Relay Customer Terms

Effective: July 27, 2026

These Customer Terms (the “Terms”) are between Tidestone Technologies LLC (“Tidestone”) and the business, organization, or sole proprietor for which a person starts a paid Relay organization (“Customer”). The organization name provided during signup identifies Customer in Relay but does not need to be Customer's legal name. If the accepting person acts as a sole proprietor and does not identify a separate legal entity, Customer means that person acting solely in a business or professional capacity. Relay is a product of Tidestone. Relay and the related services Tidestone provides under these Terms are the “Service.”

Capitalized data-protection terms not defined in these Terms have the meanings given in the Data Processing Terms.

These Terms take effect for a Customer only when a person with authority affirmatively accepts them for that Customer. By accepting, that person confirms that they are using Relay for business or professional purposes and have authority to bind Customer. If that person does not have that authority, they must not accept these Terms or start a paid organization.

Tidestone's business address is:

Tidestone Technologies LLC
1968 S. Coast Hwy #5307
Laguna Beach, CA 92651

1. The Service

1.1 Access

Subject to these Terms and payment of applicable fees, Tidestone grants Customer a limited, nonexclusive, nontransferable, nonsublicensable right during the subscription term to permit its authorized users to access and use Relay for Customer's internal business operations.

The self-serve Service is offered to business and professional Customers where Tidestone's payment providers and applicable law permit. Customer is responsible for determining that it may lawfully purchase and use Relay in its location.

1.2 Authorized Users

Customer controls which people it authorizes to use its Relay organization and which permissions, roles, integrations, schedules, and notification destinations it configures. Customer is responsible for:

• its authorized users' compliance with these Terms;
• keeping accounts, authentication methods, invite links, integration credentials, and devices secure;
• promptly removing access that is no longer authorized;
• not creating or authorizing a Relay account for anyone under 18;
• ensuring that people who create users or invitations have Customer's permission to do so; and
• the accuracy of its organization, contact, schedule, escalation, service, integration, billing, and recipient information.

An authorized user's account may belong to more than one Relay organization. Customer receives rights only in its own organization and Customer Data.

Customer may authorize employees and other users in locations where use is lawful. Each party remains responsible for the employment, privacy, data-transfer, communications, sanctions, and other legal requirements assigned to it by law. Before Customer submits Customer Personal Data in a transfer that requires a legal transfer mechanism, Customer must contact Tidestone through the Company and Contact Notice and receive written confirmation that the required mechanism is in place. The Data Processing Terms describe that process.

1.3 Changes to Relay

Tidestone may improve, modify, replace, or discontinue features. Tidestone will not use this right to avoid a material obligation already due. If a change materially reduces the core paid Service, Tidestone will provide reasonable notice when practicable.

1.4 No Service-Level Agreement

These Terms do not include a service-level agreement, guaranteed uptime, response time, recovery time, or service credit. Any separate written service-level commitment must be signed by Tidestone.

2. Customer Data and Instructions

2.1 Ownership

As between the parties, Customer retains its rights in data, content, instructions, and materials that Customer or its authorized users submit to Relay or direct a third party to submit to Relay (“Customer Data”).

2.2 Limited License and Instructions

Customer grants Tidestone and its subprocessors a worldwide, nonexclusive license during the term to host, copy, transmit, display, modify, and otherwise process Customer Data only as needed to:

• provide, secure, maintain, troubleshoot, and support Relay;
• deliver alerts and notifications to destinations Customer or its users select;
• connect Customer-directed integrations;
• prevent fraud, abuse, and security incidents;
• comply with law and enforce these Terms; and
• carry out Customer's documented instructions.

Customer's configuration and use of Relay, support requests, and other written directions are documented instructions for this purpose. After termination, the license continues only to the extent needed to return, delete, protect, or retain Customer Data as expressly permitted by Section 10.4 and the Data Processing Terms. The Data Processing Terms apply when Tidestone processes Customer Personal Data on Customer's behalf.

2.3 Customer Responsibilities

Customer represents and warrants that it has all rights, permissions, notices, consents, and lawful bases needed for Tidestone to process Customer Data as described in these Terms. This includes rights and permissions relating to:

• authorized users, invitees, responders, subscribers, and alert recipients;
• employee and contractor contact, schedule, availability, and on-call information;
• incident, Signal, note, service, audit, and support content;
• data received from or sent to Customer-directed integrations; and
• email, push, Slack, SMS, and voice destinations selected by Customer or its users.

