1. About these Terms

Rivora Product OS is operated by Rivora Holdings Pty Ltd (ABN 87 688 261 234) under the Rivora Connect brand (referred to as Rivora, we, us or our).

These Terms of Service (Terms) govern your access to and use of:

• the Rivora Product OS application;
• the Rivora Connect website;
• associated early-access, pilot, support and related services; and
• any other Rivora service that links to these Terms,

together, the Service.

By creating an account, accepting an invitation, clicking to accept these Terms, or accessing or using the Service, you agree to these Terms. If you do not agree, you must not access or use the Service.

Our Privacy Policy explains how we collect, use, disclose and protect personal information. It should be read together with these Terms.

If you or your organisation has entered into a separate written pilot agreement, order form, subscription agreement or other agreement with us (Customer Agreement), that Customer Agreement will prevail to the extent of any inconsistency with these Terms.

2. Who May Use the Service

You must be at least 18 years old and legally capable of entering into these Terms.

If you access or use the Service on behalf of a company or other organisation (Customer), you confirm that:

• you have authority to bind that Customer to these Terms;
• the Customer is responsible for your and its other authorised users' use of the Service; and
• references to you in these Terms include both you and the Customer where the context permits.

If you do not have that authority, you must not accept these Terms or use the Service on the Customer's behalf.

3. Early Access

Rivora Product OS is currently offered on an early-access or pilot basis. The Service may be incomplete and may contain errors. Features, limits, integrations, availability and commercial arrangements may change as the product develops.

During early access:

• access may be invitation-only or limited by workspace, user, product, feature-pack, storage or usage allowances;
• some functions described in product materials may be planned, experimental or unavailable;
• we may add, change, suspend or remove features where reasonably necessary to develop, secure or operate the Service; and
• unless we agree otherwise in writing, we do not promise any particular feature, roadmap item, integration, uptime level or commercial release date.

We will take reasonable steps to notify active Customers before a material change that significantly reduces the core functionality they are using, where practicable.

4. Accounts and Workspaces

You must provide accurate and current account information and keep it updated. You must keep your login credentials and authentication factors secure and must not share individual credentials with another person.

You are responsible for activity performed through your account, except to the extent that activity results from our breach of these Terms or failure to use reasonable security measures.

You must notify us promptly at anurag@rivoraconnect.com.au if you know or reasonably suspect that:

• your account or workspace has been accessed without authorisation;
• credentials or authentication factors have been compromised; or
• there has been a security incident affecting the Service.

The Service may organise users and content into organisation, tenant, workspace, product and feature-pack structures. A Customer may appoint workspace owners or administrators. Those administrators may, depending on available functionality:

• invite or remove users;
• assign roles and permissions;
• access and manage content within the Customer's workspace;
• approve, export or archive feature packs; and
• request changes to or deletion of the workspace.

You acknowledge that your Customer's authorised administrators may control your access to its workspace and may access content and activity associated with that workspace.

5. Customer Content

Customer Content means documents, feature requests, product information, business rules, source material, screenshots, designs, transcripts, notes, code or repository material, review comments, instructions and other content submitted, connected or made available to the Service by or for a Customer. It also includes structured product memory derived from that material.

As between you and Rivora, you retain ownership of your Customer Content. You grant us a limited, non-exclusive, worldwide licence to host, copy, transmit, index, retrieve, process, transform and display Customer Content only as reasonably necessary to:

• provide and support the Service for you;
• generate, review, revise and export the outputs you request;
• maintain source lineage, product memory and review history within your workspace;
• prevent or address security, misuse, reliability or technical issues;
• comply with law and enforce these Terms; and
• perform other activities you expressly authorise.

This licence continues only for as long as reasonably necessary for those purposes, including applicable backup, security and legal-retention periods.

You are responsible for ensuring that:

• you have the rights and permissions required to provide Customer Content to the Service;
• your instructions and Customer Content do not infringe another person's rights or breach law or contractual obligations; and
• you do not provide data that your organisation prohibits from being processed through the Service.

6. Confidentiality

We will treat Customer Content that is not publicly available as the Customer's confidential information. We will use it only to provide, secure, maintain and support the Service, or as otherwise authorised by the Customer.

We may disclose Customer Content to our personnel and service providers who need it for those purposes and who are subject to appropriate confidentiality obligations. We may also disclose it where required by law, court order or a valid request from an authorised government body. Where legally permitted and reasonably practicable, we will notify the affected Customer before making a compelled disclosure.

