Customer Agreement.

PYMSTR Customer Agreement

Effective Date: February 25, 2026 — V1.0

1. INTERPRETATION

1.1

In this Agreement, the following words and expressions have the following meanings:

• "Applicable Law" — all applicable statutes, laws, enactments, orders, regulations, regulatory rules, official guidance, standards, regulator expectations and other similar instruments in any relevant jurisdiction, as in force and amended from time to time;
• "Business Day" — means any day other than Friday, Saturday or Sunday or a public holiday in the DIFC or the Emirate of Dubai;
• "Checkout Widget" — means the PYMSTR checkout interface through which you view invoices from Merchants and initiate Payments, whether embedded on a Merchant's website or hosted by PYMSTR;
• "Customer Interface" — means the PYMSTR interface through which you can view your Embedded Wallet, past Payment Links paid, and transaction history;
• "Data Protection Laws" — means all Applicable Law relating to data protection, the processing of personal data and privacy, including the DIFC Data Protection Law, DIFC Law No. 5 of 2020 (as amended from time to time);
• "Embedded Wallet" — means a self-custodial digital wallet created for you upon authentication with the PYMSTR Services via a third-party embedded wallet provider (such as Web3Auth) using social login. Your Embedded Wallet is fully self-custodial, accessible and usable independently of PYMSTR (including through any compatible wallet interface or directly on the blockchain), and PYMSTR does not hold, access, or control private keys associated with Embedded Wallets;
• "Enforced Payment" — means a Payment configuration in which the Merchant has pre-selected the accepted Supported Stablecoin(s) and Supported Chain(s), restricting your payment options to those specified by the Merchant;
• "Fees" — refers to the fees described in clause 5;
• "Merchant" — refers to the entities offering goods and/or services available for you to purchase using Supported Stablecoins through our Services;
• "Offering" — refers to any relevant product and/or service provided by a Merchant which you pay for in Supported Stablecoins;
• "Payment" — means a peer-to-peer transfer of Supported Stablecoins that you initiate directly from your self-custodial wallet (whether an Embedded Wallet or a connected Web3 wallet) to the Merchant's designated wallet address on the applicable blockchain network in connection with a purchase. PYMSTR provides the software interface through which you view the invoice and initiate the transfer, but does not process, route, hold, or intermediate the transfer at any point;
• "Privacy Policy" — means our privacy policy available at pymstr.com;
• "Purchase Agreement" — the agreement between you and the relevant Merchant(s) under which you purchase the relevant Offering(s);
• "PYMSTR Group" — means us as well as any parent entity and holding company of us and any subsidiary of such parent entity and holding company;
• "Services" — our software services as set out at clause 2;
• "Supported Chains" — means the blockchain networks supported by our Services from time to time, which currently include Ethereum, Base, Polygon, Arbitrum, and BNB Chain;
• "Supported Stablecoins" — means the stablecoins supported by our Services from time to time, which currently include USDT (Tether) and USDC (Circle). A current list is maintained on our website at pymstr.com;
• "Termination Date" — means the date on which termination of this Agreement takes effect, in accordance with clause 10; and
• "Virus" — means any viruses, defects, errors, bugs, glitches, weaknesses, spyware, malware, adware or other harmful, malicious or deleterious programs, material, code, file or software.

1.2

Where the words "includes", "including", "for example" or "such as" are used in this Agreement, they are deemed to have the words "without limitation" following them.

1.3

A reference to "writing" or "written" includes email but not faxes. Any reference to "written consent" shall mean specific explicit consent.

1.4

The headings of the clauses and schedules of this Agreement are for convenience only and shall not affect its construction or interpretation.

1.5

A reference to this Agreement or to any other agreement or document is a reference to it as amended or varied from time to time.

1.6

A reference to a statute is a reference to it as in force from time to time, including amendments and subordinate legislation.

1.7

Unless the context otherwise requires, words in the singular shall include the plural and vice versa.