Customer must obtain and maintain any permission required for operational email, SMS, or voice communications to a destination; must not enroll a number or address it is not authorized to use; and must promptly honor revocation, unsubscribe, STOP, and reassigned-number information. Message and data rates or carrier charges may apply. These Customer duties do not limit Tidestone's own obligations under applicable communications law.

Customer must not direct Tidestone to process data in violation of law or another person's rights.

2.4 Aggregated and De-identified Information

Tidestone may create and use information that has been aggregated or de-identified so that it does not reasonably identify Customer, an authorized user, or another individual. Tidestone will not attempt to re-identify that information except to test whether de-identification is effective.

3. Tidestone Property and Feedback

3.1 Tidestone Property

Tidestone and its licensors own Relay and all related software, documentation, designs, interfaces, workflows, text, graphics, trademarks, domains, technology, improvements, modifications, and derivative works (“Tidestone Property”). Tidestone Property does not include Customer Data. Except for the limited access right in Section 1.1, no right in Tidestone Property is granted to Customer.

Customer must not, and must not allow another person to:

• copy, modify, distribute, sell, lease, sublicense, or create derivative works from Relay except as expressly permitted;
• reverse engineer, decompile, or attempt to discover source code or nonpublic APIs, except to the limited extent law prohibits this restriction;
• access Relay to build or benchmark a competing service, publish nonpublic performance results, or train a competing model or product;
• remove proprietary notices; or
• bypass access, security, rate, or usage controls.

3.2 Feedback

If Customer or an authorized user voluntarily provides ideas, suggestions, evaluations, or other feedback about Relay (“Feedback”), the Feedback is non-confidential. Feedback does not include Customer Data or other material identified as Confidential Information. Customer grants Tidestone a perpetual, irrevocable, worldwide, transferable, sublicensable, royalty-free right to use, reproduce, modify, commercialize, distribute, and otherwise exploit the Feedback for any purpose without restriction, attribution, or payment. Customer does not acquire ownership in any Tidestone Property that incorporates or is informed by Feedback.

Customer confirms that it may grant this right for Feedback submitted by its authorized users.

4. Confidentiality

4.1 Confidential Information

“Confidential Information” means nonpublic information disclosed by one party (“Discloser”) to the other (“Recipient”) that is marked confidential or that a reasonable person would understand to be confidential from its nature and the circumstances. Customer Data is Customer's Confidential Information. Tidestone's nonpublic product, security, technical, pricing, and roadmap information is Tidestone's Confidential Information.

Confidential Information does not include information that Recipient can document: (a) is publicly available without breach; (b) Recipient lawfully knew without confidentiality duty before disclosure; (c) Recipient lawfully received from another source without confidentiality duty; or (d) Recipient independently developed without using Discloser's Confidential Information.

4.2 Protection and Use

Recipient will use Confidential Information only to perform or exercise rights under these Terms. Recipient will protect it using at least reasonable care and may disclose it only to personnel, professional advisers, and service providers who need to know it and are bound by appropriate confidentiality obligations.

4.3 Required Disclosure

Recipient may disclose Confidential Information when lawfully required if, when legally permitted, Recipient gives Discloser prompt notice and reasonable assistance at Discloser's expense. Recipient will disclose only the portion legally required.

4.4 Duration

These confidentiality obligations continue for five years after disclosure, except that obligations for Customer Data continue for as long as Recipient retains it and obligations for trade secrets continue while the information remains a trade secret under applicable law. Obligations for Customer Personal Data also continue as required by the Data Processing Terms and applicable law.

5. Acceptable Use and Unsupported Data

Customer must not use Relay to:

• violate law, another person's rights, or a contractual duty;
• threaten, harass, defraud, impersonate, discriminate unlawfully, or distribute unlawful or malicious content;
• probe, scan, disrupt, overload, or gain unauthorized access to Relay or another system, except for a review expressly permitted by Section 9 of the Data Processing Terms and conducted within the parties' agreed written scope;
• introduce malware or interfere with another customer's use;
• send spam, marketing SMS or calls, or other communications without required permission;
• conceal the origin of a communication or use misleading sender information; or
• use Relay for consumer surveillance or decisions that produce legal or similarly significant effects about individuals.

Unless Tidestone expressly agrees in a separate signed writing, Customer must not submit or use Relay to process:

• passwords, private keys, access tokens, or other credentials except through a Relay field specifically designed for that credential;
• payment-card numbers, bank-account credentials, or authentication data covered by payment-card security standards;
• protected health information subject to HIPAA;
• special-category or criminal-offense personal data protected by Articles 9 or 10 of the European Union General Data Protection Regulation or an analogous law, including data about racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetics, biometrics used for identification, health, sex life, sexual orientation, or criminal convictions and offenses;
• government-classified information, export-controlled technical data, or similarly regulated high-risk data; or
• information whose processing requires Tidestone to sign a specialized regulatory agreement or obtain a certification Relay does not have.

