TERMS OF SERVICE

AGREEMENT TO OUR LEGAL TERMS

We are Maverick Advisors ("Company," "we," "us," or "our"), a company registered in New York, United States.

We operate the website https://maverick-advisors.com (the "Site"), as well as any other related products and services that refer or link to these legal terms (the "Legal Terms") (collectively, the "Services").

Maverick Connect is an AI-powered finance platform that provides accounting, integrations, and business insights for professional services firms.

You can contact us by email at info@maverick-advisors.com or by mail to New York, NY, United States.

These Legal Terms constitute a legally binding agreement made between you, whether personally or on behalf of an entity ("you"), and Maverick Advisors, concerning your access to and use of the Services. You agree that by accessing the Services, you have read, understood, and agreed to be bound by all of these Legal Terms. IF YOU DO NOT AGREE WITH ALL OF THESE LEGAL TERMS, THEN YOU ARE EXPRESSLY PROHIBITED FROM USING THE SERVICES AND YOU MUST DISCONTINUE USE IMMEDIATELY.

We will provide you with prior notice of any scheduled changes to the Services you are using. The modified Legal Terms will become effective upon posting or notifying you by info@maverick-advisors.com, as stated in the email message. By continuing to use the Services after the effective date of any changes, you agree to be bound by the modified terms.

The Services are intended for users who are at least 18 years old. Persons under the age of 18 are not permitted to use or register for the Services.

We recommend that you print a copy of these Legal Terms for your records.

TABLE OF CONTENTS

1. OUR SERVICES
2. INTELLECTUAL PROPERTY RIGHTS
3. USER REPRESENTATIONS
4. USER REGISTRATION
5. PURCHASES AND PAYMENT
6. SUBSCRIPTIONS
7. PROHIBITED ACTIVITIES
8. USER GENERATED CONTRIBUTIONS
9. CONTRIBUTION LICENSE
10. THIRD-PARTY INTEGRATIONS
11. THIRD-PARTY WEBSITES AND CONTENT
12. SERVICES MANAGEMENT
13. PRIVACY POLICY
14. TERM AND TERMINATION
15. MODIFICATIONS AND INTERRUPTIONS
16. GOVERNING LAW
17. DISPUTE RESOLUTION
18. CORRECTIONS
19. DISCLAIMER
20. LIMITATIONS OF LIABILITY
21. INDEMNIFICATION
22. USER DATA
23. ELECTRONIC COMMUNICATIONS, TRANSACTIONS, AND SIGNATURES
24. CALIFORNIA USERS AND RESIDENTS
25. MISCELLANEOUS
26. CONTACT US
27. DATA PROCESSING AGREEMENT
28. SUBPROCESSORS

1. OUR SERVICES

The information provided when using the Services is not intended for distribution to or use by any person or entity in any jurisdiction or country where such distribution or use would be contrary to law or regulation or which would subject us to any registration requirement within such jurisdiction or country. Accordingly, those persons who choose to access the Services from other locations do so on their own initiative and are solely responsible for compliance with local laws, if and to the extent local laws are applicable.

We implement appropriate technical and organizational security measures to protect your data, including encryption at rest and in transit (TLS 1.2+), role-based access controls, API rate limiting, and automated security scanning in our CI/CD pipeline. We are actively pursuing SOC 2 Type I certification. For details on our security practices, please see Section 27 (Data Processing Agreement).

The Services are not designed to process Protected Health Information (PHI) as defined under HIPAA. If your use case involves PHI or other specially regulated data categories, please contact us at info@maverick-advisors.com to discuss your requirements before using the Services.

2. INTELLECTUAL PROPERTY RIGHTS

Our intellectual property

We are the owner or the licensee of all intellectual property rights in our Services, including all source code, databases, functionality, software, website designs, audio, video, text, photographs, and graphics in the Services (collectively, the "Content"), as well as the trademarks, service marks, and logos contained therein (the "Marks").

Our Content and Marks are protected by copyright and trademark laws (and various other intellectual property rights and unfair competition laws) and treaties in the United States and around the world.

The Content and Marks are provided in or through the Services "AS IS" for your internal business purpose only.

Your use of our Services

Subject to your compliance with these Legal Terms, including the "PROHIBITED ACTIVITIES" section below, we grant you a non-exclusive, non-transferable, revocable license to:

• Access the Services; and
• Download or print a copy of any portion of the Content to which you have properly gained access, solely for your internal business purpose.

Except as set out in this section or elsewhere in our Legal Terms, no part of the Services and no Content or Marks may be copied, reproduced, aggregated, republished, uploaded, posted, publicly displayed, encoded, translated, transmitted, distributed, sold, licensed, or otherwise exploited for any commercial purpose whatsoever, without our express prior written permission.

If you wish to make any use of the Services, Content, or Marks other than as set out in this section or elsewhere in our Legal Terms, please address your request to: info@maverick-advisors.com. If we ever grant you the permission to post, reproduce, or publicly display any part of our Services or Content, you must identify us as the owners or licensors of the Services, Content, or Marks and ensure that any copyright or proprietary notice appears or is visible on posting, reproducing, or displaying our Content.

We reserve all rights not expressly granted to you in and to the Services, Content, and Marks.

Any breach of these Intellectual Property Rights will constitute a material breach of our Legal Terms and your right to use our Services will terminate immediately.

