Customer Agreement & Terms of Service

Effective May 1, 2026

Welcome to the Cobble Network, a sustainable inference provider.

These Terms of Service ("Terms") govern your access to and use of the websites, application programming interfaces ("APIs"), software, dashboards, inference endpoints, hosted models, and other products and services (collectively, the "Services") provided by Cobble Network, Inc. ("Cobble," "we," "our," or "us").

These Terms constitute a legally binding agreement between you and Cobble Network, Inc. (d/b/a Cobble). References to "you," "your," or the "Customer" refer to the person or entity agreeing to these Terms.

By creating an account, accessing, or using the Services, you acknowledge that you have read, understood, and agree to be bound by these Terms, together with our Privacy Policy, Acceptable Use Policy, and any other policies incorporated by reference.

If you do not agree to these Terms, you may not access or use the Services.

1. Who We Are

Cobble is an artificial intelligence infrastructure company focused on making AI inference accessible, affordable, and sustainable.

Our platform enables developers, businesses, researchers, and organizations to access state-of-the-art open-source and proprietary AI models through scalable APIs, dedicated deployments, model routing, and managed inference infrastructure.

Our mission is to democratize artificial intelligence by giving developers and communities access to powerful, privacy-conscious AI infrastructure while supporting open models, local deployment, and responsible innovation.

2. Registration and Eligibility

2.1 Minimum Age

You must be at least eighteen (18) years of age to create an account or use the Services.

If you are using the Services on behalf of a business, governmental entity, educational institution, or other organization, you represent and warrant that you have the authority to bind that organization to these Terms.

2.2 Account Registration

To access certain Services, you must register for an account. You agree to:

• provide accurate and complete registration information;
• maintain the accuracy of your information;
• protect your passwords, API keys, and authentication credentials;
• promptly notify us of any unauthorized access or security incident; and
• accept responsibility for all activity occurring under your account.

You may not share your account credentials in a manner that circumvents licensing, subscription, or security restrictions.

3. Using the Services

3.1 Permitted Use

Subject to your compliance with these Terms, you may access and use the Services for lawful personal, commercial, academic, governmental, and research purposes.

You agree to comply with:

• these Terms;
• our Acceptable Use Policy;
• applicable model licenses;
• applicable export control laws;
• privacy and data protection laws; and
• all other applicable laws and regulations.

You are responsible for all activity conducted through your account, API keys, agents, applications, downstream services, employees, contractors, and end users.

3.2 Prohibited Uses

You may not use the Services to:

• violate any law or regulation;
• infringe another person's intellectual property or privacy rights;
• distribute malware or malicious software;
• perform unauthorized penetration testing;
• interfere with or disrupt the Services;
• circumvent rate limits, billing systems, or authentication mechanisms;
• gain unauthorized access to other customer resources;
• scrape or harvest data beyond authorized usage;
• use stolen payment methods or fraudulently obtain Services;
• misrepresent AI-generated content as human-generated where doing so would be deceptive or unlawful; or
• use the Services in violation of our Acceptable Use Policy.

You may not attempt to reverse engineer, decompile, disassemble, extract, or otherwise discover the non-public architecture, infrastructure, algorithms, or software underlying the Services, except where such restrictions are prohibited by applicable law.

Violations of these Terms or the Acceptable Use Policy may result in immediate suspension or permanent termination of access to the Services without refund or liability.

3.3 Software

Certain Services may include downloadable software, SDKs, command-line tools, desktop applications, mobile applications, or other client software. These applications may automatically update to improve security, reliability, and compatibility.

Some software distributed by Cobble incorporates open-source software governed by separate license terms. Those licenses continue to apply to the applicable open-source components.

3.4 Organization and Enterprise Accounts

If you register using an email address owned or managed by an organization, or if your organization purchases Services on your behalf, your account may become associated with that organization's Cobble account.

Where applicable, organization administrators may have the ability to:

• manage your account;
• provision or revoke access;
• review billing information;
• access logs and administrative metadata;
• manage API keys and organizational resources; and
• enforce organizational security policies.

Where required, Cobble will provide notice before transferring an individual account into an organization-managed account.

4. Third-Party Models, Services & Content

The Services may provide access to:

• open-source and proprietary AI models;
• third-party APIs and cloud infrastructure;
• external websites and services;
• datasets; and
• other content not owned or controlled by Cobble

(collectively, "Third-Party Services," and such materials, "Third-Party Content").

Use of Third-Party Services and Third-Party Content is governed by the terms, licenses, and policies of the applicable third parties. Outputs generated using Third-Party Services ("Third-Party Outputs") remain subject to any applicable licenses, usage restrictions, or terms established by the third-party provider.

Cobble does not own, control, or guarantee the availability, accuracy, legality, performance, or continued operation of Third-Party Services or Third-Party Content and is not responsible for their content, availability, licensing, or reliability. Access to Third-Party Content is provided solely as a convenience and does not imply sponsorship, endorsement, or affiliation.

Your use of Third-Party Content is entirely at your own risk.

5. Feedback

We welcome suggestions, feature requests, bug reports, and other feedback regarding the Services.

If you submit feedback to Cobble, you grant Cobble a worldwide, perpetual, irrevocable, royalty-free license to use, modify, incorporate, publish, and otherwise exploit that feedback for any lawful purpose without compensation or obligation to you.

Providing feedback does not grant you any ownership interest in Cobble or its Services, including any improvements or features developed using your suggestions.

6. Training & Use of Customer Data

6.1 Default Non-Training Policy

Cobble will not use Customer Inputs, Outputs, prompts, files, datasets, conversations, API traffic, metadata, or other Customer Content to train, fine-tune, distill, retrain, benchmark, improve, or otherwise modify any machine learning or artificial intelligence models by default. Customer Content remains isolated from all generalized model training pipelines unless the Customer expressly opts in through a separate written agreement or affirmative account setting.

6.2 Opt-In Requirement

Any use of Customer Content for model training, fine-tuning, reinforcement learning, evaluation, synthetic data generation, or model improvement purposes shall require the Customer's explicit and informed opt-in consent. Silence, inactivity, or continued use of the Services shall not constitute consent. Cobble will maintain records of such consent and provide Customers with a mechanism to revoke participation at any time, subject to reasonable processing timelines.

6.3 Scope of Authorized Use

Where a Customer affirmatively opts in, Cobble may use only the categories of Customer Content specifically authorized by the Customer for the limited purposes disclosed at the time of consent. Unless otherwise agreed in writing:

• Customer data will not be sold or licensed to third parties for training purposes;
• personally identifiable information and confidential business information will not intentionally be incorporated into publicly accessible foundation models; and
• Cobble will implement commercially reasonable safeguards intended to minimize memorization, leakage, or unauthorized disclosure of Customer Content.

6.4 Revocation of Consent

Customers who previously opted in may withdraw consent for future training use by written notice or account-level settings where available. Upon revocation, Cobble will cease using newly submitted Customer Content for training purposes on a prospective basis. Revocation shall not require deletion or retraining of models already trained using previously authorized data unless otherwise required by law or separately agreed in writing.

6.5 Operational & Safety Exceptions

Notwithstanding the foregoing, Cobble may process Customer Content as necessary to:

• provide, maintain, secure, and monitor the Services;
• detect abuse, fraud, security incidents, or violations of applicable policies;
• generate transient outputs requested by the Customer;
• produce aggregated and anonymized operational analytics that do not identify the Customer or disclose Customer Confidential Information; and
• comply with legal obligations or lawful governmental requests.

6.6 Subprocessors & Infrastructure Providers

Cobble may utilize subprocessors, hosting providers, inference providers, or infrastructure vendors to process Customer Content solely for the purpose of delivering the Services. Such subprocessors shall be contractually obligated to maintain confidentiality and data protection obligations substantially similar to those contained herein.

6.7 Enterprise Isolation

For enterprise or dedicated deployments, Customer Content may be processed within logically or physically isolated infrastructure environments and excluded from all shared telemetry, analytics, and improvement systems, subject to the terms of the applicable Order Form or Enterprise Agreement.

6.8 No Ownership Transfer

Except for the limited rights necessary to provide the Services, Customer retains all right, title, and interest in and to Customer Content. Nothing in this Agreement grants Cobble ownership rights in Customer Content or Customer intellectual property.

7. Data Retention & Ephemeral Processing

7.1 Default Minimal Retention Policy

Cobble is designed around a zero-retention or near-zero-retention inference model by default. Unless otherwise expressly agreed in writing or enabled by the Customer, Cobble does not permanently store Customer Inputs, Outputs, prompts, uploaded files, embeddings, completions, or conversational content submitted through the Services for the purpose of providing standard inference operations; Customer Inputs and Outputs are processed ephemerally and are not persistently stored after request completion.

7.2 In-Memory & Ephemeral Processing

During standard inference operations:

• requests are processed primarily in volatile memory (RAM);
• Inputs and Outputs are temporarily buffered only for the duration necessary to complete the request; and
• Customer Content is deleted or released from active processing memory after request completion, subject to normal system garbage collection, cache eviction, and infrastructure lifecycle behavior.

