4.Transfer and disclosure of personal data 4.1.The User's personal data may be disclosed to third parties exclusively in the following cases: 4.1.1.To service providers contracted by DeepThink (e.g., payment platforms, hosting services, external technical support), under data processor contracts in accordance with Article 28 of the GDPR. 4.1.2.To administrative, fiscal, or judicial authorities when legally required. 4.1.3.To companies in the Prime Partners group, as indicated in section 2.6 of this annex, under inter-company contracts of shared responsibility or processing orders, depending on the purpose and nature of the exchange. 4.2.In the event of international transfers outside the European Economic Area (EEA), DeepThink will ensure compliance with the GDPR through: 4.2.a.Standard contractual clauses (SCCs) approved by the European Commission. 4.2.b.Binding corporate rules (BCRs). 4.2.c.Recognized adequacy mechanisms or, failing that, explicit consent of the data subject where necessary.

5.Rights of the data subject As the owner of their personal data, Users may exercise the rights recognized by the GDPR: 5.1.Access: to know what personal data is being processed and to obtain a copy. 5.2.Rectification: to correct errors or update inaccurate data. 5.3.Deletion (right to be forgotten): delete data when it is no longer necessary or there is a legal reason to do so. 5.4.Restriction of processing: temporarily suspend the use of data in certain circumstances. 5.5.Portability: receive your data in an interoperable format and transfer it to another controller. 5.6.Objection: refuse processing based on legitimate interest or for direct marketing purposes. Users may exercise these rights free of charge by contacting DeepThink via email at [email protected] You must identify yourself properly and indicate the right you wish to exercise. DeepThink may request additional information to verify the identity of the applicant. If you are a registered User, you can access, rectify, or delete part of your data directly from your private area in SWPANEL.

6.Data Protection Officer (DPO) DeepThink is not currently required to appoint a Data Protection Officer under the GDPR. However, it has a team responsible for privacy compliance, which handles queries or requests via email at [email protected] If a DPO is appointed in the future, Users will be duly informed.

7.Additional information and transparency DeepThink provides Users with the information required by Articles 13 and 14 of the GDPR at the time of data collection, whether in forms, registration processes, contracts, or contact. Any substantial change in the purposes of the processing or in the data shared will be notified to the User, and when legally required, their consent will be requested again.

8.Complaints to the Supervisory Authority Users have the right to lodge a complaint with the Spanish Data Protection Agency (AEPD) or another competent authority in their country of residence. However, DeepThink recommends resolving any incidents amicably by contacting its privacy department directly.

Appendix IV: California Consumer Privacy Rights (CCPA)

This addendum details the privacy rights applicable to Users residing in the state of California (USA), in accordance with the California Consumer Privacy Act (CCPA) and, where applicable, the California Privacy Rights Act (CPRA). To the extent that DeepThink acts as a "business" under the CCPA with respect to the personal data of California consumers, it guarantees full compliance with the regulations, offering the guarantees and rights listed below:

1.Categories of personal information collected 1.1.DeepThink may collect the following categories of personal information from California consumers: 1.1.a.Identifiers (name, email address, postal address, phone number, account ID). 1.1.b.Commercial information (history of services purchased, payments, billing). 1.1.c.Information about activity on the Internet or other electronic networks (access logs, IP addresses, cookies, browser). 1.1.dProfessional or employment information (when the User registers on behalf of a company). 1.2.This information is obtained directly from the User (for example, when registering or using the service), as well as indirectly through automatic interaction with the SWPANEL platform.

2.Purpose of the use of personal information 2.1.The personal information collected is used to: 2.1.a.Provide and maintain the contracted services (account management, payment processing, support). 2.1.b.Personalize the User's experience and improve the functionality of the service. 2.1.c.Ensure the security and integrity of SWPANEL (incident detection, debugging, fraud prevention). 2.1.d.Comply with applicable legal or regulatory obligations. 2.1.e.Send service or marketing communications (with prior consent, when required). 2.2.DeepThink will not use personal information for purposes other than those described herein, except upon prior notification and obtaining consent, when legally required.

