Terms and Conditions (T&Cs)

General. This contract is concluded with Two Impulse GmbH ("langbox") and governs the provision of an AI-powered platform for recruiting and training (the Service) in SaaS form, as well as the provision of services by langbox. For the provision of technical services, in particular software engineering and support, Two Impulse GmbH may engage Two Impulse Lda. (Portugal) as parent company and qualified subcontractor. langbox.ai. langbox provides the customer with the Service langbox.ai. langbox.ai is an AI-powered platform for automated screening interviews and interactive role-play training with immediate feedback, designed for companies in the recruiting and training space. It enables companies to create personalised AI interviews, qualify candidates, train employees and generate evaluations automatically. SaaS – Software-as-a-Service. langbox.ai is operated as a Software-as-a-Service. langbox provides the customer with the server-side infrastructure. The customer is responsible for the client-side infrastructure.

Contractual basis. langbox concludes contracts and provides services exclusively on the basis of written offers issued by langbox, the applicable version of any service descriptions referenced in the offer, applicable price lists and this SaaS contract. Future changes. Changes to the service descriptions that do not materially affect the core of the service will be announced to the customer in writing with a 6-week notice and are deemed agreed unless the customer objects in writing within that period. Material changes, in particular price changes or service restrictions, require the express consent of the customer or entitle the customer to terminate the contract for cause within 4 weeks of receiving the notice. Additional agreements. All additional agreements, whether made before or during the term of the contract, must be in writing to be valid. Conflicts. In the event of conflicts between contractual components, more specific components prevail over more general ones. All contractual elements of langbox prevail over any contractual elements of the customer. Invalidity. If individual provisions of the contract are invalid or unenforceable, the invalid provision shall be replaced by a valid provision that comes closest to its economic purpose. Individual conditions. Prices, contract term and the specific Service Level Agreement (SLA) are specified individually in the respective written offer from langbox. That offer expressly refers to these T&Cs. In case of discrepancies, the individual agreements in the offer prevail over these T&Cs.

Offer by langbox. Offers from langbox are without exception non-binding. Offer by the customer. If the customer places an order based on an offer or otherwise, the customer is bound by it for two weeks from its receipt by langbox. Acceptance by langbox. The contract is concluded only upon acceptance of the order by langbox. Acceptance must in principle be in writing, unless langbox indicates acceptance by clearly commencing performance. By placing the order, the customer confirms that they have received and accepted the current T&Cs of langbox.

Place of performance. The place of performance is the registered office of langbox. Scope of services. The scope of the services to be provided arises from the written service description issued by langbox. Information from other sources not included in the offer is not part of the service description. Professional performance. Unless the written service description provides otherwise, langbox owes professional execution in accordance with the state of the art at the time the offer is issued. Third-party services / products. langbox is entitled to use components, interfaces, data, rights and other services or products of third parties when providing the services. The following are in particular agreed third-party service providers: • Microsoft Ireland Operations Ltd. – Microsoft Azure (Germany and Sweden regions) for hosting and infrastructure • Microsoft Azure Communication Services (Germany region) – for sending emails Contract term. Contracts for an indefinite period are terminable at any time, subject to any minimum term. Termination of the contractual relationship. Upon termination or expiry of the contractual relationship, langbox will immediately terminate the customer's access to the Service langbox.ai and the related services. Termination for good cause. langbox is entitled to terminate the contractual relationship at any time for good cause. Good cause includes in particular: • Breach of contracts, policies and instructions of langbox • Transfer of the Service to unauthorised third parties • Use of the Service for unlawful, illegal or unauthorised purposes • Causing disruptions to the Service or the underlying infrastructure • Misconduct towards langbox employees Before termination for good cause due to a non-serious breach, the customer must be granted a reasonable cure period of at least 14 days. Customer cooperation. The customer must promptly provide langbox in writing with all information and contributions needed to deliver the services. The customer is liable for any damages caused by deficient, late or omitted cooperation.

Standard service level. This Service Level Agreement defines the standard service level of langbox. Any service or maintenance not expressly agreed beyond this is not owed. Communication and support. Communication with langbox is exclusively in writing via email to support@langbox.ai. Service hours are Monday to Friday, 09:00 to 18:00. Requests outside these hours will be processed on the next business day. Compliance with the stated email communication channel is a prerequisite for proper error handling. Maintenance. System maintenance requiring temporary service interruption will, where possible, be carried out at times with the least impact on customers. langbox will inform the customer of planned maintenance as soon as possible.

Error classes. The parties agree the following error classes and service levels (response time / resolution): • Priority 1 (Highly critical) — Major incidents leading to a complete outage of the application. Basic SLA: 2h / 4h. Professional SLA: 1h / 2h. Enterprise SLA: 30m / 1h. • Priority 2 (Critical) — Incidents leading to the failure of a core function. Basic: 8h / 16h. Professional: 4h / 8h. Enterprise: 2h / 4h. • Priority 3 (Important) — Incidents leading to the failure of individual functions for some users. Basic: 16h / 24h. Professional: 8h / 12h. Enterprise: 4h / 6h. • Priority 4 (Normal) — Incidents leading to a temporary disruption or delay of the supported business process. Basic: 24h / 48h. Professional: 16h / 24h. Enterprise: 8h / 12h. Reporting. If the customer detects faulty behaviour, this must be reported to langbox without delay via email to support@langbox.ai. The report must contain a description of the issue, time of occurrence, affected components and business impact.