Customer Content may be temporarily processed and transiently buffered in memory, queues, caches, or short-lived logging systems solely as necessary to:

• generate requested model outputs;
• route inference requests;
• maintain service reliability and uptime;
• detect and mitigate abuse, fraud, denial-of-service attacks, or security incidents; and
• complete asynchronous or batch inference jobs initiated by the Customer.

Such transient processing is limited in duration and scope to what is commercially reasonable and operationally necessary to deliver the Services. Cobble does not intentionally persist Customer prompts, completions, or uploaded content to long-term storage systems by default for standard API inference requests.

7.3 Temporary Operational Buffers; Queue & Batch Retention Exception

Limited short-duration retention may occur in transient operational systems necessary to provide the Services, including request queues, streaming buffers, retry systems, load balancers, distributed orchestration systems, abuse detection systems, and ephemeral logging infrastructure.

For queued, streaming, batched, asynchronous, or distributed inference workloads, Customer Content may be temporarily retained for the minimum period reasonably necessary to:

• complete pending jobs;
• retry failed requests;
• ensure delivery integrity;
• synchronize distributed processing systems;
• prevent abuse or fraud;
• maintain system integrity and availability; and
• troubleshoot active service failures.

Unless a longer retention period is required by law, customer configuration, or explicit written agreement, such temporarily retained content shall be automatically purged according to Cobble's internal data lifecycle policies.

7.4 Abuse Monitoring & Security Logging

By default, Cobble seeks to minimize content-level logging. Cobble may retain limited metadata and narrowly scoped operational logs for a short duration for purposes of:

• detecting abuse, spam, fraud, or malicious usage;
• enforcing rate limits and platform policies;
• investigating security incidents; and
• protecting the integrity and availability of the Services.

Operational logs may include limited metadata such as timestamps, request identifiers, token counts, model identifiers, routing metadata, error codes, rate limit information, and infrastructure telemetry. To the extent commercially reasonable, such logs will avoid storing full Customer Content and instead prioritize metadata, token counts, timestamps, routing information, or truncated request fragments necessary for security and operational review.

7.5 No Default Training Retention

Except where a Customer has separately and explicitly opted in pursuant to Section 6 (Training & Use of Customer Data), Customer Content processed through standard inference endpoints will not be retained for model training, fine-tuning, distillation, reinforcement learning, benchmarking, dataset creation, or generalized model improvement purposes.

7.6 Customer-Controlled Persistence Features

Where the Services include optional persistence features — such as conversation history, saved generations, workflow history, datasets, fine-tuning uploads, analytics dashboards, batch-processing archives, or user-configured logging and observability tools — such retention shall occur only at the Customer's direction or configuration and shall remain subject to the Customer's account settings, the applicable feature configuration, associated documentation, and applicable retention controls.

7.7 Third-Party Infrastructure Providers

Cobble may utilize third-party infrastructure, cloud, inference, routing, storage, or acceleration providers in connection with delivering the Services. Cobble will use commercially reasonable efforts to select providers whose retention, privacy, and technical handling practices are materially consistent with Cobble's stated minimal-retention and ephemeral-processing policies, including providers offering zero data retention or equivalent controls where available. However, infrastructure behavior may vary between providers, and Cobble does not guarantee identical retention practices across all third-party systems.

7.8 No Guarantee of Absolute Deletion

While Cobble designs its systems around minimal retention and ephemeral processing principles, the Customer acknowledges that no distributed computing system can guarantee instantaneous or absolute deletion from every transient system component, including:

• memory snapshots;
• failover systems;
• security systems;
• crash dumps;
• network-layer caching; and
• provider-controlled infrastructure outside Cobble's direct control.

Accordingly, all Services are provided subject to the limitations inherent in modern distributed cloud and inference infrastructure.

7.9 Legal Compliance Exception

Nothing in this section shall prohibit Cobble from preserving information where required to comply with applicable law, lawful governmental requests, court orders, regulatory obligations, or legitimate preservation duties arising from disputes, investigations, or security incidents.

8. Ownership of Inputs & Outputs

8.1 Customer Ownership of Inputs

Cobble acknowledges and agrees that, as between the parties, the Customer retains all right, title, and interest in and to all prompts, inputs, files, datasets, configurations, instructions, API requests, and other content submitted to the Services by or on behalf of the Customer ("Inputs"). Cobble acquires no ownership rights in Customer Inputs except for the limited rights necessary to provide, maintain, and secure the Services pursuant to this Agreement.

8.2 Rights to Outputs

Subject to the Customer's compliance with this Agreement and applicable law, Cobble assigns to the Customer any rights Cobble may have, if any, in the model-generated responses, completions, generations, analyses, images, embeddings, audio, code, or other outputs returned through the Services ("Outputs"). The Customer is solely responsible for reviewing, validating, and determining the appropriateness of any Outputs for its intended use.

8.3 Non-Exclusivity of Outputs

Due to the probabilistic nature of machine learning systems, Outputs generated for the Customer may be similar or identical to outputs generated for other users or customers. Cobble does not represent or warrant that Outputs will be unique, original, or exclusively generated for the Customer.

8.4 No Warranty Regarding Outputs

Outputs are generated by automated systems and may contain inaccuracies, hallucinations, biases, omissions, infringing material, or otherwise unsuitable content. Cobble makes no representations or warranties, express or implied, regarding:

• the accuracy, reliability, legality, or completeness of Outputs;
• the merchantability, fitness for a particular purpose, or non-infringement of Outputs;
• whether Outputs violate or misappropriate intellectual property, privacy, publicity, contractual, or other third-party rights; or
• the Customer's ability to claim ownership, copyright protection, trademark rights, or other intellectual property rights in Outputs.

All Outputs are provided "AS IS" and "AS AVAILABLE."

8.5 Customer Responsibility for Use of Outputs

The Customer assumes all responsibility and liability for:

• reviewing and validating Outputs before use or distribution;
• determining whether Outputs are appropriate for commercial, legal, medical, financial, safety-critical, or public-facing purposes;
• ensuring compliance with applicable laws, regulations, and third-party rights; and
• conducting any necessary intellectual property clearance, human review, or editorial oversight prior to publication or deployment.

8.6 Third-Party Model Providers

Certain Services may utilize third-party models, APIs, or inference providers. Customer use of such models may additionally be subject to the applicable third-party provider's terms, limitations, or intellectual property policies. Cobble disclaims responsibility for claims arising from the conduct, outputs, or restrictions of third-party model providers.

9. Disclaimer of Warranties

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, THE SERVICES, INCLUDING ALL MODELS, APIS, SOFTWARE, DOCUMENTATION, OUTPUTS, AND RELATED MATERIALS, ARE PROVIDED "AS IS" AND "AS AVAILABLE."

COBBLE AND ITS SUPPLIERS, LICENSORS, AND PARTNERS DISCLAIM ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING:

• MERCHANTABILITY;
• FITNESS FOR A PARTICULAR PURPOSE;
• TITLE;
• NON-INFRINGEMENT;
• ACCURACY;
• RELIABILITY;
• SECURITY; AND
• UNINTERRUPTED AVAILABILITY.

Cobble does not warrant that:

• the Services will be error-free or uninterrupted;
• Outputs will be accurate, complete, or suitable for any purpose;
• defects will be corrected; or
• the Services will be free of viruses or harmful components.

AI-generated outputs are probabilistic and may contain errors, omissions, biases, or inaccurate information. You are solely responsible for reviewing and validating all outputs before relying on them.

10. Limitation of Liability

10.1 Exclusion of Indirect Damages

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, COBBLE AND ITS AFFILIATES, OFFICERS, DIRECTORS, EMPLOYEES, CONTRACTORS, LICENSORS, SUPPLIERS, AND SERVICE PROVIDERS SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, EXEMPLARY, OR PUNITIVE DAMAGES, INCLUDING BUT NOT LIMITED TO DAMAGES FOR LOST PROFITS, LOST REVENUES, LOST BUSINESS OPPORTUNITIES, LOSS OF GOODWILL, LOSS OF REPUTATION, LOSS OF DATA, BUSINESS INTERRUPTION, PROCUREMENT OF SUBSTITUTE SERVICES, OR OTHER INTANGIBLE LOSSES ARISING OUT OF OR RELATED TO THE SERVICES, AI OUTPUTS, OR THIS AGREEMENT, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

10.2 Aggregate Liability Cap

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, COBBLE'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE SERVICES, THIS AGREEMENT, OR THE CUSTOMER'S USE OF THE SERVICES SHALL NOT EXCEED THE GREATER OF:

1. THE TOTAL AMOUNTS PAID BY THE CUSTOMER TO COBBLE FOR THE APPLICABLE SERVICES DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT GIVING RISE TO THE CLAIM; OR
2. ONE HUNDRED U.S. DOLLARS (USD $100).

This limitation applies regardless of the form of action, whether in contract, tort, strict liability, negligence, statute, or otherwise, and even if any remedy fails of its essential purpose.

10.3 Scope of Limitation

The limitations and exclusions set forth in this section apply to all claims, damages, losses, liabilities, costs, and expenses arising from or related to:

• use of or inability to use the Services;
• AI-generated Outputs;
• data loss or corruption;
• security incidents or unauthorized access;
• third-party services, infrastructure providers, or model providers;
• errors, interruptions, delays, or outages;
• alleged intellectual property infringement relating to Outputs; and
• Customer reliance on generated content or automated decisions.

