Master Service, Compliance and Liability Framework

This master framework (the "Framework") governs, together with the Terms of Service, Acceptable Use Policy, Anti-Spam Policy, Sender ID Rules, Payment Policy, Refund Policy, Privacy Policy, Data Processing Agreement (DPA) and Voice Policy (collectively the "Rules"), the entire legal relationship between Global Trade Rhino LLC, 30 N Gould St Ste N, Sheridan, WY 82801, USA, operating the SveaSMS platform (the "Company", "we", "us", the "Platform"), and any natural or legal person who registers an account, deposits funds, uses the API or otherwise accesses the Platform (the "Customer", "you").

By registering, signing in, depositing, calling the API, sending, activating a number or placing a call, the Customer confirms having read, understood and irrevocably accepted this Framework in full, and that the individual performing the act is authorised to bind the entity on whose behalf it is performed. Where the Rules conflict, this Framework prevails on matters of responsibility allocation, compliance, enforcement and limitation of liability.

1. Definitions and construction

"Services" means all services offered by the Company from time to time, including without limitation (i) the SMS service (single and bulk sending, scheduling, API integration, alphanumeric and numeric sender identities, delivery reporting and analytics), (ii) the number service (virtual numbers, receiving numbers, verification numbers and associated inbound message flows), and (iii) the voice service (dialer, WebRTC softphone, outbound and inbound calling, forwarding, call logs, contact records and call recording where enabled). "Content" means any message, audio, text, link, attachment, sender identity, recipient list or data transmitted to, through or from the Platform by the Customer. "Recipient" means any end user receiving Content. Headings are for readability only. Lists introduced by "including" are illustrative and never exhaustive.

2. Our role — technical intermediary, never the sender

The Company supplies electronic communications infrastructure. The Company is not the sender, principal, marketer, caller or content author of any Content. In every respect, including at law and before any regulator, the Customer is the sole sender and sole data controller of its Content, recipient lists, call lists, campaigns and business purposes. The Company exercises no editorial control, does not initiate transmissions, does not select Recipients and does not modify Content beyond what is technically required for transmission, formatting, character encoding, routing or compliance filtering.

The Customer acknowledges that the Company's technical controls (filters, blocklists, rate limits, brand protection, country restrictions and fraud signals) are voluntary risk-mitigation measuresand not an undertaking to review, approve, pre-screen or warrant the lawfulness of the Customer's activity. A control not triggering, a message passing, or a call connecting constitutes neither approval, advice, consent nor any representation as to legality.

3. Customer representations

The Customer represents, warrants and undertakes, on each occasion the Services are used, that:

• it is of legal age, has capacity and is authorised to enter into binding agreements;
• its activity is lawful in every jurisdiction where it operates and where Recipients are located;
• it holds a valid legal basis (consent, contract or legitimate interest) for every contact;
• its recipient and call lists are lawfully sourced, current and scrubbed against opt-outs and do-not-contact registries;
• its Content is not deceptive, fraudulent, threatening, abusive, discriminatory or unlawful;
• its sender identity infringes no third-party trademark or trade name and does not imply affiliation with any authority, police force, court, bank or payment institution;
• it has obtained and maintains every permit, licence and registration its activity requires;
• it is not subject to sanctions and does not act for any sanctioned person;
• all information provided at registration, verification or application is truthful, complete and current.

These representations are automatically repeated at each sign-in, deposit, send, number activation and call. Any breach constitutes a material breach of contract.

4. Onboarding review and its limits

The Company performs a reasonable, risk-based review before approving accounts, sender identities, numbers or dialer access. That review may consider registration data, prior platform history, payment patterns, device fingerprints, geolocation, sanctions screening, content sampling and, where offered, voluntary identity or business verification.

The Customer expressly acknowledges that such review is a reasonableness assessment based on the information the Customer itself supplies and on observable patterns. The Company cannot, and does not undertake to, establish the Customer's true intentions, internal decisions, future conduct, ultimate beneficial owners or business ethics. The Services are provided to businesses and individuals in good faith that the information given is truthful and the activity lawful. Approval of an account is not a review, endorsement, verification or warranty of the Customer's business and may never be invoked by the Customer or any third party as evidence that a given use was permitted.

