LEGAL001 - XTRM Terms and Conditions

AGREEMENT:

As of the 15 May 2024, XTRM and agree as follows:

Last Updated on: 11 Aug 2023

XTRM Terms and Conditions

These Terms and Conditions (“Terms”) are between the person or entity ("you" or "Client") with an existing XTRM account or entering an order form that references these Terms (“Order” and together with these Terms, the “Agreement” or “User 

Agreement”) and XTRM, Inc. ("XTRM," "we," "us," or "our"). These Terms incorporate by reference the following policies:

• Privacy Policy

• Acceptable Use Policy (see section below) 

• Electronic Communications Delivery Policy (E-Sign Disclosure and Consent - See section below) 

• Data Protection Schedule (See section below)

This Agreement includes an agreement to resolve disputes by arbitration on an individual basis. (see section 13.3 below)

XTRM PROVIDES ACCESS TO OUR SERVICES AND WEBSITES ("XTRM SERVICES") SOLELY ON THE TERMS 

AND CONDITIONS SET FORTH IN THIS AGREEMENT. BY INDICATING ACCEPTANCE OR BY USING OUR 

SERVICES YOU REPRESENT AND WARRANT THAT YOU HAVE THE AUTHORITY TO ACCEPT THIS AGREEMENT 

ON YOUR OWN BEHALF OR IF CLIENT IS A CORPORATION, ORGANIZATION, OR OTHER LEGAL ENTITY, YOU 

HAVE THE RIGHT, POWER, AND AUTHORITY TO ENTER INTO THIS AGREEMENT ON BEHALF OF CLIENT. IF 

YOU DO NOT AGREE TO THESE TERMS, XTRM WILL NOT AND DOES NOT LICENSE OR PROVIDE ACCESS TO 

THE XTRM SERVICES TO YOU.

You agree that by selecting "I accept" or checking any other electronic acknowledgment of your acceptance of these terms and conditions, you intend to authenticate this Agreement and to give your electronic acceptance the same force and effect as a manual signature.

We may amend this Agreement at any time by posting a revised version on our website. The revised version will be effective at the time we post it. In addition, if the revised version includes a Substantial Change, we will provide you with 30 Days' prior notice of any Substantial Change. By continuing to use the XTRM Services after any changes to this User Agreement, you agree to abide and be bound by those changes. If you do not agree with any changes to this User Agreement, you may close your XTRM account.

1. Our Relationship with You.

1.1 XTRM is a Payment Service Technology and Data Processing Provider.

XTRM helps you process data and enables you to use Corpay to initiate funds transfer for linked financial accounts. XTRM is an independent contractor for all purposes and is not your agent or trustee. XTRM does not have control of or liability for, the products or services that are paid for with the 

XTRM Services. 

1.2 Your Privacy. 

Protecting your privacy is very important to XTRM. Please review our Privacy Policy in order to better 

understand our commitment to maintaining your privacy, as well as our use and disclosure of your Information.

1.3 Privacy of Others; Marketing. 

If you receive Information about another User through the XTRM Services, you must keep the Information confidential and only use it in connection with the XTRM Services. You may not disclose or distribute a User's Information to a third party or use the Information for marketing purposes unless you receive the User's express consent to do so. You may not send unsolicited emails to a User or use the XTRM Services to collect payments for sending or assisting in sending, unsolicited emails to third parties.

1.4 Intellectual Property. 

"XTRM.com", "XTRM", "XTRM AnySource", "XTRM AnyPay", "XTRM API, "and all logos 

related to the XTRM Services are either trademarks or registered trademarks of XTRM or XTRM's licensors. You may not copy, imitate, or use them without XTRM's prior written consent. In addition, all page headers, custom graphics, button icons, and scripts are service marks, trademarks, and/or trade dress of XTRM. You may not copy, imitate, or use them without our prior written consent. You may use HTML logos provided by XTRM without prior written consent for the purpose of directing web traffic to the XTRM Services. You may not alter, modify or change these HTML logos in any way, use them in a manner that is disparaging to XTRM or the XTRM Services, or display them in any manner that implies XTRM's sponsorship or endorsement. All rights, title, and interest in and to the XTRM website, any content thereon, the XTRM Services, the technology related to the XTRM Services, and any and all technology and any content other than User Content created or derived from any of the foregoing is the exclusive property of XTRM and its licensors.

1.5 Assignment. 

Neither party may assign any of its rights or obligations hereunder, whether by operation of law or otherwise, without the other party’s prior written consent (not to be unreasonably withheld); provided, however, either party may assign this Agreement in its entirety, without the other party’s consent to its affiliate or in connection with a merger, acquisition, corporate reorganization, or sale of all or substantially all of its assets. Notwithstanding the foregoing, if a party is acquired by, sells substantially all of its assets to, or undergoes a change of control in favor of, a direct competitor of the other party, then such other party may terminate this Agreement upon written notice. In the event of such a termination, XTRM will pay to Customer any unrestricted funds held in Customer’s Balance. Subject to the foregoing, this Agreement will bind and inure to the benefit of the parties, their respective successors, and permitted assigns.

1.6 Password Security and Keeping Your Email and Address Current. 

You are responsible for maintaining adequate security and control of any and all IDs, passwords, personal identification numbers (PINs), or any other codes that you use to access the XTRM Services. You are responsible for keeping your mailing address and email address up to date in your Account Profile.

1.7 Notices to You. 

You agree that XTRM may provide you Communications about your Account and the XTRM Services electronically as described in our Electronic Communications Delivery Policy. Any electronic Communications will be considered to be received by you within 24 hours after the time we post it to our website or email it to you. 

1.8 Notices to XTRM. 

Except as otherwise stated in the Electronic Communications Delivery Policy, in Section 11 (Unauthorized Transactions and Other Errors) and Section 12 (Disputes with XTRM), notice to XTRM must be sent by postal mail to: XTRM, Inc., Attention: Legal Department, 1221 Brickell Avenue, Suite 900, Miami FL, 33131.

1.9 Account Statement. 

You have the right to receive an Account statement. You may view your Account statement by logging into your Account.

1.10(a) Contacting You. 

If you provide us your mobile phone number, you agree that XTRM and our Affiliates may contact you at that number using auto-dialed or prerecorded message calls or text messages to: (i) service your XTRM Accounts, (ii) investigate or prevent fraud, or (iii) collect a debt. We will not use auto-dialed or prerecorded message calls or texts to contact you for marketing purposes unless we receive your prior express written consent. We may share your mobile phone number with service providers with whom we contract to assist us with the activities listed above, but we will not share your mobile phone number with third parties for their own purposes without your consent.

1.10(b) Your Choices. 

You do not have to consent to receive auto-dialed or prerecorded message calls or texts in order to use and enjoy XTRM’s products and services. Where XTRM is required to obtain your consent for such communications, you may choose to revoke your consent by contacting customer support at 1-866-367-9289 and informing us of your preferences.

1.11 Recording Calls. 

You understand and agree that to the extent permitted by law, XTRM may, without further notice or warning and in our discretion, monitor or record telephone conversations you or anyone acting on your behalf has with XTRM or its agents for quality control and training purposes or for its own protection. You acknowledge and understand that, while your communications with XTRM may be overheard, monitored, or recorded without further notice or warning, not all telephone lines or calls may be recorded by XTRM, and XTRM does not guarantee that recordings of any particular telephone calls will be retained or retrievable.

1.12 Subscription Term and Fees. 

XTRM will make the XTRM Services available for the term and at the subscription level identified in the Order. Your use of the XTRM Services may be limited as specified in the Order. In addition to any transaction-based fees identified in Section 9, you shall pay XTRM the subscription fees as set forth in the applicable Order (“Subscription Fees”) without offset or deduction. Unless otherwise agreed in an Order, you shall pay all Subscription Fees in US dollars through the use of a third-party payment processor or other mechanism agreed to in an applicable Order. If your payment method fails during the ordering or renewal process, XTRM may suspend or withdraw your access to the XTRM Services until the applicable Subscription Fees are paid in full. Unless otherwise agreed in an Order, the initial term of this Agreement begins on the date you pay your Subscription Fees and, unless terminated earlier under this Agreement, will continue in effect for the term specified in the Order (the “Initial Term”). This Agreement will automatically renew for successive renewal terms equal in length to the Initial Term unless earlier terminated in accordance with this Agreement or either Party gives the other Party written notice of non-renewal at least 30 days prior to the expiration of the then-current term (each a “Renewal Term” and together with the Initial Term, the “Term”). XTRM will notify you of any change to Subscription Fees prior to the expiration of the current Term. On the first date of any Renewal Term, XTRM will attempt to charge the payment method on file for your account for the Subscription Fees.

1.12 Subscription Termination. 

In addition to any other express termination right set forth in this Agreement, you or XTRM may terminate this Agreement, effective on written notice to the other party (for clarity, email notice will be sufficient) if the other party materially breaches this Agreement, and such breach: (i) is incapable of cure; or (ii) being capable of cure, remains uncured 30 days after the non-breaching party provides the breaching party with written notice of such breach. No expiration or termination will affect your obligation to pay any fees that may have become due before such expiration or termination or entitle you to any refund unless otherwise agreed by XTRM in writing.

2. Accounts.

2.1 Eligibility. 

To be eligible to use the XTRM Services, you must be at least 18 years old and a resident of the United States or one of the countries listed on the XTRM Global page. We offer the following types of Accounts: Personal and Business Accounts. You may send money from, and receive money into, your Account, as described in more detail in Section 3 (Sending Money) and Section 4 (Receiving Money). You may also add money to your Balance using an available Payment Method, as described in more detail in Section 3, and withdraw money from your Balance, as described in more detail in Section 6 (Withdrawing Money).