10.4 Essential Basis of the Bargain

The Customer acknowledges that the pricing of the Services reflects the allocation of risk set forth in this Agreement and that Cobble would not provide the Services on the same terms absent these limitations of liability.

10.5 Exceptions

Nothing in this Agreement shall exclude or limit liability to the extent such limitation is prohibited by applicable law, including liability for:

• fraud or fraudulent misrepresentation;
• willful misconduct;
• death or personal injury caused by gross negligence where non-waivable by law; and
• any liability that cannot legally be excluded or limited under applicable law.

Some jurisdictions do not allow certain exclusions or limitations, so portions of this section may not apply to you.

10.6 Customer Responsibility for High-Risk Uses

The Customer agrees not to use the Services in connection with any application or activity where failure, error, hallucination, delay, or inaccuracy could reasonably be expected to result in death, bodily injury, environmental damage, financial harm, or significant legal liability without implementing appropriate human oversight and independent safeguards. Cobble disclaims liability arising from any such high-risk use.

11. Indemnification

You agree to defend, indemnify, and hold harmless Cobble and its affiliates, officers, directors, employees, contractors, licensors, suppliers, agents, infrastructure providers, and model providers (the "Cobble Indemnified Parties") from and against any third-party claims, damages, liabilities, judgments, settlements, penalties, investigations, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or related to:

• your use of the Services;
• your Inputs, datasets, Outputs, or other content, including your use, publication, commercialization, modification, or distribution of Outputs;
• your violation of these Terms, any incorporated policy, or any applicable Model License;
• your violation of applicable laws or regulations;
• your infringement or misappropriation of any third-party rights;
• unauthorized voice cloning, unauthorized likeness generation, deepfakes, or impersonation content, or violations of publicity, privacy, or biometric rights;
• biometric data processed through the Services, including alleged violations of the Illinois Biometric Information Privacy Act ("BIPA") or similar biometric laws, or failure to obtain legally sufficient consent or notice;
• submission or processing of consumer health data or protected health information ("PHI"), alleged violations of health privacy laws (including HIPAA), failure to execute a required Business Associate Agreement, or healthcare-related deployments conducted without Cobble's written authorization.

This indemnification obligation does not apply to the extent a claim arises solely from Cobble's gross negligence or willful misconduct.

Cobble will:

• provide reasonable notice of any claim;
• permit you to control the defense and settlement of the claim, subject to Cobble's right to participate with counsel at its own expense; and
• provide reasonable cooperation at your expense.

You may not settle any claim in a manner that imposes liability or obligations on Cobble without Cobble's prior written consent, which will not be unreasonably withheld.

12. Dispute Resolution; Binding Arbitration; Class Action Waiver

12.1 Agreement to Arbitrate

To the maximum extent permitted by applicable law, the Customer and Cobble agree that any dispute, claim, or controversy arising out of or relating to the Services, this Agreement, AI Outputs, billing, privacy, data practices, or the relationship between the parties (collectively, "Disputes") shall be resolved exclusively through final and binding arbitration, except as otherwise expressly provided herein.

This arbitration agreement shall be governed by the Federal Arbitration Act ("FAA") and applies regardless of whether the Dispute is based in contract, tort, statute, fraud, misrepresentation, or any other legal theory.

12.2 Informal Resolution Requirement

Prior to initiating arbitration, either party shall provide written notice of the Dispute to the other party and engage in a good-faith effort to resolve the matter informally for a period of at least thirty (30) days. Notices to Cobble shall be sent to the contact address designated in this Agreement or on the Cobble website.

12.3 Arbitration Rules & Administration

Any arbitration shall be administered by the American Arbitration Association ("AAA") in accordance with its applicable Commercial Arbitration Rules or Consumer Arbitration Rules, as applicable, including any expedited procedures then in effect, except as modified by this Agreement.

The arbitration shall be conducted:

• by a single arbitrator;
• in the English language;
• confidentially to the extent permitted by law; and
• with the seat and venue of arbitration located in the Commonwealth of Kentucky, United States.

Unless otherwise required by applicable law or mutually agreed by the parties, arbitration hearings may be conducted remotely by video conference, telephone, or written submissions.

12.4 Class Action Waiver

To the fullest extent permitted by law, the parties agree that:

• all Disputes shall be brought solely in an individual capacity and not as a plaintiff or class member in any purported class, collective, consolidated, coordinated, representative, or private attorney general proceeding;
• the arbitrator shall have no authority to consolidate claims or preside over any class or representative proceeding; and
• the Customer waives any right to participate in a class action, collective action, mass arbitration, or representative proceeding against Cobble.

If any portion of this class action waiver is determined to be unenforceable as to a particular claim or remedy, then that claim or remedy shall proceed in court and not in arbitration, while the remainder of this arbitration provision shall remain enforceable.

12.5 Small Claims Carve-Out

Either party may bring an individual claim in a court of competent jurisdiction for qualifying small claims matters, provided the claim remains on an individual basis and does not seek class or representative relief.

12.6 Intellectual Property & Injunctive Relief Carve-Out

Notwithstanding the foregoing arbitration requirements, either party may seek temporary, preliminary, or permanent injunctive or equitable relief in a court of competent jurisdiction to:

• protect intellectual property rights;
• prevent unauthorized access to the Services;
• prevent misuse of confidential information or trade secrets; or
• enforce usage restrictions, acceptable use policies, or platform security protections.

Such claims shall not waive the right to arbitrate any related claims for damages.

12.7 Governing Law & Venue

This Agreement and any Disputes arising out of or relating to the Services shall be governed by and construed in accordance with the laws of the Commonwealth of Kentucky, without regard to conflict of law principles.

For any matter permitted to proceed in court rather than arbitration, the parties consent to the exclusive jurisdiction and venue of the state and federal courts located in Pulaski County, Kentucky, and waive any objection based on inconvenient forum or lack of personal jurisdiction.

13. Third-Party Model Licenses & Flow-Through Terms

Cobble may provide access to, route requests through, host, fine-tune, or otherwise enable the use of third-party large language models, multimodal systems, embeddings models, rerankers, audio models, or related machine learning technologies developed and licensed by third parties ("Third-Party Models").

The Customer acknowledges and agrees that use of such Third-Party Models may be subject to additional license terms, usage restrictions, acceptable use policies, attribution obligations, export controls, and other requirements imposed by the applicable model creators, licensors, or distributors ("Model Licenses").

13.1 Flow-Through Acceptance Requirement

By accessing or using any Third-Party Model through the Services, the Customer:

• agrees to comply with all applicable Model Licenses, usage restrictions, upstream provider policies, and safety requirements;
• accepts that such licenses are incorporated into this Agreement by reference;
• acknowledges that eligibility restrictions, prohibited use categories, geographic restrictions, and redistribution limitations imposed by model licensors remain binding upon the Customer; and
• agrees that violation of an applicable Model License constitutes a violation of this Agreement.

Where multiple restrictions apply, the stricter restriction shall control. Cobble may require affirmative acceptance of certain Model Licenses before enabling access to specific models or endpoints.

13.2 Representative Third-Party Model Licenses

The following list is representative and non-exhaustive. Additional model providers and licenses may apply depending on the Services utilized by the Customer.

• Meta Llama Models — Meta Llama Community License; Meta Acceptable Use Policy
• Alibaba Qwen Models — Qwen License & Terms
• DeepSeek Models — DeepSeek Model Terms
• Mistral Models — Mistral AI Terms of Service; Mistral Model Licenses
• Zhipu GLM Models — Zhipu GLM Terms & Licenses
• Stability AI Models — Stability AI Community License
• Google Gemma Models — Gemma Terms of Use
• Microsoft Phi Models — Microsoft Phi License Terms
• Allen Institute OLMo Models — OLMo License Information
• Databricks DBRX Models — DBRX License Information

13.3 Dynamic & Updated Licenses

Because model providers may update, replace, revoke, or modify their license terms from time to time:

• Cobble reserves the right to update the applicable list of Model Licenses without separately amending this Agreement;
• the Customer is responsible for reviewing the then-current license terms applicable to the models they use; and
• continued use of a Third-Party Model after updated license terms become effective constitutes acceptance of such updated terms.

13.4 No Warranty Regarding Third-Party Models

Cobble does not own or control most Third-Party Models made available through the Services and makes no representations or warranties regarding:

• availability, legality, or continued licensing of any model;
• accuracy, safety, or suitability of model outputs;
• compliance of any model with applicable laws or regulations; or
• whether a model's license terms are enforceable, compatible with Customer use cases, or appropriate for Customer operations.

All Third-Party Models are provided "AS IS" and subject to availability and the applicable Model Licenses.

13.5 Suspension & Compliance Enforcement

Cobble reserves the right to suspend, restrict, or terminate access to any model, endpoint, or Service where:

• required by an applicable Model License;
• necessary to comply with legal obligations;
• a Customer violates an applicable Model License or usage restriction; or
• continued access could expose Cobble, its providers, or other users to legal, regulatory, operational, or reputational risk.