These confidentiality obligations do not apply to information that:

• is or becomes public other than through our breach;
• we lawfully knew without a confidentiality obligation before receiving it through the Service;
• we lawfully receive from another source without a confidentiality obligation; or
• we independently develop without using the Customer's confidential information.

7. AI Processing and Product Memory

The Service uses artificial intelligence and other automated systems to analyse selected Customer Content, retrieve relevant context, create structured memory and generate or revise feature-pack content.

To provide these functions, selected Customer Content may be transmitted to approved third-party service providers, including AI model and infrastructure providers. Our Privacy Policy provides more information about relevant processing and disclosures.

We do not use Customer Content to train general-purpose AI models, and we will not knowingly permit our service providers to use Customer Content for that purpose, unless the Customer gives express written consent.

Rivora's product memory may include artefacts, extracted context, relationships, decisions, business rules, review history and other workspace information. Product memory remains scoped to the relevant Customer environment and may be reused within that environment to support later feature packs and workflows, subject to available permissions and product functionality.

Automated extraction may produce proposed decisions, assumptions, relationships or other memory objects. Unless clearly identified as approved, these should be treated as candidates requiring human review rather than established facts.

8. Generated Outputs

Generated Outputs means feature-pack sections, summaries, impact maps, specifications, acceptance criteria, implementation guidance, delivery mappings, export-ready content and other material generated by the Service for a Customer from its instructions and Customer Content.

Subject to these Terms, and as between you and Rivora, the Customer may use, copy, modify, export and distribute Generated Outputs created specifically for its workspace for its internal business and product-delivery purposes.

Generated Outputs may not be unique. Artificial intelligence systems may produce similar or identical material for different users, particularly where prompts, source material or common practices are similar. Rights granted to you do not extend to another customer's content or outputs.

Rivora retains all rights in the Service and its underlying software, workflows, schemas, pack structures, templates, user interfaces, methods, models, documentation, branding and technology. No ownership in those materials is transferred to you merely because they are used to produce a Generated Output.

9. Human Review and Reliance on Outputs

Generated Outputs are drafts produced with automated assistance. They may be incomplete, inaccurate, outdated, inconsistent or unsuitable for a particular purpose.

Rivora is designed to support human review and approval. You are responsible for:

• checking Generated Outputs against source material and current product or technical reality;
• resolving assumptions, conflicts, missing context and open questions;
• obtaining appropriate product, engineering, architecture, security, legal or other specialist review;
• confirming that an output is suitable before approving, exporting, implementing or relying on it; and
• testing and validating any software, configuration or operational change produced using a Generated Output.

Generated Outputs are not legal, financial, compliance, security or other professional advice. The Service does not autonomously make product, delivery or governance decisions on your behalf.

10. Acceptable Use

You must not, and must not help another person to:

• use the Service for unlawful, fraudulent, harmful or misleading activity;
• upload or process content that you do not have the right to use;
• infringe intellectual property, privacy, confidentiality or other rights;
• introduce malicious code or content intended to compromise the Service or another system;
• probe, scan or test vulnerabilities without our prior written permission;
• bypass authentication, permissions, tenant boundaries, usage limits, rate limits or other safeguards;
• interfere with the integrity, security, availability or performance of the Service;
• access another customer's workspace, content or data without authorisation;
• use automated means to scrape or systematically extract the Service, its underlying systems or non-public content;
• reverse engineer or attempt to discover source code, models, prompts or non-public system logic, except to the extent such a restriction is prohibited by law;
• resell, sublicense or provide the Service to third parties except under a written agreement with us;
• use the Service or its outputs to develop or benchmark a substantially competing product through systematic extraction or replication of Rivora's protected product elements; or
• represent unreviewed AI-generated material as verified professional, legal, security or compliance advice.

Reasonable evaluation of the Service, normal use of Generated Outputs and use of an approved export are not prohibited by this section.

11. Third-Party Services and Integrations

The Service relies on third-party services, which may include authentication, cloud hosting, communications, analytics, repository, document, issue-tracking and AI providers.

If you connect or use a third-party service:

• you authorise us to exchange the information reasonably required to provide the requested integration;
• your use of that third-party service remains subject to its own terms and privacy practices; and
• you are responsible for maintaining any permissions or licences required for that service.

We are not responsible for third-party services that we do not control. However, this does not limit our responsibility for how we select, configure or use service providers when processing Customer Content on our behalf.

