User Agreement

USER AGREEMENT

Pavlodar, Republic of Kazakhstan
Effective date: 5 September 2026

This User Agreement (the “Agreement”) governs the relationship between DigitalTown LLP, BIN 240340004389 (the “Administration”, “we”), and any individual or legal entity (the “User”) using https://signaturum.com, an account, the API, or other Signaturum services (collectively, the “Service”).

1. STATUS, ACCEPTANCE, CONTRACTING ENTITY AND DOCUMENT HIERARCHY

1.1. By using the Service, creating an account, purchasing a Service, creating an API key, uploading or submitting Content, or otherwise interacting with the Service, the User confirms that they have read, understood and accepted this Agreement in the version applicable to them.

1.2. A person acting for a company, employer, team, client or other organisation represents that they have authority to bind that organisation. Actions of authorised employees and integrations are attributable to the relevant organisation within their granted access.

1.3. The User must have legal capacity to enter into this Agreement. A minor may use the Service only where permitted by applicable law and with any legally required consent of a guardian.

1.4. Paid Services may additionally be governed by the Public Offer, selected tariff, product description, checkout, invoice, order, Order Form, SLA, DPA and/or separate enterprise agreement where applicable.

1.5. In case of a direct conflict, the order of precedence is: (a) individually signed agreement/Order Form/SLA; (b) specific tariff or order terms; (c) Public Offer; (d) this Agreement; and (e) informational Website materials, unless mandatory law requires otherwise.

1.6. Marketing pages, demonstrations, examples, preliminary estimates, individual benchmark/test results and capability descriptions are informational and are not warranties unless a metric or commitment is expressly included in the applicable tariff, order, specification or written SLA.

1.7. Algorithms, models, supported formats, embedding methods, detection modes, interfaces, limits and APIs may evolve. Experimental, beta, preview and free features may be changed or discontinued without a guarantee of backwards compatibility unless otherwise agreed in writing.

1.8. For international language versions the contracting entity is DigitalTown LLP, unless a separately signed B2B agreement expressly states otherwise. The Russian ru/ru-RU version is for ООО «ТКС» and the ru-KZ version is for DigitalTown LLP in Kazakhstan.

1.9. Nothing in this Agreement waives or limits consumer rights or other liability that cannot lawfully be waived or limited. Any unenforceable limitation applies only to the maximum extent permitted by law.

2. SERVICE COMPONENTS AND MODULE-SPECIFIC CHARACTERISTICS

2.1. Signaturum may include invisible content watermarking; identifier recovery and verification; API/SDK; digital deposit, hashing and timestamping; certificates and technical reports; managed storage; protected viewing tools; monitoring and web crawling; notifications, webhooks and other modules described on the Website.

2.2. Availability, supported formats, limits, speed, retention, operation counts and other parameters are determined by the current tariff and documentation at the time of use.

2.3. Invisible watermark. A watermark is a technical identification and traceability mechanism, not encryption, an electronic signature, DRM or absolute copy protection. Embedding may introduce mathematically measurable changes even where they are visually imperceptible.

2.4. Robustness depends on source content, format, resolution, embedding settings, model version and later transformations. We do not warrant recovery after every possible compression, crop, resize, transcode, screenshot, screen-to-camera capture, editing, generative transformation or combination unless that scenario is expressly covered by a written specification/SLA.

2.5. Detection. Algorithmic detection may return positive, negative, partial, inconclusive or incorrect results. False positives and false negatives are possible. The User must not make legally, financially or disciplinarily significant decisions solely on an automated output without reasonable verification and independent supporting material.

2.6. Recipient attribution. Where the User assigns a unique ID to a recipient or copy, the User is responsible for maintaining an accurate ID-to-recipient/distribution mapping. Recovery of an ID from a found copy establishes a technical match to the corresponding distribution record; it does not by itself prove which natural person actually copied, transferred or published the content.