13.6 California AB 2013 Disclosure Position

To the extent applicable, Cobble's position is that:

• Cobble does not develop, pretrain, or originate the foundational weights, training corpora, or core architectures of most Third-Party Models offered through the Services;
• Cobble generally does not determine or control the underlying datasets used to train such Third-Party Models; and
• Cobble therefore may not possess the information necessary to independently generate comprehensive training-data disclosures for such models.

Accordingly, training-data summaries, provenance disclosures, copyrighted-material disclosures, and related transparency documentation are the responsibility of the applicable model developer, publisher, or licensor.

13.7 Reliance Upon Upstream Developer Disclosures

Where available, Cobble may provide links to publicly available documentation, model cards, licenses, transparency statements, system cards, or statutory disclosures published by upstream model developers, including disclosures that may relate to:

• California Assembly Bill 2013 ("AB 2013");
• training-data transparency obligations;
• safety testing disclosures;
• copyright or provenance reporting;
• usage restrictions; and
• benchmarking or evaluation reports.

Representative upstream developers may include:

• Meta Llama Models — Meta Llama Documentation
• Alibaba Qwen Models — Qwen Documentation & Model Information
• DeepSeek Models — DeepSeek Documentation
• Mistral Models — Mistral Documentation
• Google Gemma Models — Google Gemma Documentation
• Microsoft Phi Models — Microsoft Phi Model Collection
• Allen Institute OLMo Models — OLMo Project Documentation
• Stability AI Models — Stability AI Documentation

13.8 No Independent Verification

Cobble does not independently verify the accuracy, completeness, legality, sufficiency, or regulatory compliance of disclosures made by third-party model developers and disclaims responsibility for:

• the content of upstream disclosures;
• the adequacy of training-data summaries;
• whether upstream disclosures satisfy applicable legal requirements; and
• omissions, inaccuracies, or outdated information provided by third-party developers.

13.9 No Representation of Regulatory Compliance

Cobble makes no representation or warranty that:

• any Third-Party Model complies with California AB 2013 or any other artificial intelligence law or regulation;
• any upstream developer has fulfilled its statutory obligations; or
• any linked disclosure is complete, current, or legally sufficient.

Customers are solely responsible for conducting their own legal and compliance review before deploying or relying upon any Third-Party Model in production or regulated environments.

13.10 Future Model Development

If Cobble develops proprietary foundation models, fine-tuned systems, or internally trained generative AI systems in the future, Cobble reserves the right to publish separate disclosures, model cards, transparency reports, or statutory notices applicable to those proprietary systems.

14. Geographic Eligibility & Territory Restrictions

Cobble is intended solely for use by persons and entities located within the United States of America and authorized U.S. territories. The Services are not offered to, directed toward, or intended for users located in the European Union ("EU"), European Economic Area ("EEA"), United Kingdom ("UK"), or other restricted jurisdictions designated by Cobble from time to time.

14.1 U.S.-Only Access Restrictions

Cobble enforces its U.S.-only availability policy through technical, contractual, and operational measures, including but not limited to the following:

(a) Technical Geoblocking & Access Controls. Cobble may implement IP geolocation restrictions, API authentication controls, VPN detection systems, fraud prevention systems, payment verification checks, account monitoring, and related technical safeguards designed to restrict access from prohibited jurisdictions. Such restrictions may apply during:

• account creation and signup;
• authentication and login;
• API key issuance;
• API request validation;
• billing verification; and
• ongoing service usage monitoring.

Cobble reserves the right to suspend, deny, throttle, or terminate access where it reasonably believes a user is attempting to circumvent territorial restrictions.

(b) Customer Representation & Warranty. By accessing or using the Services, the Customer represents, warrants, and covenants that:

• the Customer is physically located in the United States;
• the Customer is not established, incorporated, resident, or operating in the EU, EEA, or UK;
• the Customer is not using the Services on behalf of any person or entity located within prohibited territories;
• the Customer will not permit access to the Services from restricted jurisdictions; and
• the Customer will not use VPNs, proxies, relays, or other technologies to evade geographic restrictions.

The Customer further represents that it is solely responsible for ensuring its own compliance with all applicable local laws and regulations.

14.2 Downstream & Pass-Through Restrictions

The Customer shall not:

• route, relay, proxy, sublicense, resell, or otherwise make the Services available to any person or entity located in a prohibited jurisdiction;
• submit, process, transmit, store, or infer upon data belonging to individuals or entities located in the EU, EEA, or UK through the Services; or
• operate the Services as part of a downstream platform, API, embedded product, managed service, or white-label offering serving restricted jurisdictions.

This restriction applies regardless of whether:

• the prohibited user accesses the Services directly or indirectly;
• VPNs or proxy services are utilized; or
• the Customer itself is physically located within the United States.

14.3 Customer Responsibility for Compliance

The Customer bears sole responsibility for:

• screening end users, customers, and downstream clients;
• implementing appropriate territorial restrictions in any downstream applications or integrations; and
• ensuring that no prohibited persons, organizations, or jurisdictions access or benefit from the Services.

Cobble shall have no liability arising from the Customer's failure to comply with territorial usage restrictions.

14.4 Suspension & Termination Rights

Cobble may immediately suspend or terminate access to the Services, without liability or refund, where Cobble reasonably determines that:

• a Customer has violated territorial restrictions;
• the Services are being accessed from prohibited jurisdictions;
• the Customer is facilitating access for restricted persons or entities; or
• continued access could expose Cobble to regulatory, legal, contractual, privacy, export-control, or compliance risk.

14.5 No EU/EEA/UK Regulatory Compliance Commitment

Because the Services are not offered within the EU, EEA, or UK, Cobble does not represent or warrant compliance with:

• the EU AI Act;
• the General Data Protection Regulation ("GDPR");
• the UK GDPR;
• the UK Online Safety Act;
• the Digital Services Act ("DSA");
• the Digital Markets Act ("DMA"); or
• similar foreign regulatory frameworks applicable outside the United States.

Customers are prohibited from using the Services in any manner that would cause Cobble to become subject to such regulatory regimes.

15. Dynamic Routing & Compute Resource Disclosure

Cobble utilizes dynamic inference routing, distributed compute allocation, fallback systems, load balancing, and multi-provider orchestration technologies in connection with the Services. As part of these systems, requests may be processed by different underlying infrastructure providers, hardware environments, model hosts, accelerators, regions, or compute clusters depending on availability, congestion, pricing, latency, reliability, routing policies, safety controls, or operational considerations.

Cobble strives to accurately identify, label, and route requests to the intended models, providers, or compute resources where such identification is offered as part of the applicable Service tier. However, due to the nature of distributed inference systems, routing abstractions, shared infrastructure environments, fallback orchestration, provider-side substitutions, virtualization layers, and limitations of currently available technology, it may not always be possible for Customers to determine:

• which underlying compute resource handled a request;
• which GPU, accelerator, or hardware environment processed an inference workload;
• which infrastructure provider or hosting environment fulfilled a request;
• whether a request was served through a fallback, overflow, substitute, cached, quantized, distilled, or dynamically routed model pathway; or
• whether the same infrastructure or routing path will be used for subsequent requests.

The Customer understands and agrees that Cobble is not responsible for:

• inaccurate, incomplete, delayed, abstracted, or unavailable routing metadata;
• differences in performance, latency, output quality, formatting, or behavior caused by dynamic routing systems;
• provider-side substitutions or infrastructure-layer changes outside Cobble's direct control; or
• the Customer's inability to independently verify the underlying compute resource, hardware identity, infrastructure path, or exact serving environment associated with any request.

The Customer further acknowledges that certain routing details, infrastructure identities, optimization systems, orchestration mechanisms, or provider relationships may constitute confidential, proprietary, operational-security-sensitive, or trade secret information belonging to Cobble or its providers and may therefore be withheld, abstracted, generalized, or modified within the Services or related telemetry.

Nothing in the Services shall be construed as guaranteeing dedicated infrastructure, fixed routing behavior, hardware consistency, or provider exclusivity unless expressly stated in a separately executed Enterprise Agreement or Order Form.

16. Security Testing, Adversarial Use & Unauthorized Red Teaming

Cobble permits use of the Services solely in accordance with this Agreement, the Acceptable Use Policy ("AUP"), and any applicable third-party model licenses or usage restrictions. The Customer shall not engage in unauthorized security testing, adversarial evaluation, or abuse of the Services.

16.1 Definition of Red Teaming

For purposes of this Agreement, "Red Teaming" includes, but is not limited to:

• prompt injection attacks;
• jailbreaking attempts;
• safety classifier evasion;
• system prompt extraction;
• context leakage attempts;
• token manipulation attacks;
• adversarial prompting;
• latent capability probing;
• guardrail circumvention;
• privilege escalation attempts;
• output manipulation intended to bypass safety controls;
• attempts to induce prohibited, harmful, restricted, or policy-violating outputs;
• automated fuzzing, scraping, stress testing, or exploit discovery targeting the Services;
• reverse engineering of routing systems, orchestration systems, safety systems, or model configurations; and
• attempts to identify hidden prompts, infrastructure details, routing logic, provider identities, or confidential operational characteristics.