3.Disclosure of personal information to third parties 3.1.DeepThink may disclose personal information to third parties, exclusively in the following cases: 3.1.a.To service providers contracted for specific functions (hosting, payments, analytics, technical support), who are prohibited from using the data for purposes other than those agreed upon in the contract. 3.1.b.To public or regulatory authorities, when required by law or valid court order. 3.1.c.To other companies in the Prime Quad Partners SL business group (hereinafter, "Prime Partners"), of which DeepThink is a member, only in the following legitimate cases: 3.1.1.To improve the commercial relationship with the User and optimize communication and support channels. 3.1.2.To provide additional or specialized technical support related to the use of SWPANEL. 3.1.3.To offer complementary products or services that may be integrated or useful to the User, always within the framework of legitimate interest or applicable consent. 3.2.These group companies are contractually obliged to process personal data in accordance with applicable law and may not sell, reuse or process the data for purposes other than those permitted by this Annex.

4.No sale of personal information 4.1.DeepThink declares that it does not sell personal information of California consumers, as defined by "sale" in the CCPA, nor does it receive direct or indirect financial compensation for sharing it with non-provider third parties. 4.2.Personal information is also not shared with external third parties in terms that constitute a "sale" of data under California law. 4.3.In the event that this policy changes in the future, DeepThink will: 4.3.a.Notify the User expressly. 4.3.b.Enable an opt-out mechanism, including a visible link on the website ("Do not sell my personal information"). 4.3.c.Respect global preference signals (such as Global Privacy Control) if required by applicable law.

5.Consumer rights under the CCPA California consumers have the following rights: 5.1.Right to know (access): The User has the right to request what personal data DeepThink has collected about them in the last 12 months, including the categories, sources, uses, third parties with whom it is shared, and the specific data collected. 5.2.Right to deletion: The User may request the deletion of their personal data, unless there is a legal exception to retain it (such as to fulfill a contract, legal obligation, or legitimate security interest). 5.3.Right to opt out of data sales: Not currently applicable. It will apply if any "sale" of personal data occurs under the CCPA in the future. 5.4.Right to non-discrimination: DeepThink will not discriminate against or penalize the User for exercising their rights. There will be no changes in prices, quality of service, or conditions for exercising access, deletion, or opposition, unless expressly permitted by law.

6.Exercising rights 6.1.To exercise their rights under the CCPA, the User (or their authorized representative) may contact DeepThink: 6.1.a.By sending an email to: [email protected] 6.1.b.Indicating in the subject line: "CCPA Request" 6.1.c.Clearly describing the request (access, deletion, etc.) 6.2.DeepThink may require verification of the identity of the applicant before processing the request, by means of: 6.2.a.Confirmation of existing data in your account. 6.2.b.Documentary proof, in the case of authorized representatives. 6.3.The response time will be up to 45 days, extendable once for an additional 45 days upon notification to the User.

7.Additional rules 7.1.If the User benefits from additional state privacy laws, DeepThink undertakes to comply with them to the extent that they are applicable, without contravening current federal or state regulations. 7.2.DeepThink may update this Annex to adapt to future legal reforms in California, such as the evolution of the CCPA or the entry into force of new similar laws in other states (Colorado, Virginia, etc.).

Annex V: Compliance with Other International Data Privacy Laws

In addition to the provisions of Annex III (Data Protection Policy (GDPR – EU)) and Annex IV (California Consumer Privacy Rights (CCPA)), DeepThink undertakes to respect and comply with the personal data protection laws applicable in other relevant jurisdictions where it may provide services or have Users. These obligations apply without prejudice to DeepThink's membership of the Prime Quad Partners SL ("Prime Partners") business group, which includes various entities specializing in digital technology and services.

In this context, DeepThink may exchange User personal information with other companies in the group only in the cases provided for by applicable law, and always in accordance with the confidentiality, data protection, and contractual guarantees provided for in Annexes II, III, IV, and V.

