Version: 2.1 — Effective Date: November 2, 2026

This version supersedes version 2.0 of January 16, 2026.

These General Terms and Conditions (“T&Cs“) govern the access to and use of the Eventboost Services by professional clients and companies (“Client“, “Customer” or “Organiser“). Consumer use of the Services is not intended, except as required by applicable law.

1. Contracting Parties and Companies (“Contracting Entity”)

1.1 Contracting Entity.

The Contract is concluded with the Eventboost company indicated in the Order and/or on the invoice. In the absence of an indication, the following applies:

• Client based in Italy → Eventboost S.r.l.
• Customer based in Switzerland or other countries not listed here → Eventboost SA
• UK based customer → Eduversal Ltd
• Customer based in the USA (or order invoiced in the USA) → Eventboost Inc. (New York)

1.2 Group and subcontractors

The Contracting Entity may use companies of the Eventboost group and/or third-party suppliers to provide the Services, in compliance with contractual obligations and applicable legislation (including the rules on sub-processors in the DPA referred to in Article 12).

2. Definitions

2.1 “Services”: software services provided in SaaS mode, accessible via the web and intended for event management, including — by way of example — registrations, invitations and communications, ticketing (where applicable), check-in, badge printing, app/event engagement, reporting, integrations/APIs, and ancillary features.

2.2 “Order”: a commercial proposal, offer, purchase order, statement of work (SOW), or purchase confirmation, also online (click-through), that specifies duration, fees, metrics (e.g., number of events, users, contacts, email credits), forms, professional services, and special conditions.

2.3 “Authorized Users”: persons authorized by the Customer to access the Services (employees, collaborators, suppliers).

2.4 “Attendees” (also “Participants“): end users (guests/event registrants/attendees) managed by Customer through the Services.

2.5 “Customer Data” means data and content entered by the Customer or generated by the use of the Services, including Participant data processed on behalf of the Customer.

2.6 “Documentation”: manuals, knowledge base, help center, technical specifications/APIs and operational policies made available by Eventboost.

2.7 “Exportable Data”: input and output data, including metadata, directly or indirectly generated by the Customer’s use of the Services, excluding any assets or data of Eventboost or of third parties protected by intellectual property rights or constituting trade secrets (Article 2(38) of Regulation (EU) 2023/2854 – “Data Act”).

2.8 “AI Features”: features of the Services based on an artificial intelligence system within the meaning of Article 3(1) of Regulation (EU) 2024/1689 (“AI Act”), if and when made available.

3. Contractual structure and order of prevalence

3.1 The relationship between Eventboost and the Client (the “Agreement”)

It consists of:

(a) these T&Cs;

(b) one or more Orders;

(c) any attachments/SOWs/SLAs/support or security policies referenced in the Order;

(d) the privacy documentation and the DPA incorporated by reference (art. 12).

3.2 In the event of a conflict:

Order (for specific aspects) > Annexes/SOWs/SLAs > these T&Cs > Generic Site Documentation/policies, unless otherwise agreed in writing.

4. Subject matter and scope of the Services

4.1 Eventboost provides the Client with access to the Services within the limits of the purchased plan/modules and the metrics indicated in the Order.

4.2 The Services may include: (i) “single event” plans; (ii) subscriptions (typically annual); (iii) add-ons and professional services (support, on-site, RSVP management, setup, integrations).

4.3 Eventboost may make updates, patches, and evolutionary changes to the Services. If a modification substantially reduces a purchased feature, Eventboost will take reasonable steps (such as a workaround, equivalent functionality, or a commercial remedy) consistent with the plan and the Order.

5. Right of Use (SaaS License) and Restrictions

5.1 Eventboost grants the Client a non-exclusive, non-transferable right, limited to the duration of the Contract, to access and use the Services for internal event management purposes, subject to the limits of the Order.

5.2 It is prohibited, except within mandatory limits of law:

(a) reverse engineering or decompilation; (b) circumventing security measures; (c) unauthorized scraping; (d) resale, sublicense, or use as a “service bureau”; (e) use to develop competing products; (f) interfering with the integrity, availability, or security of the Services.

