Terms of Service.

1. Acceptance of these Terms

These Terms of Service (“Terms”) form a binding agreement between you and Cos24, Inc., a Delaware corporation (“Cos24,” “we,” “us,” or “our”) and govern your use of the cos24.ai marketing website and any related public Cos24 webpages or content (collectively, the “Marketing Site”).

Use of the CreditOS platform — including the workbench, partner portal, agent runtime, deterministic credit services, APIs, and integrations (collectively, the “Platform”) — is governed by a separate written Master Services Agreement, Order Form, and Data Processing Agreement (“DPA”) between Cos24 and the lender or partner organization that has retained us. To the extent these Terms conflict with the MSA, Order Form, or DPA, those documents govern as to that organization's use of the Platform.

By accessing or using the Marketing Site, you accept these Terms. If you do not agree, do not use the Marketing Site.

2. Definitions

Customer

A lender, broker, or partner organization that has signed an MSA and Order Form with Cos24 to access the Platform. Customers' authorized employees and contractors are referred to as Authorized Users.

Customer Data

All data, documents, metadata, and content that Customer or its Authorized Users submit to or generate through the Platform, including loan-applicant data and platform-activity logs attributed to Customer's tenant. Customer Data is owned by Customer (or by the applicant whose data Customer is processing) as between Customer and Cos24.

Marketing Site

cos24.ai and any subdomain we use to describe Cos24 or CreditOS publicly, excluding *.demo-uat.cos24.io and other operational subdomains, which are part of the Platform.

Visitor

Any natural person who accesses the Marketing Site, whether or not they are an Authorized User of the Platform.

Documentation

User guides, help center articles, API references, and other materials that Cos24 publishes to describe the Platform, including any portion published on the Marketing Site.

3. Eligibility and account creation

The Marketing Site is intended for U.S. residents who are at least 18 years old and acting in a professional or business capacity (lender employees, partner-organization personnel, technology evaluators, journalists, prospective investors). You may not use the Marketing Site if you are barred from doing so under U.S. export controls or sanctions.

Account creation, authentication, and credentials for the Platform are governed by the MSA and Order Form, not by these Terms. Authorized Users must keep their credentials confidential and notify Cos24 promptly of any suspected compromise.

4. The Service

Cos24 offers the CreditOS platform as a software-as-a-service tool for U.S. lenders and partner organizations evaluating SBA-eligible loan submissions. The Platform structures broker submissions, classifies and OCRs documents, applies the lender's policy, and surfaces stipulations and findings to underwriting teams. Credit-critical computations (DSCR, cash flow, fee math, policy pass/fail) run as deterministic services. AI agents are assistive and operate under human-in-the-loop protocols. Cos24 does not autonomously decide credit.

The Marketing Site is provided to describe Cos24 and CreditOS, support inbound inquiries, and host public materials such as this document, our Privacy Policy, and our Security and Compliance pages. The Marketing Site is informational; it is not the Platform.

5. Customer Data and DPA

As between Cos24 and Customer, Customer (or, where applicable, the loan applicant) owns Customer Data. Cos24 receives only the limited, written license needed to host and process Customer Data to provide the Platform and to perform the obligations described in the MSA and DPA.

Cos24 will not use Customer Data to train or fine-tune any general-purpose AI model. Cos24 will not sell Customer Data and will not disclose Customer Data to third parties except (i) to subprocessors listed in our Privacy Policy and bound by written terms consistent with the MSA and DPA, (ii) as required by law (with notice to Customer where permitted), and (iii) as instructed by Customer.

Customer is responsible for the lawfulness of its instructions, the lawfulness of the data it submits to the Platform, the legal basis on which it processes applicant data, and the notices and consents it gives to applicants. The DPA defines the audit, breach-notification, retention, and return/deletion obligations that govern Customer Data; that DPA controls over any inconsistent terms here.

6. Acceptable use

You may use the Marketing Site for lawful purposes consistent with these Terms. You may not, and you may not permit any third party to:

• Access, probe, or scan the Marketing Site or any subdomain in a manner intended to identify or exploit vulnerabilities, except under a written authorization (e.g., a coordinated disclosure invitation) from Cos24.
• Bypass, disable, or circumvent any security or rate-limit measure.
• Interfere with the operation of the Marketing Site, the Platform, or any user's enjoyment of either, including by overloading, denial-of-service, or distributed denial-of-service.
• Scrape, copy, or republish substantial portions of the Marketing Site or Documentation without our written consent, other than the routine indexing performed by major search engines.
• Use the contact form or email channels to send unsolicited commercial messages or any communication that is unlawful, harassing, defamatory, or fraudulent.
• Misrepresent your identity or your affiliation with Cos24, a Customer, an applicant, or a regulator.
• Use any output from the Marketing Site or the Platform in a way that violates the Fair Credit Reporting Act, the Equal Credit Opportunity Act, the Fair Housing Act, the Gramm-Leach-Bliley Act, the SBA's regulations and SOPs, or any other applicable consumer-protection or financial-services law.
• Reverse-engineer, decompile, or disassemble any software made available through the Marketing Site, except to the extent that contractual restrictions on such activity are unenforceable under applicable law.

