Confidentiality Agreement

Last Updated: April 2026 · Version v2-2026-04

This Confidentiality Agreement ("Agreement") is entered into between Multraverse.ai ("Multraverse," "we," "us," or "our") and you, the client ("Client," "you," or "your"), as of the date you accept this Agreement during checkout.

This is a unilateral agreement setting out Multraverse's confidentiality obligations to you. It governs how Multraverse handles non-public information about your business that we learn while building, operating, or supporting your application or services. It does not impose reciprocal confidentiality obligations on you.

1. Definition of Confidential Information

"Confidential Information" means any non-public information about your business that we receive, observe, or generate while delivering services to you, including but not limited to:

• Internal operations, workflows, and business processes
• Customer and end-user lists, contact details, and behavior data
• Pricing, financials, revenue figures, and unit economics
• Strategy, roadmaps, marketing plans, and supplier relationships
• Proprietary content, branding assets, and source data
• Any data flowing through systems we build or manage on your behalf, including data processed by our platform infrastructure and integrated third-party services

2. Our Obligations

Multraverse agrees that we will not:

• Disclose, publish, or discuss your Confidential Information with any third party, except as permitted in Section 3
• Use your Confidential Information for any purpose other than delivering the services you've engaged us for
• Reference the inner workings of your business (including operations, customers, financials, processes, or strategy) in marketing, case studies, public talks, social media, or sales conversations without your prior written permission

We will protect your Confidential Information using measures that include encryption of data in transit (TLS/SSL) and at rest, access controls, and audit logging, consistent with the security commitments described in our Terms of Service. In no event will we use less than a reasonable standard of care.

3. Permitted Disclosures

This Agreement does not restrict disclosure of information that:

• You have given us written permission to share
• Is required to be disclosed by law, court order, subpoena, or valid legal process (we will, where legally permitted, give you reasonable notice so you can seek a protective order)
• Was already publicly known at the time we received it, or later becomes public through no fault of ours
• We can demonstrate we already knew before you disclosed it to us, free of any confidentiality obligation
• We independently developed without reference to your Confidential Information

Subprocessors and Service Providers. We may share Confidential Information with our staff, contractors, and subprocessors who need it to deliver the services and who are bound by confidentiality obligations at least as protective as this Agreement. As of the date of this Agreement, our primary subprocessors include:

• Stripe — payment processing and payouts
• Twilio — SMS and voice communications
• Resend — email delivery
• Supabase — database infrastructure and hosting
• AI service providers — for AI-powered features within your application (see Section 4)

We maintain a current list of subprocessors and will provide it upon request. We will notify you before adding any new subprocessor that will have access to your Confidential Information, giving you reasonable opportunity to object.

4. AI Processing

Certain features of the platform use artificial intelligence models to generate content, automate responses, or analyze data on your behalf. In connection with these features:

• Your Confidential Information (including business data, customer information, and operational details) may be submitted as input to AI models operated by third-party providers
• We select AI providers who commit to not training their models on customer inputs, and we will not knowingly use a provider that uses your data to train general-purpose models
• AI processing is performed solely to deliver the services you've engaged us for and is subject to the same confidentiality obligations as any other processing under this Agreement
• We do not retain AI inputs or outputs beyond what is necessary for service delivery, troubleshooting, and maintaining conversation context within your application

You acknowledge that AI-generated content may be inaccurate or incomplete, and that you are responsible for reviewing AI outputs before they are acted upon or sent to your end customers, as further described in our Terms of Service.

5. Breach Notification

If we discover or reasonably believe that a breach of security has resulted in unauthorized access to, disclosure of, or loss of your Confidential Information, we will:

• Notify you without unreasonable delay, and in no event later than seventy-two (72) hours after we become aware of the breach
• Provide a description of the nature of the breach, the categories of information affected, and the approximate number of records involved (to the extent known at the time of notification)
• Describe the measures we have taken or propose to take to address the breach and mitigate its effects
• Designate a contact person for ongoing communication about the incident

We will cooperate with you in investigating and responding to the breach, including by providing additional information as it becomes available and by supporting any notifications you are required to make to your customers or regulators.

6. Term and Survival

This Agreement takes effect on the date you accept it and continues for as long as Multraverse provides services to you.

Our confidentiality obligations survive termination of our engagement and continue for an additional five (5) years after the engagement ends. Trade secrets remain protected for as long as they qualify as trade secrets under applicable law.

7. No License Granted

Nothing in this Agreement grants Multraverse any ownership rights, license, or interest in your Confidential Information beyond the limited right to use it to perform the services. All Confidential Information remains your property.

8. Return or Deletion

Upon written request after our engagement ends, we will return or securely delete Confidential Information in our possession within thirty (30) days, except for:

• Copies retained in routine, encrypted backups that are subject to automatic deletion on a rolling schedule
• Records we are required to retain by law, regulation, or legitimate compliance obligations

Any retained copies remain subject to the confidentiality obligations in this Agreement until destroyed.

9. Name and Logo Usage

During the term of our engagement, we may wish to reference your business name and logo on our website, marketing materials, or sales conversations (for example, in a "trusted by" section or client list). Any such use is subject to the following:

• If you check the "Allow Multraverse to use my business name and logo" box during checkout, we may use your business name and logo for general marketing purposes without further permission
• This permission covers only your business name and logo. It does not extend to describing your internal operations, customers, financials, strategy, or any other Confidential Information
• You may revoke this permission at any time by notifying us in writing, and we will remove your name and logo from our materials within thirty (30) days
• If you do not opt in during checkout, we will not use your name or logo without separate written permission

10. Remedies

You acknowledge that any breach of this Agreement may cause harm that cannot be fully remedied by money damages, and that you may seek injunctive or equitable relief in addition to any other remedies available at law.

11. Governing Law

This Agreement is governed by the laws of the State of Hawaii, United States, without regard to its conflict-of-law principles, consistent with the governing law of our Terms of Service.

12. Relationship to Other Agreements

This Agreement is supplemental to and should be read alongside our Terms of Service and Privacy Policy, which are available at multraverse.ai. In the event of a conflict between this Agreement and the Terms of Service or Privacy Policy regarding confidentiality obligations, the more protective provision applies.

13. Acceptance

By checking the "I agree to the NDA" box during checkout, you confirm that you have read, understood, and agreed to be bound by this Agreement. We record the date and time of acceptance (UTC), the version of the NDA you accepted, your IP address, and your account identifier.

Contact

Questions about this Agreement? Contact us at multraverse.ai/contact.