Tidestone may remove prohibited content or suspend affected processing when reasonably necessary to address a violation or material risk.

Each party will comply with applicable export-control, trade-sanctions, and anti-boycott laws. Customer must not access or use Relay, or permit an authorized user to do so, in violation of those laws. Customer represents that it and its authorized users are not prohibited or restricted parties and will not use Relay from, in, or for a sanctioned jurisdiction except as authorized by applicable law or license. Tidestone may restrict or suspend access as reasonably necessary to comply.

6. Alerts, Emergencies, and Customer Safeguards

Relay is an incident-response and on-call coordination tool. Relay is not 911, an emergency dispatch service, a medical device, a public-safety service, or a life-safety system. Customer must not rely on Relay as the only way to protect life, health, property, critical infrastructure, or essential operations.

Alerts and notifications may be delayed, duplicated, suppressed, misrouted, or not delivered because of configuration, connectivity, device state, quiet hours, recipient state, carrier filtering, third-party services, provider outages, software defects, or other conditions. Tidestone does not guarantee delivery, receipt, acknowledgement, escalation, or response.

Customer is responsible for:

• maintaining appropriate monitoring, backup communication channels, staffing, and emergency procedures;
• independently verifying critical events and responses;
• testing schedules, escalation policies, contact methods, devices, integrations, and delivery readiness;
• keeping alert recipients and contact information current; and
• deciding whether Relay is appropriate for a particular workflow.

7. Third-Party Services

Stripe processes account and billing information under Section 8 and the Privacy Notice. Relay may also interoperate with Customer-directed services such as Slack, Datadog, and Customer-configured webhooks, and may use telecommunications, email, mobile-push, and other providers to deliver the Service. When Customer or an authorized user enables, configures, or uses a Customer-directed integration, Customer authorizes Tidestone to exchange Customer Data with that service.

Third-party services are governed by their own terms and privacy practices. Tidestone does not control and is not responsible for a third party's service, availability, changes, or independent processing. This Section does not limit Tidestone's responsibility for its own obligations when it engages a subprocessor under the Data Processing Terms.

8. Fees, Seats, Renewal, and Taxes

8.1 Subscription

Relay's self-serve plan is a monthly U.S. dollar subscription priced per active seat, with no trial. The unit price, starting quantity, and initial total shown at checkout are part of Customer's order.

The subscription renews monthly until canceled. Customer authorizes Tidestone and Stripe to charge the payment method associated with the Relay subscription for recurring fees, seat adjustments, taxes Tidestone is required to collect, and other amounts Customer authorizes.

Tidestone may change the unit price on reasonable advance notice. An increase applies no earlier than the first renewal after that notice and does not change fees already incurred.

8.2 Seat Changes

Each active organization member is an occupied seat. Creating a person directly or accepting an invitation that creates an active membership may trigger an asynchronous billed-quantity increase. Removing an active member may trigger an asynchronous decrease. Stripe applies prorations to quantity changes under the subscription settings in effect at the time. A decrease can create a negative proration invoice item that Stripe applies under the subscription's invoice settings; it is not automatically refunded in cash.

The billed quantity remains at least one seat while the subscription is active.

Customer is responsible for seat changes made by people to whom Customer grants user or invitation permissions, even if those people do not have billing access.

8.3 Cancellation

A user with Customer's billing permission may manage or cancel the subscription through the Stripe Billing Portal. If the Portal does not present a cancellation control, Customer may request cancellation through Relay Help or the Company and Contact Notice, and Tidestone will confirm the effective date in writing. Cancellation takes effect as shown in the Portal or Tidestone's written confirmation and reflected in Relay's billing state. Archiving a Relay organization does not cancel its Stripe subscription.

8.4 Refunds and Billing Corrections

Fees are nonrefundable except when required by law or expressly stated at checkout. Tidestone may issue a refund or account credit for a substantiated billing error or another circumstance it considers appropriate. Customer may request a billing review through Relay Help or the Company and Contact Notice. Nothing in these Terms creates an automatic or unconditional refund right.

8.5 Taxes

Fees exclude taxes, duties, levies, and similar governmental assessments. Customer is responsible for them except taxes based on Tidestone's net income. Tidestone will collect taxes it is legally required to collect. Customer will provide accurate billing and exemption information.