2.7. Deposit, hash and timestamp. Recording a hash/digital fingerprint/ID and time establishes a technical fact that the corresponding value existed no later than the confirmed time, but does not by itself establish authorship, originality, lawful ownership, absence of earlier third-party rights or identity of the creator.

2.8. Request submission time, server acceptance time, transaction broadcast time and external-network confirmation time may differ. For evidentiary purposes the User should rely on the timestamps and identifiers actually contained in the record and technical report.

2.9. Public blockchain/registry. Records on a public distributed network may be effectively irreversible and accessible to third parties. We cannot guarantee deletion or alteration of confirmed data on an independent network. The User must not place unnecessary personal, confidential or secret information in such fields.

2.10. Certificate. A Signaturum certificate is a Service-generated technical document/report about an operation. It is not a notarial act, government registration of an exclusive right, forensic expert opinion, or a guarantee that a court or authority will admit or accept it.

2.11. Crawler and monitoring. The crawler is not a complete copy of the Internet and does not warrant discovery of every publication. Coverage depends on public availability, robots.txt, authentication, paywalls, geoblocking, anti-bot protection, indexing, crawl frequency, site availability and other legal/technical constraints. No result does not mean no copy exists.

2.12. A discovered URL, visual similarity, technical match or recovered ID does not automatically establish infringement, identity of an infringer, damages or the availability of any particular remedy. The User must assess the legal basis of any claim or consult qualified counsel.

3. USER RIGHTS AND DUTIES, CONTENT, SECURITY AND INTEGRATIONS

3.1. Rights in User Content remain with the User or the relevant rightsholder. The User represents that they have all rights, licences, consents and legal bases required to upload, store, watermark, analyse, monitor, distribute and otherwise process Content through the Service.

3.2. The User is responsible for compliance with copyright and related rights, licences, NDAs, trade/state secrecy rules, image/personality rights, contractual restrictions, platform rules and personal-data requirements.

3.3. If Content or related data contains information about third parties, the User represents that a lawful basis exists for its submission and processing. Signaturum may not be used for unlawful surveillance, stalking, covert profiling or identification of persons.

3.4. Unlawful content, malware, phishing, fraud, prohibited materials and activity intended to infringe third-party rights or disrupt infrastructure are prohibited.

3.5. The User must safeguard passwords, API keys, tokens, webhook secrets, recovery codes and devices. Credentials must not be published, shared with unauthorised persons or embedded in public client-side code contrary to documentation.

3.6. Suspected compromise must be reported promptly. Until we receive notice and have a reasonable opportunity to restrict access, actions performed with valid credentials may be treated as User actions unless applicable law or reliable incident evidence requires otherwise.

3.7. Circumvention of tariffs, rate limits, billing, access controls, antifraud or security mechanisms; unauthorised load testing; exploitation of vulnerabilities; interference with the Service; or mass account creation to evade limits is prohibited.

3.8. The User may not extract or attempt to extract non-public models, weights, keys, system prompts, training data, source code or algorithms, or systematically use the Service for competitive model extraction, except where mandatory law expressly permits such activity.

3.9. The User must preserve source files, control hashes, distribution logs, ID-to-recipient mappings, contracts, correspondence and other independent evidence where later attribution, enforcement or litigation is contemplated. The Service is not the User's sole evidence archive.

3.10. Watermark IDs and similar identifiers should use pseudonymous internal values. Names, emails, phone numbers, identity documents, payment information, sensitive personal data and other unnecessary information should not be embedded in IDs or public/immutable fields.

3.11. The User is responsible for accuracy of parameters, IDs, webhook URLs, recipients, access policies and other settings. We are not responsible for misattribution, delivery or processing caused by incorrect, duplicated, incomplete or compromised User data.

3.12. API integrations must account for idempotency, retries, timeouts, asynchronous jobs and potentially repeated or delayed webhook delivery. Client systems must verify operation state and must not assume exactly-once delivery unless expressly guaranteed by documentation/SLA.

