Legal

PYMSTR Merchant Agreement

Effective Date: February 25, 2026 — V1.0

1. INTERPRETATION

1.1

In this Agreement, the following words and expressions have the following meanings:

• "Account" — means your user account on the PYMSTR Dashboard;
• "Agreement Personal Data" — means any personal data processed by the parties for the purposes set out in this Agreement;
• "Applicable Law" — all applicable statutes, laws, enactments, orders, regulations, regulatory rules, official guidance, standards, regulator expectations and other similar instruments in any relevant jurisdiction, as in force and amended from time to time;
• "Business Day" — means any day other than Friday, Saturday or Sunday or a public holiday in the DIFC or the Emirate of Dubai;
• "Checkout Widget" — means the PYMSTR embeddable checkout interface that Merchants can integrate into their website or application to display invoices and enable Customers to initiate Payments;
• "Confidential Information" — means all non-public information in respect of the business, affairs or activities of a party including the terms of this Agreement;
• "Customer" — refers to persons who purchase goods and/or services from you and make Payment in Supported Stablecoins in connection with your use of our Services;
• "Dashboard" — means the PYMSTR merchant dashboard;
• "Data Protection Laws" — means all Applicable Law relating to data protection, the processing of personal data and privacy, including the DIFC Data Protection Law, DIFC Law No. 5 of 2020 (as amended from time to time);
• "Data Subject" — means the identifiable natural person who provides Personal Data;
• "Embedded Wallet" — means a self-custodial digital wallet created for a Customer through the PYMSTR checkout process via a third-party embedded wallet provider (such as Web3Auth) using social login authentication. PYMSTR does not hold, access, or control private keys associated with Embedded Wallets;
• "Enforced Payment" — means a Payment configuration in which the Merchant pre-selects the accepted Supported Stablecoin(s) and Supported Chain(s), restricting the Customer's payment options to those specified by the Merchant;
• "Fees" — refers to the fees set out in Schedule 1;
• "Offering" — refers to any relevant product and/or service provided by the Merchant to Customers for which you are paid in Supported Stablecoins;
• "Payment" — means a peer-to-peer transfer of Supported Stablecoins initiated by a Customer directly from the Customer's self-custodial wallet to your Settlement Wallet address on the applicable blockchain network in connection with a purchase. PYMSTR provides the software interface through which the Customer views the invoice and initiates the transfer, but does not process, route, hold, or intermediate the transfer at any point;
• "Payment Link" — means a unique URL generated through the PYMSTR Dashboard or API that directs a Customer to a hosted checkout page to complete a Payment;
• "Payment Splitting" — means the functionality whereby a single Customer Payment is directed to multiple Settlement Wallet addresses via on-chain smart contract logic, as configured by the Merchant (for example, a platform fee wallet and a merchant payout wallet). The distribution is executed on-chain; PYMSTR does not intermediate, hold, or control the funds at any point during this process;
• "Software Services" — means the software tools provided by PYMSTR, including the Checkout Widget, Dashboard, API, webhooks, Payment Links, and related technology, as further described in clause 2;
• "Privacy Policy" — means our privacy policy available at pymstr.com;
• "Purchase Agreement" — the agreement between you and the relevant Customer(s) under which you provide the relevant Offering(s);
• "PYMSTR Group" — means us as well as any parent entity and holding company of us and any subsidiary of such parent entity and holding company;
• "Settlement Wallet" — means the unique self-custodial blockchain wallet automatically generated for you upon Account creation, which serves as your primary authentication credential and the address to which Customers send Payments. Your Settlement Wallet is fixed and immutable — one wallet per Account. You retain sole control of the private keys associated with your Settlement Wallet. For Payment Splitting, additional destination wallet addresses may be configured via the API, but the primary Settlement Wallet cannot be changed. We do not at any time hold, manage, access, or have custody of any Supported Stablecoins at your Settlement Wallet address or any configured destination addresses;
• "Services" — our Software Services as set out at clause 2;
• "Supported Chains" — means the blockchain networks supported by our Services from time to time, which currently include Ethereum, Base, Polygon, Arbitrum, and BNB Chain;
• "Supported Stablecoins" — means the stablecoins supported by our Services from time to time, which currently include USDT (Tether) and USDC (Circle). A current list is maintained on our website at pymstr.com;
• "Termination Date" — means the date on which termination of this Agreement takes effect, in accordance with clause 11;
• "Virus" — means any viruses, defects, errors, bugs, glitches, weaknesses, spyware, malware, adware or other harmful, malicious or deleterious programs, material, code, file or software.