8.6 Payment Failure

Customer must keep valid billing information and pay amounts when due. Tidestone may suspend paid features or access for overdue amounts after reasonable notice when practicable. Customer remains responsible for amounts incurred before and during suspension and before cancellation takes effect.

9. Suspension

Tidestone may suspend an account, integration, delivery channel, organization, or the Service to the extent reasonably necessary to:

• address a security incident, credible threat, misuse, or material operational risk;
• prevent unlawful activity or harm;
• comply with law or a binding provider requirement;
• address Customer's material breach, including nonpayment; or
• protect Relay, Tidestone, Customer, another customer, or a third party.

Tidestone will limit the suspension to the affected scope when reasonably possible and will provide notice and an opportunity to cure when the circumstances permit. Suspension does not cancel the subscription or waive amounts accrued before or during suspension unless Tidestone states otherwise in writing.

10. Term and Termination

10.1 Term

These Terms begin when Customer accepts them and continue until all Customer subscriptions and access rights end.

10.2 Termination for Breach

Either party may terminate these Terms for the other party's material breach if the breach is not cured within 30 days after written notice. Tidestone may use a 10-day cure period for undisputed nonpayment and may terminate or suspend immediately for unlawful use, a severe security threat, a breach that cannot be cured, or an insolvency event to the extent permitted by law.

10.3 Termination for Convenience

Customer may stop using Relay and cancel its subscription through the process in Section 8.3. Tidestone may terminate a self-serve Service for convenience on at least 30 days' notice and will refund any prepaid fees covering a period after the termination takes effect.

10.4 Effect of Termination

When termination takes effect, Customer's right to use Relay ends. Customer may request return of Customer Personal Data before access ends or promptly afterward. Tidestone will return or delete processor-scope Customer Personal Data as required by the Data Processing Terms. Information Tidestone retains for its own billing, security, legal-compliance, suppression, or claim-management purposes is governed by the Privacy Notice.

Sections that by their nature should survive do survive, including accrued payment obligations, ownership, Feedback, confidentiality, disclaimers, indemnity, liability limits, dispute terms, and data-disposition duties.

11. Warranties and Disclaimers

Each party represents that it has authority to enter these Terms.

TO THE MAXIMUM EXTENT PERMITTED BY LAW, RELAY AND ALL RELATED SERVICES, CONTENT, AND OUTPUTS ARE PROVIDED “AS IS” AND “AS AVAILABLE.” TIDESTONE DISCLAIMS ALL IMPLIED OR STATUTORY WARRANTIES, INCLUDING MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, QUIET ENJOYMENT, ACCURACY, AND WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

TIDESTONE DOES NOT WARRANT THAT RELAY WILL BE UNINTERRUPTED, ERROR-FREE, SECURE FROM EVERY THREAT, OR COMPATIBLE WITH EVERY SYSTEM; THAT DATA WILL NEVER BE LOST; OR THAT AN ALERT, NOTIFICATION, INTEGRATION, ESCALATION, OR THIRD-PARTY SERVICE WILL OPERATE OR DELIVER AS EXPECTED.

These disclaimers do not exclude a warranty or remedy that cannot lawfully be excluded.

12. Customer Indemnity

Customer will defend Tidestone and its officers, members, employees, and agents against a third-party claim to the extent arising from:

• Customer Data infringing, misappropriating, or violating the third party's rights;
• Customer's failure to obtain required rights, permissions, notices, or consents;
• Customer's unlawful or prohibited use of Relay;
• Customer's instructions, integrations, recipients, or communications violating law; or
• Customer's submission of unsupported regulated or high-risk data in breach of Section 5.

Customer will pay damages, costs, and reasonable attorneys' fees finally awarded against an indemnified party or included in a settlement Customer approves. Tidestone must promptly notify Customer, allow Customer to control the defense and settlement, and reasonably cooperate at Customer's expense. Customer may not settle a claim in a way that admits fault by or imposes a nonmonetary obligation on an indemnified party without that party's written consent.

This Section does not require Customer to indemnify Tidestone for a claim to the extent caused by Tidestone's breach of these Terms, gross negligence, willful misconduct, or violation of law.

13. Limits of Liability

13.1 Excluded Damages

TO THE MAXIMUM EXTENT PERMITTED BY LAW, NEITHER PARTY WILL BE LIABLE FOR INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, PUNITIVE, OR CONSEQUENTIAL DAMAGES, OR FOR LOST PROFITS, REVENUE, GOODWILL, BUSINESS OPPORTUNITY, OR ANTICIPATED SAVINGS, EVEN IF ADVISED THAT THE DAMAGES WERE POSSIBLE.

