Legal

Part I - Use of App & Website

1. SERVICES 1.1 We will make the Firehorse App (as defined in Statement of Work No. 1) and Website available to you and your Authorized Users under one or more Order Forms during the service period specified in the applicable Order Form (each, a “Service Period”). 1.2 The service description provided with the applicable Order Form or otherwise posted on the Website (“Service Specification”) describe and govern the Firehorse App. 1.3 During the Service Period, we may update the Firehorse App and Service Specifications to reflect changes in, among other things, Laws, technology, industry practices, and patterns of system use. Firehorse updates to the Firehorse App or Service Specifications will not materially reduce the level of performance, functionality, security or availability of the Firehorse App during the applicable Service Period. 1.4 You shall be solely liable for all Losses arising from access to or use of the Firehorse App and Website or the results thereof. 2. DATA You provide electronic data to Firehorse (“Source Data”) which can be computer files or direct access to a database licensed under a license that allows us to access and use such database for extraction of such data. 2.1 Firehorse transforms Source Data into structured data (data that has been abstracted and classified by key or field name) and validated data (data against which validation rules have been applied) which is sent or otherwise made available to you (“Results Data”). We may also generate data (including, without limitation, statistical data on usage, processes or any other metric in the Firehorse Platform and data used or generated in connection with the transformation of Source Data to Results Data) (“Other Data”). 2.2 Source Data and Results Data (collectively, the “Customer Data”) may also include Sensitive Personally Identifiable Information (“Sensitive PII”) and Non-Sensitive PII (“Non-Sensitive PII”) as defined by pages 5 & 6 of the US Department of Homeland Security, Handbook for Safeguarding Sensitive PII dated December 4, 2017. For purposes of these Terms, legal entity Employer Identification Numbers is treated as Sensitive PII. 2.3 You will not include in Customer Data any data that imposes specific data security, data protection, or regulatory obligations on Firehorse in addition to or different from those specified in the Security Policy or the Privacy Policy in Part IV below. If Customer Data includes any of the foregoing data (e.g., payment card information), we will process such data pursuant to the terms of your Order Form and these Terms. You are responsible for complying with your specific regulatory, legal or data security obligations which may apply to such data. 2.4 If a Governmental Authority sends Firehorse a demand for Customer Data, Firehorse will notify the Customer. If it compels Firehorse to provide Customer Data, Firehorse will notify the Customer as soon as possible to the extent it is permitted to do so under the Law.

Part II - General Terms

You may not, and may not cause or permit others to: (a) use the Firehorse App or Website to harass any person; cause damage or injury to any person or property; publish any material that is false, defamatory, harassing or obscene; violate privacy rights; promote bigotry, racism, hatred or harm; send unsolicited bulk e-mail, junk mail, spam or chain letters; infringe intellectual or other property rights; sell, manufacture, market and/or distribute any product or service in violation of applicable laws; or otherwise violate applicable laws, ordinances or regulations; (b) perform or disclose any benchmarking or availability testing of the Firehorse Platform, except as permitted in the Service Specifications; (c) perform or disclose any performance or vulnerability testing of the Firehorse App or Website without Firehorse’s prior written approval, except as permitted in the Service Specifications, or perform or disclose network discovery, port and service identification, vulnerability scanning, password cracking or remote access testing of the Firehorse App or Website; or (d) use the Firehorse App or Website to perform cyber currency or crypto currency mining ((a) through (d) collectively, the “Acceptable Use Policy”). In addition to other rights that we have in these Terms and any Statements of Work and Order Forms, we have the right to take remedial action if the Acceptable Use Policy is violated, and such remedial action may include removing or disabling access to material that violates the policy.

