Terms and Conditions for Arch Man Effective Date: May 1st 2026 1. Acceptance of Terms By accessing or using Arch Man ("Service"), you agree to be bound by these Terms and Conditions ("Terms"). If you do not agree to these Terms, do not use the Service. 2. Description of Service Arch Man provides a cloud-based enterprise architecture management platform that enables users to document architecture decisions, define architecture principles, manage strategic initiatives and projects, catalogue applications, map integrations, and collaborate within organization-scoped workspaces ("Software"). The Service is made available to you subject to these Terms. 3. User Accounts You must create an account to use the Service. You are responsible for maintaining the confidentiality of your account credentials. You agree to provide accurate and complete information during registration and to update such information as necessary. You are responsible for all activities that occur under your account or within organizations you administer using the Service. 4. Subscription and Payment The Service is provided on a subscription basis. Subscription plans, seat or role limits, and pricing are presented within the Service or on associated sales pages. All fees are non-refundable unless otherwise stated in writing. We reserve the right to change subscription plans, pricing, or included limits at any time. Any material changes will be communicated to you in advance and will apply prospectively. If you purchase the Service for an organization, you represent that you are authorized to act on behalf of that organization. 5. Use of the Service You agree to use the Service only for lawful purposes and in accordance with these Terms. You are prohibited from: Violating any applicable laws or regulations. Interfering with or disrupting the Service. Attempting to gain unauthorized access to any part of the Service. Uploading, storing, or sharing content through the Service that you do not have the right to use or disclose. Using the Service to harm, mislead, or unlawfully monitor other users or organizations. 6. Intellectual Property All content and materials available on the Service, including but not limited to text, graphics, logos, software, platform design, and underlying functionality, are the property of Arch Man or its licensors and are protected by intellectual property laws. You are granted a limited, non-exclusive, non-transferable, revocable license to use the Service for your internal business purposes and only in accordance with these Terms. You retain ownership of the content and data you upload to the Service, subject to the rights necessary for us to host, process, display, and transmit that content in order to operate the Service. 7. Data Privacy Your use of the Service is also governed by our Data Privacy Policy made available during registration and within the Service. We are committed to protecting personal data in accordance with applicable data protection laws, including the GDPR where applicable. You are responsible for ensuring that you have an appropriate legal basis for any personal data or confidential information that you upload or make available through the Service. 8. Termination We may terminate or suspend your access to the Service at any time, without prior notice or liability, for any reason, including if you breach these Terms. You may stop using the Service at any time. Subscription cancellation or downgrade will take effect in accordance with the billing terms applicable to your plan. Termination does not relieve you of any payment obligations accrued before termination. 9. Disclaimer of Warranties The Service is provided "as is" and "as available" without warranties of any kind, whether express, implied, or statutory. We do not warrant that the Service will be uninterrupted, error-free, secure, or free of harmful components, or that any data will never be lost or corrupted. 10. Limitation of Liability To the fullest extent permitted by law, Arch Man shall not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, or for any loss of profits, revenues, goodwill, data, or business opportunities, arising out of or in connection with your use of the Service. To the fullest extent permitted by law, the total liability of Arch Man arising out of or relating to the Service or these Terms shall not exceed the amount paid by you or your organization for the Service during the twelve months preceding the event giving rise to the claim. 11. Governing Law These Terms shall be governed by and construed in accordance with the laws of Denmark. Any disputes arising out of or in connection with these Terms shall be subject to the exclusive jurisdiction of the courts of Denmark. 12. Changes to Terms We reserve the right to modify these Terms at any time. We will notify users of material changes by posting updated Terms in the Service, on relevant web pages, or by other reasonable means. Your continued use of the Service after such changes take effect constitutes your acceptance of the updated Terms. 13. Contact Information For any questions about these Terms, please contact us at faasbroersma@gmail.com.