13.2 Liability Cap

TO THE MAXIMUM EXTENT PERMITTED BY LAW, EACH PARTY'S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO RELAY, THESE TERMS, AND THE DATA PROCESSING TERMS WILL NOT EXCEED THE FEES CUSTOMER PAID OR OWED FOR RELAY DURING THE 12 MONTHS PRECEDING THE EARLIEST EVENT GIVING RISE TO THE APPLICABLE CLAIM OR SERIES OF RELATED CLAIMS. IF CUSTOMER PAID NO FEES DURING THAT PERIOD, THE CAP IS US$100.

13.3 Exclusions From the Cap

Sections 13.1 and 13.2 do not apply to Customer's payment obligations, Customer's obligations under Section 12, either party's fraud, gross negligence, or willful misconduct, or liability to the extent it cannot lawfully be limited. Nothing in these Terms excludes or limits liability in a manner prohibited by California Civil Code section 1668 or other applicable law. Subject to those exclusions, Section 13.1 and the cap apply in the aggregate, regardless of legal theory and even if a remedy fails of its essential purpose.

14. Governing Law and Disputes

California law governs these Terms without regard to conflict-of-law rules. The United Nations Convention on Contracts for the International Sale of Goods does not apply.

Before filing a lawsuit, a party must send a written dispute notice describing the claim and requested resolution. Authorized representatives will try in good faith to resolve the dispute for 30 days. This requirement does not prevent either party from seeking urgent injunctive relief or taking action needed to preserve a claim.

After that period, each party consents to the nonexclusive jurisdiction of the state and federal courts located in California. Each party waives objections based on personal jurisdiction or inconvenient forum in those courts. This paragraph does not prevent either party from bringing a claim in another court that has jurisdiction and proper venue.

15. Notices and Changes

“Account Contact” means the email address associated with the Relay account that most recently accepted these Terms for Customer, unless Customer later designates a replacement in writing. Customer must keep that address current and notify Tidestone of a replacement before disabling it.

Tidestone may give routine operational notices through Relay or an authorized user's email and may publish general policy notices on the public legal pages. A notice that these Terms require to be written—including a notice of breach, termination, a material agreement change, a new Subprocessor, or a dispute—must be sent to the Account Contact. An emailed notice is received on the first business day after it is sent unless the sender receives a non-delivery notice; if that occurs, the sender must use another reasonably available contact method. Customer may send formal notices through the Company and Contact Notice.

Tidestone may make administrative, clarifying, or legally required updates that do not materially increase Customer's obligations or reduce Customer's rights. The updated Terms will identify their effective date. Except for a unit-price change governed by Section 8.1, a material adverse change for an existing Customer requires reasonable advance notice and renewed affirmative assent unless applicable law requires the change, in which case Tidestone will give as much notice as legally permitted. No update applies retroactively to excuse a prior breach. Continued use alone does not constitute assent to a material adverse change.

16. General

Neither party may assign these Terms without the other's written consent, except that either party may assign them in connection with a merger, reorganization, sale of substantially all relevant assets, or change of control if the assignee assumes the assigning party's obligations. Tidestone may also assign these Terms to an affiliate. Any other attempted assignment is void.

Tidestone may use subcontractors and subprocessors but remains responsible for its obligations as stated in these Terms and the Data Processing Terms. The parties are independent contractors. These Terms do not create a partnership, franchise, fiduciary, agency, or employment relationship.

Neither party is liable for delay or failure caused by events beyond its reasonable control, except Customer's payment obligations. A failure to enforce a provision is not a waiver. If a provision is unenforceable, it will be modified to the minimum extent needed and the rest remains effective.

These Terms, the applicable checkout or order details, the Data Processing Terms, and any executed amendment are the complete agreement about Relay and replace prior or contemporaneous discussions on that subject. The Privacy Notice describes Tidestone's privacy practices but is not part of the parties' agreement. Checkout or order details control only for the identified plan, price, quantity, billing interval, and expressly stated order-specific terms. An order or amendment changes another provision only if it expressly identifies that provision and is accepted by both parties. The Data Processing Terms control for Customer Personal Data, and the applicable Standard Contractual Clauses control for a Restricted Transfer.

No person other than the parties has a right to enforce these Terms, except an indemnified party may enforce Section 12 and a data subject may exercise rights expressly granted by applicable Standard Contractual Clauses.