2.2 Business Accounts. 

By opening a Business Account and accepting the terms as outlined in this Agreement, you attest that you are not establishing the Account primarily for personal, family, or household purposes. You further agree that as between you and XTRM, you are solely responsible for: 

• fulfilling all orders for products and services sold to your customers 

• establishing and maintaining a commercial banking relationship with a financial institution 

• maintaining commercially reasonable business practices in conjunction with the use of the XTRM Services and collecting, storing, and transmitting your customer data in a secure manner, and protecting the privacy of your customer data. You shall comply with our requests for reasonable actions, to the extent necessary, to maintain security and integrity of the XTRM Services 

• updating to the most current software version and security updates and patches necessary to properly operate the XTRM Services and keeping all enrollment and payment information current and updated in your Account Profile

Business Account holders acknowledge and agree that in the course of providing the XTRM Services, XTRM will capture certain transactions and user information (collectively, the "Customer Data"). You agree to provide to us, only the Customer Data that is required by the XTRM Services and is necessary for us to provide the XTRM Services. We agree to use Data in its personally identifiable form only as necessary to complete the requested transaction. We shall not disclose Customer Data to third parties or use the Customer Data, except that we shall have the rights (i) to use the Customer Data as necessary to perform the XTRM Services contemplated in this Agreement (including distributing the Customer Data to third parties providing services requested by you); (ii) to maintain the Customer Data as long as necessary or as required by law and used internally for record-keeping, internal reporting, and support purposes; (iii) to compile and disclose Customer Data in the aggregate where individual Customer Data is not identifiable, including without limitation, calculating merchant averages by region or industry; and (iv) to provide the Data as required by law or court order, or to defend our rights in a legal dispute. You represent and warrant that you have provided notice to, and obtained consent from, any third-party individuals whose personal data you supply to us as part of our services with regard to: (i) the purposes for which such third party's personal data has been collected, (ii) the intended recipients or categories of recipients of the third party's personal data, (iii) which parts of the third party's data are obligatory and which parts, if any, are voluntary; and (iv) how the third party can access and, if necessary, rectify the data you hold about them. You further agree to provide such notice and obtain such consent with regard to any third-party personal data you supply to us in the future. We are not responsible for any consequences resulting from your failure to provide notice or receive consent from such individuals nor for your providing outdated, incomplete, or inaccurate information. If applicable, the terms of the Data Protection Schedule (found at the end of this document) shall prevail over any conflicting terms in this Agreement relating to data protection and privacy.

2.3 Identity Authentication. 

You authorize XTRM, directly or through third parties, to make any inquiries we or our third-party service providers consider necessary to validate your identity. This may include asking you for further information, requiring you to provide your date of birth, a taxpayer identification number, and other information that will allow us to reasonably identify you, requiring you to take steps to confirm ownership of your email address or financial instruments, ordering a credit report, or verifying your Information against third party databases or through other sources. We may also ask to see your driver’s license or other identifying documents at any time. If you use certain XTRM Services, federal law requires that XTRM verify some of your Information. XTRM reserves the right to close, suspend, or limit access to your Account and/or the XTRM Services in the event we are unable to obtain or verify this Information.

2.4 Credit Report Authorization. 

If you open a Business Account, you are providing XTRM and our third-party service 

providers with written instructions and authorization in accordance with the Fair Credit Reporting Act to obtain your business credit report from a credit bureau. You are also authorizing XTRM and our third-party service providers to obtain your business credit report at any time XTRM reasonably believes there may be an increased level of risk associated with your Business Account.

2.5 Third Party Permissions. 

If you grant express permission to a third party to take specific actions on your behalf, or access particular information about your Account, either through your use of the third party's product or service or through your Account Profile, you acknowledge that XTRM may disclose the information about your Account that is specifically authorized by you to this third party. You also acknowledge that granting permission to a third party to take specific actions on your behalf does not relieve you of any of your responsibilities under this Agreement. Further, you acknowledge and agree that you will not hold XTRM responsible for, and will indemnify XTRM from, any liability arising from the actions or inactions of this third party in connection with the permissions you grant. You may change or remove these permissions at any time by changing your settings in your Account Profile.

3. Sending Money.

3.1 Sending Money. 

Companies can send money to anyone with an email address or mobile number. The money will go to the recipient’s XTRM account.

3.2 Sending Limits. 

We may, at our discretion, impose limits on the amount of money you can send through the XTRM 

Services, including money you send for purchases. You can view your sending limit, if any, by logging into your Account. If you have a Verified Account, we may increase your sending limits.

3.3 Preferred Payment Method. 

If you select a Preferred Payment Method but have available Balance in your Account, your Balance will be used to fund your payment first. 

3.4 Payment Method Limitations. 

In order to manage risk, XTRM may limit the Payment Methods available for a transaction. In addition, Payment Methods may be limited if you make an XTRM payment through certain third-party websites or applications. For XTRM Business Payments, you are limited to funding your XTRM payment via your Balance.

3.5 Bank Transfers. 

All Foreign Exchange or Derivatives and/or Bank Transfers through XTRM Services is provided by 

Cambridge Mercantile Corp. (U.S.A.), with an address of 1350 Broadway, Ste 810, New York, New York, 10018-0948, United 

States and doing business under the name "Corpay." Cambridge Mercantile Corp. is a subsidiary of Fleetcor Technologies, Inc. and acquired Associated Foreign Exchange, Inc. ("AFEX"), which was the provider used by XTRM Services prior to such 

acquisition and merger. Services in Canada are provided by Cambridge Mercantile Corp.; in the United Kingdom/Europe by Cambridge Mercantile Corp. (UK) Limited and Cambridge Mercantile Risk Management (UK) Ltd.; in Australia by Cambridge Mercantile (Australia) Pty. Ltd.; in Singapore by Associated Foreign Exchange (Singapore) Pte. Ltd.; in Ireland and the EEA by Associated Foreign Exchange Ireland Ltd. and AFEX Markets Europe Ltd.; in Jersey and the Channel Islands by AFEX Offshore Ltd.; and in Switzerland by Associated Foreign Exchange (Schweiz) AG (altogether with Cambridge Mercantile Corp. (U.S.A.), collectively referred to as "Corpay"). For additional licensing and regulatory information about Corpay, please Click here.

Use of this service is governed by the Corpay Terms and Conditions accepted by the Client’s accepting the XTRM User 

Agreement. You hereby authorize XTRM to provide your Information and other necessary account setup documentation to Corpay. When you use your bank account as your Payment Method for any transaction or to initiate a Fund transaction, you are requesting an electronic transfer from your bank account through Corpay. For these transactions, Corpay will make electronic transfers via ACH from your bank account in the amount you specify. You agree that such requests constitute your authorization to Corpay to make the transfers. Once you have provided your authorization for the transfer, you will not be able to cancel the electronic transfer.

3.6 Accuracy of Information. 

You are responsible for confirming the accuracy of the information you provide about each 

payment you send, including the email address or telephone number of the recipient and the amount of the transaction.

3.7 XTRM Mobile. 

XTRM Mobile allows you to access certain XTRM Services through your mobile phone. XTRM Mobile is 

not available in all countries. If you use XTRM Mobile, you are responsible for any fees that your phone service provider 

charges, such as fees for SMS, data services, and any other fees that your phone service provider may charge. Your phone service provider is not the provider of the XTRM Services.

4. Receiving Money.

4.1 Balance. 

All received payments are displayed by currency in your online XTRM account.

4.2 Refund and Reversal Currencies. 

All refunds and reversals will be made in the same currency as the original transaction. If your transaction must be refunded or reversed and you do not have the correct currency available in your Balance, a currency conversion will be performed.

4.3 Taxes. 

It is your responsibility to determine what, if any, taxes apply to the payments you make or receive, and it is your responsibility to collect, report, and remit the correct tax to the appropriate tax authority. XTRM is not responsible for 

determining whether taxes apply to your transaction, or for collecting, reporting, or remitting any taxes arising from any 

transaction.

5. Account Balances.

5.1 Balances. 

You do not need to maintain a Balance in your Account in order to receive payments. If you do hold a Balance and any funds sent to you which have not yet been transferred to a linked bank account, that Balance represents an unsecured claim against XTRM and is not insured by the FDIC, unless otherwise provided by our Third Party service provider on a pass-through basis. XTRM is not a bank and does not itself take deposits. You will not receive any interest on the funds held with XTRM. XTRM combines your Balance with the Balances of other Users and may invest those funds in liquid investments in accordance with state money transmitter laws. XTRM will own the interest or other earnings on pooled Balances. XTRM will not voluntarily make Balances available to its creditors in the event of bankruptcy.

5.2 Negative Balances and Multiple Currencies. 

If your Account has a negative Balance, XTRM may deduct amounts you owe XTRM from money you subsequently add or receive into your Account. If you have multiple currency Balances in your Account and one of the currency Balances becomes negative for any reason, XTRM may set off the negative Balance by using funds you maintain in a different currency Balance. If you have a negative balance in non-U.S. Dollars for a period of 

21 Days or longer, XTRM will convert this negative Balance to U.S. Dollars. If you open more than one Account, XTRM may set off the negative Balance in one Account by using any Balance that you maintain in your other Account(s). In the event that a negative Balance is offset by XTRM pursuant to this paragraph, it may be bundled with another debit coming out of your Account.

5.3 Risks of Maintaining Balances in Multiple Currencies. 

You are responsible for all risks associated with maintaining Balances in multiple currencies. You agree that you will not attempt to use multiple currencies for speculative trading.

5.4 Setoff of Past Due Amounts. 

If you have a past-due amount owed to XTRM, we may debit your Account to pay any 

amounts that are more than 180 Days past due.

5.5 Security Interest. 

To secure your performance of this Agreement, you grant to XTRM a lien on and security interest in and to the Balances in your Account in the possession of XTRM.

6. Withdrawing Money.

6.1 How to Withdraw Money. 

You may withdraw funds from your Account by electronically transferring them to: your bank account, a Visa Debit Card, a bank check, transferring to a Digital Gift Card or to a Virtual VISA card. Withdrawal methods are managed by our third-party service providers and may be subject to additional terms and conditions or fees.