Your submissions

Please review this section and the "PROHIBITED ACTIVITIES" section carefully prior to using our Services to understand the (a) rights you give us and (b) obligations you have when you post or upload any content through the Services.

Submissions: By directly sending us any question, comment, suggestion, idea, feedback, or other information about the Services ("Submissions"), you agree to assign to us all intellectual property rights in such Submission. You agree that we shall own this Submission and be entitled to its unrestricted use and dissemination for any lawful purpose, commercial or otherwise, without acknowledgment or compensation to you.

You are responsible for what you post or upload: By sending us Submissions through any part of the Services you:

• Confirm that you have read and agree with our "PROHIBITED ACTIVITIES" and will not post, send, publish, upload, or transmit through the Services any Submission that is illegal, harassing, hateful, harmful, defamatory, obscene, bullying, abusive, discriminatory, threatening to any person or group, sexually explicit, false, inaccurate, deceitful, or misleading;
• To the extent permissible by applicable law, waive any and all moral rights to any such Submission;
• Warrant that any such Submission are original to you or that you have the necessary rights and licenses to submit such Submissions and that you have full authority to grant us the above-mentioned rights in relation to your Submissions; and
• Warrant and represent that your Submissions do not constitute confidential information.

You are solely responsible for your Submissions and you expressly agree to reimburse us for any and all losses that we may suffer because of your breach of (a) this section, (b) any third party's intellectual property rights, or (c) applicable law.

3. USER REPRESENTATIONS

By using the Services, you represent and warrant that:

• All registration information you submit will be true, accurate, current, and complete;
• You will maintain the accuracy of such information and promptly update such registration information as necessary;
• You have the legal capacity and you agree to comply with these Legal Terms;
• You are not a minor in the jurisdiction in which you reside;
• You will not access the Services through automated or non-human means, whether through a bot, script, or otherwise;
• You will not use the Services for any illegal or unauthorized purpose; and
• Your use of the Services will not violate any applicable law or regulation.

If you provide any information that is untrue, inaccurate, not current, or incomplete, we have the right to suspend or terminate your account and refuse any and all current or future use of the Services (or any portion thereof).

4. USER REGISTRATION

You may be required to register to use the Services. You agree to keep your password confidential and will be responsible for all use of your account and password. We reserve the right to remove, reclaim, or change a username you select if we determine, in our sole discretion, that such username is inappropriate, obscene, or otherwise objectionable.

5. PURCHASES AND PAYMENT

All payments are processed through Stripe. We accept the following forms of payment:

• Visa
• Mastercard
• American Express
• Discover
• ACH bank transfer (where available)

You agree to provide current, complete, and accurate purchase and account information for all purchases made via the Services. You further agree to promptly update account and payment information, including email address, payment method, and payment card expiration date, so that we can complete your transactions and contact you as needed. Sales tax will be added to the price of purchases as deemed required by us. We may change prices at any time. All payments shall be in US dollars.

You agree to pay all charges at the prices then in effect for your purchases, and you authorize us to charge your chosen payment provider for any such amounts upon placing your order. We reserve the right to correct any errors or mistakes in pricing, even if we have already requested or received payment.

We reserve the right to refuse any order placed through the Services. We may, in our sole discretion, limit or cancel quantities purchased per person, per household, or per order.

6. SUBSCRIPTIONS

Billing and Renewal

Your subscription will continue and automatically renew unless canceled. You consent to our charging your payment method on a recurring basis without requiring your prior approval for each recurring charge, until such time as you cancel the applicable order. The length of your billing cycle is monthly.

Onboarding

New clients may receive an onboarding period during which we configure integrations, import historical data, and establish your accounting workflows. The duration and scope of onboarding are agreed upon in your service agreement. During onboarding, you will have access to the platform and our team to ensure a smooth transition.

Cancellation

All purchases are non-refundable. You can cancel your subscription at any time by logging into your account or by contacting us. Your cancellation will take effect at the end of the current paid term. If you have any questions or are unsatisfied with our Services, please email us at info@maverick-advisors.com.

Fee Changes

We may, from time to time, make changes to the subscription fee and will communicate any price changes to you in accordance with applicable law.

7. PROHIBITED ACTIVITIES

You may not access or use the Services for any purpose other than that for which we make the Services available. The Services may not be used in connection with any commercial endeavors except those that are specifically endorsed or approved by us.

As a user of the Services, you agree not to:

