governing law).

17.5 Data deletion following termination. Deleting your account is permanent and irreversible. On deletion, all User Content associated with your account – including task records, contact records, AI conversation records, cached message and file content, and profile information – is destroyed, and TOTC cannot restore, reproduce, or provide it afterward. While your account is active, you may request a copy of the User Content TOTC holds about you by contacting TOTC using the details in the Contact Information Section. Contact records are available through self-service export; task records, which are stored encrypted, are not, but TOTC will decrypt and provide them in response to a verified request from the account holder. You are responsible for exporting or requesting anything you wish to keep before you delete your account or let your Subscription lapse. After deletion, the only information TOTC can provide is the billing and transaction data held by our payment processor, which TOTC retains, together with records required to meet legal, tax, audit, or claims-defense obligations and aggregated or de-identified data, as described in the privacy policy. Disconnecting a Third-Party Service or closing your account does not delete data held within that Third-Party Service, which remains governed by that provider’s terms. This Section does not limit any right you may have under applicable privacy law to request access to, or deletion of, your personal data; such requests are handled as described in the privacy policy and satisfied using the information then available to TOTC.

18) LEGAL COMPLIANCE; EXPORT CONTROLS

You represent that you are not located in a country subject to U.S. embargo or designated by the U.S. government as supporting terrorism, and you are not listed on any U.S. government restricted-party list.

19) GOVERNING LAW; VENUE

This Agreement is governed by the laws of the State of Texas, excluding conflict-of-law rules. You agree that disputes will be brought in courts located in Texas unless mandatory law provides otherwise.

20) CONTACT INFORMATION

That One Tech Company

14800 Quorum Dr, Suite 415

Addison, TX 75254

United States

support@thatoneassistant.com

21) CHANGES TO THIS AGREEMENT

TOTC may update this Agreement from time to time. Continued use of TOA after an update becomes effective constitutes acceptance to the extent permitted by law. If you do not agree, you must stop using TOA.

22) MISCELLANEOUS

22.1 Entire agreement. This Agreement is the entire agreement regarding TOA and supersedes prior agreements or communications about TOA, except for any separate written order form, DPA, or enterprise agreement signed by TOTC.

22.2 Severability. If any provision is held invalid or unenforceable, the remainder remains in effect, and the invalid provision will be replaced with a valid one that most closely reflects the original intent.

22.3 No waiver. Failure to enforce any provision is not a waiver of future enforcement.

22.4 Assignment. You may not assign this Agreement without TOTC's prior written consent. TOTC may assign this Agreement as part of a merger, acquisition, restructuring, or sale of assets.

22.5 Headings. Headings are for convenience only and do not affect interpretation.