BUSINESS MANAGEMENT SYSTEM (BMS) — PRIVACY POLICY Version: 2026-09-22-v4 Operator: CHRISTOVEMPIRE LTD BMS processes account, billing, security, support, localization and service-use information needed to provide and protect the service. A subscribing business is generally the controller of personal data it enters into BMS; BMS acts as processor for that tenant content and as controller for BMS's own account, billing, security, legal-compliance and direct-service relationship data. DATA WE PROCESS Depending on use, BMS may process: - account identity, administrator email and business contact information; - subscription, payment reference, provider, charged amount, currency and exchange-rate metadata; - authentication, rate-limit, audit, security, recovery and technical logs; - tenant content such as products, prices, inventory, sales, branches, users, invoices and audits; - localization preferences such as locale, time zone, interface language, print/invoice language and legal-page language; - privacy/support requests and account-recovery metadata. PAYMENT INFORMATION Payment checkout and card/payment credentials are handled by the selected payment provider. BMS stores only the payment and subscription metadata needed to verify, reconcile and administer the service. ACCESS DESIGN BMS does not provide platform staff with a normal customer-record browsing or support-impersonation console. Customer sales, inventory, staff, branch, report and audit data are scoped to the authenticated business account and permitted role/branch. Account recovery uses verified Main Admin email links; support-set passwords are disabled. Exceptional technical access may occur only where necessary for a documented security incident, customer-authorized restoration, legal obligation or backup recovery and should be limited to the minimum required. BROWSER, EDGE AND ACCESS SECURITY BMS serves browser-facing pages over HTTPS with HSTS and uses a Content Security Policy to restrict executable content, framing, base URLs, object embedding and form destinations. Browser write requests are restricted to the BMS origin except for specifically designated external payment-provider callbacks/webhooks. Login attempts are rate-limited, oversized mutation requests are rejected, and tenant/role/branch authorization is enforced server-side. These safeguards reduce risk but cannot guarantee absolute security. LOCALIZATION AND DATA INTEGRITY Changing a business or branch language, locale, time zone, print language or legal-page language changes presentation and formatting. BMS does not rewrite canonical products, sales, inventory, quantities, user identifiers, audit records or other shared operational data merely because a language preference changes. PURPOSES AND LEGAL BASES Depending on applicable law, processing may rely on contract performance, legitimate interests such as service security and fraud prevention, legal obligations, and consent where required. BMS does not sell personal information or use tenant data for cross-context behavioral advertising. INTERNATIONAL USE BMS may be used internationally. Where cross-border transfer rules apply, BMS and its providers will use legally recognized transfer mechanisms and supplementary safeguards as required. Mandatory local privacy rights remain applicable even where the contractual terms select Nigerian law. PRIVACY RIGHTS Depending on applicable law, individuals may have rights to information/notice, access, correction, deletion/erasure, restriction, portability, objection, withdrawal of consent, non-discrimination and rights concerning automated decisions. Requests may be submitted through /legal-center.html. For tenant content, the subscribing business is usually the controller and may need to handle the request; BMS will assist as processor where required. ============================================================ BUSINESS MANAGEMENT SYSTEM (BMS) — TERMS OF SERVICE Version: 2026-09-22-v4 Operator: CHRISTOVEMPIRE LTD By creating, purchasing, renewing or using a BMS account, the customer agrees to these Terms, the Privacy Policy, Subscription/Cancellation/Refund Policy, Data Retention & Deletion Policy, and Data Processing Addendum (DPA). The customer must provide accurate account information, protect credentials, use BMS lawfully, and have authority and an appropriate legal basis for personal data entered into the service. CUSTOMER DATA AND ACCOUNT CONTROL Customer tenant content remains the customer's data. BMS receives only the rights necessary to host, secure, back up, transmit and process that content to provide the service. BMS does not acquire ownership of customer operational records. The Main Admin controls the customer account, permitted Branch Admins, branch configuration and other customer-managed settings, subject to the selected plan. BRANCHES, LOCATIONS AND SALES-AGENT LIMITS BMS does not automatically create, name or designate a "Main Branch", "Main Location" or "Headquarters" for Growth or Business customers. The Main Admin creates and names the business's own branches/locations. Current operational limits are: - Growth: up to 2 active branches/locations, up to 2 active Branch Admins, and up