• Systematically retrieve data or other content from the Services to create or compile, directly or indirectly, a collection, compilation, database, or directory without written permission from us.
• Trick, defraud, or mislead us and other users, especially in any attempt to learn sensitive account information such as user passwords.
• Circumvent, disable, or otherwise interfere with security-related features of the Services, including features that prevent or restrict the use or copying of any Content or enforce limitations on the use of the Services and/or the Content contained therein.
• Disparage, tarnish, or otherwise harm, in our opinion, us and/or the Services.
• Use any information obtained from the Services in order to harass, abuse, or harm another person.
• Make improper use of our support services or submit false reports of abuse or misconduct.
• Use the Services in a manner inconsistent with any applicable laws or regulations.
• Engage in unauthorized framing of or linking to the Services.
• Upload or transmit (or attempt to upload or to transmit) viruses, Trojan horses, or other material, including excessive use of capital letters and spamming (continuous posting of repetitive text), that interferes with any party's uninterrupted use and enjoyment of the Services or modifies, impairs, disrupts, alters, or interferes with the use, features, functions, operation, or maintenance of the Services.
• Engage in any automated use of the system, such as using scripts to send comments or messages, or using any data mining, robots, or similar data gathering and extraction tools.
• Delete the copyright or other proprietary rights notice from any Content.
• Attempt to impersonate another user or person or use the username of another user.
• Upload or transmit (or attempt to upload or to transmit) any material that acts as a passive or active information collection or transmission mechanism, including without limitation, clear graphics interchange formats ("gifs"), 1x1 pixels, web bugs, cookies, or other similar devices (sometimes referred to as "spyware" or "passive collection mechanisms" or "pcms").
• Interfere with, disrupt, or create an undue burden on the Services or the networks or services connected to the Services.
• Harass, annoy, intimidate, or threaten any of our employees or agents engaged in providing any portion of the Services to you.
• Attempt to bypass any measures of the Services designed to prevent or restrict access to the Services, or any portion of the Services.
• Copy or adapt the Services' software, including but not limited to Flash, PHP, HTML, JavaScript, or other code.
• Except as permitted by applicable law, decipher, decompile, disassemble, or reverse engineer any of the software comprising or in any way making up a part of the Services.
• Except as may be the result of standard search engine or Internet browser usage, use, launch, develop, or distribute any automated system, including without limitation, any spider, robot, cheat utility, scraper, or offline reader that accesses the Services, or use or launch any unauthorized script or other software.
• Make any unauthorized use of the Services, including collecting usernames and/or email addresses of users by electronic or other means for the purpose of sending unsolicited email, or creating user accounts by automated means or under false pretenses.
• Use the Services as part of any effort to compete with us or otherwise use the Services and/or the Content for any revenue-generating endeavor or commercial enterprise.
• Sell or otherwise transfer your profile.

8. USER GENERATED CONTRIBUTIONS

The Services does not offer users to submit or post content. We may provide you with the opportunity to create, submit, post, display, transmit, perform, publish, distribute, or broadcast content and materials to us or on the Services, including but not limited to text, writings, video, audio, photographs, graphics, comments, suggestions, or personal information or other material (collectively, "Contributions"). Contributions may be viewable by other users of the Services and through third-party websites. When you create or make available any Contributions, you thereby represent and warrant that:

• The creation, distribution, transmission, public display, or performance, and the accessing, downloading, or copying of your Contributions do not and will not infringe the proprietary rights, including but not limited to the copyright, patent, trademark, trade secret, or moral rights of any third party.
• You are the creator and owner of or have the necessary licenses, rights, consents, releases, and permissions to use and to authorize us, the Services, and other users of the Services to use your Contributions in any manner contemplated by the Services and these Legal Terms.
• You have the written consent, release, and/or permission of each and every identifiable individual person in your Contributions to use the name or likeness of each and every such identifiable individual person to enable inclusion and use of your Contributions in any manner contemplated by the Services and these Legal Terms.
• Your Contributions are not false, inaccurate, or misleading.
• Your Contributions are not unsolicited or unauthorized advertising, promotional materials, pyramid schemes, chain letters, spam, mass mailings, or other forms of solicitation.
• Your Contributions are not obscene, lewd, lascivious, filthy, violent, harassing, libelous, slanderous, or otherwise objectionable (as determined by us).
• Your Contributions do not ridicule, mock, disparage, intimidate, or abuse anyone.
• Your Contributions are not used to harass or threaten (in the legal sense of those terms) any other person and to promote violence against a specific person or class of people.
• Your Contributions do not violate any applicable law, regulation, or rule.
• Your Contributions do not violate the privacy or publicity rights of any third party.
• Your Contributions do not violate any applicable law concerning child pornography, or otherwise intended to protect the health or well-being of minors.
• Your Contributions do not include any offensive comments that are connected to race, national origin, gender, sexual preference, or physical handicap.
• Your Contributions do not otherwise violate, or link to material that violates, any provision of these Legal Terms, or any applicable law or regulation.

Any use of the Services in violation of the foregoing violates these Legal Terms and may result in, among other things, termination or suspension of your rights to use the Services.

9. CONTRIBUTION LICENSE

You and Services agree that we may access, store, process, and use any information and personal data that you provide and your choices (including settings).

By submitting suggestions or other feedback regarding the Services, you agree that we can use and share such feedback for any purpose without compensation to you.

We do not assert any ownership over your Contributions. You retain full ownership of all of your Contributions and any intellectual property rights or other proprietary rights associated with your Contributions. We are not liable for any statements or representations in your Contributions provided by you in any area on the Services. You are solely responsible for your Contributions to the Services and you expressly agree to exonerate us from any and all responsibility and to refrain from any legal action against us regarding your Contributions.

10. THIRD-PARTY INTEGRATIONS

As part of the functionality of the Services, you may connect your account with third-party platforms ("Connected Platforms") such as QuickBooks Online, HubSpot, Airtable, Asana, Stripe, Harvest, and other business tools. Connections are established through OAuth 2.0 authorization or API key authentication, depending on the platform.