5. SMS service

The Customer is solely responsible for message content, timing, frequency, audience, language, encoding, segmentation, links, landing pages and the sender identity chosen. Marketing messages must carry a clear sender identity and a working, free opt-out, and the Customer must honour every opt-out immediately and permanently. The Customer must observe local rules on permitted sending hours, quiet periods, do-not-contact registries and sector-specific restrictions.

Delivery depends on factors outside the Company's control, including coverage, network status, handset state, network filtering, porting and regulatory blocking. The Company gives no warranty of delivery, delivery time, ordering, sender-identity display or accuracy of delivery reports, which are provided as-is. Charges apply to accepted and forwarded traffic regardless of final delivery status, save for the cases expressly listed in the Refund Policy.

6. Number service (virtual and verification numbers)

Numbers are granted as a time-limited, non-exclusive, non-transferable right of use. The Customer acquires no ownership of any number and may not assign, sublet, port or pledge it without written consent. Numbers may be changed, withdrawn or reassigned for technical, regulatory or network reasons; the Company will seek to give reasonable notice but is not liable for consequences of such a change.

Numbers renew periodically against the Customer's balance. If the balance is insufficient, the right of use ends and the number is released, and the Customer loses access to the number and its inbound traffic. The Customer alone bears the consequences of a released number, including loss of access to third-party accounts where that number was used for verification or two-factor authentication.

The Customer is solely responsible for how a number is used, for compliance with third-party terms and applicable law, and for all Content received on it. Numbers must not be used to unlawfully circumvent a third party's security controls, to impersonate others, to create accounts in another's name or for fraudulent activity. Inbound messages are retained only for the period stated in the Privacy Policy and may be deleted when the right of use ends.

7. Voice service (dialer, softphone and recording)

The voice service is granted upon individual application and at the Company's sole discretion. The Customer is solely responsible for call content, calling hours, call frequency, dialling patterns, presented number, telemarketing rules, do-not-call registries, consent documentation and, where required, written confirmation of contracts concluded by telephone.

Where call recording is available, the Customer is solely responsible for ensuring recording is lawful in every jurisdiction involved, for obtaining and documenting any required consent, for notifying the other party where the law requires it, and for the storage, retention, access control and disclosure of recordings. The Company supplies the technical function only and makes no legal assessment of the Customer's recording practices.

The voice service is not a substitute for fixed or mobile telephony and must not be used for emergency calls. The Company warrants no emergency routing, location provision or availability. The Customer must maintain alternative access to emergency services and is liable for any harm arising if it does not.

8. Prohibited use and immediate enforcement

In addition to the Acceptable Use Policy, the following is absolutely prohibited: fraud, phishing and smishing, identity theft, impersonation of authorities, police, courts, banks, insurers or logistics companies, money laundering and terrorist financing, terrorist propaganda and violent extremism, threats, extortion, harassment and stalking, material exploiting minors, human trafficking, unlawful weapons or narcotics trade, sanctions breaches, unlawful gambling or investment promotion, and any circumvention of the Platform's technical controls.

On suspicion of such use, the Company may, without notice and without liability, (i) pause or throttle traffic, (ii) block sender identities, destinations or numbers, (iii) suspend or delete the account, (iv) forfeit remaining balance under the Refund Policy, (v) reclaim allocated numbers, and (vi) take any other measure it deems reasonable. The Company's assessment of what constitutes prohibited use is final and not subject to internal appeal.

The Platform is the Company's property and is provided on the Company's terms. The Company reserves the right to refuse, restrict or terminate a relationship on risk, security, reputational or compliance grounds even absent an established breach.

9. Customer logs, history and burden of proof

The Platform records technical metadata about the Customer's use, including send history, delivery status, call logs, sign-ins, IP addresses, device data and balance transactions. That history is the Customer's own operational record and the Customer alone answers for what it shows. As between the parties, the Company's logs are primary evidence of actual usage and charging.