16.2 Prohibited Unauthorized Red Teaming

Unless expressly authorized in writing by Cobble, the Customer shall not conduct or facilitate any Red Teaming activity against:

• the Services;
• Cobble infrastructure;
• third-party model providers;
• safety systems;
• routing systems;
• APIs;
• authentication systems;
• model endpoints; or
• any associated systems, providers, or integrations.

Unauthorized Red Teaming includes both manual and automated activity, including activity performed through scripts, bots, agents, multi-agent systems, or high-volume adversarial workflows.

16.3 Monitoring & Enforcement

Cobble reserves the right to monitor usage patterns, prompts, request structures, throughput behavior, and related telemetry for purposes of:

• detecting adversarial activity;
• preventing abuse or misuse;
• protecting system integrity;
• enforcing applicable model licenses and provider restrictions; and
• complying with legal or contractual obligations.

The Customer acknowledges that suspected unauthorized Red Teaming activity may be:

• flagged automatically by Cobble systems or third-party providers;
• investigated by Cobble or upstream providers; and
• shared with applicable infrastructure or model providers where necessary for abuse prevention or contractual compliance.

16.4 Suspension & Termination Rights

Cobble may immediately suspend, throttle, restrict, or terminate access to the Services, without prior notice or liability, where Cobble reasonably determines that a Customer:

• has engaged in unauthorized Red Teaming;
• is attempting to bypass safety systems or platform restrictions;
• presents a security, operational, legal, or reputational risk;
• violates applicable third-party model usage terms; or
• interferes with the integrity, stability, or availability of the Services.

Cobble may additionally revoke API keys, invalidate credentials, block IP ranges, restrict routing access, or report abuse activity to applicable providers or authorities where appropriate.

16.5 Authorized Security Research

Nothing in this section prohibits lawful, authorized security research or testing conducted pursuant to:

• a separate written agreement with Cobble;
• a formal bug bounty or vulnerability disclosure program administered by Cobble; or
• express written authorization identifying the permitted scope of testing.

Any authorized testing must remain strictly within the approved scope and shall remain subject to all confidentiality, disclosure, and operational restrictions imposed by Cobble.

16.6 No Expectation of Unrestricted Model Access

The Customer acknowledges that AI models accessible through the Services are subject to safety systems, policy enforcement mechanisms, provider restrictions, and operational controls. The Customer shall not interpret refusal behavior, filtered outputs, blocked prompts, throttling, or access restrictions as permission to attempt circumvention, extraction, or adversarial escalation.

17. Payments, Credits & Refund Policy

All fees paid to Cobble are denominated in U.S. Dollars unless otherwise specified. By purchasing Services, subscriptions, API credits, prepaid balances, or usage allocations, the Customer authorizes Cobble and its payment processors to charge the applicable payment method for all fees, taxes, and charges incurred.

17.1 Prepaid Credits

Certain Services may operate using prepaid credits, token balances, inference allocations, or usage-based billing units ("Credits"). Credits:

• have no cash value;
• are non-transferable except where expressly authorized by Cobble;
• are not bank accounts, stored-value accounts, or digital wallets;
• do not constitute personal property; and
• may expire as described in the applicable pricing or subscription terms.

Unused Credits may be forfeited upon account termination, suspension, or expiration unless otherwise required by applicable law.

17.2 Refund Requests & Time Window

Except where required by applicable law, all purchases are final and non-refundable. However, as a limited accommodation and not as an obligation, Cobble may permit refund requests for certain unused prepaid Credit purchases submitted within twenty-four (24) hours of the original transaction.

To qualify for consideration:

• the Credits must remain substantially unused;
• the account must not be under investigation for abuse, fraud, chargeback activity, or policy violations; and
• the request must comply with Cobble's then-current refund procedures.

Cobble reserves sole discretion to determine eligibility for any voluntary refund.

17.3 Non-Refundable Fees

The following are non-refundable except where required by law:

• platform fees;
• processing fees;
• subscription fees for elapsed billing periods;
• usage-based charges already incurred;
• consumed Credits;
• dedicated infrastructure reservations;
• enterprise setup fees;
• priority routing fees;
• custom support or onboarding fees;
• cryptocurrency or blockchain-based payments; and
• third-party provider passthrough charges.

17.4 Cryptocurrency Payments

Payments made using cryptocurrency, digital assets, stablecoins, or blockchain-based settlement mechanisms are final and irreversible. Cobble does not guarantee the ability to reverse, recover, or refund cryptocurrency transactions.

The Customer acknowledges that:

• blockchain transactions may be irreversible;
• exchange rates may fluctuate; and
• refunds, where voluntarily issued, may be provided in U.S. Dollar equivalent value at the time of the original transaction or at the time of refund issuance, as determined by Cobble.

17.5 Subscription Cancellation

Unless otherwise specified, subscriptions automatically renew at the end of each billing cycle until canceled. The Customer may cancel future renewals at any time through the account settings or designated billing interface.

Cancellation:

• prevents future billing cycles;
• does not retroactively refund prior charges;
• does not relieve the Customer of outstanding payment obligations; and
• does not automatically restore expired or forfeited Credits.

Where required by applicable law, Customers may retain access to paid subscription features through the remainder of the active billing period.

17.6 Chargebacks & Payment Disputes

The Customer agrees to first contact Cobble to attempt to resolve billing disputes before initiating chargebacks or payment reversals.

Cobble reserves the right to:

• suspend or terminate accounts associated with fraudulent or abusive chargebacks;
• recover amounts owed through collection efforts or legal remedies;
• deduct disputed amounts from account balances or Credits; and
• block future purchases or account access.

17.7 California & Consumer Rights

Nothing in this Agreement limits any non-waivable consumer rights applicable under California law or other applicable consumer protection laws, including rights relating to automatically renewing subscriptions, cancellation rights, or mandatory refund obligations where applicable.

18. No Intellectual Property Indemnification

Cobble is an inference platform, routing provider, hosting provider, and infrastructure intermediary that may provide access to third-party open-weight, community-licensed, or externally developed AI models. Cobble does not generally control or determine:

• the datasets used to train Third-Party Models;
• the provenance of training materials;
• the legality or licensing status of upstream training corpora; or
• the behavior, memorization characteristics, or outputs of externally developed models.

Accordingly, Cobble does not provide intellectual property indemnification protections comparable to those sometimes offered by certain proprietary model developers or enterprise AI laboratories.

18.1 Disclaimer of IP Indemnity

To the maximum extent permitted by applicable law, Cobble shall have no obligation to defend, indemnify, reimburse, or hold harmless the Customer or any third party against claims arising from or related to:

• AI-generated Outputs;
• the training, fine-tuning, or pretraining of Third-Party Models;
• alleged infringement, misappropriation, dilution, or violation of copyrights, trademarks, patents, trade secrets, publicity rights, database rights, or other intellectual property rights;
• the Customer's prompts, Inputs, datasets, uploads, or instructions;
• the Customer's publication, commercialization, modification, redistribution, or deployment of Outputs;
• similarity between Outputs and third-party materials; or
• claims that any model was trained on allegedly unauthorized or infringing materials.

This disclaimer applies regardless of:

• whether the claim arises under statute, common law, contract, or equitable theory;
• whether the allegedly infringing material was generated deterministically or probabilistically; or
• whether Cobble had notice of the alleged infringement risk.

18.2 Customer Responsibility for Clearance & Review

The Customer is solely responsible for:

• conducting legal, editorial, and intellectual property review of Outputs before use;
• obtaining any required licenses, permissions, or rights clearances;
• determining whether Outputs are suitable for commercial deployment, publication, or redistribution; and
• implementing human review procedures appropriate to the Customer's use case and risk profile.

The Customer acknowledges that AI-generated content may:

• resemble existing copyrighted works;
• contain inaccurate attributions;
• produce non-unique or substantially similar outputs; and
• trigger third-party claims despite reasonable precautions.

Claims arising under this section are subject to the Customer's indemnification obligations in Section 11 (Indemnification).

18.3 Third-Party Model Providers

Certain Third-Party Models accessible through the Services may independently offer, disclaim, limit, or condition intellectual property protections under their own licenses or commercial agreements. Cobble makes no representation regarding the availability, enforceability, or sufficiency of any such upstream protections and disclaims responsibility for enforcing or administering them on the Customer's behalf.

18.4 Pricing & Allocation of Risk

The Customer acknowledges that:

• Cobble's pricing structure reflects the absence of enterprise-style intellectual property indemnification protections;
• Cobble's Services are offered as infrastructure and inference-access services rather than fully managed legal-compliance products; and
• the allocation of intellectual property risk set forth in this Agreement is an essential basis of the parties' bargain.

19. Voice, Likeness & Right of Publicity Restrictions

Cobble respects the intellectual property, publicity, privacy, and personality rights of individuals. The Customer may not use the Services to generate, reproduce, manipulate, simulate, distribute, or otherwise exploit any person's voice, likeness, image, photograph, identity, biometric characteristics, or other recognizable personal attributes without all necessary rights, permissions, consents, and legal authority.