By authorizing a Connected Platform, you:

• Grant us permission to access, retrieve, and synchronize data from the Connected Platform as necessary to provide the Services, including financial transactions, contacts, projects, time entries, and other business data as described in our Privacy Policy
• Represent and warrant that you are entitled to authorize the connection and that doing so does not violate any terms or agreements you have with the Connected Platform provider
• Acknowledge that the scope of data we access depends on the permissions you grant during the OAuth authorization flow and the configuration of your integrations within the Services

Data synchronization: We synchronize data from Connected Platforms on a recurring schedule (typically every 15 minutes for incremental changes and daily for full reconciliation). Data is stored in our managed database to provide reporting, analysis, and AI-powered insights.

Disconnecting: You may disconnect any Connected Platform at any time through your account settings or by contacting us. Upon disconnection, we will revoke the OAuth tokens and cease synchronizing data from that platform. Previously synchronized data will be retained in accordance with our data retention policies unless you request deletion.

YOUR RELATIONSHIP WITH EACH CONNECTED PLATFORM IS GOVERNED SOLELY BY YOUR AGREEMENT(S) WITH THAT PLATFORM PROVIDER. We are not responsible for the availability, accuracy, or policies of any Connected Platform.

11. THIRD-PARTY WEBSITES AND CONTENT

The Services may contain (or you may be sent via the Site) links to other websites ("Third-Party Websites") as well as articles, photographs, text, graphics, pictures, designs, music, sound, video, information, applications, software, and other content or items belonging to or originating from third parties ("Third-Party Content"). Such Third-Party Websites and Third-Party Content are not investigated, monitored, or checked for accuracy, appropriateness, or completeness by us, and we are not responsible for any Third-Party Websites accessed through the Services or any Third-Party Content posted on, available through, or installed from the Services, including the content, accuracy, offensiveness, opinions, reliability, privacy practices, or other policies of or contained in the Third-Party Websites or the Third-Party Content.

Inclusion of, linking to, or permitting the use or installation of any Third-Party Websites or any Third-Party Content does not imply approval or endorsement thereof by us. If you decide to leave the Services and access the Third-Party Websites or to use or install any Third-Party Content, you do so at your own risk, and you should be aware these Legal Terms no longer govern. You should review the applicable terms and policies, including privacy and data gathering practices, of any website to which you navigate from the Services or relating to any applications you use or install from the Services. Any purchases you make through Third-Party Websites will be through other websites and from other companies, and we take no responsibility whatsoever in relation to such purchases which are exclusively between you and the applicable third party.

You agree and acknowledge that we do not endorse the products or services offered on Third-Party Websites and you shall hold us blameless from any harm caused by your purchase of such products or services. Additionally, you shall hold us blameless from any losses sustained by you or harm caused to you relating to or resulting in any way from any Third-Party Content or any contact with Third-Party Websites.

12. SERVICES MANAGEMENT

We reserve the right, but not the obligation, to:

• Monitor the Services for violations of these Legal Terms;
• Take appropriate legal action against anyone who, in our sole discretion, violates the law or these Legal Terms, including without limitation, reporting such user to law enforcement authorities;
• In our sole discretion and without limitation, refuse, restrict access to, limit the availability of, or disable (to the extent technologically feasible) any of your Contributions or any portion thereof;
• In our sole discretion and without limitation, notice, or liability, to remove from the Services or otherwise disable all files and content that are excessive in size or are in any way burdensome to our systems; and
• Otherwise manage the Services in a manner designed to protect our rights and property and to facilitate the proper functioning of the Services.

13. PRIVACY POLICY

We care about data privacy and security. Please review our Privacy Policy: Privacy Policy. By using the Services, you agree to be bound by our Privacy Policy, which is incorporated into these Legal Terms. Please be advised the Services are hosted in the United States. If you access the Services from any other region of the world with laws or other requirements governing personal data collection, use, or disclosure that differ from applicable laws in the United States, then through your continued use of the Services, you are transferring your data to the United States, and you expressly consent to have your data transferred to and processed in the United States.

For enterprise and B2B clients, Section 27 (Data Processing Agreement) provides additional detail on how we process data on your behalf, our security measures, subprocessor disclosures, and your audit rights.

14. TERM AND TERMINATION

These Legal Terms shall remain in full force and effect while you use the Services. WITHOUT LIMITING ANY OTHER PROVISION OF THESE LEGAL TERMS, WE RESERVE THE RIGHT TO, IN OUR SOLE DISCRETION AND WITHOUT NOTICE OR LIABILITY, DENY ACCESS TO AND USE OF THE SERVICES (INCLUDING BLOCKING CERTAIN IP ADDRESSES), TO ANY PERSON FOR ANY REASON OR FOR NO REASON, INCLUDING WITHOUT LIMITATION FOR BREACH OF ANY REPRESENTATION, WARRANTY, OR COVENANT CONTAINED IN THESE LEGAL TERMS OR OF ANY APPLICABLE LAW OR REGULATION. WE MAY TERMINATE YOUR USE OR PARTICIPATION IN THE SERVICES OR DELETE YOUR ACCOUNT AND ANY CONTENT OR INFORMATION THAT YOU POSTED AT ANY TIME, WITHOUT WARNING, IN OUR SOLE DISCRETION.