Part III - Security Policy

1. SECURITY 1.1 Organizational Security Measures. Firehorse uses the following organizational security measures to preserve the confidentiality of Customer Data: Confidentiality obligations in employment, contractor and Sub-Processor contracts.Access controls to the Customer Data in accordance with Section 8 of Part II.Physical access controls such as locks and security passes.1.2 Technical Security Measures. We are a cloud native company and run on a cloud service provider’s platform (e.g., Amazon Web Services). The platform hosts all of our services and data. We run a virtual private cloud with network access control lists that is designed to prevent unauthorized access to our internal network. We use various technical security measures that are designed to preserve the confidentiality of Customer Data. These are: Encryption of all Customer Data files at rest using 256-bit encryption.Encryption of all data in transit using 256-bit encryption.Use of HTTPS protocol.Authentication in our APIs and endpoints of TSLSSL only.Access controls such as passwords and multi-factor authentication.Physical access controls such as locks and security passes.Monitoring of access rights and of system access to look for potential unauthorized access.Monitoring, logging and subsequent auditing of activity on the Firehorse Platform for suspicious activity or inefficient processing.1.3 Data Storage. Firehorse stores all Customer Data in the USA in multi-tenant datastores. We use logical separation or algorithms in the code to prevent one customer from accessing another customer’s data. We backup all Customer Data on an automated basis. At the end of the Term, Firehorse will delete all Customer Data within 10 business days or, if requested in writing by you prior to the end of the Term, return Customer Data to you. 1.4 Sub-Processors. Firehorse uses Sub-Processors (“Sub-Processors”) or entities that process Customer Data andor Sensitive PII so that Firehorse may make the Firehorse App and Website available to the Customer. The current Sub-Processors include: Amazon Web ServicesHubspotMicrosoftFirehorse may include other Sub-Processors as needed to provide services and will provide 10 days’ notice to you before engaging them. Firehorse will only choose Sub-Processors with privacy and security policies at least as stringent as Firehorse’s own. 1.5 Customer Responsibilities. 1.5. You will take reasonable steps to keep Authorized User’s use of the Firehorse Platform secure including protecting user names, passwords and other account information (“User Information”) and to protect Customer Data when in transit to and from our Platform when using a channel not supported by Firehorse (for example if the Customer chooses to use email to convey files or data to Firehorse). Customer must notify Firehorse immediately if User Information has been compromised or if Customer suspects suspicious activity or other events on other software or other accounts that may impact the Platform or other customers using it. 1.5.2 You are responsible for (a) any required notices, consents and/or authorizations related to your provision of, and our processing of, Customer Data (including any Personal Information), (b) any security vulnerabilities, and the consequences of such vulnerabilities, arising from Customer Data, including any viruses, Trojan horses, worms or other harmful programming routines contained in Customer Data, and (c) any use by You or Authorized Users of the Firehorse App or Website in a manner that is inconsistent with the Terms and any related Statements of Work and Order Forms. To the extent you or your users disclose or transmit Customer Data to another Person, we are no longer responsible for the security or confidentiality of such Customer Data outside of Firehorse’s control. 1.6 Security Event. If there is a Security Event (“Security Event”) or unauthorized breach of the Firehorse Platform or Infrastructure which leads to a disclosure or loss of Customer Data, Firehorse will notify the Customer within 48 hours upon discovering the Security Event and give timely updates as Firehorse learns material facts.

Part IV - Privacy Policy

1. INFORMATION WE COLLECT. 1.1 Firehorse collects Sensitive PII and Non-Sensitive PII together Personal Data, (“Personal Data”) that you disclose when you visit the Website, register for the Firehorse Platform, use the Firehorse Platform or visit Firehorse social media sites. 1.2 Firehorse also uses cookies and similar technology to collect IP addresses, browser and device characteristics, usage information and location data. 1.3 We also may collect information in separate ways from public databases, social media platforms and marketing partners and other sources. 2. WHAT WE DO WITH THE INFORMATION. We use the Personal Data to provide services on the Firehorse Platform, to communicate with you about your use of the Firehorse Platform and to comply with Laws. We also may send you marketing communications to let you know about other services we offer on the Firehorse Platform. For visitors to our Website who do not identify themselves to us as Customers, we may also advertise.