Google authentication is provided as a sign-in method. Use of Google services remains subject to Google's applicable terms and privacy policy.

12. Exports and Downstream Actions

The Service may prepare content for export or controlled transfer to tools such as Jira, Confluence, Markdown, JSON, coding agents or other delivery systems.

Unless expressly enabled and authorised by the Customer, Rivora will not silently publish unreviewed Generated Outputs into downstream systems. Where write-back or publishing functionality is available, the Customer is responsible for reviewing and approving the relevant content and action before submission.

You are responsible for verifying the destination, permissions, structure and content of an export. We are not responsible for changes made to exported content after it leaves the Service or for actions independently performed by a third-party destination.

13. Feedback and Service Analytics

If you provide ideas, suggestions or feedback about the Service, you grant us a perpetual, worldwide, royalty-free right to use that feedback to develop and improve Rivora without an obligation to compensate you. This does not give us ownership of Customer Content or permit us to identify the Customer publicly without permission.

We may collect and use service, performance, security and usage information to operate, secure and improve the Service. We may also use aggregated or de-identified information for analytics, planning and product improvement, provided it does not reasonably identify you or the Customer or reveal Customer Content.

14. Fees and Taxes

Early access may be provided without charge, subject to limits or separate pilot arrangements. If fees apply, they will be described in a Customer Agreement or otherwise agreed with the Customer before charges are incurred.

Unless stated otherwise in writing:

• fees are quoted in Australian dollars;
• fees exclude GST and other applicable taxes; and
• the Customer is responsible for applicable taxes other than taxes based on our net income.

We will not introduce a new charge for an existing Customer's use without giving that Customer notice and obtaining any agreement required by law or the applicable Customer Agreement.

15. Security

We use reasonable administrative, technical and organisational safeguards designed to protect the Service and Customer Content. Depending on the available product functionality, these may include authenticated access, role-based permissions, tenant separation, encryption in transit and at rest, logging, monitoring, controlled exports and secure cloud infrastructure.

No online service can be guaranteed to be completely secure or continuously available. You are responsible for applying appropriate access controls within your organisation, selecting suitable content for processing and maintaining independent copies of information needed for business continuity.

We do not claim certification under SOC 2, ISO 27001 or another formal security standard unless we state that certification expressly and can substantiate it.

16. Availability, Support and Changes to the Service

Unless a Customer Agreement states otherwise, the Service is provided without a service-level commitment. Maintenance, incidents, provider outages, testing or product changes may make some or all of the Service temporarily unavailable.

We will use reasonable efforts to operate and support the Service during early access, but we do not guarantee that it will be uninterrupted, error-free or compatible with every system, file or workflow.

We may change the Service where reasonably necessary to:

• improve functionality or usability;
• address security, legal, technical or operational requirements;
• respond to changes by third-party providers; or
• develop the early-access product.

We will provide reasonable notice where a change materially reduces core functionality used by an active Customer, unless urgent security, legal or operational circumstances make advance notice impracticable.

17. Suspension

We may restrict or suspend access where we reasonably believe it is necessary to:

• address a material breach of these Terms;
• prevent or contain a security incident or material risk;
• protect another customer, third party or the Service;
• comply with law or a binding direction; or
• address overdue fees under an applicable Customer Agreement.

Where reasonably practicable, we will notify the affected Customer, explain the reason and provide a reasonable opportunity to remedy the issue before suspension. We may act immediately where delay would create a material security, legal or operational risk.

We will limit a suspension in scope and duration where reasonably practicable and restore access after the relevant issue has been resolved.

18. Ending Use of the Service

You may stop using the Service at any time. A Customer may request closure of its workspace by contacting anurag@rivoraconnect.com.au, subject to any Customer Agreement.

We may end early-access access:

• by providing reasonable notice where we discontinue the relevant pilot or Service;
• if the Customer materially breaches these Terms and does not remedy the breach within a reasonable period after notice, where the breach can be remedied; or
• immediately where necessary for serious security risk, unlawful conduct, insolvency, a non-remediable material breach or legal compliance.

When access ends, the right to use the Service ends. Where available and legally permitted, we will provide the Customer a reasonable opportunity to export its then-current feature packs or other supported workspace content before planned closure, unless access has been ended for serious misuse or security reasons.

Following termination, we may retain Customer Content for a limited period for backup recovery, security, dispute resolution and legal compliance before deletion or de-identification under our retention practices. Content stored in backups may remain until those backups are securely overwritten or expire in the ordinary course.