If we terminate or suspend your account for any reason, you are prohibited from registering and creating a new account under your name, a fake or borrowed name, or the name of any third party, even if you may be acting on behalf of the third party. In addition to terminating or suspending your account, we reserve the right to take appropriate legal action, including without limitation pursuing civil, criminal, and injunctive redress.

15. MODIFICATIONS AND INTERRUPTIONS

We reserve the right to change, modify, or remove the contents of the Services at any time or for any reason at our sole discretion without notice. However, we have no obligation to update any information on our Services. We will not be liable to you or any third party for any modification, price change, suspension, or discontinuance of the Services.

We cannot guarantee the Services will be available at all times. We may experience hardware, software, or other problems or need to perform maintenance related to the Services, resulting in interruptions, delays, or errors. We reserve the right to change, revise, update, suspend, discontinue, or otherwise modify the Services at any time or for any reason without notice to you. You agree that we have no liability whatsoever for any loss, damage, or inconvenience caused by your inability to access or use the Services during any downtime or discontinuance of the Services. Nothing in these Legal Terms will be construed to obligate us to maintain and support the Services or to supply any corrections, updates, or releases in connection therewith.

16. GOVERNING LAW

These Legal Terms shall be governed by and defined following the laws of the State of New York. Maverick Advisors and yourself irrevocably consent that the courts of New York shall have exclusive jurisdiction to resolve any dispute which may arise in connection with these Legal Terms.

17. DISPUTE RESOLUTION

Informal Negotiations

To expedite resolution and control the cost of any dispute, controversy, or claim related to these Legal Terms (each a "Dispute" and collectively, the "Disputes") brought by either you or us (individually, a "Party" and collectively, the "Parties"), the Parties agree to first attempt to negotiate any Dispute (except those Disputes expressly provided below) informally for at least thirty (30) days before initiating arbitration. Such informal negotiations commence upon written notice from one Party to the other Party.

Binding Arbitration

Any dispute arising out of or in connection with these Legal Terms, including any question regarding its existence, validity, or termination, shall be referred to and finally resolved by the American Arbitration Association ("AAA") under the Rules of the American Arbitration Association then in force, which rules are deemed to be incorporated by reference into this clause. The number of arbitrators shall be one (1). The seat, or legal place, of arbitration shall be New York, New York. The language of the proceedings shall be English. The governing law of these Legal Terms shall be substantive law of the State of New York.

Restrictions

The Parties agree that any arbitration shall be limited to the Dispute between the Parties individually. To the full extent permitted by law, (a) no arbitration shall be joined with any other proceeding; (b) there is no right or authority for any Dispute to be arbitrated on a class-action basis or to utilize class action procedures; and (c) there is no right or authority for any Dispute to be brought in a purported representative capacity on behalf of the general public or any other persons.

Exceptions to Informal Negotiations and Arbitration

The Parties agree that the following Disputes are not subject to the above provisions concerning informal negotiations and binding arbitration: (a) any Disputes seeking to enforce or protect, or concerning the validity of, any of the intellectual property rights of a Party; (b) any Dispute related to, or arising from, allegations of theft, piracy, invasion of privacy, or unauthorized use; and (c) any claim for injunctive relief. If this provision is found to be illegal or unenforceable, then neither Party will elect to arbitrate any Dispute falling within that portion of this provision found to be illegal or unenforceable and such Dispute shall be decided by a court of competent jurisdiction within the courts listed for jurisdiction above, and the Parties agree to submit to the personal jurisdiction of that court.

Limitation Period

Any cause of action or claim you may have arising out of or relating to these Legal Terms or the Services must be commenced within one (1) year after the cause of action accrues; otherwise, such cause of action or claim is permanently barred.

18. CORRECTIONS

There may be information on the Services that contains typographical errors, inaccuracies, or omissions, including descriptions, pricing, availability, and various other information. We reserve the right to correct any errors, inaccuracies, or omissions and to change or update the information on the Services at any time, without prior notice.