6.2 Withdrawal Limits. 

Depending on the degree to which you have Verified your Account and your identity level, we may limit the amount you may withdraw per month. You can view your withdrawal limit, if any, by logging into your Account. In addition, we may delay withdrawals of large sums of money while we perform a risk review.

7. Closing Your Account.

7.1 How to Close Your Account. 

You may close your Account at any time by following the instructions in your Account 

Profile. Upon Account closure, we will cancel any pending transactions. You must withdraw your Balance prior to closing your Account.

7.2 Limitations on Closing Your Account. 

You may not close your Account to evade an investigation. If you attempt to close your Account while we are conducting an investigation, we may hold your Balance for up to 180 Days to protect XTRM, its affiliates, or a third party against the risk of Reversals, Chargebacks, Claims, fees, fines, penalties, and other liability. You will remain liable for all obligations related to your Account even after the Account is closed. 

7.3 Escheatment of Dormant Accounts. 

If you do not log in to your Account for two or more years, XTRM may close your Account and send the Balance to your primary address or, if required, escheat (send) your Balance to your state of residency. XTRM will determine your residency based on the state listed in your address. If your address is unknown or registered in a foreign country, your Balance will be escheated to the state of Delaware. Where required, XTRM will send you a notice prior to escheating or closing your Account. If you fail to respond to this notice, your Balance will be escheated to the applicable state. If you would like to claim any escheated Balance from the state, please contact your state's Unclaimed Property Administrator.

8. Data Processing

8.1 Data Processing. 

Data processing services include inbound transfer of data via API or batch submission. Data submission can be in, but not limited to CSV, XLSX, DOCX, HTML format. Data processing times vary by complexity and volume. We may require clarification on data before processing is completed. Data may not be validated if validation logic is part of the submitter’s system.

9. Fees.

9.1 Fees Overview. 

Fees may apply when transferring money into an account, between accounts, or out of an account. These are known as 'Fund', 'Send' or 'Transfer' Fees. Some fees are expressed as a percentage of the payment amount and some as a fixed transaction amount. Some Fees are related to time and volume of data processed. All Fees are in U.S. Dollars unless otherwise stated.

• All Fees depends on volume and the transfer method you use. 

• Additional Fees may apply if you are sending or receiving money to or from a country outside the United States or transacting in a foreign currency. 

• Data processing fees are based on time or data volume and will be automatically debited from the designated customer wallet. 

• We reserve the right to adjust your future Fees at our sole discretion upon 30 days written notice to you.

10. Restricted Activities.

10.1 Restricted Activities. 

In connection with your use of our website, your Account, the XTRM Services, or in the course of your interactions with XTRM, other Users, or third parties, you will not: 

• Breach this Agreement, including the Acceptable Use Policy, or any other agreement or policy that you have agreed to with XTRM; 

• Act in a manner that is defamatory, trade libelous, threatening, or harassing; 

• Provide false, inaccurate, or misleading information; 

• Send or receive what we reasonably believe to be potentially fraudulent funds; 

• Refuse to cooperate in an investigation or provide confirmation of your identity or any Information you provide to us; Control an Account that is linked to another Account that has engaged in any of these Restricted Activities; 

• Conduct your business or use the XTRM Services in a manner that results in or may result in complaints, Disputes, Claims, Reversals, Chargebacks, fees, fines, penalties, or other liability to XTRM, other Users, third parties or you; 

• Have a credit score from a credit reporting agency that indicates a high level of risk associated with your use of the XTRM Services; 

• Use your Account or the XTRM Services in a manner that XTRM, Visa, MasterCard, American Express, Discover or any other electronic funds transfer network reasonably believes to be an abuse of the card system or a violation of card association or network rules; 

• Allow your Account to have a negative Balance; 

• Access the XTRM Services from a country that is not included on the permitted countries identified at the XTRM Global page;

• Take any action that imposes an unreasonable or disproportionately large load on our infrastructure; facilitate any viruses, Trojan horses, worms, or other computer programming routines that may damage, detrimentally interfere with, surreptitiously intercept, or expropriate any system, data, or Information; use an anonymizing proxy; use any robot, spider, other automatic devices, or manual process to monitor or copy our website without our prior written permission; or use any device, software or routine to bypass our robot exclusion headers, or interfere or attempt to interfere with our website or the XTRM Services; 

• Take any action that may cause us to lose any of the services from our Internet service providers, payment processors, or other suppliers;

• Use the XTRM Services to test credit card behaviors; 

• Circumvent any XTRM policy or determinations about your Account such as temporary or indefinite suspensions or other Account holds, limitations, or restrictions, including, but not limited to, engaging in the following actions: attempting to create new or additional XTRM Account(s) when an Account has a negative balance or has been restricted, suspended or otherwise limited; creating new or additional XTRM Accounts using information that is not your own (e.g. name, address, email address, etc.); or using someone else’s XTRM Account; 

• Harass and/or threaten our employees, agents, or other Users.

11. Your Liability - Actions We May Take.

11.1 Your Liability. 

You are responsible for all Reversals, Chargebacks, Claims, fees, fines, penalties and other liability incurred by XTRM, a User, or a third party caused by or arising out of your breach of this Agreement, and/or your use of the XTRM Services. You agree to reimburse XTRM, a User, or a third party for any and all such liability.

11.2 Reimbursement for Your Liability. 

In the event that you are liable for any amounts owed to XTRM, XTRM may 

immediately remove such amounts from your Balance. If you do not have a Balance that is sufficient to cover your liability, your remaining Balance (if any) will be removed; your Account will have a negative Balance up to the amount of your liability; and =you will be required to immediately add funds to your Balance to eliminate the negative Balance. If you do not do so, XTRM may engage in collection efforts to recover such amounts from you.

11.3 Actions by XTRM - Restricted Activities. 

If XTRM, in its sole discretion, believes that you may have engaged in any Restricted Activities, we may take various actions to protect XTRM, other Users, other third parties, or you from Reversals, Chargebacks, Claims, fees, fines, penalties, and any other liability. The actions we may take include but are not limited to the following: 

• We may close, suspend, or limit your access to your Account or the XTRM Services (such as limiting access to any of your Payment Methods, and/or your ability to send money, make withdrawals, or remove financial Information). 

• We may update inaccurate Information you provided us; 

• We may refuse to provide the XTRM Services to you in the future; 

• We may hold your Balance for up to 180 Days if reasonably needed to protect against the risk of liability or if you have 

• violated our Acceptable Use Policy; 

• We may take legal action against you.

XTRM, in its sole discretion, reserves the right to terminate this Agreement, access to its website, or access to the XTRM 

Services for any reason and at any time upon notice to you and payment to you of any unrestricted funds held in your Balance.

11.4 Actions by XTRM - Court Orders or Other Legal Processes. 

XTRM, in its sole discretion, may take various actions including placing a hold, Reserve, or other limitation on your Account or the funds in it and/or releasing any or all of your funds in the event it receives notice of a court order or other legal process that restricts the use of or access to your funds or requires their release. XTRM will give notice of a hold, Reserve, or limitation it makes to comply with a court order or other legal process unless the court order or other process directs that XTRM not provide you notice, in which case the court order or other process supersedes any notice obligation XTRM has undertaken or agreed to under the terms of this Agreement. XTRM has no obligation to contest or appeal from any such order or process. Holds, Reserves or limitations on your account that are placed in response to a court order or other legal process may be maintained longer than 180 Days. XTRM will decide in its sole discretion the appropriate scope of a hold, Reserve, and/or limitation to assure compliance with a court order or other legal process. Additionally, in the event XTRM receives notice of a garnishment or equivalent legal process directing the restraint of funds in your Account or directing payment of funds from your Account to the court or another third party, XTRM may limit your Account and hold the funds in it for up to 180 days and may disburse funds from your Account, as needed, for the purpose of resolving any Dispute, Claim, Chargeback, or Reversal.

11.5 Actions by XTRM - Holds.

Risk-Based Holds. XTRM, in its sole discretion, may place a hold on any or all of the payments you receive when XTRM believes there may be a high level of risk associated with you, your Account, or any or all of your transactions. XTRM’s determination may be based on a number of different factors and XTRM may rely on information it receives from third parties. If XTRM places a hold on a payment, the funds will appear in your "Pending" transactions. If XTRM places a hold on any or all of the payments you receive XTRM will provide you with notice of our actions. XTRM will release the hold on any payment after 21 Days from the date the payment was received into your Account unless you receive a Dispute, Claim, Chargeback, or Reversal or XTRM has taken another action permitted under this Section 10. XTRM, in its sole discretion, may release the hold earlier under certain circumstances, for example, XTRM may release the hold earlier if you have uploaded tracking information. If you receive a Dispute, Claim, Chargeback, or Reversal, XTRM may continue holding the payment in your Account until the matter is resolved pursuant to this Agreement.

11.6 Actions by XTRM - Reserves. 

XTRM, in its sole discretion, may place a Reserve on funds held in your Business Account when XTRM believes there may be a high level of risk associated with your Account. If XTRM places a Reserve on funds in your Account, they will be shown as "pending" in your XTRM Balance. If your Account is subject to a Reserve, XTRM will provide you with notice specifying the terms of the Reserve. The terms may require that a certain percentage of the amounts received into your Account are held for a certain period of time, or that a certain amount of money is held in reserve, or anything else that XTRM determines is necessary to protect against the risk associated with your Account. XTRM may change the terms of the Reserve at any time by providing you with notice of the new terms.

11.7 Actions by XTRM - Account Closure, Termination of Service, Limited Account Access; Confidential Criteria. 

If we close your Account or terminate your use of the XTRM Services for any reason, we will provide you with notice of our actions. Except as expressly provided otherwise in this Agreement, if we limit access to your Account, including through a Reserve or hold, we will provide you with notice of our actions; we will also provide you with an opportunity to request restoration of access if, in our sole discretion, we deem it appropriate. Further, you acknowledge that XTRM’s decision to take certain actions, including limiting access to your Account by placing holds or imposing Reserves, may be based on confidential criteria that are essential to our management of risk and the security of Users’ Accounts and the XTRM system. You agree that XTRM is under no obligation to disclose the details of its risk management or security procedures to you.