2. OUR SERVICES

2.1

We provide software that enables you to authenticate, view and manage your self-custodial wallet, view invoices from Merchants, and initiate Payments in Supported Stablecoins directly from your wallet to the Merchant's wallet (our "Services"). When you make a Payment, you are transferring Supported Stablecoins directly from your wallet to the Merchant's wallet on the blockchain. PYMSTR does not receive, route, hold, or intermediate your funds at any point. The Services comprise:

• 2.1.1 Checkout software enabling you to view invoices and initiate Payment in Supported Stablecoins via the Checkout Widget;
• 2.1.2 We facilitate the creation of an Embedded Wallet for you if you authenticate via social login. Your Embedded Wallet is self-custodial, provided by a third-party provider, and accessible independently of PYMSTR. Alternatively, you may connect your own Web3 wallet (MetaMask, WalletConnect, or Coinbase Wallet);
• 2.1.3 A Customer Interface through which you can view your wallet, past Payment Links paid, and transaction history; and
• 2.1.4 In certain configurations, the Merchant may use Enforced Payments, which restrict the Supported Stablecoins and/or Supported Chains. You will be informed of the available options before confirming any Payment.
• 2.1.5 The Merchant may configure Payment Splitting so your Payment is directed to one or more wallet addresses via on-chain smart contract logic. PYMSTR does not intermediate or control the distribution. The total amount of your Payment is not affected.

2.2

We are a software provider and do not provide custody, payment processing, or money transmission services. We do not at any time hold, manage, access, route, or have custody of any Supported Stablecoins. We do not operate any intermediary wallet, hop address, escrow, or smart contract through which your funds pass under our control. Your wallet is self-custodial — you hold your own private keys.

2.3

Our Services are provided on an "as is" and "as available" basis, without any representation that they are fit for any particular purpose.

2.4

No action we take nor the way we present any Supported Stablecoin should be taken as implying preference or approval of any particular Supported Stablecoin.

3. ELIGIBILITY REQUIREMENTS

3.1

In using our Services, you at all times represent that you:

• 3.1.1 (if body corporate) are duly organised and validly existing, with full power to bind yourself to this Agreement;
• 3.1.2 (if individual) are at least 18 years of age and meet all other requirements;
• 3.1.3 are legally permitted to deal in Supported Stablecoins and to use our Services;
• 3.1.4 are legally permitted to make payments in Supported Stablecoins for Offerings;
• 3.1.5 are not impersonating any other person;
• 3.1.6 will provide accurate, complete and up-to-date information;
• 3.1.7 have not received any advice from us regarding this Agreement;
• 3.1.8 are not subject to financial sanctions or embargoes;
• 3.1.9 will at all times act in accordance with Applicable Law;
• 3.1.10 will not interfere with, damage or disrupt any equipment or network;
• 3.1.11 waive any right to participate in a class action lawsuit or class-wide arbitration;
• 3.1.12 acknowledge you are responsible for your tax obligations;
• 3.1.13 have independently determined that our Services are suitable;
• 3.1.14 have read, understood and agreed to our Privacy Policy;
• 3.1.15 acknowledge that our checkout software may present smart contract interactions for your approval;
• 3.1.16 will not attempt to circumvent security or introduce any Virus; and
• 3.1.17 provide us with whatever information we may request for compliance purposes.

3.2

You shall inform us immediately if you can no longer make any of these representations.

4. PURCHASE AGREEMENT

4.1

You agree to a Purchase Agreement with the Merchant in order to purchase the Offering.

4.2

You are responsible for compliance with all Applicable Laws, including ensuring you have proper authority, restrictions are complied with, and understanding refund policies.

4.3

You are not able to cancel a Payment once confirmed on the blockchain, so before finalising any Payment you should make sure you are certain.

4.4

We are not a party to, and do not accept any liability in relation to, any Purchase Agreement.

5. FEES

5.1

• 5.1.1 The price of Offerings is determined by the Merchant and may include fees payable to PYMSTR where the Merchant chooses to pass such fees on to you. Any such fees will be set out prior to you authorising the Payment.
• 5.1.2 You may also incur network fees (gas fees). These fees are not charged by PYMSTR and you are responsible for paying these.

6. DATA PROTECTION

6.1

PYMSTR collects minimal personal data from Customers. Where you authenticate via social login, PYMSTR receives your email address and display name from the third-party authentication provider (Web3Auth). This data is stored solely to associate your authentication identity with your wallet and is not shared with merchants or other third parties. Where you connect your own Web3 wallet, PYMSTR receives only your public wallet address. For further information, refer to our Privacy Policy at pymstr.com.

7. INTELLECTUAL PROPERTY RIGHTS

7.1

We are the owner or licensee of all copyright and intellectual property rights in connection with our Services (the "Materials").

7.2

We grant you a limited, personal, non-exclusive, non-commercial, royalty-free, revocable licence to use the Materials solely for the purpose of receiving our Services.