1.2

Where the words "includes", "including", "for example" or "such as" are used in this Agreement, they are deemed to have the words "without limitation" following them.

1.3

A reference to "writing" or "written" includes email but not faxes. Any reference to "written consent" shall mean specific explicit consent.

1.4

The headings of the clauses and schedules of this Agreement are for convenience only and shall not affect its construction or interpretation. The schedules form part of this Agreement and any reference in this Agreement to a clause or schedule is a reference to a clause or schedule of this Agreement.

1.5

A reference to this Agreement or to any other agreement or document referred to in this Agreement is a reference to this Agreement or such other document or agreement as amended or varied in accordance with its terms from time to time.

1.6

A reference to a statute, statutory provision or subordinate legislation is a reference to it as it is in force from time to time, and includes any statute, statutory provision or subordinate legislation which it amends or re-enacts and subordinate legislation for the time being in force made under it.

1.7

Unless the context otherwise requires, words in the singular shall include the plural and the plural shall include the singular, and a reference to one gender shall include a reference to the other genders.

2. OUR SERVICES

2.1

We are a software provider. We provide software tools that enable you to generate checkout pages, payment links, and invoices for your Customers (our "Services"). We do not process, transmit, hold, or have custody of any funds. All transfers of Supported Stablecoins occur directly between the Customer's self-custodial wallet and your Settlement Wallet on the applicable blockchain network. We do not operate any intermediary wallet, hop address, or escrow. The Services comprise:

• 2.1.1 Software tools enabling you to generate invoices and checkout pages for Customers to initiate Payment in Supported Stablecoins, via the provision of:
  • 2.1.1.1 Payment Links;
  • 2.1.1.2 the Checkout Widget, which may be embedded into your website or application;
  • 2.1.1.3 an Application Programming Interface ("API") and webhooks which can be integrated with your website, application, or backend systems;
• 2.1.2 A merchant Dashboard enabling you to manage your Account, view transactions, generate API keys, create Payment Links, set up webhooks, view reports, and access documentation;
• 2.1.3 Enforced Payment functionality, allowing you to configure which Supported Stablecoins and Supported Chains are presented to Customers on checkout pages generated through our software;
• 2.1.4 Payment Splitting functionality, enabling you to configure on-chain smart contract logic so that a single Customer Payment is directed to multiple Settlement Wallet addresses as designated by you;
• 2.1.5 Transaction information and the ability to manage transactions via our Dashboard;
• 2.1.6 Technical transaction-tracking tools.

2.2

We do not provide custody, payment processing, or money transmission services. All Payments are peer-to-peer transfers from the Customer's self-custodial wallet directly to your Settlement Wallet(s) on the applicable blockchain network. We do not at any time hold, manage, access, route, or have custody of any Supported Stablecoins. We do not operate any intermediary wallet, hop address, escrow, or smart contract through which funds pass under our control. Both you and your Customers maintain your own self-custodial wallets, and you and your Customers each hold your own private keys. We do not hold or have access to any party's private keys. We do not provide, nor do we accept responsibility for, any legal, tax or accounting advice. We do not provide advice or any form of recommendation regarding the suitability or appropriateness of our Services.

2.3

Our Services are provided on an "as is" and "as available" basis, without any representation that they are fit for any particular purpose. We do not warrant or guarantee the quality, completeness, timeliness, or availability of our Services, or that they will be free from any Virus. To the greatest extent permitted under Applicable Law, we exclude any fiduciary duty we may owe to you in relation to our Services.