The main legal frameworks of reference and how DeepThink ensures compliance are described below:

1.Brazil (Lei Geral de Proteção de Dados - LGPD) 1.1.In the event that the LGPD (Law No. 13,709/2018) is applicable, DeepThink guarantees: 1.1.1.Compliance with the principles of purpose, necessity, transparency, security, non-discrimination, and accountability. 1.1.2.Respect for the rights of Brazilian data subjects: access, rectification, cancellation, opposition, portability, information about sharing, and revocation of consent. 1.1.3.The handling of requests through the contact channel [email protected], respecting the deadlines and procedures set forth in the LGPD. 1.1.4.In the event of international data transfers from Brazil, DeepThink will adopt appropriate legal mechanisms (such as standard contractual clauses or binding corporate rules) to ensure an adequate level of protection. 1.2.The exchange of data between companies in the Prime Partners group will also be subject to these guarantees and will be limited to the legitimate and explicit purposes informed to the data subject.

2.Canada (Personal Information Protection and Electronic Documents Act - PIPEDA) 2.1.For Users located in Canada, DeepThink acts in accordance with the Ten Privacy Principles established by PIPEDA, including: 2.1.1.Accountability: DeepThink is responsible for the data under its control and adopts internal compliance policies. 2.1.2.Identification of purposes before collecting personal data. 2.1.3.Informed consent when required. 2.1.4.Limitation of collection, use, and retention to the legitimate purposes disclosed. 2.1.5.Accuracy and security of data through appropriate technical and organizational measures. 2.1.6.Transparency and individual access, including mechanisms for challenging compliance and filing complaints. 2.2.Any transfer of personal data to other Prime Partners group companies within Canada or from Canada to other jurisdictions will be carried out in accordance with the principle of accountability and will require appropriate contractual safeguards, in accordance with PIPEDA.

3.Japan (Act on the Protection of Personal Information - APPI) 3.1.DeepThink guarantees compliance with the Japanese Personal Information Protection Act (APPI) in the following aspects: 3.1.1.Prior and clear notification of the purpose of use of personal data. 3.1.2.Obtaining consent when legally required, especially for special categories of personal data. 3.1.3.Prohibition of transfer to third parties without consent, except for legal exceptions (e.g., use by subprocessors under contract). 3.1.4.Response to requests for access, correction, suspension, or deletion of data by the data subject. 3.2.In the event of international transfers, DeepThink will ensure that the recipient (even if part of the Prime Partners group) has an equivalent level of protection to that required by the APPI, either through explicit consent or contracts incorporating appropriate clauses.

4.Other relevant jurisdictions 4.1.DeepThink seeks to comply with the fundamental privacy principles of other jurisdictions, including: 4.1.1.United Kingdom: Compliance with the UK GDPR and the Data Protection Act 2018, on an equal footing with the GDPR. 4.1.2.EEA States: Compliance with local legislation that supplements the GDPR (e.g., requirements regarding explicit consent or processing records). 4.1.3.United States (outside California): DeepThink adopts practices compatible with emerging state laws (Colorado, Virginia, Connecticut, Utah, etc.), offering rights similar to those provided under the CCPA where reasonable and applicable. 4.2.DeepThink also respects the principles of the APEC Cross-Border Privacy Rules (CBPR) for its operations in the Asia-Pacific region, to the extent of its participation in those markets.

5.Data sharing within the business group 5.1.In all cases, if DeepThink shares User personal data with other companies in the Prime Partners group, it will ensure that: 5.1.1.It has a valid legal basis for such communication, whether it be legitimate interest, contractual compliance, or consent, in accordance with applicable law. 5.1.2.Establish appropriate inter-company contracts that clearly define the purposes, responsibilities, and protective measures. 5.1.3.Ensure that the transfer of data does not involve a sale of data or entail uses not disclosed to the User. 5.2.Such transfers shall be limited to the purposes already communicated to the User in Annexes III (Data Protection Policy (GDPR – EU)), Annex IV (California Consumer Privacy Rights (CCPA)), Annex V (Compliance with other International Data Privacy Legislation) and Annex VI (General Data Privacy Policy), including: 5.2.a.Provision of specialized technical support. 5.2.b.Improvement of the User experience. 5.2.c.Proposal of complementary technological services.