Sections that by their nature should continue after termination will survive, including sections concerning ownership, confidentiality, Generated Outputs, feedback, disclaimers, liability, disputes and general legal terms.

19. Intellectual Property and Brand Use

The Service is owned by Rivora or its licensors and is protected by intellectual property laws. Except for the limited rights expressly provided in these Terms, no rights are granted to you.

Neither party may use the other party's name, logo or trade marks in advertising, public customer lists, case studies or announcements without prior permission, except where required by law. You may accurately identify Rivora as a service provider within your internal documentation and approved technical records.

20. Disclaimers and Mandatory Rights

Nothing in these Terms excludes, restricts or modifies a guarantee, right or remedy that cannot lawfully be excluded, restricted or modified, including any applicable rights under the Australian Consumer Law.

Subject to those mandatory rights, and to the maximum extent permitted by law:

• the Service is provided on an as available basis during early access;
• we do not make implied warranties of merchantability, fitness for a particular purpose, non-infringement or uninterrupted availability; and
• we do not warrant that Generated Outputs will be complete, accurate, unique, error-free or suitable for implementation without human review.

Where a mandatory guarantee applies and our liability can lawfully be limited, our liability is limited, at our option, to resupplying the affected services or paying the reasonable cost of having those services supplied again.

21. Limitation of Liability

Nothing in these Terms limits or excludes liability that cannot lawfully be limited or excluded, including liability for fraud, wilful misconduct or applicable rights under the Australian Consumer Law.

To the maximum extent permitted by law, neither party will be liable to the other for indirect, incidental, special or consequential loss, or loss of profit, revenue, business opportunity, anticipated savings, goodwill or reputation, arising from or relating to the Service, even if advised that such loss may occur.

To the maximum extent permitted by law, Rivora's total aggregate liability arising from or relating to the Service in any 12-month period is limited to the greater of:

• AUD $100; or
• the fees paid or payable by the Customer to Rivora for the Service during that 12-month period.

The exclusions and limits in this section apply only to the extent they are fair, reasonable and enforceable in the circumstances and do not override a remedy available under a Customer Agreement or mandatory law.

22. Changes to these Terms

We may update these Terms to reflect changes to the Service, law, security requirements or our business practices.

We will publish the updated Terms at https://rivoraconnect.com.au/terms and update the Last updated date. We will provide reasonable notice to active Customers of a material change that adversely affects their rights or obligations.

Unless a change is required sooner for legal or security reasons, a material change will take effect on the date stated in the notice. If you do not agree to a material change, you may stop using the Service before it takes effect and request closure of your account or workspace, subject to any Customer Agreement.

Your continued use after the effective date of an updated version constitutes acceptance of the updated Terms where permitted by law.

23. Disputes

Before starting court proceedings, each party agrees to give the other written notice describing the dispute and to make a genuine attempt to resolve it through good-faith discussion for at least 30 days.

This requirement does not prevent either party from seeking urgent interlocutory or injunctive relief, taking action to preserve a legal right or using a complaint or remedy available under applicable consumer law.

Notices about disputes may be sent to anurag@rivoraconnect.com.au. We may send notices to the account or Customer contact details provided to us.

24. Governing Law

These Terms are governed by the laws of New South Wales, Australia. The courts of New South Wales and courts entitled to hear appeals from them have non-exclusive jurisdiction over disputes relating to these Terms or the Service.

25. General Terms

These Terms and any applicable Customer Agreement form the agreement between the parties concerning the Service and replace prior discussions or representations about their subject matter.

You may not assign or transfer these Terms without our prior written consent, which we will not unreasonably withhold. We may assign these Terms as part of a genuine corporate restructure, financing, merger, acquisition or sale of all or substantially all of the relevant business, provided the assignment does not materially reduce your rights.

If a provision is held to be invalid or unenforceable, it will be read down to the minimum extent necessary or removed, and the remaining provisions will continue to operate.

A failure or delay in enforcing a provision is not a waiver of that provision. A waiver must be in writing and applies only to the specific circumstance for which it is given.

Nothing in these Terms creates an employment, agency, partnership, fiduciary or joint-venture relationship between the parties.

Headings are for convenience only and do not affect interpretation. Words such as including do not limit the examples that follow them.

26. Contact Us

Questions, legal notices or concerns about these Terms may be sent to:

Rivora Holdings Pty Ltd
ABN 87 688 261 234
New South Wales, Australia
Email: anurag@rivoraconnect.com.au