2.4

Customers may authenticate via social login providers (including Google, Twitter/X, GitHub, email, and phone) which creates an Embedded Wallet through a third-party provider, or by connecting their own Web3 wallet (including MetaMask, WalletConnect, or Coinbase Wallet). We are not the provider of, and do not control, any Embedded Wallet or third-party wallet. We accept no responsibility for any Embedded Wallet provider or third-party wallet, including any loss of access, malfunction, or security breach related thereto.

3. YOUR ACCOUNT

3.1

Account creation automatically generates a unique self-custodial Settlement Wallet which serves as your authentication credential. PYMSTR does not have access to, and cannot reset, recover, or restore your wallet or private keys. You are solely responsible for securing your wallet credentials and any associated recovery mechanisms. Loss of access to your Settlement Wallet may result in permanent loss of any Supported Stablecoins held at that address.

3.2

We are entitled to rely upon any instruction and/or communication received from, or believed in good faith by us to be from, any person authenticating via your Settlement Wallet, regardless of whether you have actually authorised those instructions or communications. We do not accept any liability for any loss caused by us acting on such an instruction or communication.

3.3

We reserve the right to suspend your access to the Dashboard and Software Services at any time if, in our reasonable opinion, you fail to comply with any aspect of this Agreement or if we consider that there may be a security risk. For the avoidance of doubt, any such suspension does not and cannot restrict access to your Settlement Wallet itself, which remains on-chain and under your exclusive control at all times.

4. ELIGIBILITY REQUIREMENTS

4.1

In using our Services, you at all times represent that you:

• 4.1.1 (if you are a body corporate) are duly organised and validly existing under the laws of the jurisdiction of your establishment, and have full power, authority and right to bind yourself to this Agreement and to receive our Services, including as regards performing all actions and obligations under this Agreement, which therefore constitute valid and legally binding obligations;
• 4.1.2 (if you are an individual) meet any age, residency, legal capacity, competency and all other requirements to receive our Services, including as regards performing all actions and obligations under this Agreement, which therefore constitute valid and legally binding obligations;
• 4.1.3 are legally permitted under Applicable Law to accept Payment in Supported Stablecoins for Offerings using our Services, have full and unencumbered legal title and authorisation to make all Offerings available to Customers, and there is no other reason to prevent you from agreeing to this Agreement and providing Offerings or receiving Payment in Supported Stablecoins;
• 4.1.4 are not impersonating any other person;
• 4.1.5 will always provide us promptly with up-to-date, accurate, complete and not misleading responses to any request for information we may make in connection with our provision of Services, and ensure that any such information is at all times kept up-to-date, accurate, complete and not misleading;
• 4.1.6 have not received any advice from us in relation to the merits of entering into this Agreement or any transaction, and you are solely responsible for any evaluations, decisions and actions regarding your entering into this Agreement, including whether entering this Agreement is suitable or appropriate for you;
• 4.1.7 are not subject to any financial sanctions, embargoes or other restrictive measures imposed by the United Nations, the European Union ("EU"), any EU country, the United States Office of Foreign Assets Control ("OFAC"), the United Arab Emirates, or any governmental authority in any jurisdiction;
• 4.1.8 will at all times act in accordance with Applicable Law (including but not limited to: in relation to sanctions, anti-money laundering, counter-terrorist financing, anti-corruption, anti-bribery and preventing the facilitation of tax evasion). You are solely responsible for complying with AML, CTF and sanctions obligations relating to your Customers. PYMSTR does not onboard or monitor your Customers and does not perform AML, KYC, or sanctions checks on your Customers;
• 4.1.9 will not use our Services in connection with any Offering which infringes our standards as set out in Schedule 3, or which may otherwise reasonably be considered immoral, offensive or harmful;
• 4.1.10 will not interfere with, damage or disrupt any equipment or network or software used by any third party provider;
• 4.1.11 waive any right you may have to participate in a class action lawsuit or a class-wide arbitration against us, any entity which is part of the PYMSTR Group, and/or any person involved with us that arises out of or relates to this Agreement;
• 4.1.12 acknowledge you are responsible for your tax obligations, and that tax treatment depends on your individual circumstances and may be subject to change in future;
• 4.1.13 have independently (or with the assistance of an independent advisor) determined that our Services are suitable or appropriate for your requirements;
• 4.1.14 have read, understood and agreed to our Privacy Policy;
• 4.1.15 will not attempt to circumvent the security of or interfere with the proper working of our Services or Dashboard, and you will not otherwise introduce, nor permit the introduction of, any Virus into any of our systems;
• 4.1.16 provide us with whatever information we may request for the purposes of satisfying our own regulatory, compliance and contractual obligations, including providing information we may need to meet our own internal risk, fraud-prevention, or onboarding requirements; and
• 4.1.17 for clarity, PYMSTR does not perform AML, KYC or sanctions checks on your Customers on your behalf.