6.Commitment to continuous improvement and transparency 6.1.DeepThink actively monitors international legislative changes and adapts its privacy policies and practices to maintain a consistent and high level of regulatory compliance. 6.2.If any national or sectoral law applicable to a User grants more rights or requires greater guarantees than those provided in this annex, DeepThink will act in accordance with the principle of maximum protection. 6.3.The User may consult DeepThink about the processing of their data in their specific country and exercise their rights by emailing [email protected].

Annex VI: General Data Privacy Policy

1.Privacy commitment and scope 1.1.DeepThink Software SLU (hereinafter, "DeepThink"), as the owner of the rights to the SWPANEL software, declares its firm commitment to protecting the privacy and security of the personal data of all Users, regardless of their country of residence or establishment. 1.2.This annex sets out DeepThink's general practices regarding the collection, use, storage, retention, transfer, communication, and protection of personal data in the context of the use of any of the SWPANEL modalities (SaaS, Self-Hosted, or mobile applications). 1.3.These practices apply globally, subject to the specific annexes that set out the particular requirements of each jurisdiction: 1.3.a.Annex III: Data Protection Policy (GDPR – EU). 1.3.b.Annex IV: California Consumer Privacy Rights (CCPA). 1.3.c.Annex V: Compliance with other International Data Privacy Legislation. 1.4.In the event of a conflict between the provisions of this Annex VI and the provisions of the aforementioned annexes, the strictest or most protective regulations for the User shall always prevail.

2.Organizational context and communications within the business group 2.1.DeepThink is part of the business group Prime Quad Partners SL (hereinafter, "Prime Partners"), made up of several companies specializing in technology services, IT infrastructure, and digital solutions. 2.2.DeepThink may share certain personal data of the User with other companies in the group, only when such communication: 2.2.1.Is necessary and legitimate for the fulfillment of the contract with the User. 2.2.2.Contributes to improving the quality of the service or attention provided. 2.2.3. Allows the offering of complementary products or services that may be integrated or useful to the User. 2.2.4. Facilitates second or third level technical support, especially in situations requiring specialized or multi-component intervention. 2.2.5. Results in the improvement of the user experience through advice, integration, or additional services compatible with SWPANEL. 2.3.These communications will be made exclusively between entities contractually linked within the Prime Partners group, under confidentiality and data processing agreements that guarantee compliance with applicable regulations.

3.Categories of personal data collected 3.1.Identification and contact details: 3.1.1.Name, surname, email address, telephone number. 3.1.2.Postal address and country. 3.1.3.Name of the company or organization represented. 3.1.4.Tax and billing information, including tax ID number, bank or card details. 3.2.Account credentials: 3.2.1.Username and encrypted password. 3.2.2.Additional authentication mechanisms, where applicable. 3.3.Technical and browsing data: 3.3.1.IP address used. 3.3.2.Browser, operating system, and device type. 3.3.3.Cookies and similar technologies (see Annex VII). 3.3.4.Information about browsing and actions within SWPANEL. 3.4.Data derived from the use of the software: 3.4.1.Actions within the platform. 3.4.2.Settings, preferences, and customizations. 3.4.3.Third-party data managed by the User (in which case DeepThink acts as data processor, in accordance with Annex II).

4.Purposes of processing and legal bases 4.1.Execution of the contract: 4.1.1.Account registration and management. 4.1.2.Payment, billing, and subscription management. 4.1.3.Access to contracted features. 4.1.4.Provision of technical support. 4.2.Security and control: 4.2.1.Access and activity monitoring. 4.2.2.Prevention of fraud or misuse. 4.2.3.Protection of systems and infrastructure. 4.3.Service improvement: 4.3.1.Statistical and technical analysis. 4.3.2.Error resolution and performance improvement. 4.3.3.Development of new features or services. 4.4.Legal compliance: 4.4.1.Tax, accounting, and administrative obligations. 4.4.2.Response to regulatory or legal requirements. 4.5.Operational communications: 4.5.1.Scheduled maintenance. 4.5.2.Contractual or policy changes. 4.5.3.Technical or critical service notices. 4.6.Legitimate commercial communications: 4.6.1.Sending information about complementary services offered by Prime Partners or the Prime Partners group. 4.6.2.Exercise of the right to object or withdraw consent, where applicable.