5.3 The Client is responsible for the use of the Services by the Authorized Users.

6. Account, Credentials, and Operational Security

6.1 The Customer must provide accurate account and billing information and keep it up to date.

6.2 The Customer must keep the credentials safe and take appropriate measures to prevent unauthorized access (including internal procedures, role management and, where available, MFA).

6.3 Eventboost is not liable for unauthorized access resulting from conduct or omissions attributable to the Customer or Authorized Users.

7. Customer’s obligations and lawful conduct

7.1 The Client guarantees that it has all rights, authorizations and legal bases to: import contacts, send communications, publish content, collect and process Participants’ data.

7.2 The Client is responsible for the event and the relationship with the Participants (including conditions of participation, access, on-site security, refunds and policies).

7.3 The Customer must not use the Services for illegal activities, spam, phishing, malware, infringement of the rights of third parties, or to process data in violation of applicable law.

7.4 Email tracking. As controller, the Customer is responsible for informing recipients and, where required, obtaining their consent to the use of tracking pixels or similar techniques in communications sent through the Services, in accordance with Article 122 of Italian Legislative Decree 196/2003, the Guidelines of the Italian Data Protection Authority (Garante per la protezione dei dati personali, decision no. 284 of 17 April 2026) or equivalent applicable law. Eventboost provides the features described in Annex E to the DPA, including individual tracking disabled in the absence of consent, an anonymous statistics mode and the option to opt out of tracking only. Before enabling tracking, the Customer completes the privacy settings of the Services for itself or for each End Client (Section 7.5); these settings constitute documented instructions under the DPA. Consent applies only to communications of the controller that collected it. For tracking purposes, event invitations and communications with promotional content are treated as promotional communications, and open data from service communications (e.g. registration confirmations, tickets, logistics updates) may not be used for promotional purposes (DPA, Annex E, Sections E4 and E6).

7.5 Agencies and End Clients. If the Customer uses the Services for events organised on behalf of its own client (“End Client”): (a) the Customer warrants that it is authorised to do so, including with regard to the engagement of Eventboost as sub-processor, and remains Eventboost’s sole contractual counterparty, including for fees; (b) the Customer specifies in the Services, for each event, the controller of the data; (c) End Client users to whom the Customer gives access to the Services are Authorized Users of the Customer under Section 5.3; (d) data protection is governed by Section 3.3 of the DPA, which sets out Eventboost’s only obligations towards the End Client.

8. Orders, metrics, extras, and additional services

8.1 The Services included are exclusively those indicated in the Order.

8.2 Add-ons, extra modules, professional services and changes requested thereafter are subject to an additional order or contractual supplement.

8.3 The Client agrees to comply with the metrics and limits of the plan (events, users, contacts, email credits, etc.). Any overages are handled in accordance with the provisions of the Order (e.g. the purchase of credits or upgrades).

9. Fees, invoicing, taxes and payment

9.1 The fees are those indicated in the Order and are net of VAT and applicable taxes.

9.2 Unless otherwise agreed, payment is made within 30 days of the invoice date.

9.3 If the date of the event is less than 30 days from the time of the subscription/acceptance of the Order, Eventboost may request payment, in whole or in part, before the date of the event.

9.4 In the event of a delay of more than 7 days, Eventboost may suspend the Services until regularization, except for further remedies (interest and/or compensation for damages within the limits of the law).

9.5 Discounts/promotions apply only to the existing Order and do not constitute a commitment for future offers.

10. Term, renewal and termination

10.1 Term.

The duration is that indicated in the Order.

10.2 Subscription Renewal.

Unless otherwise agreed, annual subscriptions are tacitly renewed for subsequent periods, unless cancelled in writing by the Customer at least 30 days before expiry.

10.3 “Individual Event” Services

Single-event services cease 15 days after the conclusion of the event or on the date indicated in the Order.

10.4 Changes to Renewal

Eventboost can update price lists and conditions for subsequent periods; the Renewal Order (express or tacit) and/or the applicable price list communicated with adequate notice is valid.