11.8 Liability of Paid Funds.

Once money is moved from a remitter balance to a beneficiary balance the funds are now owned by the beneficiary and all liability related to subsequent use and transfer of those funds by the beneficiary are subject to these terms and conditions and all applicable government and regional privacy rules.

12. Unauthorized Transactions and Other Errors.

12.1 Unauthorized Transactions and Other Errors. 

An "Unauthorized Transaction" is a type of error that occurs when 

money is sent from your Account that you or your authorized users did not authorize and that did not benefit you. For example, if someone steals an authorized user’s login credentials, uses the credentials to access your Account, and sends a payment from your Account, an Unauthorized Transaction has occurred. If you provide login credentials to any person to access your Account and they conduct transactions without your knowledge or permission, you are responsible for any resulting use. Such transactions are not considered Unauthorized Transactions. 

In addition, "Other Errors" occur when money is either incorrectly taken from your Account or incorrectly placed into your Account, or when transactions are incorrectly recorded in your Account. Other Errors that are covered by XTRM are limited to the following events: if you send a payment and it is incorrectly debited from your Account; if an incorrect amount is credited to your Account; if a transaction is missing from or not properly identified in your Account statement; and if there is a computational or mathematical error by XTRM. Unauthorized Transactions and Other Errors do not include Disputes, Claims, Chargebacks, and Reversals. You agree that XTRM is authorized to handle Disputes, Claims, Chargebacks, and Reversals as set forth in this Agreement, and that no determination made by XTRM or a card issuer with respect to a Dispute, Claim, Chargeback, or Reversal will be considered an Unauthorized Transaction or Other Error. Routine inquiries about your Account balance or the status of a pending transfer into or out of your Account are not considered Unauthorized Transactions or Other Errors unless you expressly notify us of an Unauthorized Transaction or Other Error in connection with the transfer. Requests for information for tax or other recordkeeping purposes and requests for duplicate documentation also are not deemed to be Unauthorized Transactions or Other Errors.

You may request documentation or information regarding your Account or transaction to determine whether an Unauthorized Transaction, Other Error or a Remittance Transfer Error exists by contacting us through the "Contact" or "Contact Us" link at the bottom of each page of the XTRM website.

12.2 Notification Requirements.

XTRM will send an email to the primary email address you have provided in order to notify you of each transaction from your Account unless you have opted out of receiving certain notifications. You should review these transaction confirmations to 

ensure that each transaction was authorized and is accurate. 

You should regularly log into your Account and review your Account statement to ensure that there has not been an Unauthorized Transaction or Other Error. You must immediately notify XTRM if you believe: 

• there has been an Unauthorized Transaction, unauthorized access to your Account, or the occurrence of an Other Error; 

• there is an error in your Account statement (you can access your Account statement by logging into your Account) or your transaction confirmation sent to you by email; 

•  your password or XTRM Mobile PIN has been compromised;

•  you need more information about a transaction listed on the statement or transaction confirmation. 

• For Unauthorized Transactions or Other Errors in your Account, notify us as follows: 

•  Email support@xtrm.com

•  Write to XTRM, Attn: Error Resolution Department, 1221 Brickell Avenue, Suite 900, Miami FL, 33131 or 

• Telephone XTRM Customer Service at (866) 367.9289. 

• When you notify us, provide us with all of the following information:

• Your name and email address registered to your Account; 

• A description of any suspected Unauthorized Transaction or Other Error and an explanation as to why you believe it is incorrect or why you need more information to identify the transaction; and

• The dollar amount of any suspected Unauthorized Transaction or Other Error.

• If you notify us orally, we may require that you send us your complaint or question in writing within 10 Business Days. During the course of our investigation, we may request additional information from you.

12.3 XTRM Actions after Receipt of Your Notification. 

Once you notify us of any suspected Unauthorized Transaction or Other Error, or we otherwise learn of one, we will conduct an investigation to determine whether there has been an Unauthorized Transaction or Other Error that is eligible for protection. We strive to complete our investigation within a commercially reasonable time following the date we received your notification of the suspected Unauthorized Transaction or Other Error. If we determine that there was an error, we will promptly credit the full amount of the error into your Account within 1 Business Day of our determination. If we decide that there was not an error, we will include an explanation of our decision in our email to you. You may request copies of the documents that we used in our investigation.

12.4 XTRM Processing Errors. 

We will rectify any verifiable processing error that is brought to our attention. If the error results in your receipt of less than the correct amount to which you are entitled, XTRM will credit your Account for the difference. If the error results in your receipt of more than the correct amount to which you are entitled, XTRM will debit the extra funds from your Account. If the error resulted in our not completing a transaction on time or in the correct amount, we will be liable for your losses or damages directly caused by this failure, unless: (a) through no fault of ours, you did not have enough available funds to complete the transaction, (b) our system was not working properly and you knew or reasonably should have known about the breakdown when you started the transaction, or (c) circumstances beyond our control (such as fire, flood or loss of Internet connection) prevented the transaction, despite our reasonable precautions.

13. Disputes with XTRM.

You and XTRM agree that any claim or dispute at law or equity that has arisen or may arise between us will be resolved 

in accordance with the provisions set forth in this Section (Section 13: Disputes with XTRM). Please read this Section 

carefully. It affects your rights and will impact how claims you and we have against each other are resolved.

13.1 Contact XTRM First. 

If a dispute arises between you and XTRM, our goal is to learn about and address your concerns and, if we are unable to do so to your satisfaction, to provide you with a neutral and cost-effective means of resolving the dispute quickly. Disputes between you and XTRM regarding the XTRM Services may be reported to Customer Service online through the XTRM Help Center at any time, or by calling (866) 367 9289 from 8 AM to 5 PM, Pacific Standard Time.

13.2 Applicable Law. 

You agree that except to the extent inconsistent with or preempted by federal law and except as otherwise stated in this User Agreement, the laws of the State of Delaware, without regard to principles of conflict of laws, will govern this User Agreement and any claim or dispute that has arisen or may arise between you and XTRM.

13.3 Agreement to Arbitrate. 

You and XTRM each agree that any and all disputes or claims that have arisen or may arise between you and XTRM, including without limitation federal and state statutory claims, common law claims, and those based in contract, tort, fraud, misrepresentation, or any other legal theory, shall be resolved exclusively through final and binding arbitration, rather than in court, except that you may assert claims in small claims court if your claims qualify and so long as the matter remains in such court and advances only on an individual (non-class, non-representative) basis. This Agreement to Arbitrate is intended to be broadly interpreted. The Federal Arbitration Act governs the interpretation and enforcement of this Agreement to Arbitrate.

1. Prohibition of Class and Representative Actions and Non-Individualized Relief.

YOU AND XTRM AGREE THAT EACH OF US MAY BRING CLAIMS AGAINST THE OTHER ONLY ON AN INDIVIDUAL BASIS AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS OR REPRESENTATIVE ACTION OR PROCEEDING. UNLESS BOTH YOU AND XTRM AGREE OTHERWISE, THE ARBITRATOR(S) MAY NOT CONSOLIDATE OR JOIN MORE THAN ONE PERSON'S OR PARTY'S CLAIMS AND MAY NOT OTHERWISE PRESIDE OVER ANY FORM OF A CONSOLIDATED, REPRESENTATIVE, OR CLASS PROCEEDING. ALSO, THE ARBITRATOR(S) MAY AWARD RELIEF (INCLUDING MONETARY, INJUNCTIVE, AND DECLARATORY RELIEF) ONLY IN FAVOR OF THE INDIVIDUAL PARTY SEEKING RELIEF AND ONLY TO THE EXTENT NECESSARY TO PROVIDE RELIEF NECESSITATED BY THAT PARTY'S INDIVIDUAL CLAIM(S). ANY RELIEF AWARDED CANNOT AFFECT OTHER XTRM USERS.

2. Arbitration Procedures.

Arbitration is more informal than a lawsuit in court. Arbitration uses a neutral arbitrator or arbitrators instead of a judge or jury, and court review of an arbitration award is very limited. However, the arbitrator(s) can award the same damages and relief on an individual basis that a court can award to an individual. The arbitrator(s) also must follow the terms of this User Agreement as a court would. All issues are for the arbitrator(s) to decide, except that issues relating to arbitrability, the scope or enforceability of this Agreement to Arbitrate, or the interpretation of subsection (a) of this Agreement to Arbitrate ("Prohibition of Class and Representative Actions and Non-Individualized Relief"), shall be for a court of competent jurisdiction to decide.

The arbitration will be conducted by the American Arbitration Association ("AAA") under its rules and procedures, including the AAA's Consumer Arbitration Rules (as applicable), as modified by this Agreement to Arbitrate. The AAA's rules are available at www.adr.org. A party who intends to seek arbitration must first send to the other, by certified mail, a completed form Notice of Dispute ("Notice") to XTRM, Inc., Attn: Litigation Department, Re: Notice of Dispute, 1221 Brickell Avenue, Suite 900, Miami FL, 33131. XTRM will send any Notice to you to the physical we have on file associated with your XTRM Account; it is your responsibility to keep your physical address up to date. All information called for in the Notice must be provided including a description of the nature and basis of the claims the party is asserting and the relief sought.

If you and XTRM are unable to resolve the claims described in the Notice within 30 days after the Notice is sent, you or XTRM may initiate arbitration proceedings. A form for initiating arbitration proceedings is available on the AAA's website at www.adr.org. 

The arbitration shall be held in the county in which you reside or at another mutually agreed location. If the value of the relief sought is $10,000 or less, you or XTRM may elect to have the arbitration conducted by telephone or based solely on written submissions, which election shall be binding on you and XTRM subject to the discretion of the arbitrator(s) to require an in-person hearing if the circumstances warrant. In cases where an in-person hearing is held, you and/or XTRM may attend by telephone, unless the arbitrator(s) require otherwise. Any settlement offer made by you or XTRM shall not be disclosed to the arbitrator(s). 