5.Communication and transfer of personal data 5.1.DeepThink will only transfer personal data in the following cases: 5.1.1.To suppliers or sub-processors under contract, in accordance with Annex II. 5.1.2.To competent authorities, upon legal request. 5.1.3.To companies in the Prime Partners group, for legitimate purposes related to the service. 5.1.4.In corporate transactions (merger, sale, spin-off), provided that the acquirer complies with this policy. 5.2.In the case of international data transfers: 5.2.1.The use of valid legal mechanisms, such as standard contractual clauses approved by the European Commission, or equivalent protection measures, shall be ensured.

6.Retention of personal data 6.1.DeepThink shall retain personal data: 6.1.1.During the contractual relationship. 6.1.2. After termination, for the mandatory legal retention periods (5-10 years). 6.1.3. For as long as legal liabilities may arise. 6.1.4. Until consent is revoked, in the case of voluntary processing. 6.2. After these periods, the data will be: 6.2.1.Safely deleted, or 6.2.2.Irreversibly anonymized.

7.Security measures 7.1.DeepThink implements appropriate technical and organizational measures, including: 7.1.1.Data encryption (in transit and at rest). 7.1.2.Access control and secure authentication. 7.1.3.Access logging and auditing. 7.1.4.Firewalls and anti-malware protection. 7.1.5.Backup and contingency plans. 7.2.The User is responsible for: 7.2.1.Maintaining the confidentiality of their credentials. 7.2.2.Using secure passwords. 7.2.3.Reporting unauthorized access.

8.User rights and exercise 8.1.The User may exercise the following rights, in accordance with applicable legislation: 8.1.1.Access. 8.1.2.Rectification. 8.1.3.Erasure. 8.1.4.Restriction of processing. 8.1.5.Objection. 8.1.6.Portability. 8.2.These rights may be exercised by: 8.2.1.The SWPANEL user panel. 8.2.2.Email to [email protected]. 8.3.The User may also: 8.3.1.Withdraw consent at any time. 8.3.2.Lodge a complaint with the competent supervisory authority.

9.Updates and validity 9.1.DeepThink may update this policy in the event of: 9.1.1.Changes in legislation or regulations. 9.1.2.The introduction of new technologies or processes. 9.1.3.Changes in the services provided. 9.2.The User will be informed when: 9.2.1.It is required by law. 9.2.2. The change significantly affects their rights or the processing of their data. 9.3. In the event of a regulatory discrepancy, the following shall prevail: 9.3.1. The most up-to-date version of this annex, or 9.3.2. The most protective regulation according to the User's jurisdiction.

Annex VII: Cookie Policy

For the proper functioning of DeepThink's websites and online services (including SWPANEL), the navigation system and software used collect certain browsing data through the use of cookies. Cookies are small text files that are stored on the user's device when they browse websites or use applications. These cookies may collect technical information such as the IP address used, the URL of the page requested, the time of connection, the type of browser, and other parameters of the user's device operating system. Under no circumstances is this information directly associated with an identified person, but is used primarily to recognize the user's session, facilitate navigation, and perform anonymous statistical analysis on the use of the site.

Below is specific information about the cookies used on the DeepThink and SWPANEL websites, as well as the most common ways for the User to manage or disable them:

1.Cookie management: Although DeepThink does not use cookies to collect personally identifiable information, we inform Users about how they can restrict or block cookies when browsing our sites: 1.a.We recommend visiting the website aboutcookies.org, which provides detailed information on how to manage cookies in various browsers. 1.b.In the help or privacy settings section of most web browsers (Chrome, Firefox, Safari, Edge, etc.), the User can set their preferences regarding the use of cookies (for example, accept all cookies, reject them, or receive a notification when a cookie is sent). Please note that if cookies are completely disabled, some services on DeepThink websites may not function properly.

