Legal

Data License Agreement

Governs the Client's right to use data licensed from Kuration AI — scope, ethical sourcing, restrictions, and term.

Version 5.0 · Last updated 17 April 2026

Legal review notice. This Data License Agreement has been prepared for review and should be validated by qualified legal counsel before use. It is not legal advice.

Version: 5.0 Effective Date: 17 April 2026 Last Updated: 17 April 2026

This Data License Agreement ("DLA") forms part of the agreement for services ("Principal Agreement") between:

Kuration AI Limited, a company registered in Hong Kong (CR No. 76420894), with its registered office at Unit 2A, 17/F., Glenealy Tower, No. 1 Glenealy, Central, Hong Kong ("Licensor" or "Kuration AI"),

and

The entity identified in the Principal Agreement ("Licensee" or "Client")

(each a "Party" and together the "Parties").

For the purposes of this DLA, "Principal Agreement" means: (i) for enterprise customers, the written agreement or Order Form executed between the Parties; or (ii) for all other customers, the Terms of Service available at https://kurationai.com/terms, which the Customer accepts by registering for or using the Services.

1. Definitions

1.1 "Licensed Data" means the data delivered by Kuration AI to the Client pursuant to the Principal Agreement, including contact records, company information, enrichment data, and any other data deliverables.

1.2 "Permitted Use" means the use of Licensed Data solely for the Client's internal business purposes as described in Section 3.

1.3 "Term" means the period during which the Client is authorised to use the Licensed Data, as specified in the Principal Agreement.

1.4 "Credit Allocation" means the number of data credits purchased by the Client under the Principal Agreement, entitling the Client to a corresponding volume of Licensed Data records and enrichment operations.

1.5 "Proprietary Methods" means Kuration AI's data collection methodologies, source infrastructure, enrichment pipelines, human research networks (including the Brainsfeed research arm), algorithms, and any other proprietary processes used to compile and deliver the Licensed Data.

2. Grant of license

2.1 Subject to the terms of this DLA and the Principal Agreement, Kuration AI grants the Client a non-exclusive, non-transferable, non-sublicensable, revocable licence to use the Licensed Data for Permitted Use during the Term.

2.2 All intellectual property rights in the Licensed Data, Kuration AI's proprietary databases, Proprietary Methods, and enrichment processes remain the exclusive property of Kuration AI. No ownership of the underlying data, data models, collection methodologies, or research networks is transferred to the Client.

2.3 The licence granted herein does not confer any rights to Kuration AI's proprietary reference databases, source infrastructure, research networks, or data pipelines.

3. Permitted use

The Client may use the Licensed Data solely for:

  • Internal business development, sales prospecting, and marketing activities;
  • Import into the Client's own CRM or internal business systems;
  • Internal analysis, research, and reporting; and
  • Direct outreach to contacts contained within the Licensed Data, subject to applicable laws.

4. Credit-based usage and limits

4.1 The Licensed Data is provided subject to the Credit Allocation specified in the Principal Agreement. Each data record delivered or enrichment operation performed shall consume credits as defined in the applicable pricing schedule.

4.2 The Client shall not exceed its Credit Allocation without prior written agreement from Kuration AI. Any usage exceeding the Credit Allocation shall be subject to additional fees at the rates specified in the Principal Agreement or, in the absence of such rates, at Kuration AI's then-current standard pricing.

4.3 Credits are non-transferable and may not be resold, shared with, or allocated to any third party, affiliated entity, or subsidiary without written authorisation from Kuration AI.

4.4 Unused credits shall expire at the end of the Term unless the Principal Agreement expressly provides for rollover.

4.5 Kuration AI reserves the right to monitor credit usage to ensure compliance with this DLA. Any attempt to circumvent credit limits, including but not limited to automated scraping, bulk extraction beyond the Credit Allocation, or systematic replication of Licensed Data, shall constitute a material breach.

5. Ethical data sourcing

Kuration AI is committed to lawful and ethical data collection practices. The Client acknowledges and agrees to the following:

5.1 All Licensed Data is sourced through lawful means, including Open Source Intelligence (OSINT) methodologies, publicly available information, government registries, corporate filings, event directories, institutional listings, professional networks, and human research conducted by Kuration AI's proprietary research networks.

5.2 Kuration AI does not engage in unauthorised access to computer systems, networks, or databases. Kuration AI does not use hacking, credential theft, social engineering, phishing, exploitation of security vulnerabilities, or any other unlawful means to obtain data.

5.3 Where Kuration AI employs automated data collection (web crawling or scraping), it does so in compliance with applicable law and industry standards. Kuration AI respects robots.txt directives and does not crawl or scrape websites that explicitly prohibit automated access through robots.txt exclusion protocols, terms of service, or other technical access controls.

5.4 Kuration AI's human research arm (Brainsfeed) conducts manual research through legitimate channels, including publicly accessible websites, directories, social media profiles, and published documents. Human researchers are bound by confidentiality agreements and ethical conduct guidelines.