The arbitrator(s) will decide the substance of all claims in accordance with applicable law, including recognized principles of equity, and will honor all claims of privilege recognized by law. The arbitrator(s) shall not be bound by rulings in prior arbitrations involving different XTRM users but is/are bound by rulings in prior arbitrations involving the same XTRM user to the extent required by applicable law. The award of the arbitrator(s) shall be final and binding, and judgment on the award rendered by the arbitrator(s) may be entered in any court having jurisdiction thereof.

3. Severability 

With the exception of any of the provisions in subsection (a) of this Agreement to Arbitrate ("Prohibition of Class and Representative Actions and Non-Individualized Relief"), if a court decides that any part of this Agreement to Arbitrate is invalid or unenforceable, the other parts of this Agreement to Arbitrate shall still apply. If a court decides that any of the provisions in subsection (a) of this Agreement to Arbitrate ("Prohibition of Class and Representative Actions and Non-Individualized Relief") is invalid or unenforceable, then the entirety of this Agreement to Arbitrate shall be null and void. The remainder of the User Agreement, including all other provisions of Section 12 (Disputes with XTRM), will continue to apply.

4. Opt-Out Procedure.

IF YOU ARE A NEW XTRM USER, YOU CAN CHOOSE TO REJECT THIS AGREEMENT TO ARBITRATE ("OPT OUT") BY MAILING US A WRITTEN OPT-OUT NOTICE ("OPT-OUT NOTICE"). THE OPT-OUT NOTICE MUST BE POSTMARKED NO LATER THAN 30 DAYS AFTER THE DATE YOU ACCEPT THE USER AGREEMENT FOR THE FIRST TIME. YOU MUST MAIL THE OPT-OUT NOTICE TO XTRM, INC., ATTN: LITIGATION DEPARTMENT, 1221 Brickell Avenue, Suite 900, Miami FL, 33131

You must complete the Opt-Out Notice form which we can provide on request, by providing the information called for in the form, including your name, address, phone number, and the email address(es) used to log in to the XTRM account(s) to which the opt-out applies. You must sign the Opt-Out Notice for it to be effective. This procedure is the only way you can opt out of the Agreement to Arbitrate. If you opt out of the Agreement to Arbitrate, all other parts of the User Agreement, including all other provisions of Section 14 (Disputes with XTRM), will continue to apply. Opting out of this Agreement to Arbitrate has no effect on any previous, other, or future arbitration agreements that you may have with us.

5. Future Amendments to the Agreement to Arbitrate.

Notwithstanding any provision in the User Agreement to the contrary, you and we agree that if we make any amendment to this Agreement to Arbitrate (other than an amendment to any notice address or website link provided herein) in the future, that amendment shall not apply to any claim that was filed in a legal proceeding against XTRM prior to the effective date of the amendment. The amendment shall apply to all other disputes or claims governed by the Agreement to Arbitrate that have arisen or may arise between you and XTRM. We will notify you of amendments to this Agreement to Arbitrate by posting the amended terms on www.xtrm.com at least 30 days before the effective date of the amendments and by providing notice through email. If you do not agree to these amended terms, you may close your account within the 30-day period and you will not be bound by the amended terms.

13.4 Insolvency Proceedings.

If any proceeding by or against you is commenced under any provision of the United States Bankruptcy Code, as amended, or under any other bankruptcy or insolvency law, XTRM will be entitled to recover all reasonable costs or expenses (including reasonable attorneys' fees and expenses) incurred in connection with the enforcement of this Agreement.

13.5 No Waiver. 

Our failure to act with respect to a breach by you or others does not waive our right to act with respect to subsequent or similar breaches.

13.6 Indemnification. 

You agree to defend, indemnify, and hold XTRM, our Affiliates, and the officers, directors, agents, joint venturers, employees, and suppliers of XTRM, our Affiliates, harmless from any claim or demand (including attorneys’ fees) made or incurred by any third party due to or arising out of your breach of this Agreement, your improper use of the XTRM Services, and/or your violation of any law or the rights of a third party. If any of the XTRM Services are, or in XTRM’S opinion are likely to be, claimed to infringe, misappropriate, or otherwise violate any third-party intellectual property rights, XTRM may, at its option and sole cost and expense: (a) obtain the right for you to continue to use the XTRM Services materially as contemplated by this Agreement; (b) modify or replace the Services and to seek to make the Services non-infringing, while providing materially equivalent features and functionality; or (c) if neither (a) or (b) is commercially reasonable, terminate this Agreement and require you to immediately cease any use of the XTRM Services. THIS SECTION SETS FORTH YOUR SOLE REMEDIES AND XTRM’S SOLE LIABILITY AND OBLIGATION FOR ANY ACTUAL, THREATENED, OR ALLEGED CLAIMS THAT THE XTRM SERVICES INFRINGE, MISAPPROPRIATE, OR OTHERWISE VIOLATE ANY 

INTELLECTUAL PROPERTY RIGHTS OF ANY THIRD PARTY.

13.7 Assumption of Rights. 

If XTRM pays out a Claim, Reversal, or Chargeback that you file against a recipient of your 

payment, you agree that XTRM assumes your rights against the recipient and third parties related to the payment, and may pursue those rights directly or on your behalf, in XTRM's discretion.

13.8 Release of XTRM. 

If you have a dispute with one or more Users, you release XTRM, our Affiliates, and our and their 

respective officers, directors, agents, joint ventures, employees, and suppliers) from any and all Claims, demands, and damages (actual and consequential) of every kind and nature, known and unknown, arising out of or in any way connected with such disputes. In entering into this release you expressly waive any protections (whether statutory or otherwise – e.g., California Civil Code § 1542) that would otherwise limit the coverage of this release to include only those claims which you may know or suspect to exist in your favor at the time of agreeing to this release.

13.9 State Agencies. 

In addition to reporting complaints against XTRM directly to XTRM as described above, if you are a California resident, you may report complaints to the California Department of Financial Institutions at its toll-free telephone number, 1-800-622-0620, by e-mail at consumer.complaint@dfi.ca.gov, or by mail at Department of Financial Institutions, Consumer Services, 1810 13th Street, Sacramento, CA 95811. Florida residents may contact the Florida Department of Financial Services in writing at 200 East Gaines Street, Tallahassee, Florida, 32399, or by telephone at 1-800-342-2762. If you are a California resident, you have a right to receive the information listed in Section 1.7 (Notices to You) by email. To make such a request, send a letter to XTRM at the address listed in Section 1.8 (Notices to XTRM), include your email address, and request the information provided in Section 1.7.

14. General Provisions.

14.1 Limitations of Liability. 

IN NO EVENT SHALL WE, OUR AFFILIATES, AND THE OFFICERS, DIRECTORS, 

AGENTS, JOINT VENTURERS, EMPLOYEES, AND SUPPLIERS OF XTRM OR OUR AFFILIATES BE LIABLE FOR 

LOST PROFITS OR ANY SPECIAL, INCIDENTAL, OR CONSEQUENTIAL DAMAGES (INCLUDING WITHOUT 

LIMITATION DAMAGES FOR LOSS OF DATA OR LOSS OF BUSINESS) ARISING OUT OF OR IN CONNECTION 

WITH OUR WEBSITE, THE XTRM SERVICES, OR THIS AGREEMENT (HOWEVER ARISING, INCLUDING 

NEGLIGENCE), UNLESS AND TO THE EXTENT PROHIBITED BY LAW. OUR LIABILITY, AND THE LIABILITY OF 

OUR AFFILIATES, AND OUR AND THEIR RESPECTIVE OFFICERS, DIRECTORS, AGENTS, JOINT VENTURERS, 

EMPLOYEES AND SUPPLIERS, TO YOU OR ANY THIRD PARTIES IN ANY CIRCUMSTANCE IS LIMITED TO THE 

ACTUAL AMOUNT OF DIRECT DAMAGES.

14.2 Limited Performance Warranty. 

XTRM warrants that the XTRM Services will conform in all material respects to our then-current user documentation for such XTRM Services and that to the best of our knowledge, does not contain Malicious Code ("Performance Warranty"). The Performance Warranty will not apply to the extent that: (i) the XTRM Services are not used in accordance with this Agreement or the documentation, or (ii) the XTRM Services or any part thereof has been modified other than by XTRM. To claim the benefit of the Performance Warranty, Client must; (i) notify XTRM of the non-conformity and (ii) provide to XTRM sufficient detail to allow XTRM to reproduce the nonconformity. 

XTRM’S SOLE AND EXCLUSIVE LIABILITY FOR ANY BREACH OF THE PERFORMANCE WARRANTY SHALL BE LIMITED TO REPAIR OR REPLACEMENT OF THE XTRM SERVICES, UNLESS, IN XTRM’S OPINION, SUCH REPAIR OR REPLACEMENT WOULD BE INADEQUATE OR IMPRACTICAL, IN WHICH CASE XTRM MAY TERMINATE THE XTRM SERVICES AND PROVIDE NOTICE TO YOU AND PAYMENT OF ANY UNRESTRICTED FUNDS HELD IN YOUR BALANCE. OTHER THAN THE PERFORMANCE WARRANTY, THE XTRM SERVICES ARE PROVIDED "AS IS" AND WITHOUT ANY REPRESENTATION OF WARRANTY, WHETHER EXPRESS, IMPLIED OR STATUTORY. XTRM, AFFILIATES, AND THE OFFICERS, DIRECTORS, AGENTS, JOINT VENTURERS, EMPLOYEES AND SUPPLIERS OF XTRM, OR OUR AFFILIATES, SPECIFICALLY DISCLAIM ANY IMPLIED WARRANTIES OF TITLE, MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NON-INFRINGEMENT. 