to 6 sales-agent accounts total across the business. When creating or editing a Growth branch, the Main Admin sets that branch's sales-agent cap from 0 to 6. Branch caps do not reserve agent slots and the business-wide total can never exceed 6. - Business: unlimited active branches/locations and unlimited Branch Admins, with up to 500 sales-agent accounts total across the business. The Main Admin sets each branch's sales-agent cap from 0 to 500. Branch caps do not reserve agent slots and the business-wide total can never exceed 500. - Starter: plan-specific limits shown on the current BMS pricing page continue to apply. A branch cap cannot be reduced below the number of sales-agent accounts already assigned to that branch. Branch Admins manage agents only within their assigned branch and within the Main Admin-set branch cap and plan-wide limit. The Main Admin retains plan-level oversight and the platform enforces tenant and branch isolation. LOCALIZATION AND LANGUAGE BMS can store business- and branch-level preferences for locale, time zone, interface language, invoice/print language and legal-page language. These preferences change presentation and labels only. Shared business records are stored canonically and are not duplicated, translated in-place or rewritten when a display language changes. Customer-entered names, free-text descriptions and other customer content remain the customer's original content unless the customer edits them. SECURITY AND ACCEPTABLE USE BMS may rate-limit, suspend or block abusive, unlawful, fraudulent or security-threatening activity in order to protect the service and other customers. Account roles and branch permissions must not be bypassed or shared in a way that defeats access controls. No internet or cloud service can guarantee uninterrupted availability or absolute security. Cloud, internet, email and payment-provider outages may affect service availability. SERVICE CHANGES BMS may improve, replace or retire features to maintain security, reliability or product operation. Material subscription terms presented for a purchase or renewal are shown at checkout and on the pricing/legal pages. Mandatory rights under applicable law are not excluded. GOVERNING FRAMEWORK These Terms are governed by the laws of the Federal Republic of Nigeria, subject to mandatory consumer, privacy, employment, data-protection or other rights that apply to a customer or data subject in another jurisdiction. ============================================================ BUSINESS MANAGEMENT SYSTEM — SUBSCRIPTION, CANCELLATION & REFUND POLICY Version: 2026-09-22-v4 Operator: CHRISTOVEMPIRE LTD Subscriptions are prepaid for the selected fixed period: 30 days or 365 days for annual billing. For a brand-new business, a successful first payment reserves the purchased plan to the verified payment email and the paid period does not begin running until the first Main Admin account is securely created for that business. If account creation is postponed or the original payment return is left, the same payment email can later be entered on Create Admin to create the first Main Admin without a second charge. Existing-business renewals and upgrades follow the active-subscription lifecycle shown at checkout. Subscriptions do not automatically renew unless recurring billing is explicitly introduced and separately authorized by the customer. Customers can stop future service by not renewing. EXPIRY AND GRACE PERIOD BMS currently permits up to a 3-day workspace grace period after subscription expiry. The grace period is not an automatic renewal, does not create a new paid term and does not charge the customer. After the grace period, workspace access may be restricted until a valid subscription is restored. PRICING AND CURRENCY Plan catalog prices are set in NGN. Where USD checkout is offered, BMS converts the NGN catalog amount using the exchange rate displayed for that checkout and records the rate and charged amount in the payment record. Provider fees, bank charges, exchange-rate movements and payment-processing times may be outside BMS control. PLAN LIMITS The plan purchased or renewed determines the account's feature and capacity limits. Current Growth and Business branch/agent controls are published in the Terms and pricing page. Per-branch agent caps set by a Main Admin do not reserve plan-wide agent slots. REFUNDS - Duplicate charges, confirmed payment errors, and payments where BMS fails to provision the purchased service are refundable after verification. - A first-time customer may request a refund within 7 days of the first purchase if the account has not been materially used, unless applicable law provides a stronger right. - Activated renewals and upgrades are generally non-refundable except for duplicate/error charges, material service failure, or where applicable law requires otherwise. - Approved refunds are returned through the original payment method where supported and may take provider/bank processing time. Mandatory statutory cancellation, cooling-off or refund rights override this policy where applicable. ============================================================ BUSINESS MANAGEMENT SYSTEM — DATA RETENTION & DELETION Version: 2026-09-22-v4 Operator: CHRISTOVEMPIRE LTD ACTIVE DATA Active tenant data is retained while needed to provide the service and maintain the customer's account, subject to applicable legal obligations and customer instructions. RECOVERY AND BACKUPS BMS uses Cloudflare D1 recovery capabilities and private R2 backup archives as part of its recovery design. Recovery archives are configured for a 90-day retention window. Automated recovery-health checks and isolated restore drills may create temporary technical records or temporary restore databases solely to verify recoverability; temporary restore databases are deleted after the drill completes. ACCOUNT CLOSURE AND DELETION After account closure, operational data enters a recovery/deletion process. BMS targets deletion of active operational copies after a 30-day recovery period, subject to legal holds, fraud/security needs and verified customer instructions. Existing protected backup copies may remain until they expire under the backup retention cycle, generally up to 90 additional days. OTHER RECORDS - Billing and payment records are retained for the period required by applicable law and legitimate accounting/dispute needs. - Security, authentication and incident logs are retained only as long as reasonably necessary for security, fraud prevention and investigation. - Privacy requests and legal-acceptance records are retained as needed to demonstrate compliance and resolve disputes. Deletion may be limited where retention is required by law, necessary to establish or defend legal claims, required for fraud/security investigation, or technically necessary within protected backups pending normal expiry. ============================================================ BUSINESS MANAGEMENT SYSTEM — PRIVACY RIGHTS PROCEDURE Version: 2026-09-22-v4 Operator: CHRISTOVEMPIRE LTD Depending on applicable law, privacy rights may include notice/information, access, correction, deletion/erasure, restriction/limitation, portability, objection/opt-out, withdrawal of consent, non-discrimination and rights concerning automated decisions. Submit a request through /legal-center.html. Identity verification may be required before BMS or the relevant subscribing business acts on a request. If the request concerns tenant content controlled by a subscribing business, BMS may refer the request to that business and assist it as processor. Requests are handled within the time required by applicable law. Individuals may also complain to the competent privacy regulator. ============================================================ BUSINESS MANAGEMENT SYSTEM — DATA PROCESSING ADDENDUM Version: 2026-09-22-v4 Operator: CHRISTOVEMPIRE LTD Where the Customer is controller and BMS is processor, this DPA forms part of the BMS Terms. PROCESSING INSTRUCTIONS BMS will process Customer Personal Data only to provide, secure, localize, back up, recover and support the service and on documented Customer instructions, unless applicable law requires otherwise. SECURITY AND CONFIDENTIALITY BMS will apply appropriate technical and organizational safeguards, including tenant/role/branch access controls, authenticated sessions, browser/edge protections, rate limiting, protected backups and recovery controls. Persons authorized to process Customer Personal Data must be subject to confidentiality obligations. DATA-SUBJECT AND SECURITY ASSISTANCE BMS will reasonably assist the Customer with applicable data-subject requests, security obligations, breach response and information reasonably needed to demonstrate processor commitments. Relevant personal-data breaches will be communicated without undue delay as required by applicable law and the parties' roles. SUBPROCESSORS AND INTERNATIONAL TRANSFERS The Customer authorizes the subprocessors published by BMS, subject to appropriate data-protection obligations. Where cross-border transfer laws require safeguards, BMS will use legally recognized transfer mechanisms as applicable. END OF SERVICE BMS will delete or return Customer Personal Data at the end of services subject to legal retention, verified Customer instructions, dispute/security needs and normal protected-backup expiry. CUSTOMER RESPONSIBILITIES The Customer remains responsible for lawful instructions, legal bases, notices, user permissions, employee/customer privacy obligations and the accuracy of the data it places in BMS. ============================================================ BUSINESS MANAGEMENT SYSTEM — SUBPROCESSORS Version: 2026-09-22-v4 Operator: CHRISTOVEMPIRE LTD Cloudflare — Worker hosting, D1 databases, R2 object storage/backups, network delivery, security and related cloud infrastructure. Paystack — payment checkout, verification and payment-related processing when selected. Flutterwave — payment checkout, verification and payment-related processing when selected. Resend — transactional email delivery, including verified-email account recovery, when enabled. Provider infrastructure, processing locations and transfer mechanisms may change according to the provider's services. BMS will update this disclosure when a material subprocessor is added, replaced or its role materially changes.