Part V - Acceptable Use

You may not, and may not cause or permit others to: (a) use the Firehorse App or Website to harass any person; cause damage or injury to any person or property; publish any material that is false, defamatory, harassing or obscene; violate privacy rights; promote bigotry, racism, hatred or harm; send unsolicited bulk e-mail, junk mail, spam or chain letters; infringe intellectual or other property rights; sell, manufacture, market and/or distribute any product or service in violation of applicable laws; or otherwise violate applicable laws, ordinances or regulations; (b) perform or disclose any benchmarking or availability testing of the Firehorse Platform, except as permitted in the Service Specifications; (c) perform or disclose any performance or vulnerability testing of the Firehorse App or Website without Firehorse’s prior written approval, except as permitted in the Service Specifications, or perform or disclose network discovery, port and service identification, vulnerability scanning, password cracking or remote access testing of the Firehorse App or Website; or (d) use the Firehorse App or Website to perform cyber currency or crypto currency mining ((a) through (d) collectively, the “Acceptable Use Policy”). In addition to other rights that we have in these Terms and any Statements of Work and Order Forms, we have the right to take remedial action if the Acceptable Use Policy is violated, and such remedial action may include removing or disabling access to material that violates the policy.

Part VI - Definitions

Affiliate means, with respect to a Person, any other Person that directly or indirectly, Controls, is Controlled by or is under common Control with such Person, where “Control” means (i) the possession, direct or indirect, of the power to direct or cause the direction of the management and policies of such Person but only if such power is exercised, or (ii) the possession by ownership, directly or indirectly, of fifty percent (50%) or more of the voting equity of such Person or, in the case of a non-corporate Person, equivalent interests. “Authorized User” means for the Firehorse App and Website, those employees and contractors as applicable, authorized by you or on your behalf to use the Firehorse App and Website in accordance with this Agreement and the applicable Order Form. “Governmental Authority” means any supranational, national, regional, state or local government, court, governmental agency, authority, board, bureau, instrumentality, or regulatory body. “Law” means any of the following, as they may be changed from time to time: (a) any federal, state, county, municipal statute, regulation, policy, by-law, ordinance or subordinate legislation in force from time to time (including treaties, multinational conventions and the like having the force of Law); (b) the common law and the law of equity; (c) any binding court order, judgment or decree; (d) any mandatory industry code or policy, and any standard enforceable by law; and (e) any applicable direction, policy, order or interpretation of law that is given by a Governmental Authority. “Losses” mean: (a) all losses, liabilities, and damages; (b) all related costs, expenses and other charges suffered or incurred as a result of or in connection with a Claim (including reasonable attorney fees, court costs and disbursements at trial an on any appeal); reasonable costs of investigation, litigation, settlement and judgment; and (c) any taxes, fines, interest and penalties with respect to any of the foregoing. “Person” means any person or entity, whether an individual, trustee, corporation, partnership, limited partnership, limited liability company, trust, unincorporated organization, business association, firm or joint venture. “Security Event” means an unauthorized breach of the Firehorse Platform or Infrastructure which leads to a disclosure or loss of Customer Data. “Website” means https://firehorseteam.com, including the “look and feel” of the website, and any content (other than Customer Data) displayed on or available through such website.

Part I - Use of App & Website

1. SERVICES 1.1 We will make the Firehorse App (as defined in Statement of Work No. 1) and Website available to you and your Authorized Users under one or more Order Forms during the service period specified in the applicable Order Form (each, a “Service Period”). 1.2 The service description provided with the applicable Order Form or otherwise posted on the Website (“Service Specification”) describe and govern the Firehorse App. 1.3 During the Service Period, we may update the Firehorse App and Service Specifications to reflect changes in, among other things, Laws, technology, industry practices, and patterns of system use. Firehorse updates to the Firehorse App or Service Specifications will not materially reduce the level of performance, functionality, security or availability of the Firehorse App during the applicable Service Period. 1.4 You shall be solely liable for all Losses arising from access to or use of the Firehorse App and Website or the results thereof. 2. DATA You provide electronic data to Firehorse (“Source Data”) which can be computer files or direct access to a database licensed under a license that allows us to access and use such database for extraction of such data. 2.1 Firehorse transforms Source Data into structured data (data that has been abstracted and classified by key or field name) and validated data (data against which validation rules have been applied) which is sent or otherwise made available to you (“Results Data”). We may also generate data (including, without limitation, statistical data on usage, processes or any other metric in the Firehorse Platform and data used or generated in connection with the transformation of Source Data to Results Data) (“Other Data”). 2.2 Source Data and Results Data (collectively, the “Customer Data”) may also include Sensitive Personally Identifiable Information (“Sensitive PII”) and Non-Sensitive PII (“Non-Sensitive PII”) as defined by pages 5 & 6 of the US Department of Homeland Security, Handbook for Safeguarding Sensitive PII dated December 4, 2017. For purposes of these Terms, legal entity Employer Identification Numbers is treated as Sensitive PII. 2.3 You will not include in Customer Data any data that imposes specific data security, data protection, or regulatory obligations on Firehorse in addition to or different from those specified in the Security Policy or the Privacy Policy in Part IV below. If Customer Data includes any of the foregoing data (e.g., payment card information), we will process such data pursuant to the terms of your Order Form and these Terms. You are responsible for complying with your specific regulatory, legal or data security obligations which may apply to such data. 2.4 If a Governmental Authority sends Firehorse a demand for Customer Data, Firehorse will notify the Customer. If it compels Firehorse to provide Customer Data, Firehorse will notify the Customer as soon as possible to the extent it is permitted to do so under the Law.