5.5 Kuration AI maintains records of its data sources and collection methodologies sufficient to demonstrate the lawfulness of its data acquisition practices. Evidence of source legitimacy is available upon reasonable request for enterprise clients.

5.6 Kuration AI periodically reviews its data collection practices to ensure ongoing compliance with evolving legal and regulatory frameworks, including but not limited to the GDPR, UK GDPR, Hong Kong PDPO, UAE PDPL, KSA PDPL, Singapore PDPA, CCPA/CPRA, and relevant anti-scraping and computer fraud legislation.

6. Restrictions

The Client shall not, without prior written consent from Kuration AI:

6.1 Resell, sublicense, distribute, publish, or otherwise make the Licensed Data available to any third party, whether for commercial gain or otherwise.

6.2 Use the Licensed Data to build, supplement, or enhance any database, product, or service that competes with Kuration AI or is intended for resale as a data product.

6.3 Use the Licensed Data to create, train, fine-tune, or improve any machine learning model, artificial intelligence system, or automated data product that directly or indirectly competes with Kuration AI's core offerings, whether for internal use or for distribution to third parties. For the avoidance of doubt, this restriction applies whether the model is used internally, made available via an API, embedded in a product, or distributed to any third party. The restriction applies regardless of whether the model is labelled as "AI," "machine learning," "pattern recognition," "statistical model," or any equivalent term, and regardless of whether the Licensed Data is used as training data, validation data, fine-tuning data, reinforcement-learning signal, retrieval-augmented generation (RAG) source, embedding corpus, evaluation set, or any other means of model development, improvement, or evaluation.

6.4 Use the Licensed Data for digital advertising purposes, including audience segmentation, onboarding, lookalike modelling, or programmatic ad targeting, without prior written authorisation from Kuration AI.

6.5 Combine the Licensed Data with other datasets for the purpose of creating a competing data product or for redistribution.

6.6 Share, transfer, or provide access to the Licensed Data to any affiliated entity, subsidiary, or partner without written authorisation from Kuration AI.

6.7 Reverse-engineer, decompile, or attempt to determine the sources, methods, research networks, or processes used by Kuration AI to compile or enrich the Licensed Data. The identity of Kuration AI's data sources, research partners, and Proprietary Methods constitutes confidential information of Kuration AI.

6.8 Remove or alter any proprietary notices, source attributions, or metadata attached to the Licensed Data.

6.9 Systematically download, cache, or store the Licensed Data beyond what is reasonably necessary for Permitted Use, or attempt to reconstruct Kuration AI's underlying databases from delivered records.

The restrictions in this Section are supplemented by Kuration AI's Acceptable Use Policy where published, which is incorporated into this DLA by reference. In the event of conflict between this Section and the Acceptable Use Policy, the more restrictive provision shall apply.

7. Proprietary methods and confidentiality

7.1 The Client acknowledges that Kuration AI's Proprietary Methods, including but not limited to its network of human researchers (Brainsfeed), its offline data sources, its enrichment pipelines, and its data collection processes, represent significant proprietary assets and trade secrets of Kuration AI.

7.2 The Client shall not disclose, directly or indirectly, any information about Kuration AI's Proprietary Methods, data sources, or research networks to any third party.

7.3 The Client shall not contact, solicit, or engage any of Kuration AI's data sources, research partners, or freelance research network members for the purpose of obtaining data directly or replicating Kuration AI's services.

8. Data accuracy and warranty disclaimer

8.1 Kuration AI uses commercially reasonable efforts, including both automated systems and human verification through its proprietary research networks, to ensure the accuracy and quality of the Licensed Data at the time of delivery. However, business data is inherently dynamic and subject to change.

8.2 THE LICENSED DATA IS PROVIDED "AS IS" AND "AS AVAILABLE." KURATION AI MAKES NO WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, ACCURACY, COMPLETENESS, OR TIMELINESS OF THE LICENSED DATA.

8.3 Kuration AI shall not be liable for any decisions made or actions taken by the Client in reliance on the Licensed Data.

8.4 If the Client identifies material inaccuracies in the Licensed Data, the Client may report such inaccuracies to Kuration AI, and Kuration AI shall make commercially reasonable efforts to investigate and, where appropriate, correct or replace the affected records within a reasonable timeframe.

9. Compliance and responsible use

9.1 The Client shall use the Licensed Data in compliance with all applicable laws and regulations, including but not limited to data protection laws (GDPR, UK GDPR, PDPO, UAE PDPL, KSA PDPL, Singapore PDPA, CCPA/CPRA), anti-spam legislation (CAN-SPAM, PECR, CASL, TCPA), and industry-specific regulations.

9.2 The Client is solely responsible for ensuring that its use of the Licensed Data for outreach, marketing, or other communications complies with applicable consent requirements and opt-out mechanisms.

9.3 The Client shall promptly honour any opt-out, unsubscribe, or data deletion request received from data subjects contacted using the Licensed Data. The Client shall maintain appropriate suppression lists and shall not contact individuals who have opted out.