2.Cookies stored by www.swpanel.com: When Users browse the main corporate website (www.swpanel.com), certain cookies are stored to facilitate navigation and access to content. The cookies stored by www.swpanel.com include: 2.1.swpanel_session: Identifies the User's session and is used to manage their basket of products or services on the site. 2.2.SERVERID: Ensures the proper functioning of the site and the persistence of the "User" session when load balancers (traffic distribution between several servers) are used. 2.3.In addition, DeepThink portals use third-party cookies and technologies for anonymous traffic analysis and measurement: 2.3.a.Google Analytics: A service provided by Google, Inc. that uses cookies to collect information from the User's computer (e.g., browsing data and IP address) in order to evaluate the use of the website and compile reports on site activity. • Google stores the information collected by its cookies on servers located in the United States. • Google may transfer this information to third parties when required by law or when such third parties process the information on Google's behalf. According to Google, the User's IP address is not associated with any other data held by Google. • "The User" can obtain more information about how Google processes the data collected by Google Analytics, as well as the options for disabling these cookies, in the Google Privacy Policy and on the opt-out pages provided by Google. 2.3.b.Facebook: On some DeepThink pages that integrate Facebook content (such as social network plugins), Facebook may set its own cookies to select the content displayed in those spaces. • For more information about Facebook cookies and how to manage them, please refer to the Facebook Cookies Policy. 2.3.c.Twitter: On DeepThink pages with integrated Twitter content, this platform may place cookies to manage interaction with such content. • "The User" can find information about Twitter's privacy practices in the Twitter Privacy Policy.

3.Cookies stored by go.swpanel.com: 3.a.None of the cookies used on go.swpanel.com are shared with external third parties. 3.b.All cookies on go.swpanel.com are stored in encrypted form to ensure their confidentiality. 3.c.When an authenticated User accesses their private area on SWPANEL (go.swpanel.com), several cookies are stored to facilitate navigation and usability of the panel. The specific cookies used by SWPANEL SaaS are: 3.1.ASPSESSIONID (session identifier): Manages the "User" session data within SWPANEL, allowing successive requests from the same User to be recognized. 3.2.ENCRYPTED_ID_COOKIE: Stores an encrypted session identifier for managing certain searches or listings in the panel. 3.3.SWwidthlinea: Identifies the width of the browser in pixels. It is used to manage the resizing and display of elements that SWPANEL must show to the user.

4.Third-party website cookies: Third-party content (e.g., videos hosted on YouTube or photos from Flickr) is occasionally integrated into DeepThink's information portals. When this embedded content is displayed, external websites may set their own cookies on the User's browser. DeepThink has no control over such third-party cookies or their management, so the User is advised to review the cookie and privacy policies of these external providers for further information. • Similarly, if the User decides to share content from DeepThink sites on social media (e.g., by clicking on "Share" buttons or posting a link), those social media platforms may set cookies on the User's device. DeepThink does not control these social media cookies and recommends consulting the policies of each platform (Facebook, Twitter, LinkedIn, Instagram, etc.) to learn about their use of cookies and data.

The User may at any time configure their browser to accept or reject cookies, as well as to delete cookies stored after browsing. Many browsers offer private browsing modes or "Do Not Track" settings that may limit the placement of certain cookies. DeepThink provides the legally required cookie notices and consents on its sites; by continuing to browse after viewing the cookie notice, you agree to the use of the cookies disclosed, unless you have expressly configured or rejected them.

Annex VIII: Corporate Legal Information (Legal Notice)

1.Company information DeepThink Software SLU, with registered office at Calle Ponent 13-15, 17458 Fornells de la Selva, Girona, Spain, Tax ID Number ESB219174639, and contact email address [email protected], is the owner of the SWPANEL platform and the associated websites, services, and applications. DeepThink is part of the Prime Quad Partners SL business group, which is made up of various entities specializing in the development of technological solutions, IT infrastructure services, and digital products. In this context, DeepThink may maintain relationships of collaboration, coordination, and transfer of information with other companies in the group, always within the legal framework provided for in this contract and in accordance with the confidentiality and data protection annexes (Annexes II, III, IV, and V). The transfer or exchange of personal information between companies in the group will only take place when there is a valid legal basis, such as the execution of the contract, legitimate interest or the consent of the User, and for legitimate and specific purposes, such as: • Improving customer service and communication with the User. • Providing additional or specialized technical support. • Offering complementary, integrable, or related technological services to SWPANEL. All these activities will be governed by the principles of confidentiality, integrity, and respect for the User's rights. Commercial relations arising from the contracting of services will be governed by Spanish law and jurisdiction, and will be formalized through the corresponding individual commercial agreements.