Part II - General Terms

You may not, and may not cause or permit others to: (a) use the Firehorse App or Website to harass any person; cause damage or injury to any person or property; publish any material that is false, defamatory, harassing or obscene; violate privacy rights; promote bigotry, racism, hatred or harm; send unsolicited bulk e-mail, junk mail, spam or chain letters; infringe intellectual or other property rights; sell, manufacture, market and/or distribute any product or service in violation of applicable laws; or otherwise violate applicable laws, ordinances or regulations; (b) perform or disclose any benchmarking or availability testing of the Firehorse Platform, except as permitted in the Service Specifications; (c) perform or disclose any performance or vulnerability testing of the Firehorse App or Website without Firehorse’s prior written approval, except as permitted in the Service Specifications, or perform or disclose network discovery, port and service identification, vulnerability scanning, password cracking or remote access testing of the Firehorse App or Website; or (d) use the Firehorse App or Website to perform cyber currency or crypto currency mining ((a) through (d) collectively, the “Acceptable Use Policy”). In addition to other rights that we have in these Terms and any Statements of Work and Order Forms, we have the right to take remedial action if the Acceptable Use Policy is violated, and such remedial action may include removing or disabling access to material that violates the policy.

Part III - Security Policy

1. SECURITY 1.1 Organizational Security Measures. Firehorse uses the following organizational security measures to preserve the confidentiality of Customer Data: Confidentiality obligations in employment, contractor and Sub-Processor contracts.Access controls to the Customer Data in accordance with Section 8 of Part II.Physical access controls such as locks and security passes.1.2 Technical Security Measures. We are a cloud native company and run on a cloud service provider’s platform (e.g., Amazon Web Services). The platform hosts all of our services and data. We run a virtual private cloud with network access control lists that is designed to prevent unauthorized access to our internal network. We use various technical security measures that are designed to preserve the confidentiality of Customer Data. These are: Encryption of all Customer Data files at rest using 256-bit encryption.Encryption of all data in transit using 256-bit encryption.Use of HTTPS protocol.Authentication in our APIs and endpoints of TSLSSL only.Access controls such as passwords and multi-factor authentication.Physical access controls such as locks and security passes.Monitoring of access rights and of system access to look for potential unauthorized access.Monitoring, logging and subsequent auditing of activity on the Firehorse Platform for suspicious activity or inefficient processing.1.3 Data Storage. Firehorse stores all Customer Data in the USA in multi-tenant datastores. We use logical separation or algorithms in the code to prevent one customer from accessing another customer’s data. We backup all Customer Data on an automated basis. At the end of the Term, Firehorse will delete all Customer Data within 10 business days or, if requested in writing by you prior to the end of the Term, return Customer Data to you. 1.4 Sub-Processors. Firehorse uses Sub-Processors (“Sub-Processors”) or entities that process Customer Data andor Sensitive PII so that Firehorse may make the Firehorse App and Website available to the Customer. The current Sub-Processors include: Amazon Web ServicesHubspotMicrosoftFirehorse may include other Sub-Processors as needed to provide services and will provide 10 days’ notice to you before engaging them. Firehorse will only choose Sub-Processors with privacy and security policies at least as stringent as Firehorse’s own. 1.5 Customer Responsibilities. 1.5. You will take reasonable steps to keep Authorized User’s use of the Firehorse Platform secure including protecting user names, passwords and other account information (“User Information”) and to protect Customer Data when in transit to and from our Platform when using a channel not supported by Firehorse (for example if the Customer chooses to use email to convey files or data to Firehorse). Customer must notify Firehorse immediately if User Information has been compromised or if Customer suspects suspicious activity or other events on other software or other accounts that may impact the Platform or other customers using it. 1.5.2 You are responsible for (a) any required notices, consents and/or authorizations related to your provision of, and our processing of, Customer Data (including any Personal Information), (b) any security vulnerabilities, and the consequences of such vulnerabilities, arising from Customer Data, including any viruses, Trojan horses, worms or other harmful programming routines contained in Customer Data, and (c) any use by You or Authorized Users of the Firehorse App or Website in a manner that is inconsistent with the Terms and any related Statements of Work and Order Forms. To the extent you or your users disclose or transmit Customer Data to another Person, we are no longer responsible for the security or confidentiality of such Customer Data outside of Firehorse’s control. 1.6 Security Event. If there is a Security Event (“Security Event”) or unauthorized breach of the Firehorse Platform or Infrastructure which leads to a disclosure or loss of Customer Data, Firehorse will notify the Customer within 48 hours upon discovering the Security Event and give timely updates as Firehorse learns material facts.