4.2

You shall inform us immediately in the event that you can no longer make any of the representations set out in this clause 4.

5. PURCHASE AGREEMENTS

5.1

You are responsible for ensuring that any Purchase Agreement and any Offerings you provide are in compliance with all Applicable Laws, and for ensuring that:

• 5.1.1 you provide Customers with any information that we may require you to provide in connection with you accepting Payments in Supported Stablecoins;
• 5.1.2 you have full and proper right, power, permission and authority to sell Offerings;
• 5.1.3 any restrictions, limitations and requirements in relation to the Offerings are clearly and appropriately disclosed and complied with;
• 5.1.4 you properly disclose your policy on refunds and the existence or any absence of any refund rights; and
• 5.1.5 you acknowledge that Payments in Supported Stablecoins are irreversible. PYMSTR cannot reverse or refund any Payment and does not guarantee recovery of misdirected transactions.

5.2

We are not a party to, and do not accept any liability in relation to or as a consequence of, any Purchase Agreement.

6. OUR FEES

6.1

Our Fees are set out in Schedule 1. Please note that it is possible that taxes or costs may exist in addition to those which we pay or impose, and you are responsible for paying these.

6.2

Fees are payable by you to PYMSTR for your use of the Software Services. Fees become due upon completion of each transaction facilitated through our software and are payable in accordance with Schedule 1. Where technically supported by the applicable blockchain network, Fees may be collected via on-chain smart contract logic configured by you as part of your use of the Services; in all cases, PYMSTR does not intermediate or handle the Customer's Payment.

6.3

Fees are collected automatically via on-chain smart contract logic at the time each transaction is executed. There are no outstanding or deferred Fee obligations under this Agreement.

7. DATA PROTECTION

7.1

For the purpose of this clause 7, Controller, Data Subject, Personal Data, Personal Data Breach, processing and appropriate technical and organisational measures shall have the meaning given to them in the Data Protection Laws, including in particular the DIFC Data Protection Law, DIFC Law No. 5 of 2020.

7.2

PYMSTR collects limited merchant account data — including personal data such as first name, last name, and email address, as well as business name, website, and sector — for the purposes of providing the Software Services, invoicing, and communication. For the purposes of the Data Protection Laws, PYMSTR is the Controller of this merchant account data. PYMSTR also acts as Controller of limited Customer personal data (email address and display name) received from third-party authentication providers during social login. This Customer data is used solely for wallet association and is not shared with Merchants or other third parties. For Customers who connect their own external Web3 wallets, PYMSTR holds no personal data beyond publicly available blockchain addresses.

7.3

Each party shall comply with applicable Data Protection Laws in respect of any personal data it processes in connection with this Agreement.

7.4

You acknowledge and agree that you are solely responsible for complying with all applicable Data Protection Laws in respect of any personal data you collect from your Customers. PYMSTR does not share Customer data with Merchants.

8. INTELLECTUAL PROPERTY RIGHTS

Our Intellectual Property

8.1

We are the owner or the licensee of all copyright and intellectual property rights that exist in connection with our Services and Dashboard (the "Materials"). You have the right to use any of these Materials only for the purpose of using our Services.

8.2

We grant you a limited, personal, non-exclusive, non-commercial, royalty-free, revocable, non-sub-licensable and non-transferable licence to access and use the Materials solely for the purpose of receiving our Services.