19. DISCLAIMER

THE SERVICES ARE PROVIDED ON AN AS-IS AND AS-AVAILABLE BASIS. YOU AGREE THAT YOUR USE OF THE SERVICES WILL BE AT YOUR SOLE RISK. TO THE FULLEST EXTENT PERMITTED BY LAW, WE DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, IN CONNECTION WITH THE SERVICES AND YOUR USE THEREOF, INCLUDING, WITHOUT LIMITATION, THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. WE MAKE NO WARRANTIES OR REPRESENTATIONS ABOUT THE ACCURACY OR COMPLETENESS OF THE SERVICES' CONTENT OR THE CONTENT OF ANY WEBSITES OR MOBILE APPLICATIONS LINKED TO THE SERVICES AND WE WILL ASSUME NO LIABILITY OR RESPONSIBILITY FOR ANY (1) ERRORS, MISTAKES, OR INACCURACIES OF CONTENT AND MATERIALS, (2) PERSONAL INJURY OR PROPERTY DAMAGE, OF ANY NATURE WHATSOEVER, RESULTING FROM YOUR ACCESS TO AND USE OF THE SERVICES, (3) ANY UNAUTHORIZED ACCESS TO OR USE OF OUR SECURE SERVERS AND/OR ANY AND ALL PERSONAL INFORMATION AND/OR FINANCIAL INFORMATION STORED THEREIN, (4) ANY INTERRUPTION OR CESSATION OF TRANSMISSION TO OR FROM THE SERVICES, (5) ANY BUGS, VIRUSES, TROJAN HORSES, OR THE LIKE WHICH MAY BE TRANSMITTED TO OR THROUGH THE SERVICES BY ANY THIRD PARTY, AND/OR (6) ANY ERRORS OR OMISSIONS IN ANY CONTENT AND MATERIALS OR FOR ANY LOSS OR DAMAGE OF ANY KIND INCURRED AS A RESULT OF THE USE OF ANY CONTENT POSTED, TRANSMITTED, OR OTHERWISE MADE AVAILABLE VIA THE SERVICES. WE DO NOT WARRANT, ENDORSE, GUARANTEE, OR ASSUME RESPONSIBILITY FOR ANY PRODUCT OR SERVICE ADVERTISED OR OFFERED BY A THIRD PARTY THROUGH THE SERVICES, ANY HYPERLINKED WEBSITE, OR ANY WEBSITE OR MOBILE APPLICATION FEATURED IN ANY BANNER OR OTHER ADVERTISING, AND WE WILL NOT BE A PARTY TO OR IN ANY WAY BE RESPONSIBLE FOR MONITORING ANY TRANSACTION BETWEEN YOU AND ANY THIRD-PARTY PROVIDERS OF PRODUCTS OR SERVICES. AS WITH THE PURCHASE OF A PRODUCT OR SERVICE THROUGH ANY MEDIUM OR IN ANY ENVIRONMENT, YOU SHOULD USE YOUR BEST JUDGMENT AND EXERCISE CAUTION WHERE APPROPRIATE.

20. LIMITATIONS OF LIABILITY

IN NO EVENT WILL WE OR OUR DIRECTORS, EMPLOYEES, OR AGENTS BE LIABLE TO YOU OR ANY THIRD PARTY FOR ANY DIRECT, INDIRECT, CONSEQUENTIAL, EXEMPLARY, INCIDENTAL, SPECIAL, OR PUNITIVE DAMAGES, INCLUDING LOST PROFIT, LOST REVENUE, LOSS OF DATA, OR OTHER DAMAGES ARISING FROM YOUR USE OF THE SERVICES, EVEN IF WE HAVE BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES. NOTWITHSTANDING ANYTHING TO THE CONTRARY CONTAINED HEREIN, OUR LIABILITY TO YOU FOR ANY CAUSE WHATSOEVER AND REGARDLESS OF THE FORM OF THE ACTION, WILL AT ALL TIMES BE LIMITED TO THE AMOUNT PAID, IF ANY, BY YOU TO US DURING THE SIX (6) MONTH PERIOD PRIOR TO ANY CAUSE OF ACTION ARISING. CERTAIN US STATE LAWS AND INTERNATIONAL LAWS DO NOT ALLOW LIMITATIONS ON IMPLIED WARRANTIES OR THE EXCLUSION OR LIMITATION OF CERTAIN DAMAGES. IF THESE LAWS APPLY TO YOU, SOME OR ALL OF THE ABOVE DISCLAIMERS OR LIMITATIONS MAY NOT APPLY TO YOU, AND YOU MAY HAVE ADDITIONAL RIGHTS.

Enterprise clients: If you have entered into a separate Master Services Agreement (MSA) with us, the liability provisions of your MSA shall take precedence over this section to the extent they conflict.

21. INDEMNIFICATION

You agree to defend, indemnify, and hold us harmless, including our subsidiaries, affiliates, and all of our respective officers, agents, partners, and employees, from and against any loss, damage, liability, claim, or demand, including reasonable attorneys' fees and expenses, made by any third party due to or arising out of: (1) use of the Services; (2) breach of these Legal Terms; (3) any breach of your representations and warranties set forth in these Legal Terms; (4) your violation of the rights of a third party, including but not limited to intellectual property rights; or (5) any overt harmful act toward any other user of the Services with whom you connected via the Services. Notwithstanding the foregoing, we reserve the right, at your expense, to assume the exclusive defense and control of any matter for which you are required to indemnify us, and you agree to cooperate, at your expense, with our defense of such claims. We will use reasonable efforts to notify you of any such claim, action, or proceeding which is subject to this indemnification upon becoming aware of it.

22. USER DATA

We will maintain certain data that you transmit to the Services for the purpose of managing the performance of the Services, as well as data relating to your use of the Services. Although we perform regular routine backups of data, you are solely responsible for all data that you transmit or that relates to any activity you have undertaken using the Services. You agree that we shall have no liability to you for any loss or corruption of any such data, and you hereby waive any right of action against us arising from any such loss or corruption of such data.

23. ELECTRONIC COMMUNICATIONS, TRANSACTIONS, AND SIGNATURES

Visiting the Services, sending us emails, and completing online forms constitute electronic communications. You consent to receive electronic communications, and you agree that all agreements, notices, disclosures, and other communications we provide to you electronically, via email and on the Services, satisfy any legal requirement that such communication be in writing. YOU HEREBY AGREE TO THE USE OF ELECTRONIC SIGNATURES, CONTRACTS, ORDERS, AND OTHER RECORDS, AND TO ELECTRONIC DELIVERY OF NOTICES, POLICIES, AND RECORDS OF TRANSACTIONS INITIATED OR COMPLETED BY US OR VIA THE SERVICES. You hereby waive any rights or requirements under any statutes, regulations, rules, ordinances, or other laws in any jurisdiction which require an original signature or delivery or retention of non-electronic records, or to payments or the granting of credits by any means other than electronic means.