Part IV - Privacy Policy

1. INFORMATION WE COLLECT. 1.1 Firehorse collects Sensitive PII and Non-Sensitive PII together Personal Data, (“Personal Data”) that you disclose when you visit the Website, register for the Firehorse Platform, use the Firehorse Platform or visit Firehorse social media sites. 1.2 Firehorse also uses cookies and similar technology to collect IP addresses, browser and device characteristics, usage information and location data. 1.3 We also may collect information in separate ways from public databases, social media platforms and marketing partners and other sources. 2. WHAT WE DO WITH THE INFORMATION. We use the Personal Data to provide services on the Firehorse Platform, to communicate with you about your use of the Firehorse Platform and to comply with Laws. We also may send you marketing communications to let you know about other services we offer on the Firehorse Platform. For visitors to our Website who do not identify themselves to us as Customers, we may also advertise.

Part V - Acceptable Use

You may not, and may not cause or permit others to: (a) use the Firehorse App or Website to harass any person; cause damage or injury to any person or property; publish any material that is false, defamatory, harassing or obscene; violate privacy rights; promote bigotry, racism, hatred or harm; send unsolicited bulk e-mail, junk mail, spam or chain letters; infringe intellectual or other property rights; sell, manufacture, market and/or distribute any product or service in violation of applicable laws; or otherwise violate applicable laws, ordinances or regulations; (b) perform or disclose any benchmarking or availability testing of the Firehorse Platform, except as permitted in the Service Specifications; (c) perform or disclose any performance or vulnerability testing of the Firehorse App or Website without Firehorse’s prior written approval, except as permitted in the Service Specifications, or perform or disclose network discovery, port and service identification, vulnerability scanning, password cracking or remote access testing of the Firehorse App or Website; or (d) use the Firehorse App or Website to perform cyber currency or crypto currency mining ((a) through (d) collectively, the “Acceptable Use Policy”). In addition to other rights that we have in these Terms and any Statements of Work and Order Forms, we have the right to take remedial action if the Acceptable Use Policy is violated, and such remedial action may include removing or disabling access to material that violates the policy.