We may suspend or terminate access to the Marketing Site, in our reasonable discretion, in response to material or repeated violations of this section.

7. Intellectual property

All content on the Marketing Site — including copy, design, brand marks, illustrations, photography, icons, audio, video, and source code — is owned by Cos24 or licensed to us. The CreditOS name, the Cos24 name, and our logos are trademarks of Cos24, Inc. Use of our marks requires our prior written permission.

Subject to your compliance with these Terms, we grant you a personal, non-exclusive, non-transferable, revocable license to access and view the Marketing Site for your own informational and evaluation purposes. We reserve all rights not expressly granted.

Third-party assets used in the Marketing Site (Newsreader, Geist, JetBrains Mono, Material Symbols, certain icon libraries, certain illustration assets) are licensed under their respective licenses. Where required, attribution is provided in the page metadata or the source repository.

If you submit feedback or suggestions about the Marketing Site, the Platform, or our roadmap, you grant Cos24 a perpetual, irrevocable, royalty-free, sublicensable license to use such feedback for any purpose, without obligation. We are not obligated to maintain feedback in confidence unless we agree otherwise in writing.

8. Fees and payment (Platform only)

The Marketing Site is free to access. Fees for the Platform are set out in the Order Form executed between Cos24 and Customer. Billing is processed by our payment subprocessor (currently Stripe, Inc.) under their applicable terms. Payment timing, taxes, and refund handling are described in the Order Form and any applicable invoice; this section is informational only.

9. Confidentiality

Information identified as confidential at the time of disclosure, or which a reasonable recipient would understand to be confidential under the circumstances, is treated as Confidential Information by the receiving party. Confidential Information may not be disclosed to third parties except to advisors, subcontractors, or affiliates that need to know and that are bound by confidentiality obligations no less protective than this section.

Confidential Information does not include information that (i) is or becomes publicly known without the receiving party's fault; (ii) was known to the receiving party before disclosure; (iii) is independently developed without use of the disclosing party's Confidential Information; or (iv) is rightfully received from a third party without confidentiality restrictions.

These obligations survive termination of the Customer's relationship with Cos24 for the longer of three years after termination or any longer period required by applicable law for the specific information at issue.

10. Third-party services and integrations

The Platform and Marketing Site reference and may interoperate with services provided by third parties (e.g., AWS, Stripe, Anthropic via AWS Bedrock). Cos24 is not responsible for the availability, accuracy, security, or terms of third-party services. Use of a third-party service is subject to that party's terms, and you accept those terms by using the third-party service.

11. Warranty disclaimer

The Marketing Site is provided “as is” and “as available.” To the maximum extent permitted by law, Cos24 disclaims all warranties of any kind, whether express, implied, or statutory, including warranties of merchantability, fitness for a particular purpose, title, and non-infringement, and any warranties arising from a course of dealing or course of performance.

Statements on the Marketing Site about platform capabilities, performance numbers in case studies, projected timelines, and product roadmap are descriptive of specific configurations and contexts at a point in time. They are not warranties or guarantees of future results in any particular Customer environment. Platform-level warranties (if any) are set out in the MSA and govern as to Customer.

12. Limitation of liability

To the maximum extent permitted by law, Cos24 will not be liable to you for any indirect, incidental, consequential, special, exemplary, or punitive damages, including for loss of profits, loss of revenue, loss of business, loss of goodwill, or loss of data, arising out of or related to your use of the Marketing Site, even if Cos24 has been advised of the possibility of such damages.

Cos24's total cumulative liability arising out of or related to your use of the Marketing Site will not exceed the greater of (i) one hundred U.S. dollars (US$100) and (ii) the amounts you paid to Cos24 in the twelve months preceding the event giving rise to the claim. The Customer-side liability cap for use of the Platform is set out in the MSA and governs claims arising from the Platform.

Some jurisdictions do not allow the exclusion of certain warranties or the limitation of certain damages. To the extent prohibited by law in your jurisdiction, the exclusions and limitations in this section do not apply, and the parties' liability is limited to the maximum extent permitted by law.

13. Indemnification

You will defend, indemnify, and hold harmless Cos24, its affiliates, officers, directors, employees, agents, and licensors from and against any claim, demand, loss, liability, damage, cost, or expense (including reasonable attorneys' fees) arising out of or related to (i) your use of the Marketing Site in violation of these Terms or any law; (ii) any content you submit to Cos24 (including via the contact form) that infringes any third-party right or violates any law; or (iii) your breach of any representation, warranty, or covenant in these Terms.