19.1 Compliance with Right of Publicity Laws

The Customer acknowledges that certain jurisdictions, including the State of Tennessee through the Ensuring Likeness, Voice, and Image Security Act ("ELVIS Act"), recognize statutory rights relating to voice, likeness, and identity protection, including protections against unauthorized AI-generated simulations or replicas.

The Customer agrees not to use the Services in any manner that would violate:

• rights of publicity;
• personality rights;
• privacy rights;
• biometric protection laws;
• voice or likeness protection statutes;
• intellectual property laws; or
• similar protections under applicable law.

19.2 Prohibited Uses

Without limiting the foregoing, the Customer shall not use the Services to:

• clone, simulate, synthesize, imitate, or replicate a person's voice without authorization;
• generate deepfakes or synthetic media depicting identifiable individuals without authorization;
• create deceptive impersonations of celebrities, musicians, actors, politicians, creators, private individuals, or public figures;
• generate unauthorized commercial endorsements, performances, or likenesses;
• produce content intended to confuse, deceive, defraud, harass, exploit, or misrepresent an individual's identity; or
• circumvent technological safeguards intended to prevent unauthorized likeness generation.

19.3 Restricted Model Categories

Cobble reserves the right, in its sole discretion, to restrict, refuse, remove, suspend, or prohibit:

• models whose primary purpose is unauthorized voice cloning;
• models designed principally for likeness replication or impersonation;
• synthetic identity-generation systems presenting elevated legal or reputational risk; and
• workflows determined by Cobble to create unreasonable exposure under applicable publicity, privacy, or biometric laws.

Nothing in the Services shall obligate Cobble to host or provide access to any particular model category.

19.4 Customer Representations & Warranties

The Customer represents, warrants, and covenants that:

• the Customer possesses all rights, permissions, licenses, and consents necessary for all Inputs submitted to the Services;
• the Customer has obtained legally sufficient authorization for any voice, likeness, image, biometric data, or personal identity information processed through the Services; and
• the Customer's use of the Services will not violate any right of publicity, privacy, intellectual property, contractual restriction, or applicable law.

The Customer further agrees that it shall bear sole responsibility for verifying the legality of any synthetic media, cloned voice, or likeness-based content generated or distributed using the Services.

19.5 Notice & Takedown Procedure

Cobble may maintain and administer procedures for receiving complaints relating to:

• unauthorized voice cloning;
• unauthorized likeness generation;
• right of publicity violations;
• deepfake misuse;
• identity impersonation; and
• violations of applicable publicity or biometric laws.

Upon receiving a complaint or otherwise becoming aware of suspected violations, Cobble reserves the right to:

• investigate the reported activity;
• remove or disable access to content;
• suspend or terminate accounts;
• revoke API access;
• preserve evidence where legally required; and
• cooperate with affected individuals, rights holders, regulators, or law enforcement.

19.6 No Monitoring Obligation

Cobble does not undertake a general obligation to monitor all Customer activity, Inputs, or Outputs for potential publicity-rights violations. However, Cobble reserves the right to implement automated or manual moderation, abuse detection, filtering, or enforcement systems designed to reduce misuse risk.

Claims arising under this section are subject to the Customer's indemnification obligations in Section 11 (Indemnification).

20. Compliance with AI Disclosure, Identity & Consumer Interaction Laws

Cobble provides infrastructure, inference, routing, and model-access services primarily for developers, businesses, researchers, and technical users. Cobble generally does not directly operate consumer-facing applications built by Customers using the Services.

Accordingly, the Customer acknowledges and agrees that the Customer — not Cobble — is solely responsible for compliance with all laws, regulations, and disclosure obligations applicable to the Customer's downstream applications, interfaces, products, services, agents, chatbots, and consumer interactions.

20.1 Customer Responsibility for AI Disclosure Compliance

The Customer shall comply with all applicable artificial intelligence disclosure, transparency, consumer protection, impersonation, and chatbot laws, including but not limited to:

• the Utah Artificial Intelligence Policy Act ("UAIPA"), as amended;
• state AI transparency and chatbot disclosure laws;
• consumer interaction disclosure requirements;
• deepfake, voice, likeness, and synthetic media laws;
• automated decision-making disclosure obligations; and
• similar federal, state, local, or international regulations.

Where required by applicable law, the Customer must clearly and conspicuously disclose to end users when they are interacting with generative AI systems, automated conversational systems, or synthetic media systems.

Cobble does not undertake responsibility for providing such disclosures on behalf of Customers operating downstream applications or services.

20.2 No Consumer-Facing Deployment Responsibility

The Customer acknowledges that:

• Cobble generally acts as an API provider, inference provider, routing provider, or infrastructure intermediary;
• Cobble may not control the Customer's downstream interfaces, prompts, user experiences, or deployment contexts; and
• Cobble may not know whether Outputs are being presented to consumers, employees, patients, voters, customers, or other end users.

Accordingly, the Customer bears sole responsibility for:

• determining whether disclosure laws apply to its use case;
• implementing legally required notices or disclaimers;
• maintaining records or audit trails required by law; and
• supervising downstream deployments and end-user interactions.

20.3 Personal Identity & Publicity Rights Compliance

The Customer shall not use the Services to create, distribute, commercialize, or facilitate unauthorized synthetic content involving identifiable individuals, including:

• voice clones;
• deepfakes;
• synthetic likenesses;
• identity simulations;
• unauthorized image manipulation; or
• commercial exploitation of personal identities.

The Customer further agrees not to use the Services in violation of:

• rights of publicity;
• privacy rights;
• biometric laws;
• voice and likeness statutes;
• synthetic identity laws; or
• similar protections under applicable law.

Cobble reserves the right to prohibit or restrict models, workflows, or applications whose intended primary purpose involves unauthorized identity replication, impersonation, or likeness generation.

20.4 Mental Health & Emotional Dependency Restrictions

The Services shall not be used to provide:

• unsupervised mental-health therapy;
• clinical psychiatric treatment;
• crisis counseling;
• suicide prevention services without qualified human oversight; or
• medical diagnosis or behavioral-health treatment requiring professional licensure.

The Customer shall not deploy conversational systems designed to:

• encourage emotional dependency upon AI systems;
• discourage users from seeking professional medical or mental-health assistance;
• manipulate vulnerable individuals; or
• simulate licensed therapeutic relationships without appropriate legal authorization and human supervision.

Any mental-health-related deployment using the Services must include appropriate human oversight, safety escalation procedures, emergency protocols, and legally required disclosures.

20.5 Customer Representations & Warranties

The Customer represents, warrants, and covenants that:

• its use of the Services complies with all applicable AI-related disclosure and consumer protection laws;
• it will provide legally required notices to end users where applicable;
• it will not deploy the Services in prohibited high-risk or deceptive contexts; and
• it has implemented appropriate safeguards for any consumer-facing AI systems.

20.6 Enforcement & Suspension Rights

Cobble reserves the right to:

• restrict or prohibit high-risk deployments;
• suspend accounts engaged in prohibited consumer-facing practices;
• remove access to models or workflows presenting elevated legal risk;
• investigate complaints relating to deceptive AI interactions, identity misuse, or prohibited therapeutic deployments; and
• cooperate with regulators, law enforcement, or affected parties where legally required or operationally necessary.

Violations of this section may result in immediate suspension or termination of access to the Services without refund or liability.

21. Biometric Data Restrictions & Illinois BIPA Compliance

Cobble is not designed or intended to serve as a biometric identification, biometric verification, facial recognition, voice identification, fingerprint processing, or biometric surveillance platform. The Customer is solely responsible for ensuring that any use of the Services involving biometric data complies with all applicable laws and regulations, including the Illinois Biometric Information Privacy Act ("BIPA") and similar biometric privacy statutes.

21.1 Prohibited & Restricted Biometric Uses

Unless expressly authorized in writing by Cobble through a separate enterprise agreement, the Customer shall not use the Services to:

• identify or verify individuals using biometric identifiers;
• perform facial recognition or facial matching;
• conduct voice identification or speaker recognition;
• analyze fingerprints, retinal scans, iris scans, hand geometry, gait recognition, or similar biometric characteristics;
• create biometric templates, embeddings, hashes, signatures, or profiles;
• conduct mass biometric surveillance or tracking; or
• process biometric identifiers for law enforcement, employment screening, housing decisions, insurance decisions, credit decisions, or other high-risk determinations.

Cobble reserves the right to prohibit, restrict, gate, or remove access to models, workflows, or endpoints that present elevated biometric or identity-processing risk.

21.2 Customer Responsibility for Biometric Compliance

The Customer acknowledges and agrees that, with respect to any biometric data processed through the Services:

• the Customer — not Cobble — is the "private entity," "controller," "business," or equivalent regulated party under applicable biometric privacy laws;
• Cobble acts solely as a service provider, processor, infrastructure provider, or intermediary acting on the Customer's behalf; and
• the Customer bears sole responsibility for obtaining all legally required notices, consents, releases, permissions, and authorizations.

The Customer further agrees to comply with all applicable requirements relating to:

• informed written consent;
• notice and disclosure obligations;
• retention schedules;
• data destruction requirements;
• security safeguards;
• cross-border transfer restrictions;
• publicly available biometric policies;
• individual rights requests; and
• litigation holds and preservation obligations.