24. CALIFORNIA USERS AND RESIDENTS

If any complaint with us is not satisfactorily resolved, you can contact the Complaint Assistance Unit of the Division of Consumer Services of the California Department of Consumer Affairs in writing at 1625 North Market Blvd., Suite N 112, Sacramento, California 95834 or by telephone at (800) 952-5210 or (916) 445-1254.

25. MISCELLANEOUS

These Legal Terms and any policies or operating rules posted by us on the Services or in respect to the Services constitute the entire agreement and understanding between you and us. Our failure to exercise or enforce any right or provision of these Legal Terms shall not operate as a waiver of such right or provision. These Legal Terms operate to the fullest extent permissible by law. We may assign any or all of our rights and obligations to others at any time. We shall not be responsible or liable for any loss, damage, delay, or failure to act caused by any cause beyond our reasonable control.

If any provision or part of a provision of these Legal Terms is determined to be unlawful, void, or unenforceable, that provision or part of the provision is deemed severable from these Legal Terms and does not affect the validity and enforceability of any remaining provisions.

There is no joint venture, partnership, employment or agency relationship created between you and us as a result of these Legal Terms or use of the Services. You agree that these Legal Terms will not be construed against us by virtue of having drafted them. You hereby waive any and all defenses you may have based on the electronic form of these Legal Terms and the lack of signing by the parties hereto to execute these Legal Terms.

26. CONTACT US

In order to resolve a complaint regarding the Services or to receive further information regarding use of the Services, please contact us at:

Maverick Advisors
New York, NY
United States
info@maverick-advisors.com

27. DATA PROCESSING AGREEMENT

This section constitutes the Data Processing Agreement ("DPA") between Maverick Advisors ("Processor" or "we") and the entity agreeing to these terms ("Controller" or "you") for the provision of accounting, finance, and AI-powered business intelligence services (the "Services").

This DPA applies where and only to the extent that we process Personal Data on your behalf in the course of providing the Services, and such Personal Data is subject to applicable data protection laws.

Note: This DPA is provided for transparency and may be superseded by a separately negotiated Master Services Agreement (MSA) for enterprise clients. We recommend that all clients review this DPA with legal counsel.

27.1 DEFINITIONS

• "Controller" means the entity that determines the purposes and means of processing Personal Data — i.e., you, the client.
• "Processor" means the entity that processes Personal Data on behalf of the Controller — i.e., Maverick Advisors.
• "Personal Data" means any information relating to an identified or identifiable natural person that is processed by the Processor on behalf of the Controller in connection with the Services.
• "Subprocessor" means any third party engaged by the Processor to process Personal Data on behalf of the Controller.
• "Data Subject" means the identified or identifiable natural person to whom Personal Data relates.
• "Personal Data Breach" means a breach of security leading to the accidental or unlawful destruction, loss, alteration, unauthorized disclosure of, or access to, Personal Data.
• "Applicable Data Protection Laws" means all laws and regulations applicable to the processing of Personal Data under this DPA, including US state privacy laws (CCPA/CPRA, etc.) and, where applicable, the EU General Data Protection Regulation (GDPR).

27.2 SCOPE AND PURPOSE OF PROCESSING

The Processor shall process Personal Data only on documented instructions from the Controller, unless required to do so by applicable law. The purpose of processing is to provide the Services as described in these Terms of Service, including:

• Accounting and bookkeeping — syncing, reconciling, and reporting on financial transactions from connected platforms (e.g., QuickBooks Online, Stripe)
• Third-party integrations — connecting to and synchronizing data from platforms authorized by the Controller (e.g., HubSpot, Airtable, Asana, Harvest)
• AI-powered analysis — processing financial and operational data through large language models (LLMs) to generate insights, summaries, and recommendations
• Reporting and dashboards — aggregating and presenting data through the Maverick Connect portal and connected analytics tools
• Platform administration — user account management, authentication, billing, and support

27.3 CATEGORIES OF DATA PROCESSED

The following table describes the categories of Personal Data processed and the Data Subjects to whom they relate:

27.4 DATA SECURITY MEASURES

The Processor implements and maintains appropriate technical and organizational measures to protect Personal Data, including:

• Encryption at rest: Sensitive credentials (API keys, OAuth tokens) are encrypted using Fernet symmetric encryption before storage in the database
• Encryption in transit: All data transmitted between clients, the platform, and third-party services is encrypted using TLS 1.2+
• Access control: Role-based access control (RBAC) with admin, staff, and client roles. All API endpoints enforce authentication and authorization checks
• Rate limiting: API rate limiting to prevent abuse and brute-force attacks
• Static analysis: Automated SAST (Bandit), dependency auditing (pip-audit, npm audit), and secrets scanning (gitleaks) in CI/CD pipeline
• Infrastructure: Hosted on Railway (US) with managed PostgreSQL, isolated application containers, and automated deployments from version-controlled source code
• SOC 2 roadmap: We are actively pursuing SOC 2 Type I certification (targeted 2026) and Type II certification thereafter. Current readiness is approximately 75%
• AI provider security: AI processing uses the Anthropic API with a commercial agreement that includes zero data retention — prompts and responses are not stored or used for model training by Anthropic

27.5 SUBPROCESSORS

The Controller authorizes the Processor to engage the subprocessors listed in Section 28 (Subprocessors). The Processor shall:

• Provide the Controller with at least 30 days' prior written notice before adding or replacing a subprocessor, by updating Section 28 and notifying clients via email
• Impose data protection obligations on each subprocessor that are no less protective than those in this DPA
• Remain fully liable to the Controller for the performance of each subprocessor's obligations

If the Controller objects to a new subprocessor, the Controller may terminate the affected Services by providing written notice within 30 days of being notified.