Part VI - Definitions

Affiliate means, with respect to a Person, any other Person that directly or indirectly, Controls, is Controlled by or is under common Control with such Person, where “Control” means (i) the possession, direct or indirect, of the power to direct or cause the direction of the management and policies of such Person but only if such power is exercised, or (ii) the possession by ownership, directly or indirectly, of fifty percent (50%) or more of the voting equity of such Person or, in the case of a non-corporate Person, equivalent interests. “Authorized User” means for the Firehorse App and Website, those employees and contractors as applicable, authorized by you or on your behalf to use the Firehorse App and Website in accordance with this Agreement and the applicable Order Form. “Governmental Authority” means any supranational, national, regional, state or local government, court, governmental agency, authority, board, bureau, instrumentality, or regulatory body. “Law” means any of the following, as they may be changed from time to time: (a) any federal, state, county, municipal statute, regulation, policy, by-law, ordinance or subordinate legislation in force from time to time (including treaties, multinational conventions and the like having the force of Law); (b) the common law and the law of equity; (c) any binding court order, judgment or decree; (d) any mandatory industry code or policy, and any standard enforceable by law; and (e) any applicable direction, policy, order or interpretation of law that is given by a Governmental Authority. “Losses” mean: (a) all losses, liabilities, and damages; (b) all related costs, expenses and other charges suffered or incurred as a result of or in connection with a Claim (including reasonable attorney fees, court costs and disbursements at trial an on any appeal); reasonable costs of investigation, litigation, settlement and judgment; and (c) any taxes, fines, interest and penalties with respect to any of the foregoing. “Person” means any person or entity, whether an individual, trustee, corporation, partnership, limited partnership, limited liability company, trust, unincorporated organization, business association, firm or joint venture. “Security Event” means an unauthorized breach of the Firehorse Platform or Infrastructure which leads to a disclosure or loss of Customer Data. “Website” means https://firehorseteam.com, including the “look and feel” of the website, and any content (other than Customer Data) displayed on or available through such website.

Part I - Use of App & Website

1. SERVICES 1.1 We will make the Firehorse App (as defined in Statement of Work No. 1) and Website available to you and your Authorized Users under one or more Order Forms during the service period specified in the applicable Order Form (each, a “Service Period”). 1.2 The service description provided with the applicable Order Form or otherwise posted on the Website (“Service Specification”) describe and govern the Firehorse App. 1.3 During the Service Period, we may update the Firehorse App and Service Specifications to reflect changes in, among other things, Laws, technology, industry practices, and patterns of system use. Firehorse updates to the Firehorse App or Service Specifications will not materially reduce the level of performance, functionality, security or availability of the Firehorse App during the applicable Service Period. 1.4 You shall be solely liable for all Losses arising from access to or use of the Firehorse App and Website or the results thereof. 2. DATA You provide electronic data to Firehorse (“Source Data”) which can be computer files or direct access to a database licensed under a license that allows us to access and use such database for extraction of such data. 2.1 Firehorse transforms Source Data into structured data (data that has been abstracted and classified by key or field name) and validated data (data against which validation rules have been applied) which is sent or otherwise made available to you (“Results Data”). We may also generate data (including, without limitation, statistical data on usage, processes or any other metric in the Firehorse Platform and data used or generated in connection with the transformation of Source Data to Results Data) (“Other Data”). 2.2 Source Data and Results Data (collectively, the “Customer Data”) may also include Sensitive Personally Identifiable Information (“Sensitive PII”) and Non-Sensitive PII (“Non-Sensitive PII”) as defined by pages 5 & 6 of the US Department of Homeland Security, Handbook for Safeguarding Sensitive PII dated December 4, 2017. For purposes of these Terms, legal entity Employer Identification Numbers is treated as Sensitive PII. 2.3 You will not include in Customer Data any data that imposes specific data security, data protection, or regulatory obligations on Firehorse in addition to or different from those specified in the Security Policy or the Privacy Policy in Part IV below. If Customer Data includes any of the foregoing data (e.g., payment card information), we will process such data pursuant to the terms of your Order Form and these Terms. You are responsible for complying with your specific regulatory, legal or data security obligations which may apply to such data. 2.4 If a Governmental Authority sends Firehorse a demand for Customer Data, Firehorse will notify the Customer. If it compels Firehorse to provide Customer Data, Firehorse will notify the Customer as soon as possible to the extent it is permitted to do so under the Law.