• 8.2.1 We expressly reserve all rights in and to the Materials.
• 8.2.2 You shall not modify, reverse engineer, copy, distribute, sell, or create derivative works based on the Materials.
• 8.2.3 You shall not exploit any intellectual property in relation to the Materials for a commercial purpose.
• 8.2.4 You shall not attempt to obtain, or assist third parties in obtaining, access to Materials other than as permitted.

8.3

All logos related to us and the Materials are marks of PYMSTR or our licensors. You may not copy, imitate, or use our trading names or logos without our prior written consent.

Your name, logo and trademarks

8.4

You grant to us a non-assignable, royalty-free and non-exclusive right to use your name, trademark(s) and any logo for the purposes contemplated by this Agreement and in any sales materials.

8.5

The licence granted by you under clause 8.4 will automatically terminate on the termination of this Agreement.

9. LIABILITY

9.1

Nothing in this Agreement limits any liability which cannot legally be limited, including liability for death or personal injury caused by negligence, and for fraud or fraudulent misrepresentation.

Our liability

9.2

Subject to clause 9.3, we shall be responsible to you only for loss that you suffer as a result of our gross negligence in performing our obligations under this Agreement.

9.3

Notwithstanding clause 9.2, we shall not be liable for any loss:

• 9.3.1 as a consequence of:
  • 9.3.1.1 any action or inaction of any Customer;
  • 9.3.1.2 any Offering you provide to a Customer;
  • 9.3.1.3 any pricing data provided by us;
  • 9.3.1.4 any exercise of rights provided to us under this Agreement;
  • 9.3.1.5 any inability to access or use our Services;
  • 9.3.1.6 any risk which you have been informed of materialising (including those set out at Schedule 2);
  • 9.3.1.7 any representation made by you;
  • 9.3.1.8 any issue in relation to the transaction-tracking tools we provide (so long as we acted in good faith);
  • 9.3.1.9 a de-pegging event or fluctuation of the value of the Supported Stablecoins;
  • 9.3.1.10 our Services being used in relation to unsupported digital assets or blockchains;
  • 9.3.1.11 any action or inaction we take to comply with Applicable Law;
  • 9.3.1.12 any delays or failures relating to blockchain network congestion or other network-level conditions;
  • 9.3.1.13 any issue with or failure of an Embedded Wallet or any third-party wallet provider;
  • 9.3.1.14 any issue arising from Payment Splitting configurations set by you;
  • 9.3.1.15 unforeseeable events and/or events outside of our reasonable control;
• 9.3.2 in connection with the terms or performance of the Purchase Agreement;
• 9.3.3 which constitutes indirect, consequential or special loss; or
• 9.3.4 which relates to a risk which you have accepted.

Your liability

9.4

You agree to indemnify us for any losses to us that arise from:

• 9.4.1 your breach of any Applicable Law or this Agreement;
• 9.4.2 your misuse of our Services;
• 9.4.3 your breach of the rights of or obligations to any Customer or any other third party;
• 9.4.4 any refund due to any Customer;
• 9.4.5 any Purchase Agreement and Offering(s) you provide;
• 9.4.6 any regulatory inquiry, legal action, litigation, dispute or investigation that relates to you;
• 9.4.7 any fees, taxes or costs not imposed by or via us, which we pay on your behalf.

9.5

Losses for the purpose of clause 9.4 refer to any loss or damage of whatever nature, whether direct, indirect or consequent (including reasonable attorney fees).

9.6

We do not have access to your private keys and cannot reverse, cancel, or recover transactions to or from any Settlement Wallet.

9.7

PYMSTR's total liability for damages shall not exceed the total Fees paid by the Merchant in the twelve (12) months preceding the event giving rise to the claim. Nothing in this Agreement shall limit liability for fraud, gross negligence, or wilful misconduct.

10. MERCHANT INFORMATION AND FRAUD PREVENTION

10.1

PYMSTR collects basic business information for the purposes of providing the Software Services. You agree to provide accurate and up-to-date information.

10.2

We reserve the right to request additional information if required by Applicable Law or to prevent fraud.

11. SUSPENSION AND TERMINATION

11.1

You may terminate this Agreement with immediate effect at any time by closing your Account. We may terminate by giving you at least 5 Business Days' written notice.