Note: Third-party platforms connected at the Controller's direction (e.g., QuickBooks Online, HubSpot, Airtable) are not subprocessors — they are independent controllers or processors under the Controller's own agreements with those platforms.

27.6 DATA SUBJECT RIGHTS

The Processor shall assist the Controller in responding to requests from Data Subjects exercising their rights under Applicable Data Protection Laws (including rights of access, rectification, erasure, portability, and objection). The Processor shall:

• Promptly notify the Controller if it receives a request from a Data Subject directly, unless otherwise required by law
• Respond to verified Data Subject requests within 10 business days
• Provide reasonable technical and organizational assistance to enable the Controller to fulfill its obligations

To submit a Data Subject request, contact us at privacy@maverick-advisors.com.

27.7 DATA RETURN AND DELETION

Upon termination of the Services or upon the Controller's written request:

• Data export: The Processor shall make all Controller Personal Data available for export in a standard machine-readable format (CSV or JSON) within 30 days
• Data deletion: The Processor shall delete all Controller Personal Data from active systems within 60 days of termination, unless retention is required by applicable law
• Backup purge: Copies in backup systems shall be deleted within 90 days as part of normal backup rotation
• Confirmation: The Processor shall provide written confirmation of deletion upon the Controller's request

The Controller's data remains their property at all times. We believe in full data portability with no lock-in.

27.8 BREACH NOTIFICATION

In the event of a Personal Data Breach, the Processor shall:

• Notify the Controller without undue delay and in any event within 72 hours of becoming aware of the breach
• Provide the Controller with sufficient information to enable the Controller to meet its obligations under Applicable Data Protection Laws, including:
  • The nature of the breach, including categories and approximate number of Data Subjects affected
  • The likely consequences of the breach
  • The measures taken or proposed to address the breach and mitigate its effects
• Cooperate with the Controller and take reasonable steps to assist in the investigation, mitigation, and remediation of the breach
• Not notify any third party of a breach without first consulting with the Controller, unless required by law

27.9 AUDIT RIGHTS

The Processor shall make available to the Controller all information reasonably necessary to demonstrate compliance with this DPA and allow for and contribute to audits conducted by the Controller or an auditor mandated by the Controller. Audit rights are subject to the following:

• Audits may be conducted no more than once per year, unless a Personal Data Breach has occurred or a regulatory authority requires an audit
• The Controller shall provide at least 30 days' written notice prior to any audit
• Audits shall be conducted during normal business hours and shall not unreasonably interfere with the Processor's operations
• The Controller shall bear the costs of the audit, unless the audit reveals a material breach of this DPA by the Processor
• SOC 2 reports as alternative: Upon achieving SOC 2 certification, the Processor may satisfy audit requests by providing a copy of its most recent SOC 2 Type II report, unless the Controller has reasonable grounds to request an additional audit

27.10 DATA TRANSFERS

All Personal Data processed under this DPA is stored and processed in the United States. Our infrastructure, subprocessors, and data storage are located exclusively in the US.

If the Controller is subject to data protection laws that restrict cross-border data transfers (such as the GDPR), the parties shall enter into appropriate data transfer mechanisms (such as Standard Contractual Clauses) as required by applicable law. Please contact us at privacy@maverick-advisors.com to discuss transfer requirements.

27.11 DURATION AND TERMINATION

This DPA shall remain in effect for the duration of the Processor's processing of Personal Data on behalf of the Controller. Upon termination of the Services:

• The data return and deletion provisions of Section 27.7 shall apply
• Sections that by their nature should survive termination (including breach notification, audit rights, and liability) shall continue in effect
• This DPA shall automatically terminate when the Processor no longer processes Personal Data on behalf of the Controller

28. SUBPROCESSORS

Maverick Advisors uses the following subprocessors to provide our Services. This list is maintained in accordance with Section 27 (Data Processing Agreement).

We will provide at least 30 days' prior written notice before adding or replacing a subprocessor by updating this section and notifying affected clients via email. If you object to a new subprocessor, you may terminate the affected Services within 30 days of notification as described in Section 27.5.

CURRENT SUBPROCESSORS

CLIENT-CONNECTED PLATFORMS

When you connect third-party platforms through Maverick Connect (such as QuickBooks Online, HubSpot, Airtable, Asana, Stripe, Harvest, or other integrations), these platforms are not subprocessors of Maverick Advisors. They are independent controllers or processors under your own agreements with those platforms.

We access these platforms solely at your direction and under the OAuth authorizations you grant. You are responsible for your own agreements and data processing terms with each connected platform.

CHANGE LOG

For questions about our subprocessors or this DPA, please contact us at privacy@maverick-advisors.com.