Privacy Policy for Arch Man Effective Date: May 1st 2026 1. Introduction Arch Man ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. By using the Service, you consent to the data practices described in this Policy. 2. Information We Collect A. Personal Data We may collect the following types of personal data: Account Information: Name, email address, username, organization affiliation, role information, invited membership information, and payment-related information associated with subscriptions or organization billing. Usage Data: Information about how you use our Service, such as IP address, browser or device information, authentication events, pages visited, interactions with platform features, and timestamps associated with use of the Service. Communication Data: Records of your communications with us, such as support emails, transactional emails, password reset requests, verification messages, and other administrative communications. Content Data: Information you choose to create, upload, or manage in the Service, including architecture decisions, principles, initiatives, projects, applications, integrations, comments, vendors, partners, categories, and organization membership data. B. Non-Personal Data We may also collect non-personal data, such as aggregated usage statistics or de-identified operational information, which cannot reasonably be used to identify you. 3. How We Use Your Information We use the information we collect for the following purposes: To provide, maintain, secure, and improve our Service. To create and manage user accounts, organizations, subscriptions, and role-based access. To process transactions and send related information, including purchase confirmations, billing communications, and invoices. To respond to your inquiries and provide customer support. To send technical notices, updates, security alerts, password reset links, email verification messages, invitations, and administrative messages. To monitor and analyze trends, usage, and activities in connection with our Service. To enforce our legal terms, protect the security and integrity of the Service, and detect or prevent misuse. To comply with legal obligations. 4. Legal Basis for Processing (GDPR) We process your personal data based on one or more of the following legal grounds: Consent: When you have given us explicit consent to process your data for a specific purpose. Performance of a Contract: When processing is necessary to provide the Service to you or your organization. Legal Obligation: When processing is necessary to comply with a legal obligation. Legitimate Interests: When processing is necessary for our legitimate interests, provided your interests and fundamental rights do not override those interests. 5. How We Share Your Information We may share your information in the following circumstances: Service Providers: We may share information with third-party service providers that support operation of the Service, such as payment processors, email delivery providers, infrastructure or hosting providers, analytics providers, and technical support providers. Within Your Organization: Information you create or maintain in the Service may be visible to other authorized members of your organization, depending on their role and permissions. Compliance with Laws: We may disclose your information if required to do so by law or in response to valid legal requests. Business Transfers: In the event of a merger, acquisition, financing, restructuring, or sale of assets, your information may be transferred as part of that transaction. With Your Consent: We may share your information for any other purpose disclosed to you at the time we collect the information, or with your consent. 6. Data Retention We retain personal data only for as long as necessary to fulfill the purposes described in this Privacy Policy, including to provide the Service, maintain account records, comply with legal obligations, resolve disputes, enforce agreements, and maintain security or audit records, unless a longer retention period is required or permitted by law. 7. Your Rights (GDPR) Under the GDPR, you may have the following rights regarding your personal data: Right to Access: You can request a copy of the personal data we hold about you. Right to Rectification: You can request correction of inaccurate or incomplete personal data. Right to Erasure: You can request deletion of your personal data, subject to legal or operational exceptions. Right to Restriction of Processing: You can request restriction of processing in certain circumstances. Right to Data Portability: You can request a copy of your data in a structured, commonly used, and machine-readable format where applicable. Right to Object: You can object to certain processing activities based on legitimate interests. Right to Withdraw Consent: If we rely on your consent, you can withdraw it at any time without affecting the lawfulness of prior processing. To exercise any of these rights, please contact us at faasbroersma@gmail.com. 8. Data Security We implement appropriate technical and organizational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security. 9. International Data Transfers Your information may be transferred to, stored in, or accessed from countries outside your state, province, country, or other governmental jurisdiction where data protection laws may differ from those of your jurisdiction. Where required, we will take appropriate safeguards to ensure that such transfers comply with applicable law, including GDPR requirements. 10. Children's Privacy Our Service is not intended for individuals under the age of 16. We do not knowingly collect personal data from children under 16. If we become aware that we have collected such data, we will take reasonable steps to delete it. 11. Changes to This Privacy Policy We may update this Privacy Policy from time to time. We will notify users of material changes by posting the updated Privacy Policy in the Service, on relevant web pages, or by other reasonable means. Your continued use of the Service after such changes take effect constitutes your acceptance of the updated Privacy Policy. 12. Contact Us If you have any questions about this Privacy Policy, please contact us at: Arch Man Sanskevej 15A, 2960 Rungsted Kyst, Denmark faasbroersma@gmail.com +45 3077 5886