11.2

We may also terminate immediately if:

• 11.2.1 you are in breach of this Agreement and either the breach is incapable of remedy or you fail to remedy within 10 Business Days;
• 11.2.2 (if body corporate) you are unable to pay debts, petition for winding up, etc.;
• 11.2.3 (if individual) you are unable to pay debts, declared bankrupt, etc.

11.3

We may suspend our Services with immediate effect where:

• 11.3.1 reasonably beneficial for software maintenance;
• 11.3.2 required by Applicable Law;
• 11.3.3 material information provided by you is inaccurate;
• 11.3.4 fraudulent or unauthorised use;
• 11.3.5 complaints received about you;
• 11.3.6 pending litigation or regulatory risk;
• 11.3.7 force majeure events;
• 11.3.8 failure to pay Fees;
• 11.3.9 any suspension will not affect our ability to terminate.

11.4

We are not liable for any loss as a result of exercising termination or suspension rights.

11.5

On termination: you shall pay outstanding Fees; all prior rights, obligations and liabilities are unaffected.

11.6

Termination shall not affect provisions intended to survive.

12. CONFIDENTIALITY

12.1

Each party agrees to keep Confidential Information confidential and use it solely in connection with the performance of this Agreement.

12.2

The provisions of clause 12.1 shall not apply to the extent that the relevant Confidential Information is:

• 12.2.1 lawfully obtained from other sources;
• 12.2.2 in the public domain (not through breach);
• 12.2.3 required to be disclosed by law;
• 12.2.4 disclosed to employees/advisors under confidentiality;
• 12.2.5 disclosed with the other party's consent; or
• 12.2.6 (PYMSTR only) disclosed to PYMSTR Group entities.

13. CHANGING THE TERMS OF THIS AGREEMENT

13.1

We may make changes to any aspect of our Services and/or to this Agreement at any time, with immediate effect. We will notify you via email or Dashboard.

13.2

Your continued use constitutes acceptance. If you disagree, you must stop using our Services.

13.3

You may not change the terms unless we give explicit written consent.

14. CONFLICTS OF INTEREST

14.1

We maintain and operate effective arrangements to prevent conflicts of interest. Where insufficient, we shall disclose conflicts and mitigation steps.

15. COMMUNICATIONS

15.1

All communications will be in English.

15.2

Communications to us may be made by email to [email protected]; and/or by post to our registered address at the Dubai International Financial Centre, Dubai, UAE.

15.3

Communications to you may be made using the latest details provided to us.

15.4

Communications by email will be deemed received on the earlier of access or 2 Business Days after receipt. Hand delivered: when delivered. By courier: when proof of receipt is provided.

15.5

We do not accept liability for any delay in responding to communications.

16. NOVATION

16.1

In the event that we appoint another entity within the PYMSTR Group to take over rights and obligations under this Agreement, we may transfer by way of novation and you consent to such novation.

17. GOVERNING LAW AND JURISDICTION

17.1

This Agreement shall be governed by and construed in accordance with the laws of the Dubai International Financial Centre, and the DIFC Courts shall have exclusive jurisdiction.

18. ENTIRE AGREEMENT

18.1

This Agreement constitutes the entire agreement between the parties and supersedes any prior agreement.

18.2

The only remedy available for any misrepresentation shall be for breach of contract.

19. REGULATORY TREATMENT OF THE SERVICES

19.1

Our Services consist solely of software tools and do not constitute payment services, money transmission, or any regulated financial service. By using our Services, you do not have the benefit of any statutory compensation scheme or ombudsman.

19.2

We reserve the right to make changes to our Services in order to uphold the regulatory treatment of our Services as software services.

20. MISCELLANEOUS

20.1

This Agreement shall take effect from the date on which you first use our Services.

20.2

We represent and warrant that we are a company duly established and validly existing under the laws of the DIFC.

20.3

Each party is an independent contractor. Nothing creates a partnership, agency, or joint venture.

20.4

Each provision is separate and severable. Invalid provisions shall be deemed deleted without affecting the rest.

20.5

You may not assign or transfer rights or obligations. We may assign without restriction.