9.4 The Client shall notify Kuration AI of any data subject requests (including opt-out and deletion requests) relating to data sourced from Kuration AI, so that Kuration AI may update its own databases accordingly. Notifications may be sent to `privacy@kuration.ai`.

10. Aggregate usage data

10.1 Kuration AI may collect and analyse data relating to the Client's use of the platform and services, including usage patterns, query types, credit consumption, and performance metrics ("Usage Data").

10.2 Kuration AI may use Usage Data in aggregate or de-identified form to improve and enhance its services, develop new products and features, and for other lawful business purposes, including benchmarking and reporting.

10.3 Usage Data used or disclosed by Kuration AI will not be individually identifiable to the Client or to any specific data subjects without the Client's prior consent.

11. Term and termination

11.1 This DLA is effective for the duration of the Principal Agreement unless terminated earlier in accordance with this Section.

11.2 Either Party may terminate this DLA upon thirty (30) days' written notice if the other Party commits a material breach of this DLA that remains unremedied after fifteen (15) days' written notice.

11.3 Kuration AI may terminate or suspend the licence immediately upon written notice if the Client breaches any of the restrictions in Section 6 or Section 7, or exceeds its Credit Allocation without authorisation.

11.4 Upon termination, the Client shall cease all use of the Licensed Data and, at Kuration AI's election, return or destroy all copies of the Licensed Data in its possession or control within thirty (30) days, and provide written confirmation of such destruction.

11.5 The Client may retain Licensed Data that has been integrated into its CRM or business records in the ordinary course of business prior to termination, subject to the ongoing restrictions in this DLA (including Sections 6, 7, and 9). However, the Client may not use retained data to build databases for redistribution or to circumvent the termination of the licence.

11.6 Unused credits are forfeited upon termination and are not refundable unless otherwise stated in the Principal Agreement.

12. Limitation of liability

12.1 To the maximum extent permitted by applicable law, Kuration AI's total aggregate liability under or in connection with this DLA shall not exceed the fees paid by the Client under the Principal Agreement in the twelve (12) months preceding the event giving rise to the claim.

12.2 In no event shall Kuration AI be liable for any indirect, incidental, special, consequential, or punitive damages, including loss of profits, revenue, data, or business opportunity, regardless of the cause of action or theory of liability.

13. Indemnification

13.1 The Client shall indemnify, defend, and hold harmless Kuration AI from and against any claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising from:

  • the Client's use of the Licensed Data in breach of this DLA or applicable law;
  • the Client's failure to comply with data protection or anti-spam legislation;
  • any third-party claim arising from the Client's outreach or marketing activities using the Licensed Data;
  • the Client's unauthorised disclosure of Kuration AI's Proprietary Methods or confidential information; and
  • any Data Breach or security incident caused by the Client's failure to maintain appropriate security measures on systems or personnel handling the Licensed Data.

14. General provisions

14.1 This DLA, together with the Principal Agreement, constitutes the entire agreement between the Parties with respect to the licensing of data and supersedes all prior negotiations, representations, or agreements relating to this subject matter.

14.2 This DLA shall be governed by and construed in accordance with the laws of the Hong Kong Special Administrative Region of the People's Republic of China, without regard to its conflict-of-laws principles.

14.3 Any dispute, controversy, difference, or claim arising out of or relating to this DLA, including the existence, validity, interpretation, performance, breach, or termination thereof, or any dispute regarding non-contractual obligations arising out of or relating to it, shall be referred to and finally resolved by arbitration administered by the Hong Kong International Arbitration Centre ("HKIAC") under the HKIAC Administered Arbitration Rules in force when the Notice of Arbitration is submitted.

  • The law of this arbitration clause shall be Hong Kong law.
  • The seat of arbitration shall be Hong Kong.
  • The number of arbitrators shall be one.
  • The arbitration proceedings shall be conducted in English.

14.4 Neither Party may assign or transfer this DLA without the prior written consent of the other Party, except in connection with a merger, acquisition, or sale of all or substantially all of its assets.

14.5 If any provision of this DLA is found to be unenforceable, the remaining provisions shall continue in full force and effect.

14.6 No failure or delay by either Party in exercising any right under this DLA shall constitute a waiver of that right.

14.7 All notices under this DLA shall be in writing and delivered to the addresses specified in the Principal Agreement or to such other address as a Party may designate in writing. Notices to Kuration AI should be sent to `legal@kuration.ai` with a copy to the registered office at Unit 2A, 17/F., Glenealy Tower, No. 1 Glenealy, Central, Hong Kong.

Signatures

Where this DLA is executed as a standalone document (rather than incorporated into an Order Form or accepted through click-through), the Parties may sign below.

For and on behalf of Kuration AI Limited (Licensor):

Name: ________________________ Title: ________________________ Signature: ________________________ Date: ________________________

For and on behalf of the Licensee:

Name: ________________________ Title: ________________________ Signature: ________________________ Date: ________________________