The Customer must independently retain consent records, contract documentation and any other evidence its compliance posture requires. The Company is not the Customer's archive and assumes no retention obligation beyond the Privacy Policy and DPA.

10. Confidentiality and data protection

Customer data is treated as confidential. The Company does not sell Customer data, does not share message or call content with any outside party, and does not disclose Customer history to anyone. Your data is safe. Internal access is limited to authorised personnel on a least-privilege basis.

Customer data is not shared with other companies and is not disclosed to outside parties. Data is handled only by authorised personnel and by the subprocessors required to deliver the Service, all of whom are bound by confidentiality and data processing agreements. The Company applies data minimisation and retains data only as long as needed for delivery, operations, support and accounting.

Any request concerning Customer data is not answered on the merits in day-to-day operations; it is referred to the Company's legal function for individual assessment under applicable confidentiality undertakings.

Authorities, regulators, counsel and law-enforcement bodies must direct all correspondence exclusively to sales@sveasms.se. Requests via chat, telephone, social media or other channels are not answered.

As regards personal data in the Customer's recipient, contact and call records, the Customer is the controller and the Company the processor. The terms of such processing are set out in the DPA and Privacy Policy, which form an integral part of this Framework.

11. Pricing, balance and charging

The Services are supplied against a prepaid balance. Prices are dynamic and may change without notice due to network, currency or regulatory conditions. Charges arise on accepted traffic, on call connection under the applicable billing increment, on number activation and on periodic renewal. Balance is a prepaid service credit, not a bank deposit, bears no interest and is neither assignable nor payable out except under the Refund Policy.

Refunds are excluded for crypto payments. Only deposits made by debit or credit card may, in the exceptional cases expressly listed in the Refund Policy, be refunded. Crypto deposits are irreversible and are never refunded. No self-service refund facility exists in the signed-in environment; every application must be submitted in writing to sales@sveasms.com from the account's registered e-mail address.

12. Availability and maintenance

The Services are provided as-is and as-available. The Company warrants no uninterrupted operation, freedom from error, capacity, latency or fitness for a particular purpose, and may carry out planned and emergency maintenance, change technical interfaces and retire features. Outages, faults, delay or capacity limits give rise to no compensation, price reduction or refund.

13. Indemnity

The Customer shall fully indemnify and hold harmless the Company, its owners, officers, employees, contractors and technical suppliers against every claim, action, investigation, regulatory penalty, fine, damages award, settlement and cost including full legal fees, arising out of or in connection with the Customer's Content, use of the Services, recipient or call lists, sender identities, recordings, breach of the Rules, or violation of law or third-party rights. The indemnity is uncapped and survives termination.

14. Limitation of liability

The Company is never liable for indirect or consequential loss, lost profit, lost revenue, lost customers, lost data, reputational harm, penalties imposed on the Customer or claims by Recipients. The Company's aggregate liability, on any basis, is in all cases limited to the lower of (i) the amount actually paid by the Customer to the Company in the thirty (30) days preceding the event giving rise to the claim, and (ii) one hundred (100) USD, to the extent permitted by mandatory law.

15. Force majeure

The Company is relieved of liability for failure caused by circumstances beyond its control, including network outages, operator decisions, governmental action, legislative change, sanctions, cyber attack, power failure, natural events, war, terrorism or infrastructure supplier disruption.

16. Amendments

The Company may unilaterally amend the Rules. Amendments take effect on publication on the Platform. Continued use after publication constitutes acceptance. The Customer is responsible for keeping informed of the current version.

17. Governing law and dispute resolution

This Framework is governed by the laws of the State of Wyoming, USA, without regard to conflict-of-law rules. Disputes shall be finally settled by binding arbitration seated in Wyoming, in English, before one (1) arbitrator. The Customer waives class actions and trial by jury. Invalidity of any provision does not affect the remainder.

18. Contact

Customer matters: support@sveasms.com. Legal matters, counsel and authorities: sales@sveasms.se.