• 7.2.1 We expressly reserve all rights in and to the Materials.
• 7.2.2 You shall not modify, reverse engineer, copy, distribute, sell, or create derivative works.
• 7.2.3 You shall not exploit any intellectual property for a commercial purpose.
• 7.2.4 You shall not attempt to obtain unauthorized access to Materials.

7.3

All logos related to us are marks of PYMSTR or our licensors. You may not copy, imitate, or use our trading names or logos without prior written consent.

8. LIABILITY

8.1

Nothing in this Agreement limits any liability which cannot legally be limited.

Our liability

8.2

Subject to clause 8.3, we shall be responsible to you only for loss that you suffer as a result of our gross negligence.

8.3

Notwithstanding clause 8.2, we shall not be liable for any loss:

8.3.1 as a consequence of:

• 8.3.1.1 any action or inaction of any Merchant or third party;
• 8.3.1.2 any issue with any representation made by a Merchant;
• 8.3.1.3 any exercise of discretion or rights under this Agreement;
• 8.3.1.4 any incorrect information provided via our Services;
• 8.3.1.5 any inability to access or use our Services;
• 8.3.1.6 any delay in confirming a Payment on the blockchain;
• 8.3.1.7 any representation made by you;
• 8.3.1.8 you making a Payment using unsupported stablecoin or chain;
• 8.3.1.9 any loss from sending to an incorrect address or network;
• 8.3.1.10 a de-pegging event or fluctuation;
• 8.3.1.11 blockchain network congestion, gas-price volatility or other network conditions;
• 8.3.1.12 any action we take to comply with Applicable Law;
• 8.3.1.13 any issue with an Embedded Wallet or third-party wallet provider;
• 8.3.1.14 loss of access to your social login account;
• 8.3.1.15 unforeseeable events outside our reasonable control;

• 8.3.2 in connection with any Purchase Agreement or Offering;
• 8.3.3 which constitutes indirect, consequential or special loss; or
• 8.3.4 which relates to a risk you have accepted (including Schedule 1).

Your liability

8.4

You agree to indemnify us for any losses arising from:

• 8.4.1 your breach of Applicable Law or this Agreement;
• 8.4.2 your misuse of our Services;
• 8.4.3 your breach of rights or obligations to any Merchant or third party;
• 8.4.4 your breach of any Purchase Agreement;
• 8.4.5 any regulatory inquiry, legal action or investigation relating to you; and
• 8.4.6 any fees, taxes or costs not imposed by us, which we pay on your behalf.

8.5

Losses for the purpose of clause 8.4 refer to any loss or damage of whatever nature (including reasonable attorney fees).

8.6

To the maximum extent permitted by Applicable Law, PYMSTR shall not be liable for any loss arising out of or in connection with your use of the Services. Nothing in this Agreement shall limit liability for fraud, gross negligence, or wilful misconduct.

9. WALLET SCREENING

9.1

PYMSTR may screen wallet addresses against publicly available sanctions lists and risk databases. We reserve the right to restrict access to the Services based on such screening.

9.2

You acknowledge that your access to our Services may be altered or suspended based on the results of wallet screening.

10. SUSPENSION AND TERMINATION

10.1

You may terminate at any time by no longer using our Services. We may terminate by giving you at least 5 Business Days' written notice.

10.2

We may also terminate immediately if:

• 10.2.1 you are in breach and either it's incapable of remedy or you fail to remedy within 10 Business Days;
• 10.2.2 (body corporate) unable to pay debts, petition for winding up, etc.; or
• 10.2.3 (individual) unable to pay debts, declared bankrupt, etc.

10.3

We may suspend all or part of our Services with immediate effect where:

• 10.3.1 reasonably beneficial for software maintenance;
• 10.3.2 required by Applicable Law;
• 10.3.3 material information from you is inaccurate;
• 10.3.4 fraudulent or unauthorised use;
• 10.3.5 pending litigation or regulatory risk;
• 10.3.6 events outside our reasonable control;

and any suspension will not affect our ability to terminate.

10.4

We are not liable for any loss from exercising termination or suspension rights.

10.5

On termination, all prior rights, obligations and liabilities are unaffected.

10.6

Termination shall not affect provisions intended to survive.

11. CHANGING THE TERMS OF THIS AGREEMENT

11.1

We may make changes from time to time in relation to Services not yet provided.