XTRM does not have any control over the products or services that are paid for with the XTRM Services. XTRM does not guarantee continuous, uninterrupted, or secure access to any part of the XTRM Services, and operation of our site may be interfered with by numerous factors outside of our control. Certain XTRM Services may not be available to you based on residency, geographic location, or other eligibility criteria. Some states do not allow the disclaimer of implied warranties, so the foregoing disclaimers may not apply to you. This paragraph gives you specific legal rights and you may also have other legal rights that vary from state to state.

14.3 License Grant. 

If you are using XTRM software such as an API, developer's toolkit, or other software application that you have downloaded to your computer, device, or other platform, then XTRM grants you a revocable, non-exclusive, nontransferable license to use XTRM's software in accordance with the documentation. This license grant includes the software and all updates, upgrades, new versions, and replacement software for your personal use only. You may not rent, lease, or otherwise transfer your rights in the software to a third party. You must comply with the implementation and use requirements contained in all XTRM documentation accompanying the XTRM Services. If you do not comply with XTRM’s implementation and use requirements you will be liable for all resulting damages suffered by you, XTRM, and third parties. XTRM may change or discontinue any APIs upon notice to you. You agree not to alter, reproduce, adapt, distribute, display, publish, reverse engineer, translate, disassemble, decompile, or otherwise attempt to create any source code that is derived from the software. You acknowledge that all rights, titles, and interests to XTRM’s software are owned by XTRM. Any third-party software application you use on the XTRM website is subject to the license you agreed to with the third party that provides you with this software. XTRM does not own, control nor have any responsibility or liability for any third-party software application you elect to use on the XTRM website and/or in connection with the XTRM Services. If you are using the XTRM Services on the XTRM website, or other website or platform hosted by XTRM, or a third party, and are not downloading XTRM’s software or using third-party software applications on the XTRM website, then this section does not apply to your use of the hosted XTRM Services.

14.4 License Grant from You to XTRM; IP Warranties. 

Subject to section 13.6, when providing User Content, you grant us a non-exclusive, worldwide, royalty-free, transferable, right to use User Content in order to provide the XTRM Services. You represent and warrant that none of User Content infringes any intellectual property, privacy, or publicity rights of any third person.

14.5 Complete Agreement. 

This Agreement, along with any applicable policies and agreements on the XTRM website, sets forth the entire understanding between you and XTRM with respect to the XTRM Services. Sections 1 (Our Relationship with You), 7 (Closing Your Account), 8 (Fees), 10 (Your Liability - Actions We May Take), 12 (Disputes with XTRM), 13 (General Provisions), and 14 (Definitions), as well as any other terms which by their nature should survive, will survive the termination of this Agreement. Unless stated otherwise in this Agreement, if any provision of this Agreement is held to be invalid or unenforceable, such provision shall be struck and the remaining provisions shall be enforced.

15. Definitions.

"ACH" means the Automated Clearing House network.

"Account" means a Personal or Business XTRM account.

"Account Profile" means the location on our website where you can, after logging in, view and manage your profile, including your personal information, Payment Method details, Leaderboards, Account Balances, and your Account settings including your notification preferences.

"Add Money" means your ability to add money into your Account through a XTRM hosted process (and not from a third-party website).

"Affiliate" is a company that directly or indirectly, through one or more intermediaries, controls, is controlled by, or is under common control with another company.

"Agreement" means this user agreement including all subsequent amendments.

"Balance" means any amount of funds that you have in your Account, which could be a negative amount if you owe XTRM 

money. The terms "money" and "funds" are used interchangeably in this Agreement. A XTRM balance represents an unsecured claim against XTRM and is not insured by the FDIC.

"Business Account" means an Account that is established primarily for business purposes and not for personal, family, or household purposes.

"Business Days" means Monday through Friday, excluding Holidays.

"Communications" means any Account, XTRM Funds account, or transaction information that XTRM provides to you, 

including any agreements and policies you agree to, including updates to these agreements or policies; annual disclosures, including prospectuses and reports for XTRM Funds; transaction receipts or confirmations; Account statements and history; and federal and state tax statements we are required to make available to you.

"Chargeback" means a request that a buyer files directly with his or her debit or credit card company or debit or credit card issuing bank to invalidate a payment.

"Digital Gift Card" means branded stored value or branded prepaid digital card, or other electronic or digital debit payment mechanism, electronic promise, number, or payment code providing prepaid access to funds or the value of funds that can be used only for goods or services in transactions involving a defined merchant or location (or set of locations), such as a specific retailer or retail chain.

"Customer Service" is XTRM's customer support which can be accessed online through the XTRM Help Center at any time, or by calling (866) 367-9289 from 8AM to 5PM PST.

"Days" means calendar days.

"Default Payment Methods" means the order in which XTRM uses your Payment Methods to fund a transaction if you do not select a Preferred Payment Method.

"Dispute" means a dispute filed by a User directly with XTRM in the Online Support Center pursuant to Section 12 of this 

Agreement.

"Fees" means those amounts stated in Section 8 (Fees) of this Agreement.

"Holidays" means New Year's Day (January 1), Birthday of Martin Luther King, Jr. (the third Monday in January), 

Washington's Birthday (the third Monday in February), Memorial Day (the last Monday in May), Independence Day (July 4), Labor Day (the first Monday in September), Columbus Day (the second Monday in October), Veterans Day (November 11), 

Thanksgiving Day (the fourth Thursday in November) and Christmas Day (December 25), and/or any other holiday observed by the Federal Reserve System. If a Holiday falls on a Saturday, XTRM shall observe the Holiday on the prior Friday. If the Holiday falls on a Sunday, XTRM shall observe the Holiday on the following Monday.

"Information" means any confidential and/or personally identifiable information or other information related to an Account or User, including but not limited to the following: name, email address, date of birth, tax identification number, 

billing/shipping address, phone number, and financial information.

"Instant Transfer" means a payment or transfer funded using the sender's bank account Payment Method in which 

XTRM credits the recipient instantly.

"Malicious Code" means computer software, code, or other instructions intended to gain or facilitate unauthorized access to, prevent authorized access to, or to damage, disable, erase, degrade, or otherwise harm, the performance of, any 

computer, systems or software. The term includes, to the extent meeting the foregoing definition, "viruses," "worms." 

"Trojan horses," and "spyware," but does not include license key systems or other access controls provided by 

XTRM."Other Errors" has the definition provided in Section 11 (Unauthorized Transactions and Other Errors) of this 

Agreement.

"Payment Method" means the payment method used to fund a transaction. The following payment methods may be used 

to fund a transaction: Balance or Instant Transfer.

"Personal Account" means an Account established primarily for personal, family, or household purposes.

"Policy" or "Policies" means any Policy or other agreement between you and XTRM that you entered into on the XTRM 

website or in connection with your use of the XTRM Services.

"Preferred Payment Method" (also called "Backup Payment Method") means a Payment Method that you select to fund 

a payment instead of using the Default Payment Methods.

"Reserve" means a percentage of the funds received into your Account that we hold in order to protect against the risk of 

Reversals, Chargebacks, Claims, or any other liability related to your Account and/or use of the XTRM Services.

"Restricted Activities" means those activities described in Section 10 (Restricted Activities) of this Agreement and/or the 

Acceptable Use Policy.

"Reversal" means XTRM reverses a payment you received because (a) it is invalidated by the sender's bank, (b) it was sent to you in error by XTRM or its Affiliates, (c) the sender of the payment did not have authorization to send the 

payment (for example: the sender used a credit card that did not belong to the sender), (d) you received the payment for 

activities that violated this Agreement, the XTRM Acceptable Use Policy, or any other XTRM agreement, or (e) XTRM 

decided a Claim against you.

"Send Money" means your ability to send money through the XTRM Services.

"Substantial Change" means a change to the terms of this Agreement that reduces your rights or increases your 

responsibilities.

"Verified Account" means an Account status that reflects that XTRM is reasonably sure that an Account holder has legal 

control of one or more of his or her Payment Methods. A Verified Account status does not constitute an endorsement of a User or a guarantee of a User's business practices.

"Unauthorized Transaction" has the definition provided in Section 12 (Unauthorized Transactions and Other Errors) of 

this Agreement.

"User" means any person or entity using the XTRM Services, including you.

"User Content" means any data or information that you provide to us, including through submission made by your or your customers to the XTRM Services.

"XTRM Business Payments" means payments where the sender must fund their payment exclusively using their Balance 

for which the XTRM Business Payment Fee applies. 

"XTRM Mobile" means a XTRM Service that allows you to send and receive payments through your mobile phone.

"XTRM Services" means all our products and services and any other features, technologies, and/or functionalities offered 

by us on our website or through any other means.

Acceptable Use Policy

You are independently responsible for complying with all applicable laws in all of your actions related to your use of the XTRM Services, regardless of the purpose of the use. In addition, you must adhere to the terms of this Acceptable Use Policy.

Prohibited Activities

You may not use the XTRM service for activities that

• violate any law, statute, ordinance or regulation

• promote hate, violence, racial or other forms of intolerance that is discriminatory or the financial exploitation of a crime

• involve the sales of products or services identified by government agencies to have a high likelihood of being fraudulent

• relate to transactions involving:

We encourage you to report violations of this Acceptable Use Policy to XTRM immediately. If you have a question about whether a type of transaction may violate the Acceptable Use Policy, or wish to file a report, you can do so by contacting us through the “Contact” or “Contact Us” link at the bottom of each page of the XTRM website.

Electronic Communications Delivery Policy
 (E-Sign Disclosure and Consent)

This policy describes how XTRM communicates with you electronically, provides additional detail about the Communications we provide you, and sets out the hardware and software you need to receive these Communications. You agree that by selecting “I accept” or checking any other electronic acknowledgment of your acceptance of this policy (e.g., during the account registration process), you intend to authenticate your acceptance of this policy, and to give your electronic acceptance the same force and effect as a manual signature.