Part II - General Terms

You may not, and may not cause or permit others to: (a) use the Firehorse App or Website to harass any person; cause damage or injury to any person or property; publish any material that is false, defamatory, harassing or obscene; violate privacy rights; promote bigotry, racism, hatred or harm; send unsolicited bulk e-mail, junk mail, spam or chain letters; infringe intellectual or other property rights; sell, manufacture, market and/or distribute any product or service in violation of applicable laws; or otherwise violate applicable laws, ordinances or regulations; (b) perform or disclose any benchmarking or availability testing of the Firehorse Platform, except as permitted in the Service Specifications; (c) perform or disclose any performance or vulnerability testing of the Firehorse App or Website without Firehorse’s prior written approval, except as permitted in the Service Specifications, or perform or disclose network discovery, port and service identification, vulnerability scanning, password cracking or remote access testing of the Firehorse App or Website; or (d) use the Firehorse App or Website to perform cyber currency or crypto currency mining ((a) through (d) collectively, the “Acceptable Use Policy”). In addition to other rights that we have in these Terms and any Statements of Work and Order Forms, we have the right to take remedial action if the Acceptable Use Policy is violated, and such remedial action may include removing or disabling access to material that violates the policy.

Part III - Security Policy

1. SECURITY 1.1 Organizational Security Measures. Firehorse uses the following organizational security measures to preserve the confidentiality of Customer Data: Confidentiality obligations in employment, contractor and Sub-Processor contracts.Access controls to the Customer Data in accordance with Section 8 of Part II.Physical access controls such as locks and security passes.1.2 Technical Security Measures. We are a cloud native company and run on a cloud service provider’s platform (e.g., Amazon Web Services). The platform hosts all of our services and data. We run a virtual private cloud with network access control lists that is designed to prevent unauthorized access to our internal network. We use various technical security measures that are designed to preserve the confidentiality of Customer Data. These are: Encryption of all Customer Data files at rest using 256-bit encryption.Encryption of all data in transit using 256-bit encryption.Use of HTTPS protocol.Authentication in our APIs and endpoints of TSLSSL only.Access controls such as passwords and multi-factor authentication.Physical access controls such as locks and security passes.Monitoring of access rights and of system access to look for potential unauthorized access.Monitoring, logging and subsequent auditing of activity on the Firehorse Platform for suspicious activity or inefficient processing.1.3 Data Storage. Firehorse stores all Customer Data in the USA in multi-tenant datastores. We use logical separation or algorithms in the code to prevent one customer from accessing another customer’s data. We backup all Customer Data on an automated basis. At the end of the Term, Firehorse will delete all Customer Data within 10 business days or, if requested in writing by you prior to the end of the Term, return Customer Data to you. 1.4 Sub-Processors. Firehorse uses Sub-Processors (“Sub-Processors”) or entities that process Customer Data andor Sensitive PII so that Firehorse may make the Firehorse App and Website available to the Customer. The current Sub-Processors include: Amazon Web ServicesHubspotMicrosoftFirehorse may include other Sub-Processors as needed to provide services and will provide 10 days’ notice to you before engaging them. Firehorse will only choose Sub-Processors with privacy and security policies at least as stringent as Firehorse’s own. 1.5 Customer Responsibilities. 1.5. You will take reasonable steps to keep Authorized User’s use of the Firehorse Platform secure including protecting user names, passwords and other account information (“User Information”) and to protect Customer Data when in transit to and from our Platform when using a channel not supported by Firehorse (for example if the Customer chooses to use email to convey files or data to Firehorse). Customer must notify Firehorse immediately if User Information has been compromised or if Customer suspects suspicious activity or other events on other software or other accounts that may impact the Platform or other customers using it. 1.5.2 You are responsible for (a) any required notices, consents and/or authorizations related to your provision of, and our processing of, Customer Data (including any Personal Information), (b) any security vulnerabilities, and the consequences of such vulnerabilities, arising from Customer Data, including any viruses, Trojan horses, worms or other harmful programming routines contained in Customer Data, and (c) any use by You or Authorized Users of the Firehorse App or Website in a manner that is inconsistent with the Terms and any related Statements of Work and Order Forms. To the extent you or your users disclose or transmit Customer Data to another Person, we are no longer responsible for the security or confidentiality of such Customer Data outside of Firehorse’s control. 1.6 Security Event. If there is a Security Event (“Security Event”) or unauthorized breach of the Firehorse Platform or Infrastructure which leads to a disclosure or loss of Customer Data, Firehorse will notify the Customer within 48 hours upon discovering the Security Event and give timely updates as Firehorse learns material facts.