3.13. Use of crawler/monitoring does not authorise bypassing authentication, paywalls, CAPTCHA, technical prohibitions or other third-party access controls. The User is responsible for the legal basis for monitoring and subsequent use of found material.

3.14. Protected video/PDF tools, download restrictions, Canvas rendering, domain restrictions, watermark-at-view and similar features reduce certain risks but do not guarantee prevention of screenshots, screen recording, camera capture, signal interception or other reproduction.

3.15. The User must maintain independent backups of critical files and data unless a specific paid tariff/SLA expressly provides a different archival, redundancy and recovery commitment.

3.16. The User must not represent Signaturum output as a decision or opinion of a government authority, notary, court, forensic expert or law firm where no such status exists.

4. INTELLECTUAL PROPERTY, PROCESSING LICENCE, DATA AND CONFIDENTIALITY

4.1. Submission of Content does not transfer ownership to the Administration. The User grants a limited, non-exclusive, technically necessary right to reproduce, transmit, temporarily store, transform, watermark and analyse Content solely to provide the selected Service, secure and diagnose the Service, provide support and comply with lawful obligations.

4.2. Retention, deletion, backup and processing periods for Content and personal data depend on the Service, tariff, User settings, Privacy Policy and applicable law.

4.3. Customer Content is not used to train Signaturum's general models without separate notice and an appropriate legal basis; where consent or separate authorisation is required, it must be obtained separately. De-identified technical telemetry, error statistics, performance data and aggregated metrics may be used for security and Service improvement to the extent permitted by law and contract.

4.4. Customer-specific training, fine-tuning, custom models or processing of a B2B dataset require separate order/DPA/contract terms and are not automatically authorised by this Agreement.

4.5. Rights in software code, UI, architecture, models, weights, algorithms, documentation, API design, databases, marks and other Signaturum elements belong to the Administration and/or its licensors. Payment does not transfer source code, model, weight or internal-method rights to the User.

4.6. Third-party and open-source components may be governed by their own licences. Nothing in this Agreement overrides rights and obligations expressly granted by an applicable open-source licence.

4.7. Suggestions, ideas and feedback about the Service may be used to develop the product without compensation unless otherwise agreed in writing. This does not make confidential User Content public.

4.8. Users should not send passwords, secret keys, state secrets or other information requiring a specially agreed secure channel through ordinary support forms. Availability of the Service does not make the Administration a custodian of every secret beyond obligations expressly imposed by contract and law.

5. AVAILABILITY, EVIDENTIARY USE, LIABILITY, SUSPENSION AND DISPUTES

5.1. Unless a separate SLA states otherwise, the Service is provided “as is” and “as available”. We do not warrant uninterrupted operation, zero errors, zero latency, absolute information security, permanent availability of each integration or compatibility with all devices, formats, codecs, browsers and platforms.

5.2. The Service may depend on data centres, clouds, CDN, DNS, telecoms, payment systems, email/SMS providers, public blockchains, RPC/explorers and other third parties. We do not control their uptime and, to the maximum extent permitted by law, are not responsible for their acts or outages.

5.3. We may perform planned/emergency maintenance, apply rate limits, queues, quotas and antifraud, change API/model versions and temporarily restrict processing during overload, attack, security incidents, fraud, legal violations or where necessary to protect users and infrastructure.

5.4. No security or watermarking system offers absolute protection. The User accepts residual risk from software defects, hardware failures, cyber incidents, third-party actions and content transformations.

5.5. Hashes, timestamps, blockchain/registry records, Signaturum certificates, watermark IDs, detection results, distribution logs, discovery URLs, page captures and technical logs may be used as components of an evidentiary chain, but each item must be assessed in context of provenance, integrity and other evidence.