Electronic delivery of communications

• You agree and consent to receive electronically all communications, agreements, documents, notices and disclosures (collectively, "Communications") that we provide in connection with your XTRM account ("Account") and your use of our services. Communications include, but are not limited to:

• agreements and policies you agree to (e.g., the XTRM User Agreement and the XTRM Privacy Policy), including updates to these agreements or policies;

• annual disclosures, including prospectuses and reports for XTRM Funds;

• transaction receipts or confirmations;

• account statements and history;

• federal and state tax statements we are required to make available to you; and

• information related to any other Account or transaction.

We will provide these Communications to you by posting them on the XTRM website and/or by emailing them to you at the primary email address listed in your XTRM Account Profile.

Hardware and software requirements

In order to access and retain electronic Communications, you will need the following computer hardware and software:

• a computer with an Internet connection;

• a current web browser that includes 128-bit encryption (e.g. MS Edge Version, Internet Explorer version 8.0 and above, Firefox version 60.0 and above, Chrome version 70.0 and above, or Safari 9.0 and above) with cookies enabled;

• Adobe Acrobat Reader version 8.0 and above to open documents in .pdf format;

• a valid email address (your primary email address on file with XTRM); and

• sufficient storage space to save past Communications or an installed printer to print them.

• We will notify you if there are any material changes to the hardware or software needed to receive electronic Communications from XTRM. By giving your consent you are confirming that you have access to the necessary equipment and are able to receive, open, and print or download a copy of any Communications for your records. You may print or save a copy of these Communications for your records as they may not be accessible online at a later date.

How to withdraw your consent

You may withdraw your consent to receive Communications electronically by writing to us at "Attn: Electronic Communications Delivery Policy, 1221Brickell Avenue, Suite 900, Miami FL, 33131 or by contacting us via the “Contact” or "Contact Us" link at the bottom of each page of the XTRM website. If you fail to provide or if you withdraw your consent to receive Communications electronically, XTRM reserves the right to either deny your application for an Account, restrict or deactivate your Account or charge you additional fees for paper copies.

Updating your contact information

It is your responsibility to keep your primary email address up to date so that XTRM can communicate with you electronically. You understand and agree that if XTRM sends you an electronic Communication but you do not receive it because your primary email address on file is incorrect, out of date, blocked by your service provider, or you are otherwise unable to receive electronic Communications, XTRM will be deemed to have provided the Communication to you.

Please note that if you use a spam filter that blocks or re-routes emails from senders not listed in your email address book, you must add XTRM to your email address book so that you will be able to receive the Communications we send to you.

You can update your primary email address or street address at any time by logging into the XTRM website. If your email address becomes invalid such that electronic Communications sent to you by XTRM are returned, XTRM may deem your Account to be inactive, and you will not be able to transact any activity using your XTRM Account until we receive a valid, working primary email address from you.

Data Protection Schedule

This Data Protection Schedule applies only to the extent that XTRM acts as a processor or sub-processor to a Business User.

Capitalized terms used but not defined in this Schedule shall have the meaning set out in the applicable User Agreement.

1. Definitions and Interpretation.

The following terms have the following meanings when used in this Schedule:

"Customer" means a customer of User who pays the User in exchange for goods or services through the XTRM services and for the purposes of this Schedule, is a data subject.

"Customer Data" means the personal data that the Customer provides to User and User passes on to XTRM through the use by the User of the XTRM services.

"data controller" (or simply "controller") and "data processor" (or simply "processor") and "data subject" have the meanings given to those terms under the Data Protection Laws.

"Data Protection Laws" means means all laws and regulations applicable to the processing of personal data by XTRM on User’s behalf, such as (to the extent applicable) the California Consumer Privacy Act, as amended and together with implementing regulations (“CCPA”) and the laws and regulations of the European Union, the European Economic Area and their member states, Switzerland and the United Kingdom, including the General Data Protection Regulation (EU) 2016/679 (GDPR) and any associated regulations or instruments.

"personal data" has the meaning given to it in the Data Protection Laws.

"processing" has the meaning given to it in the Data Protection Laws and "process", "processes" and "processed" will be interpreted accordingly.

"Sub-processor" means any processor engaged by XTRM and/or its Affiliates in the processing of personal data.

2. Processing of Personal Data in Connection with the XTRM Services.

2.1 User as data controller. 

With regard to any Customer Data to be processed by XTRM in connection with this Agreement, User will be a controller and XTRM will be a processor in respect of such processing. User will be solely responsible for determining the purposes for which and the manner in which Customer Data are, or are to be, processed. The parties agree that the “Business Purpose” for XTRM’s processing of personal data on User’s behalf is described in the order form or other purchase order by which User purchased access to and/or the use of XTRM’s services. The duration of processing, the nature and purpose of the processing, the types of Customer Data, and the categories of data subjects processed under this Agreement are further specified in Attachment 2 below. The parties agree this information shall be deemed that information required in this Agreement under applicable U.S. state privacy laws.

2.2 User-written instructions. 

XTRM shall only process Customer Data on behalf of and in accordance with User’s written instructions. The Parties agree that this Schedule is User’s complete and final written instruction to XTRM in relation to Customer Data. Additional instructions outside the scope of this Schedule (if any) require prior written agreement between User and XTRM, including agreement of any additional fees payable to XTRM for carrying out such additional instructions. User shall ensure that its instructions comply with all applicable laws, including Data Protection Laws, and that the processing of Customer Data in accordance with User’s instructions will not cause XTRM to be in breach of Data Protection Laws. The provisions of this Section are subject to the provisions of Section 2.14 on Security. User hereby instructs XTRM to process Customer Data for the following purposes:

2.2.1 as reasonably necessary to provide the XTRM services to User;

2.2.2 after anonymizing the Customer Data, to use that anonymized Customer Data, directly or indirectly, which is no longer identifiable personal data, for any purpose whatsoever.

2.3 XTRM cooperation. In relation to Customer Data processed by XTRM under this Agreement, XTRM shall cooperate with User to the extent reasonably necessary to enable User to adequately discharge its responsibility as a controller under Data Protection Laws, including without limitation as User requires in relation to:

2.3.1 assisting User in the preparation of data protection impact assessments to the extent required of User under Data Protection Laws; and

2.3.2 responding to binding requests from data protection authorities for the disclosure of Customer Data as required by applicable laws.

2.4 Scope and Details of Customer Data Processed by XTRM. The objective of processing Customer Data by XTRM is the performance of the XTRM services pursuant to the Agreement. XTRM shall process the Customer Data in accordance with the specified duration, purpose, type, and categories of data subjects as set out in Attachment 2 (Data Processing of Customer Data).

2.5 Compliance with Laws. The Parties will at all times comply with Data Protection Laws.

2.6 Correction, Blocking, and Deletion. To the extent User, in its use of the XTRM services, does not have the ability to correct, amend, block,  or delete Customer Data, as required by Data Protection Laws, XTRM shall comply with any commercially reasonable request by User to facilitate such actions to the extent XTRM is legally permitted to do so. To the extent legally permitted, User shall be responsible for any costs arising from XTRM’s provision of such assistance.

2.7 Data Subject Requests. XTRM shall, to the extent legally permitted, promptly notify User if it receives a request from a Customer for access to, correction, amendment, or deletion of that Customer’s personal data. User shall be responsible for responding to all such requests. If legally permitted, XTRM shall provide User with commercially reasonable cooperation and assistance regarding such Customer's request and User shall be responsible for any costs arising from XTRM’s assistance.

2.8 Training. XTRM undertakes to provide training as necessary from time to time to the XTRM personnel with respect to XTRM's obligations in this Schedule to ensure that the XTRM personnel are aware of and comply with such obligations. XTRM will take reasonable steps to ensure that only authorized personnel have access to Customer Data and that any persons whom it authorizes to have access to the Customer Data are under obligations of confidentiality. 

2.9 Limitation of Access. XTRM shall ensure that access by XTRM's personnel to Customer Data is limited to those personnel performing XTRM services in accordance with the Agreement.

2.10 Sub-processors. User specifically authorizes the engagement of XTRM (and its Affiliates) as Sub-processors in connection with the provision of the XTRM services. In addition, User generally authorizes the engagement of any other third parties as Sub-processors in connection with the provision of the XTRM services. When engaging any Sub-processor, XTRM will execute a written contract with the Sub-processor, which contains terms for the protection of Customer Data which are no less protective than the terms set out in this Schedule. If requested, XTRM shall make available to User a current list of Sub-processors for the respective XTRM services with the identities of those sub-processors.

2.11 Audits. Where requested by User, subject to the confidentiality obligations set forth in the User Agreement, XTRM shall make available to User (or User’s independent, third-party auditor that is not a competitor of XTRM or any members of XTRM or its Affiliates) information regarding XTRM’s compliance with the obligations set forth in this Schedule. User shall reimburse XTRM for any time expended for any such on-site audit at XTRM’s then-current professional XTRM services rates, which shall be made available to User upon request. Before the commencement of any such on-site audit, User and XTRM shall mutually agree upon the scope, timing, and duration of the audit in addition to the reimbursement rate for which User shall be responsible. All reimbursement rates shall be reasonable, taking into account the resources expended by XTRM. User shall promptly notify XTRM with information regarding any non-compliance discovered during the course of an audit.

2.12 Security. XTRM shall, as a minimum, implement and maintain appropriate technical and organizational measures as described in Attachment 1 to this Schedule to keep Customer Data secure and protect it against unauthorized or unlawful processing and accidental loss, destruction or damage in relation to the provision of the XTRM services. Since XTRM provides the XTRM services to all Users uniformly via a hosted, web-based application, all appropriate and then-current technical and organizational measures apply to XTRM’s entire customer base hosted out of the same data center and subscribed to the same service. User understands and agrees that the technical and organizational measures are subject to technical progress and development. In that regard, XTRM is expressly permitted to implement adequate alternative measures as long as the security level of the measures is maintained in relation to the provision of the XTRM services.