21.3 Inputs Containing Biometric Data

The Customer shall not submit Inputs containing biometric identifiers or biometric information unless:

• the Customer has obtained all legally required consents and authorizations;
• the processing is lawful in the applicable jurisdiction;
• the Customer has provided all legally required disclosures to affected individuals; and
• the Customer has a valid legal basis for processing such information.

For purposes of this Agreement, "biometric identifiers" and "biometric information" shall have the broadest meaning assigned under applicable law, including laws such as BIPA.

21.4 Restricted Model Categories

Cobble may, in its sole discretion:

• restrict face-recognition or voice-identification models to separately negotiated enterprise agreements;
• require enhanced compliance reviews before enabling certain biometric-capable models;
• deny access to models or workflows presenting heightened privacy, surveillance, or litigation risk; and
• require additional contractual safeguards, representations, or indemnities.

Nothing in the Services obligates Cobble to host or provide access to biometric-analysis technologies.

21.5 No Representation of Biometric Compliance

Cobble makes no representation or warranty that:

• the Services are compliant with BIPA or similar biometric laws;
• any model is suitable for biometric processing;
• any Customer workflow satisfies applicable notice or consent obligations; or
• any Outputs generated through the Services are legally usable for biometric purposes.

The Customer bears sole responsibility for determining the legality of any biometric-related deployment. Claims arising under this section are subject to the Customer's indemnification obligations in Section 11 (Indemnification).

21.6 Suspension & Enforcement Rights

Cobble reserves the right to suspend, restrict, investigate, or terminate access to the Services where Cobble reasonably believes that:

• the Services are being used for unauthorized biometric processing;
• a Customer has failed to comply with applicable biometric privacy laws; or
• continued access could expose Cobble to legal, regulatory, contractual, or reputational risk.

22. U.S. State Privacy Laws & Data Processing Addendum

Cobble may process personal data submitted by Customers in connection with the Services, including data originating from residents of states with comprehensive privacy laws, including but not limited to:

• Virginia Consumer Data Protection Act;
• Connecticut Data Privacy Act;
• Colorado Privacy Act;
• Utah Consumer Privacy Act;
• Texas Data Privacy and Security Act;
• California Consumer Privacy Act and related amendments; and
• other substantially similar U.S. state privacy laws enacted from time to time.

22.1 Customer Responsibility as Controller

Except where expressly agreed otherwise in writing, the Customer is solely responsible for determining:

• the purposes and means of processing personal data;
• whether personal data is submitted through the Services;
• whether notices, disclosures, consents, opt-outs, or rights mechanisms are legally required; and
• whether the Customer qualifies as a controller, business, or similar regulated entity under applicable law.

The Customer represents and warrants that it has all necessary rights, permissions, notices, and lawful bases required to process personal data through the Services.

22.2 Cobble's Role as Service Provider / Processor

Unless otherwise specified in a separately executed agreement:

• Cobble generally acts as a service provider, processor, contractor, or similar intermediary acting on behalf of the Customer;
• Cobble processes personal data solely for the limited purpose of providing, securing, maintaining, and improving the Services as permitted under this Agreement; and
• Cobble does not sell Customer personal data or share Customer personal data for cross-context behavioral advertising purposes as those terms are defined under applicable law.

22.3 Data Processing Addendum ("DPA")

For business customers subject to applicable privacy laws, Cobble may provide a Data Processing Addendum ("DPA") governing the processing of personal data in connection with the Services.

The DPA may address, among other matters:

• subject matter and duration of processing;
• nature and purpose of processing;
• categories of personal data;
• categories of data subjects;
• confidentiality obligations;
• security measures;
• subprocessor terms;
• cross-border transfer limitations;
• audit rights where legally required;
• assistance with data subject requests;
• deletion and return obligations; and
• applicable state privacy law requirements.

Where executed, the DPA is incorporated into and forms part of the Agreement.

22.4 Customer Obligations Regarding Sensitive Data

The Customer shall not submit sensitive personal data through the Services unless:

• the submission is lawful;
• appropriate disclosures and consents have been obtained; and
• adequate safeguards have been implemented.

Sensitive personal data may include:

• government identifiers;
• financial account information;
• health information;
• biometric information;
• precise geolocation data;
• information concerning minors; and
• sensitive categories protected by applicable law.

The Customer bears sole responsibility for determining whether submission of such data is appropriate or lawful.

22.5 Privacy Policy & Combined State Disclosures

Cobble may publish a consolidated Privacy Policy containing disclosures intended to address multiple applicable U.S. state privacy laws simultaneously, including disclosures relating to:

• categories of information processed;
• purposes of processing;
• consumer rights;
• retention practices;
• subprocessor categories;
• security measures; and
• methods for exercising applicable rights.

The Customer acknowledges that such disclosures may be updated periodically to reflect evolving legal requirements.

22.6 No Legal Advice

Cobble does not provide legal advice regarding privacy law compliance. The Customer is solely responsible for:

• determining whether applicable privacy laws apply to its activities;
• implementing legally required notices and rights mechanisms; and
• conducting any required privacy impact assessments, risk analyses, or compliance reviews.

22.7 Suspension & Risk Mitigation

Cobble reserves the right to restrict, suspend, or terminate processing activities that:

• violate applicable privacy laws;
• present unreasonable legal or regulatory risk;
• involve prohibited categories of personal data; or
• expose Cobble to material compliance obligations inconsistent with its intended role as an infrastructure provider or processor.

23. Consumer Health Data Restrictions & Washington My Health My Data Act Compliance

Cobble is not designed, marketed, or intended to operate as a healthcare platform, medical records processor, clinical decision-making system, or regulated health-data environment on standard service tiers. The Customer is solely responsible for determining whether its use of the Services involves "consumer health data," protected health information ("PHI"), medical records, or other regulated health-related information subject to applicable law.

23.1 Restricted Health Data Processing

Unless expressly authorized in writing through a separately negotiated enterprise agreement, the Customer shall not submit through the Services:

• consumer health data;
• protected health information ("PHI");
• medical records;
• healthcare treatment information;
• patient diagnostic information;
• mental-health records;
• health insurance information;
• biometric health information;
• reproductive health data;
• genetic data;
• precise health-related geolocation data; or
• other regulated healthcare or health-adjacent information.

This restriction applies in particular to standard, free, economy, routed, shared-capacity, and self-service API tiers.

23.2 Washington My Health My Data Act

The Customer acknowledges that certain laws, including the Washington My Health My Data Act and similar statutes, may impose obligations relating to the collection, processing, sharing, sale, retention, or disclosure of consumer health data.

The Customer agrees that:

• the Customer — not Cobble — is responsible for determining whether such laws apply to its activities;
• the Customer bears sole responsibility for obtaining all required notices, consents, authorizations, and legal bases for processing health-related data; and
• the Customer shall not use the Services in violation of applicable health privacy laws.

23.3 Enterprise-Only Health Data Processing

Cobble may, in its sole discretion, permit limited health-data-related processing only pursuant to:

• a separately executed enterprise agreement;
• a Data Processing Addendum ("DPA");
• a Business Associate Agreement ("BAA") or BAA-equivalent where applicable; and
• additional security, compliance, and operational controls required by Cobble.

Cobble reserves the right to refuse, restrict, suspend, or terminate any health-data-related processing activities that have not been expressly approved in writing.

23.4 Mental Health & Sensitive Health Uses

The Customer shall not use the Services to:

• provide unsupervised mental-health counseling or therapy;
• conduct automated medical diagnosis;
• generate healthcare determinations without qualified human oversight;
• make treatment decisions;
• encourage emotional dependency upon AI systems; or
• process sensitive health data in violation of applicable law.

Any permitted health-related deployment must include appropriate human supervision, safeguards, escalation procedures, and legally required disclosures.

23.5 Customer Representations & Warranties

The Customer represents, warrants, and covenants that:

• it will not submit consumer health data through unauthorized service tiers;
• it has obtained all legally required rights, consents, notices, and authorizations;
• its use of the Services complies with all applicable health privacy laws and regulations; and
• it will not use the Services for regulated healthcare processing absent a separately executed agreement expressly permitting such use.

Claims arising under this section are subject to the Customer's indemnification obligations in Section 11 (Indemnification).

23.6 Suspension & Enforcement Rights

Cobble reserves the right to immediately suspend, restrict, investigate, or terminate access where Cobble reasonably determines that:

• the Services are being used to process unauthorized health data;
• the Customer is engaging in prohibited healthcare-related activities; or
• continued access could expose Cobble to healthcare, privacy, regulatory, contractual, or litigation risk.

24. HIPAA, Protected Health Information & Business Associate Terms

Cobble is not intended for the processing, storage, transmission, or analysis of protected health information ("PHI") or other regulated healthcare data on standard service tiers unless expressly authorized in writing through a separately executed enterprise agreement.

24.1 Prohibition on PHI in Standard Tiers

Unless otherwise expressly approved by Cobble in writing, the Customer shall not submit, upload, process, transmit, store, infer upon, or otherwise use the Services with:

• Protected Health Information ("PHI");
• Electronic Protected Health Information ("ePHI");
• medical records;
• clinical notes;
• patient treatment information;
• health insurance records; or
• individually identifiable health information regulated under the Health Insurance Portability and Accountability Act ("HIPAA").