Cos24 will give you reasonably prompt written notice of any claim subject to indemnification, allow you to control the defense and settlement of the claim (with counsel reasonably acceptable to Cos24), and reasonably cooperate at your expense. You will not settle any claim that imposes any obligation on Cos24 (other than payment of money) without Cos24's prior written consent.

14. Term and termination

These Terms apply to your use of the Marketing Site for so long as you continue to access it. We may suspend or terminate your access to the Marketing Site at any time, with or without notice, for any reason, including material or repeated violations of these Terms.

Sections that by their nature should survive termination — including Sections 5 (Customer Data and DPA, as applicable), 7 (IP), 9 (Confidentiality), 11 (Warranty disclaimer), 12 (Limitation of liability), 13 (Indemnification), 15 (Governing law), and 16 (Dispute resolution) — survive.

15. Governing law and jurisdiction

These Terms are governed by the laws of the State of Delaware, United States, without regard to conflict-of-laws principles. Subject to Section 16 (Dispute resolution), the parties consent to the exclusive jurisdiction of the state and federal courts located in Wilmington, Delaware for any dispute that is not subject to arbitration.

16. Dispute resolution; arbitration; class-action waiver

Please read this section carefully — it affects your legal rights.

Informal resolution. Before filing any action arising out of or related to these Terms, the parties will first attempt in good faith to resolve the dispute by sending a written notice to the other party describing the dispute, the relief sought, and the basis for the claim. The parties will attempt in good faith to resolve the dispute within thirty (30) days of receipt of the notice.

Binding arbitration. If the dispute cannot be resolved informally, the dispute will be resolved by binding arbitration administered by the American Arbitration Association (“AAA”) under its Commercial Arbitration Rules, except as modified here. The arbitration will be conducted by a single arbitrator. The seat of the arbitration will be Wilmington, Delaware. The arbitrator's award will be final and binding and may be entered as a judgment in any court of competent jurisdiction.

Exceptions. Either party may bring an action in a court of competent jurisdiction for (i) injunctive or equitable relief to protect its intellectual property or confidential information, or (ii) small-claims-court matters that fall within the small-claims jurisdiction of the relevant venue.

Class-action waiver. Disputes will be resolved on an individual basis. The parties waive any right to participate in a class action, collective action, or representative action. The arbitrator may not consolidate claims of more than one person without the consent of all parties affected.

Opt-out. A Visitor may opt out of this arbitration agreement and class-action waiver by sending written notice to arnav@cos24.ai with the subject line "Arbitration opt-out" within thirty (30) days of first acceptance of these Terms. The notice must include the Visitor's name and a clear statement of intent to opt out.

17. Force majeure

Cos24 will not be liable for any failure or delay in performance under these Terms caused by events beyond its reasonable control, including acts of God, natural disasters, epidemics, war, terrorism, civil unrest, government action, internet or telecommunications failures, or third-party cloud-provider outages. Cos24 will use commercially reasonable efforts to mitigate the impact of such events.

18. Notices

Cos24 may give notice to Visitors by posting on the Marketing Site, by email to any address you have provided to us, or by any other method permitted by law. You may give notice to Cos24 by email to arnav@cos24.ai. Notices to Cos24 take effect when received.

19. Miscellaneous

Assignment. You may not assign or transfer these Terms or any rights hereunder without our prior written consent. Cos24 may assign these Terms to an affiliate or to a successor in connection with a merger, acquisition, or sale of all or substantially all of its assets, with notice to you.

Severability. If any provision of these Terms is held to be invalid or unenforceable, that provision will be enforced to the maximum extent permissible, and the remaining provisions will remain in full force and effect.

Waiver. No waiver of any provision of these Terms will be effective unless in writing and signed by the waiving party. The failure to enforce any provision is not a waiver of the right to enforce that provision later.

Entire agreement. These Terms (together with the Privacy Policy and any Customer-specific MSA, Order Form, and DPA, as applicable) constitute the entire agreement between you and Cos24 regarding the Marketing Site and supersede any prior agreements or understandings on the subject.

Relationship of the parties. These Terms do not create any agency, partnership, joint venture, or employment relationship between you and Cos24.

20. Changes to these Terms

We may update these Terms as the Marketing Site, the Platform, our subprocessors, or applicable law evolve. The effective date below is updated whenever we make a change. For non-cosmetic changes, we will post a notice on the Marketing Site and (where applicable) notify Customers through the channel defined in their MSA. Continuing to access the Marketing Site after the effective date constitutes acceptance of the updated Terms.

21. How to contact us

For questions about these Terms, email arnav@cos24.ai with the subject line "Terms inquiry."

Cos24, Inc., a Delaware corporation.