2.13 Security Incident Notification. If XTRM becomes aware of a Security Incident in connection with the processing of Customer Data, XTRM will, in accordance with Data Protection Laws: (a) notify User of the Security Incident promptly and without undue delay; (b) promptly take reasonable steps to minimize harm and secure Customer Data; (c) describe, to the extent possible, reasonable details of the Security Incident, including steps taken to mitigate the potential risks; and (d) deliver its notification to User's administrators by any means XTRM selects, including via email. User is solely responsible for maintaining accurate contact information and ensuring that any contact information is current and valid.

1. Deletion. Upon termination or expiry of the User Agreement, XTRM will delete or return to User all Customer Data processed on behalf of the User, and XTRM shall delete existing copies of such Customer Data except where necessary to retain such Customer Data strictly for the purposes of compliance with applicable law.

2. GDPR. If the processing of any Customer Data by XTRM is subject to the GDPR, then Module Two (Controller to Processor) of the Standard Contractual Clauses approved by the European Commission in Commission Decision 2021/914 dated 4 June 2021 (as amended and updated from time to time) (“EU SCCs”) hereby apply to any transfers of such Customer Data outside of the European Economic Area and/or its member states to the extent User is a Controller of the Personal Data of European Data Subjects, and Module Three (Processor to Processor) of the EU SCCs hereby apply to any such transfers to the extent User is a Processor of the Personal Data of European Data Subjects, and are deemed incorporated into this DPA by reference, take precedence over the rest of this DPA to the extent of any conflict, and are completed as follows:

   1. The optional docking clause in Clause 7 does not apply;

   2. In Clause 9, Option 2 (general written authorization) applies, and changes to sub-Processors will be notified in accordance with the terms of this DPA;

   3. In Clause 11, the optional language does not apply;

   4. In Clause 17 (Option 1), the EU SCCs will be governed by law of Ireland;

   5. In Clause 18(b), disputes will be resolved before the courts of Ireland;

   6. Attachment 2 to this DPA contains the information required in Annex I of the EU SCCs;

   7. Attachment 1 to this DPA contains the information required in Annex II of the EU SCCs; and

   8. The information required in Annex III of the EU SCCs can be found here: https://xtrmsupport.xtrm.com/en/support/solutions/articles/4000162624-security004-xtrm-sub-processors.

3. UK GDPR. If the processing of any Customer Data by XTRM is subject to the GDPR as it forms parts of the United Kingdom domestic law by virtue of Section 3 of the European Union (Withdrawal) Act 2018, then the EU SCCs, as amended by, and together with, the following, apply:

4. By executing and entering into this Agreement, the parties are deemed to have signed and entered into the terms of this section. The terms and conditions herein shall be legally binding upon the parties with the same effect as the terms and conditions of the Agreement. The parties hereby agree as follows:

Part 1: 

1. Start Date. The effective date of this section is the Effective Date.

2. Parties’ Details. User is the “Exporter.” XTRM is the “Importer.” The Parties’ details are set forth in applicable Order Form.  

3. Addendum EU SCCs. For the purposes of this section, the “Addendum EU SCCs” means the EU SCCs identified above, including the Appendix Information (defined below) and with only the modules, clauses, and optional provisions of the EU SCCs brought into effect for the purposes of this section as set forth above.

4. Appendix Information. “Appendix Information” or “Table 3” for the purposes of the Mandatory Clauses, means the information which must be provided for the Approved EU SCCs and which for this section is set forth as follows:

   1. “Annex 1A” shall be deemed to mean that information as per Part 1, Section 2 above.

   2. “Annex 1B” shall be deemed to mean that information in Attachment 2.

   3. “Annex II” shall be deemed to mean that information in Attachment 1.

   4. “Annex III” shall be deemed to mean that information found here https://xtrmsupport.xtrm.com/en/support/solutions/articles/4000162624-security004-xtrm-sub-processors.

5. Neither party may end these terms as set forth in the Mandatory Clauses, Section 19.

Part 2: 

Mandatory Clauses of the Approved Addendum, being the template Addendum B.1.0 issued by the ICO and laid before Parliament in accordance with s119A of the Data Protection Act 2018 on 2 February 2022, as it is revised under Section ‎18 of those Mandatory Clauses.

1. Switzerland. If any Customer Data concerns a data subject residing in Switzerland, then the EU SCCs, as amended by, and together with, the following apply:

   1. Clause 13 is modified so that the Federal Data Protection and Information Commissioner is the competent supervisory authority with respect to Personal Data transfers governed by the FADP, and the appropriate EU supervisory authority shall have authority over Personal Data transfers to the extent they are governed by the GDPR.

   2. For the purposes of the Clauses, the term “Member State” shall not be interpreted in such a way as to exclude data subjects in Switzerland from the possibility of suing for their rights in their place of habitual residence in accordance with Clause 18. c.

   3. The transfer of Personal Data shall – to the extent legally permitted – be governed by the provisions of the GDPR. The provisions of the Federal Act on Data Protection, as currently in force in the version of 19 June 1992 (“FADP”), and as replaced by the version of 25 September 2020 (“Revised FADP”), are additionally applicable on a subsidiary basis, in which case references to provisions of the GDPR shall be understood to be referring to the equivalent provisions of the FADP as in force from time to time.

   4. Until the Revised FADP enters into force, and provided that the Processing of Personal Data is governed by the FADP, the term “Personal Data” also includes the data of legal entities (as defined by the FADP).

2.18 CCPA.

If any Customer Data processed by XTRM is subject to the CCPA, then the following terms apply: This section only applies to the extent any Personal Information of California Consumers is included in the Customer Data. For the purposes this section, “Collects,” “Consumer,” “Personal Information,” “Processing,” “Sell,” and “Share” shall have their meanings as set forth in the CCPA. The parties acknowledge and agree that XTRM is Processing Personal Information pursuant to the Agreement as a “service provider” (as defined by the CCPA) of User for the Business Purposes. As such, XTRM represents and warrants as follows: (a) XTRM will not retain, use, or disclose any Personal Information it Collects pursuant to the Agreement for any purpose other than the Business Purposes or as otherwise permitted by the CCPA; (b) XTRM shall not Sell or Share any Personal Information it Collects pursuant to the Agreement; (c) XTRM shall not retain, use, or disclose the Personal Information that it Collects pursuant to the Agreement outside of the direct business relationship between XTRM and User, except as permitted by the CCPA; and (d) XTRM shall not combine any Personal Information it Collects pursuant to the Agreement with Personal Information that it receives from, or on behalf of, another person or business, or that it Collects from its own interactions with individuals, except as permitted by the CCPA. The parties acknowledge and agree that any combining contemplated by the Services is being performed by XTRM for the Business Purposes and such purposes constitute a “business purpose” (as defined by the CCPA).  XTRM further agrees as follows: (i) XTRM will comply with all applicable sections of the CCPA, including by providing the same level of privacy protection as required by businesses subject to the CCPA; (ii) XTRM will implement those reasonable security procedures and practices set forth in the DPA with respect to the Personal Information it Collects pursuant to the Agreement; (iii) User may monitor XTRM’s compliance with this section, and User’s obligations under the CCPA, in accordance with the audit terms set forth in the DPA; (iv) User may, upon notice, take those reasonable and appropriate steps set forth in the DPA and the Agreement to stop and remediate any unauthorized use of Personal Information by XTRM; (v) XTRM will notify User of any Consumer requests pursuant to the terms of the DPA; (vi) XTRM will notify User after it makes a determination that it can no longer meet its obligations under the CCPA; and (vii) if XTRM subcontracts with another person in providing services to User, XTRM will have a contract with such subcontractor that complies with the CCPA.

ATTACHMENT 1

Technical and Organizational Measures

The following technical and organizational measures will be implemented:

Measures taken to prevent any unauthorized person from accessing the facilities used for data processing;

Measures taken to prevent data media from being read, copied, amended or moved by any unauthorized persons;

Measures taken to prevent the unauthorized introduction of any data into the information system, as well as any unauthorized knowledge, amendment or deletion of the recorded data;

Measures taken to prevent data processing systems from being used by unauthorized person using data transmission facilities;

Measures taken to guarantee that authorized persons when using an automated data processing system may access only data that are within their competence;

Measures taken to guarantee the checking and recording of the identity of third parties to whom the data can be transmitted by transmission facilities;

Measures taken to guarantee that the identity of the persons having had access to the information system and the data introduced into the system can be checked and recorded ex post facto at any time and by any authorized person;

Measures taken to prevent data from being read, copied, amended or deleted in an unauthorized manner when data are disclosed and data media transported;

Measures taken to safeguard data by creating backup copies.

ATTACHMENT 2

Data Processing of Customer Data

Duration of Processing:  The term of the User Agreement.

Categories of data subjects:  Customer Data – The personal data that the Customer provides to the User which then passes it to XTRM to be forwarded to its third-party service providers to facilitate settlement of payments.

Subject-matter of the processing:  The payment settlement and data processing services facilitated by XTRM which allows User to accept payment methods on a website or mobile application from Customers, or to upload payment data.

Nature and purpose of the processing:  XTRM processes Customer Data that is sent by the User to XTRM for purposes of facilitating a third-party payment processor to process the Customer’s payment method as payment to the User for the sale of goods or services, and to consolidate payment data for Users.

Type of personal data:  Customer Data – User shall inform XTRM of the type of Customer Data XTRM is required to process under this Agreement. Should there be any changes to the type of Customer Data XTRM is required to process then User shall notify XTRM immediately. XTRM processes the following Customer Data, as may be provided by the User to XTRM from time to time:

• Full name

• Date of birth

• Address

• Billing address

• Email address

• Telephone number

• Fax number

• Government ID number

• Bank account number and bank routing number

• Financial account number

• Card or payment instrument type

• Card Primary Account Number (PAN)

• Card Verification Value (CVV)

• Card expiration date

• Business tax ID

• Username

• Password

• IP address

• Device Data

• Browser data