This restriction applies to:

• free tiers;
• economy tiers;
• shared-capacity infrastructure;
• self-service APIs;
• routed or fallback inference systems; and
• community or trial offerings.

The Customer acknowledges that standard service tiers are not represented as HIPAA-compliant environments.

24.2 Covered Entities & Business Associates

If the Customer is a "Covered Entity," a "Business Associate," or another regulated healthcare organization subject to HIPAA or similar healthcare privacy laws, the Customer agrees not to process PHI through the Services unless:

• a separate written Business Associate Agreement ("BAA") has been fully executed by both parties;
• Cobble has expressly approved the applicable deployment architecture; and
• the Customer complies with all additional technical and operational requirements imposed by Cobble.

Absent an executed BAA, Cobble shall not be deemed a Business Associate, subcontractor Business Associate, healthcare service provider, or healthcare data processor under HIPAA.

24.3 Enterprise HIPAA-Eligible Services

Cobble may, in its sole discretion, offer limited HIPAA-eligible enterprise environments subject to:

• a separately negotiated enterprise agreement;
• a fully executed BAA;
• enhanced security and compliance controls;
• technical architecture reviews; and
• customer onboarding and compliance verification.

Eligibility for HIPAA-related processing may depend upon:

• infrastructure isolation;
• encryption configurations;
• zero-retention or limited-retention configurations;
• access control systems;
• audit logging capabilities;
• security monitoring;
• incident response procedures;
• model-routing restrictions; and
• approved subprocessors and hosting providers.

Nothing in this Agreement obligates Cobble to offer HIPAA-eligible services or execute a BAA with any Customer.

24.4 No HIPAA Compliance Representation

Unless expressly stated in a separately executed written agreement:

• Cobble does not represent or warrant that the Services comply with HIPAA;
• Cobble does not guarantee that standard service tiers satisfy healthcare-sector security requirements; and
• Cobble does not undertake regulatory obligations applicable to Covered Entities or Business Associates.

The Customer bears sole responsibility for determining whether its intended use requires:

• HIPAA compliance;
• a BAA;
• additional regulatory approvals;
• specialized security controls; or
• alternative infrastructure arrangements.

The Customer shall not represent to any third party that Cobble provides HIPAA-compliant or healthcare-certified services absent an express written agreement to that effect.

24.5 Security Controls for Approved Enterprise Deployments

Where Cobble expressly agrees in writing to support HIPAA-related processing, such support may include commercially reasonable safeguards such as:

• encryption in transit and at rest;
• access controls and authentication mechanisms;
• audit logging;
• role-based access restrictions;
• security monitoring;
• incident response procedures;
• environment isolation; and
• limited retention or zero-retention configurations where technically feasible.

Specific controls, commitments, and limitations shall be governed exclusively by the applicable enterprise agreement and BAA.

24.6 Customer Representations & Warranties

The Customer represents, warrants, and covenants that:

• it will not submit PHI through unauthorized service tiers;
• it has obtained all legally required authorizations and permissions;
• it will comply with all applicable healthcare privacy and security laws; and
• it will not represent Cobble as HIPAA-compliant absent a written agreement expressly stating otherwise.

Claims arising under this section are subject to the Customer's indemnification obligations in Section 11 (Indemnification).

24.7 Suspension & Enforcement Rights

Cobble reserves the right to immediately suspend, restrict, investigate, or terminate access to the Services where Cobble reasonably determines that:

• PHI is being processed through unauthorized environments;
• the Customer is violating healthcare privacy laws; or
• continued processing could expose Cobble to healthcare, privacy, contractual, or regulatory liability.

25. Term, Suspension & Termination

25.1 Term

These Terms take effect when you first accept them or use the Services and continue until terminated as described below.

25.2 Termination by You

You may stop using the Services and close your account at any time through your account settings or by contacting us. Closing your account does not relieve you of obligations incurred before closure, including outstanding payment obligations.

25.3 Termination and Suspension by Cobble

In addition to the suspension and termination rights stated elsewhere in these Terms, Cobble may suspend or terminate your access to some or all of the Services, with or without notice, if:

• you materially breach these Terms or any incorporated policy;
• your account is inactive for an extended period;
• suspension or termination is required by law, a model licensor, or an infrastructure provider; or
• continued provision of the Services to you creates a security, legal, or operational risk to Cobble, its providers, or other users.

Where practicable and lawful, Cobble will provide reasonable notice before termination for convenience.

25.4 Effect of Termination

Upon termination:

• your right to access and use the Services ceases immediately;
• API keys and credentials may be revoked;
• unused Credits may be forfeited as described in Section 17; and
• Cobble may delete Customer Content associated with your account, subject to the data retention provisions of these Terms and applicable law.

25.5 Survival

Provisions that by their nature should survive termination will survive, including those relating to ownership, feedback, payment obligations, disclaimers of warranties, limitations of liability, indemnification, dispute resolution, and governing law.

26. Changes to These Terms

Cobble may modify these Terms from time to time. If we make material changes, we will provide reasonable advance notice — such as by email, dashboard notification, or posting the updated Terms on our website with a revised effective date.

Unless a change is required by law or relates to a new feature (in which case it may take effect immediately), material changes will take effect no earlier than the stated notice period. Your continued use of the Services after the updated Terms take effect constitutes acceptance of the changes. If you do not agree to the updated Terms, you must stop using the Services before the changes take effect.

27. Miscellaneous Provisions

27.1 Entire Agreement

These Terms, together with any incorporated policies (including the Privacy Policy, Acceptable Use Policy, and Data Processing Addendum, where applicable), constitute the entire agreement between you and Cobble concerning the Services and supersede all prior or contemporaneous agreements and understandings.

27.2 Order of Precedence

In the event of a conflict between these Terms and a separately executed Enterprise Agreement, Order Form, DPA, or BAA, the separately executed agreement will control with respect to its subject matter, followed by the DPA or BAA, then these Terms, then any incorporated policies.

27.3 Severability

If any provision of these Terms is held to be invalid, illegal, or unenforceable, the remaining provisions will remain in full force and effect.

27.4 Waiver

No waiver of any provision of these Terms will be effective unless in writing and signed by the party granting the waiver. A party's failure to enforce any right or provision will not constitute a waiver.

27.5 Assignment

You may not assign or transfer these Terms or any rights or obligations under them without Cobble's prior written consent. Any attempted assignment in violation of this section is void.

Cobble may assign or transfer these Terms, in whole or in part, without restriction, including in connection with a merger, acquisition, corporate reorganization, or sale of assets.

27.6 Independent Contractors

The relationship between you and Cobble is that of independent contractors. Nothing in these Terms creates any partnership, joint venture, fiduciary, agency, or employment relationship.

27.7 No Third-Party Beneficiaries

These Terms are intended solely for the benefit of you and Cobble and do not create any rights in any third party, except as expressly stated.

27.8 Export Compliance

You agree to comply with all applicable export control and economic sanctions laws and regulations of the United States and other jurisdictions, including regulations administered by the U.S. Department of Commerce and the U.S. Department of the Treasury Office of Foreign Assets Control.

You represent and warrant that you are not located in, organized under the laws of, or ordinarily resident in any country or territory subject to comprehensive sanctions, and that you are not listed on any government restricted-party list.

27.9 Injunctive Relief

You acknowledge that a breach of these Terms may cause irreparable harm to Cobble for which monetary damages may be inadequate. Accordingly, Cobble may seek injunctive or equitable relief in any court of competent jurisdiction without posting bond.

27.10 Force Majeure

Cobble will not be liable for any delay or failure to perform resulting from causes beyond its reasonable control, including natural disasters, internet outages, telecommunications failures, labor disputes, acts of war, terrorism, governmental actions, utility failures, and interruptions affecting third-party providers or infrastructure.

27.11 Notices

Cobble may provide notices to you by email to the address associated with your account, through the Services, or by posting to our website. Legal notices to Cobble must be sent in writing to:

Cobble Network, Inc. [Street Address] <!-- TODO: insert full mailing address --> Somerset, Kentucky, United States Email: legal@cobble.network

Notices are deemed given when sent (for email) or when posted (for notices provided through the Services or website).

28. Consumer Notices

28.1 New Jersey Residents

If any provision of these Terms is found unenforceable under New Jersey law, that provision will not apply to New Jersey consumers to the extent prohibited, and the remaining provisions will remain in effect. Nothing in these Terms limits any rights available under the New Jersey Truth-in-Consumer Contract, Warranty and Notice Act.

28.2 California Residents

Pursuant to California Civil Code Section 1789.3, California residents may contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs:

• Mail: 1625 North Market Blvd., Suite N-112, Sacramento, CA 95834
• Phone: (800) 952-5210 or (916) 445-1254

29. Contact Information

If you have questions, complaints, or requests concerning these Terms or the Services, you may contact Cobble at:

Cobble Network, Inc. Somerset, Kentucky, United States Email: legal@cobble.network Website: cobble.network/contact