5.6. We do not warrant that a court, arbitration panel, authority, law-enforcement body, platform, host, registrar or counterparty will treat any Signaturum material as sufficient/admissible evidence, grant a takedown/claim, establish infringement or award damages.

5.7. Signaturum does not provide legal, notarial or forensic-expert services unless a corresponding service is expressly contracted with an authorised professional. Templates and informational guidance are not individual legal advice.

5.8. To the maximum extent permitted by law, the Administration is not liable for indirect, incidental, special, punitive or consequential damages, lost profits, business opportunity, reputation, anticipated savings, Content or data, or third-party claims arising from use or inability to use the Service.

5.9. Any liability limitation applies only to the extent lawful and does not exclude liability that cannot legally be excluded or limit mandatory consumer rights.

5.10. For Users acting exclusively for business/professional purposes, aggregate contractual liability for a specific paid Service, unless law or SLA provides otherwise, is limited to the greater of the price of the relevant one-time Service or fees paid for that Service during the 6 months immediately preceding the event giving rise to the claim.

5.11. For B2B Users, to the extent lawful, the User shall indemnify documented losses and reasonable costs arising from third-party claims caused by unlawful User Content, lack of required rights/consents, unlawful transfer of personal data, material abuse of the Service or breach of this Agreement, except to the extent caused by the Administration's fault.

5.12. We may restrict or terminate access for non-payment, material breach, account compromise, security threat, fraud, substantiated rightsholder complaint, binding authority request, sanctions/export restrictions or other lawful cause. Where reasonably possible, the User may be given an opportunity to cure unless urgent restriction is required.

5.13. After account termination some data may become unavailable. The User must export required materials in time. Certain financial, technical, security, evidentiary and compliance records may be retained after termination where permitted or required by law, the Privacy Policy or the purpose of the record.

5.14. Neither party is liable for failure caused by events outside reasonable control, including major Internet/power/data-centre failures, DDoS, war, civil disorder, government action, sanctions, fire, natural disasters or failures of critical suppliers/public networks, provided reasonable mitigation is undertaken. Force majeure does not cancel payment for Services already duly rendered.

5.15. The User must comply with applicable sanctions, export, AML and other mandatory restrictions. We may request reasonably necessary information for compliance and refuse a transaction where performance is prohibited or creates a material legal/security risk.

5.16. Relations with DigitalTown LLP are governed by the laws of the Republic of Kazakhstan unless mandatory law, the User's consumer status or a separately signed B2B agreement requires otherwise. Mandatory consumer protections applicable in the User's jurisdiction remain unaffected to the extent they cannot lawfully be waived.

5.17. Before litigation, the parties may attempt resolution by written claim to support@signaturum.com. This does not restrict any consumer right to apply directly to a competent court or authority where such right cannot be contractually restricted.

5.18. Invalidity of one provision does not invalidate the remainder. Failure to enforce a right is not a waiver. Headings are for convenience and do not limit meaning.

5.19. The User may not transfer the account or Agreement without consent unless law provides otherwise. We may transfer rights/obligations to a successor in reorganisation or sale of the business/product subject to mandatory law.

5.20. Electronic notices through the account, registered email, Website interface or API are permitted communication methods to the extent allowed by law. The User must keep contact details current.

5.21. If translations conflict with the legally applicable version for the contracting entity, the applicable local version or signed individual agreement prevails to the maximum extent permitted by law. For DigitalTown LLP, the Kazakhstan Russian-language version is the default primary text unless an individual agreement designates another language.

5.22. Intellectual-property, confidentiality, evidentiary-use, liability, B2B indemnity, governing-law and other provisions that by nature should survive continue after termination.

6. ADMINISTRATION DETAILS AND CONTACT

DigitalTown LLP
BIN 240340004389
140007, PAVLODAR OBLYSY, PAVLODAR QALASY, AǴAIYNDY DÚISEMBINOVTER KÓSHESI, 1/15 ST-E
Email: support@signaturum.com