2.Intellectual and industrial property This website has been created by DeepThink for informational and professional purposes. The private part of the site, called SWPANEL, is intended exclusively for DeepThink customers as a tool for managing and controlling their contracted services. DeepThink is the owner of all intellectual and industrial property rights over this website, its contents, and the domain name www.swpanel.com. The reproduction, distribution, or modification of this site or its contents, in whole or in part, is expressly prohibited without prior written authorization. The insertion of links or references from other websites that maintain the frames of the original site is also prohibited, in order to avoid confusion about the ownership of the content. The User must be able to clearly identify that they are accessing a site managed by DeepThink.

3.Terms and conditions of use of the site The content, products, and services on this site are not intended for users in jurisdictions where access is prohibited. Access to the website is the sole responsibility of the User and does not imply any commercial relationship with DeepThink, except in the case of the effective contracting of services. Access and navigation imply knowledge and acceptance of the legal conditions, warnings, and terms of use contained herein.

4.Contents and limitation of liability DeepThink makes reasonable efforts to avoid errors in the contents of the site, but does not guarantee their accuracy nor is it responsible for errors arising from content provided by third parties. It is not responsible for differences between printed and electronic versions; in case of discrepancy, the published electronic version shall prevail. DeepThink assumes no responsibility for forums, chats, or other external interactive channels. It will cooperate with the authorities if illegal or harmful content is detected. It is expressly prohibited to transmit through the site any content that is illegal, offensive, or infringes on the rights of third parties. DeepThink may deny access to any User who violates these conditions and reserves the right to take legal action in the event of illegal conduct.

5.Navigation, access, and security The site has been designed to offer safe and efficient navigation. DeepThink does not guarantee compatibility with all browsers, nor is it responsible for any damage resulting from their use. Access to secure areas (such as payment or account management areas) is via an SSL encrypted connection with 1024-bit RSA keys, verified by a certificate issued by Thawte. DeepThink does not guarantee that access will be continuous or error-free, nor that the content is free of viruses or technical faults. Under no circumstances will it be liable for damages arising from the use of the website, telecommunications failures or external interruptions.

6.Updating of information DeepThink will indicate on its website the date of the last update. The information displayed is valid as of that date. The company reserves the right to update, modify, or delete content, features, or access without prior notice. It is also not permitted to alter, copy, or adapt the website without authorization. DeepThink may modify its content or structure when it deems appropriate.

Annex IX: Service Quality Guarantees and Service Level Agreement (SLA)

This annex establishes DeepThink's commitment to the quality of the SWPANEL service in its SaaS (Software as a Service) mode, accessible through the web platform managed directly by DeepThink. The service levels described herein do not apply to self-hosted SWPANEL installations on the User's servers or other environments outside the infrastructure controlled by DeepThink. They are also not applicable to third-party services or tools integrated into SWPANEL, whose guarantees will be subject to the conditions of the corresponding provider.

1.Scope of the SLA 1.1.This SLA applies exclusively to the availability, operability, and support of the SWPANEL platform managed directly by DeepThink. 1.2.It does not extend to: 1.2.a.SWPANEL Self-Hosted license installations made by the User on their own or third-party infrastructure. 1.2.b.Hosting platforms or servers where a local instance of SWPANEL is running. 1.2.c.Third-party tools accessible from SWPANEL, such as extensions, modules, external systems, or APIs. Such services shall be subject to the SLAs, availability, and warranties of the responsible third party.