20.6

PYMSTR Group entities shall have the right to enforce rights granted to them. No third-party consent is required for variation or termination.

20.7

No waiver shall be effective unless in writing and executed by us.

ACCEPTANCE BY USE

BY USING OUR SERVICES, YOU AGREE TO BE BOUND BY THE TERMS OF THIS AGREEMENT (INCLUDING ALL SCHEDULES). YOUR CONTINUED USE OF THE SERVICES CONSTITUTES YOUR ACCEPTANCE OF THIS AGREEMENT AS AMENDED FROM TIME TO TIME.

THIS AGREEMENT IS DISPLAYED ON OUR WEBSITE, DASHBOARD, AND WITHIN OUR DOCUMENTATION. IT IS YOUR RESPONSIBILITY TO REVIEW THIS AGREEMENT BEFORE AND DURING YOUR USE OF THE SERVICES.

IF YOU DO NOT AGREE TO THE TERMS OF THIS AGREEMENT, YOU MUST NOT USE OUR SERVICES.

SCHEDULE 1 — Fees

We charge:

• A fee of 1% of each transaction between the Merchant and the Customer.

Unless otherwise agreed in a separate commercial arrangement between you and PYMSTR, the above fee schedule applies.

Network fees (gas fees) required to execute transactions on the applicable Supported Chain are the responsibility of the Customer and are not included in our Fees.

All Fees are exclusive of any applicable tax.

Fees are invoiced to the Merchant for the use of the Software Services and become due upon completion of each transaction. Where technically supported, Fees may be collected via on-chain smart contract logic configured by the Merchant.

SCHEDULE 2 — Risk Factors

You should carefully consider the risks described below. The list is not exhaustive.

Important Note: We expressly disclaim any responsibility for any loss arising from reliance on information in this Schedule 2.

• 1. Stablecoin de-pegging risk — Stablecoins may temporarily or permanently lose their peg due to market conditions, issuer insolvency, regulatory action, technical failure, or other causes.
• 2. Regulatory risks — Regulation is evolving and may severely impact our business. Stablecoin-specific regulation (EU MiCA, US GENIUS Act) may affect availability.
• 3. Risk of losing access to Supported Stablecoins due to loss of private key(s) — Loss of private keys results in loss of stablecoins. You are responsible for securing your wallet.
• 4. Risks associated with the blockchain protocol — Malfunction, breakdown or abandonment of a blockchain protocol may have adverse effects. Quantum computing advances could present risks.
• 5. Risk of hacking and software and security weaknesses — Hackers may attempt to interfere with our Services via various attack vectors.
• 6. Embedded Wallet risks — Third-party providers may experience downtime, security breaches, or discontinue services.
• 7. Counterparty risk — Third party providers may fail to meet obligations.
• 8. Intellectual property — Third parties may hold patents that limit our ability to provide Services.
• 9. Stablecoin issuer risk — Issuers may fail to maintain reserves, become subject to enforcement, freeze addresses, or become insolvent.
• 10. Unanticipated risks — There are risks we cannot reasonably foresee.

SCHEDULE 3 — Prohibited Activities

Offerings must not involve:

• Infringement of intellectual property or proprietary rights
• Dealing in counterfeit or unauthorised goods
• Providing illegal products or services
• Producing or distributing illegal content
• Promoting get rich quick schemes
• Operating mug shot publication or pay-to-remove sites
• Offering no-value-added services
• Engaging in aggregation services
• Dealing in drug paraphernalia
• Participating in multi-level marketing schemes
• Distributing pseudo pharmaceuticals
• Selling substances designed to mimic illegal drugs
• Trading CFDs without appropriate licensing
• Including child sexual abuse material
• Promoting sexually explicit material involving minors
• Deceiving any person
• Harassing, upsetting, embarrassing, alarming or annoying any other person
• Operating cyberlockers
• Dealing in arms and ammunition without licensing
• Facilitating transactions with privacy coins
• Operating gambling, gaming, or betting services in violation of applicable law
• Any activity that breaches applicable law

We exclude our liability for all action we may take in response to breaches of this Schedule 3.