11.2

We may also make changes to reflect: changes to law, regulatory requirements, market changes, system changes, third-party provider changes, force majeure, range of Services, clarity improvements, beneficial changes, or any other valid reason.

11.3

All changes take immediate effect. We will notify you via the Customer Interface or our website.

11.4

Your continued use constitutes acceptance. If you disagree, you must stop using our Services.

12. NO REFUNDS

12.1

We do not provide or facilitate refunds. Payments are irreversible on the blockchain.

12.2

If you believe you are entitled to a refund for an Offering, you must seek this directly from the Merchant.

13. CONFLICTS OF INTEREST

13.1

We maintain effective arrangements to prevent conflicts of interest. Where insufficient, we shall disclose relevant conflicts and mitigation steps.

14. COMMUNICATIONS

14.1

All communications will be in English.

14.2

Communications to us may be made by email to [email protected].

14.3

Communications with you may also be made via our website at pymstr.com or other agreed methods.

14.4

Communications by email: deemed received on access or 2 Business Days after receipt. Hand delivered: when delivered. By courier: when proof of receipt is provided.

14.5

We do not accept liability for any delay in responding to communications.

15. GOVERNING LAW AND JURISDICTION

15.1

This Agreement shall be governed by the laws of the Dubai International Financial Centre, and the DIFC Courts shall have exclusive jurisdiction.

16. NOVATION

16.1

We may transfer by way of novation to another PYMSTR Group entity and you consent to such novation.

17. ENTIRE AGREEMENT

17.1

This Agreement constitutes the entire agreement between the parties and supersedes any prior agreement.

17.2

The only remedy for any misrepresentation shall be for breach of contract.

18. REGULATORY TREATMENT OF THE SERVICES

18.1

Our Services consist solely of software tools and do not constitute payment services, money transmission, or any regulated financial service. By using our Services, you do not have the benefit of any statutory compensation scheme or ombudsman.

18.2

We reserve the right to make changes to our Services in order to uphold the regulatory treatment as software services.

19. MISCELLANEOUS

19.1

This Agreement shall take effect from the date on which you first use our Services.

19.2

We represent and warrant that we are duly established and validly existing under the laws of the DIFC.

19.3

Each party is an independent contractor. Nothing creates a partnership, agency, or joint venture.

19.4

Each provision is separate and severable.

19.5

You may not assign or transfer your rights. We may assign without restriction.

19.6

PYMSTR Group entities shall have the right to enforce rights granted to them. No third-party consent required for variation or termination.

19.7

No waiver shall be effective unless in writing and executed by us.

SCHEDULE 1 — Risk Factors

You should carefully consider the risks described below before using our Services. The list is not exhaustive.

PYMSTR is not responsible for the performance, delivery, legality or fulfilment of any Offering. All obligations relating to an Offering are solely between you and the Merchant.

Important Note: We expressly disclaim any responsibility for any loss arising from reliance on information in this Schedule 1.

1. Stablecoin de-pegging risk

Supported Stablecoins may temporarily or permanently lose their peg due to market conditions, issuer insolvency, regulatory action, technical failure, or other causes.

2. Regulatory risks

Regulation of digital assets is evolving and may severely impact our business and Services.

3. Risk of losing access to your wallet

You are solely responsible for maintaining the security of your wallet. If you lose access, you may lose access to any assets held within it. PYMSTR cannot assist in recovering access.

4. Embedded Wallet risks

(a) the Embedded Wallet is provided by a third-party provider; (b) loss of access to your social login account may result in loss of access to your Embedded Wallet; (c) the third-party provider may experience downtime, security breaches, or discontinue services; (d) key management mechanisms are outside PYMSTR's control.

5. Risks associated with the blockchain protocol

Malfunction, breakdown or abandonment of a blockchain protocol may have adverse effects. Advances in cryptography could present risks.

6. Risk of hacking and software and security weaknesses

Hackers may attempt to interfere with our Services via various attack vectors.

7. No refunds and irreversibility

Payments are irreversible. Some stablecoins or networks may experience limited liquidity or delays.

8. Stablecoin issuer risk

Issuers may fail to maintain reserves, become subject to enforcement, freeze addresses, or become insolvent.

9. Counterparty risk

Third party providers may fail to meet obligations.

10. Intellectual property

Third parties may hold patents that limit our ability to provide Services.

11. Unanticipated risks

There are risks we cannot reasonably foresee.