Part IV - Privacy Policy

1. INFORMATION WE COLLECT. 1.1 Firehorse collects Sensitive PII and Non-Sensitive PII together Personal Data, (“Personal Data”) that you disclose when you visit the Website, register for the Firehorse Platform, use the Firehorse Platform or visit Firehorse social media sites. 1.2 Firehorse also uses cookies and similar technology to collect IP addresses, browser and device characteristics, usage information and location data. 1.3 We also may collect information in separate ways from public databases, social media platforms and marketing partners and other sources. 2. WHAT WE DO WITH THE INFORMATION. We use the Personal Data to provide services on the Firehorse Platform, to communicate with you about your use of the Firehorse Platform and to comply with Laws. We also may send you marketing communications to let you know about other services we offer on the Firehorse Platform. For visitors to our Website who do not identify themselves to us as Customers, we may also advertise.

Part V - Acceptable Use

You may not, and may not cause or permit others to: (a) use the Firehorse App or Website to harass any person; cause damage or injury to any person or property; publish any material that is false, defamatory, harassing or obscene; violate privacy rights; promote bigotry, racism, hatred or harm; send unsolicited bulk e-mail, junk mail, spam or chain letters; infringe intellectual or other property rights; sell, manufacture, market and/or distribute any product or service in violation of applicable laws; or otherwise violate applicable laws, ordinances or regulations; (b) perform or disclose any benchmarking or availability testing of the Firehorse Platform, except as permitted in the Service Specifications; (c) perform or disclose any performance or vulnerability testing of the Firehorse App or Website without Firehorse’s prior written approval, except as permitted in the Service Specifications, or perform or disclose network discovery, port and service identification, vulnerability scanning, password cracking or remote access testing of the Firehorse App or Website; or (d) use the Firehorse App or Website to perform cyber currency or crypto currency mining ((a) through (d) collectively, the “Acceptable Use Policy”). In addition to other rights that we have in these Terms and any Statements of Work and Order Forms, we have the right to take remedial action if the Acceptable Use Policy is violated, and such remedial action may include removing or disabling access to material that violates the policy.

Part VI - Definitions

Affiliate means, with respect to a Person, any other Person that directly or indirectly, Controls, is Controlled by or is under common Control with such Person, where “Control” means (i) the possession, direct or indirect, of the power to direct or cause the direction of the management and policies of such Person but only if such power is exercised, or (ii) the possession by ownership, directly or indirectly, of fifty percent (50%) or more of the voting equity of such Person or, in the case of a non-corporate Person, equivalent interests. “Authorized User” means for the Firehorse App and Website, those employees and contractors as applicable, authorized by you or on your behalf to use the Firehorse App and Website in accordance with this Agreement and the applicable Order Form. “Governmental Authority” means any supranational, national, regional, state or local government, court, governmental agency, authority, board, bureau, instrumentality, or regulatory body. “Law” means any of the following, as they may be changed from time to time: (a) any federal, state, county, municipal statute, regulation, policy, by-law, ordinance or subordinate legislation in force from time to time (including treaties, multinational conventions and the like having the force of Law); (b) the common law and the law of equity; (c) any binding court order, judgment or decree; (d) any mandatory industry code or policy, and any standard enforceable by law; and (e) any applicable direction, policy, order or interpretation of law that is given by a Governmental Authority. “Losses” mean: (a) all losses, liabilities, and damages; (b) all related costs, expenses and other charges suffered or incurred as a result of or in connection with a Claim (including reasonable attorney fees, court costs and disbursements at trial an on any appeal); reasonable costs of investigation, litigation, settlement and judgment; and (c) any taxes, fines, interest and penalties with respect to any of the foregoing. “Person” means any person or entity, whether an individual, trustee, corporation, partnership, limited partnership, limited liability company, trust, unincorporated organization, business association, firm or joint venture. “Security Event” means an unauthorized breach of the Firehorse Platform or Infrastructure which leads to a disclosure or loss of Customer Data. “Website” means https://firehorseteam.com, including the “look and feel” of the website, and any content (other than Customer Data) displayed on or available through such website.

Get updates delivered

Sign up

Get updates delivered

Sign up

Get updates delivered

Sign up