2.Availability commitment 2.1.DeepThink undertakes to maintain the operational availability of the SWPANEL SaaS platform with a target monthly availability of 99.9% (calculated on a 24/7 basis). 2.2.DeepThink may establish scheduled maintenance windows, during which the platform may be unavailable. These technical interventions are necessary for: 2.2.a.Apply functional improvements. 2.2.b.Introduce security updates. 2.2.c.Ensure compliance with current regulations. 2.2.d.Optimize overall system performance. 2.3.These windows will be communicated to the User as far in advance as possible through the usual channels. Whenever possible, they will be scheduled at times of low impact for the User. 2.4.DeepThink may also carry out emergency maintenance without prior notice when there are critical vulnerabilities or operational risks that may affect the integrity, confidentiality, or availability of the service.

3.Technical support and assistance 3.1.DeepThink provides technical support exclusively in relation to the use and operation of the SWPANEL platform in its SaaS mode, accessible on the website managed by DeepThink. This support does not include assistance with third-party environments, custom configurations, operating systems, networks, User servers, or external services integrated by third parties. 3.2.Support requests must be related to: 3.2.a.Functional questions about the general use of SWPANEL. 3.2.b.Problems accessing the platform. 3.2.c.Anomalies or errors detected in the interface, internal processes, or standard system workflows. 3.3.DeepThink provides the User with the following channels for handling these queries: 3.3.a.Knowledge base and updated technical documentation, accessible from the platform itself. 3.3.b.Intelligent virtual assistant (AI) integrated into SWPANEL, capable of providing contextual help and automated responses in real time. 3.3.c.Technical contact system via the form or ticket available on the platform, for cases where the intervention of a DeepThink technician is necessary. 3.4.DeepThink does not guarantee telephone support or immediate availability by human technicians, except in exceptional internal situations that require it. Support is offered during business hours and will be responded to within a reasonable time frame depending on availability and operational load, with no binding commitments on response or resolution times. 3.5.Under no circumstances will DeepThink provide: 3.5.a.Support for systems, servers, configurations, or integrations made by the User. 3.5.b.Customer service to third-party end customers who use SWPANEL as part of their services. 3.6.Important: DeepThink markets SWPANEL both directly and through external suppliers or authorized integrators, who may include their own technical support as part of the service offered to their customers. In these cases, support requests should be directed exclusively to the supplier or company responsible for the contracted service, and not to DeepThink directly. DeepThink will not respond to queries from third parties or end users if there is no direct contractual relationship with them.

4.Best practices and constant updates 4.1.DeepThink guarantees that its technical and support team: 4.1.a.Is trained and certified in technologies associated with SWPANEL. 4.1.b.Operates under internal quality procedures and technical documentation. 4.1.c.Applies principles inspired by ITIL management models and established practices from other providers such as Plesk or cPanel. 4.2.DeepThink ensures the continuous evolution of the system, including: 4.2.a. Regular application of security updates. 4.2.b. Adaptation to relevant regulatory changes (e.g., data protection, cybersecurity, industry standards). 4.2.c. Optimization of platform performance to ensure service scalability and stability.

5.SLA limitations and exclusions 5.1.The SLA shall not apply when service interruptions or deficiencies are the result of: 5.1.a.Errors, misconfiguration, or failures in the User's environment. 5.1.b.Local SWPANEL installations (Self-Hosted mode), whose continuity depends exclusively on the server provider. 5.1.c.Third-party services accessible from SWPANEL that are not managed by DeepThink (e.g., domain providers, SSL certificates, integration APIs, etc.). 5.1.a.Causes of force majeure, such as natural disasters, government decisions, general Internet outages, or other events beyond DeepThink's reasonable control. 5.2.DeepThink does not offer financial compensation or refunds for service unavailability, and this addendum does not constitute a contractual guarantee of compensation. DeepThink is committed to always acting with the utmost technical diligence, speed, and responsibility to restore service in the shortest time possible.

6.General quality commitment 6.1.DeepThink reaffirms its commitment to: 6.1.a.Maintain a high standard of technical and human quality in the management of SWPANEL. 6.1.b.Listening to and valuing the opinions of Users for continuous improvement. 6.1.c.Resolving incidents quickly, transparently, and with a willingness to serve. 6.1.d.Promoting a secure, stable digital environment adapted to current technological challenges.