Guaranteed uptime. langbox owes an availability of 99% per calendar year. Permitted unavailability. Scheduled maintenance windows and outages caused by circumstances outside the reasonable control of langbox (force majeure, governmental measures, outages at third parties such as Microsoft Azure, etc.) are deemed permitted unavailability. Shortfalls. If the actual uptime falls below the guaranteed uptime, the customer is entitled to a credit equal to twice the percentage of the actual shortfall, applied to the monthly base fee. The credit agreed in this section is the sole and exclusive remedy of the customer for failure to meet availability. If the response time for Priority 1 (highly critical) is exceeded, the remuneration claim for the affected month is reduced by 25 percent for each full hour by which the response time is exceeded.

GDPR. This data processing agreement sets out the conditions for the processing of personal data by langbox in accordance with the General Data Protection Regulation (GDPR). langbox acts as a processor within the meaning of the GDPR. Personal data concerned. The following data in particular may be processed within the agreed services: • Audio and video voice data and related personal data • Metadata • Contact data • Candidate and training data • Data related to service quality Processing conditions. langbox undertakes to comply with all GDPR requirements throughout the provision of the services and to process personal data only on the documented written instructions of the customer. Data storage. Processing of personal data takes place exclusively on servers within the European Union. langbox uses Microsoft Azure in the Germany and Sweden regions to ensure GDPR-compliant operation. Sub-processors. The following sub-processors are approved at the time of contract conclusion: • Microsoft Ireland Operations Ltd. (Microsoft Azure, Germany and Sweden regions) – hosting and cloud infrastructure • Microsoft Ireland Operations Ltd. (Microsoft Azure Communication Services, Germany region) – email delivery Data deletion. Upon termination of the data processing agreement, langbox will, at the customer's choice, either destroy or fully hand over the processed personal data. If the customer does not respond, the data will be destroyed six months after termination of the agreement.

Permitted use. Use of the Service langbox.ai is permitted exclusively for purposes within ordinary business activity and in compliance with applicable laws. Prohibited misuse. The customer is prohibited from using the Service for: • Discriminatory or unlawful candidate selection • Processing of data without the required consents of the data subjects • Automated decisions requiring a separate legal basis under Art. 22 GDPR without ensuring such basis • Any other unlawful or abusive use Liability for AI content. The customer is solely responsible for all content generated, distributed or processed through their use of the Service langbox.ai and is fully liable to third parties and to langbox. Responsibility for sensitive data. The customer is aware that particularly sensitive data may be processed when using the Service in the recruiting and training context. The customer undertakes to implement appropriate security and transparency measures (e.g. notice obligations towards candidates and employees).

10.1 Principles. langbox is liable without limitation for damages arising from injury to life, body or health, and for damages caused intentionally or by gross negligence. In case of slightly negligent breach of essential contractual obligations (cardinal obligations), liability is limited to the contract-typical, foreseeable damage. Otherwise, liability for slight negligence is excluded. 10.2 Limitation of liability. Liability for slight negligence is limited to the amount of the annual remuneration of the affected contract. 10.3 Limitation period. Claims for damages become time-barred within the statutory periods. 10.4 Third-party services. For agreed third-party services (e.g. Microsoft Azure), the liability of langbox is limited to fault in the selection. 10.5 Free-of-charge services. For services provided free of charge, liability is limited to intent and gross negligence. 10.6 Uptime. Liability for failure to meet the guaranteed uptime is limited to the credits agreed in section 7, unless there is gross negligence or intent.

Prices. All prices are in Euro plus statutory VAT. Due date. Invoices from langbox are payable without any deduction from the invoice date. For online transactions, invoices are payable upon order placement. Payment period. Invoices are to be paid within 14 days of receipt. Late payment. In case of late payment, statutory default interest of at least 9% p.a. applies. The customer bears all costs related to collection. Price adjustment. For contracts of indefinite term, langbox is entitled to make a reasonable annual price adjustment taking into account the consumer price index.

Trade secrets. The contracting parties undertake to maintain mutual confidentiality regarding all confidential information, in particular business strategies, source code, architecture of the Service and security-relevant data. Non-solicitation. The customer undertakes not to solicit any langbox employees. This obligation applies for three years beyond any termination of the contract. In case of breach, a contractual penalty in the amount of the gross annual salary of the solicited employee is due.

Applicable law. All legal relations between the customer and langbox are governed exclusively by German law, excluding the UN Convention on Contracts for the International Sale of Goods (CISG) and international conflict-of-law rules. Jurisdiction. The place of jurisdiction for all disputes is Munich, Germany. Written form. Amendments and supplements to this contract must be in writing. This also applies to any waiver of the written form requirement.

The following sub-processors are approved at the time of conclusion of this agreement: • Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland – Microsoft Azure (Germany region: Frankfurt/Berlin; Sweden region: Gävle/Sandviken) – hosting, cloud infrastructure, data storage • Microsoft Ireland Operations Ltd., One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, Ireland – Microsoft Azure Communication Services (Germany region) – email delivery; data is processed exclusively within the EU