11. Data, post-event access and retention

11.1 Event Data Access (Single Event)

Unless otherwise agreed, for “single event” services, the event data and configurations remain available in the reserved backend for 12 months from the end of the event.

11.2 Post-Expiration Retention (Accounts/Events)

Without prejudice to privacy/DPA regulations, Eventboost retains information about the Client’s users and events for up to 6 months after the relationship (including the trial) expires to allow for any reactivation and export; after this period, the data may be deleted or made unavailable, except as required by legal obligations or for cyclical backups in accordance with the provisions of the DPA/Policy.

11.3 Export

During the Contract, the Customer may export the Exportable Data at any time in Excel format (.xlsx) using the standard features of the Services. The list of exportable data and their formats is published on the “Security” page (Section 11-bis.10). Except in the switching cases governed by Section 11-bis, the Customer is responsible for exporting/archiving its data within the applicable terms.

11-bis. Switching and portability (Regulation (EU) 2023/2854 – Data Act)

11-bis.1 Scope. This Section applies to Customers established in the European Union and, for the matters governed herein, prevails over the other provisions of these T&Cs. For services whose main features have been custom-built for an individual Customer and are not offered on a broad commercial scale, the regime provided for in Article 31 of the Data Act applies.

11-bis.2 Request. The Customer may request to switch to another provider of data processing services or to its own on-premises infrastructure, or to have its Exportable Data erased, by written notice to privacy@eventboost.com. The notice period is two months; at its end the transition period begins.

11-bis.3 Transition period. During a transition period of 30 days, Eventboost: (a) provides reasonable assistance to the Customer and to third parties authorised by it; (b) acts with due care to maintain business continuity and continue the provision of the Services; (c) provides clear information on known risks to continuity of service; (d) maintains a high level of security throughout the process, in particular for data in transit.

11-bis.4 Technical unfeasibility and extension. If the 30-day period is technically unfeasible, Eventboost notifies the Customer within 14 working days of the request, giving reasons and indicating an alternative transition period of no more than 7 months, during which continuity of service is ensured. The Customer may extend the transition period once, for the period it considers more appropriate.

11-bis.5 Exportable data. At least the following are exportable: Participants’ personal and registration data, form responses, invitee lists, check-in and attendance status, communications sent and their delivery outcome, reports, including email campaign reports within the limits permitted by Annex E to the DPA, and content uploaded by the Customer. Data are exported in Excel format (.xlsx) and uploaded content in its original format, downloadable from the dedicated section of the Services, as set out in the register published on the “Security” page. Event configurations (e.g. settings, page and badge layouts, sending rules) are specific to the Services and are not exportable; the Participant information they contain, such as form questions, is included in the exports. Data specific to the internal functioning of the Services whose export would expose Eventboost to a risk of breach of its trade secrets (e.g. source code, algorithms, security configurations, internal system logs) are excluded.

11-bis.6 Data retrieval period and erasure. At the end of the transition period, the Customer has at least 30 days to retrieve the Exportable Data. After that period, Eventboost erases all Exportable Data and digital assets generated directly by the Customer, in accordance with Section 11.3 of the DPA.

11-bis.7 Termination. The Contract, or the relevant part of it, terminates, and the Customer is notified accordingly: (i) upon successful completion of the switching; or (ii) at the end of the notice period, if the Customer does not wish to switch but requests the erasure of its data.

11-bis.8 Charges. Eventboost does not apply switching charges or data export charges. Standard fees for the Services provided during the notice period and the transition period remain due.

11-bis.9 Early termination. If switching results in the termination of a subscription before its expiry, the fees due until the end of the current annual contract period remain payable as an early termination penalty. The Parties acknowledge that this amount is proportionate to the agreed term commitment and does not constitute a switching charge.

11-bis.10 Exit strategy and information. Eventboost supports the Customer’s exit strategy by providing the relevant information. Procedures, formats, known technical limitations and the register of data structures, as well as information on the jurisdiction of the infrastructure and on the measures against international governmental access, are published on the “Security” page (https://eventboost.com/security-safety/).

12. Processing of Personal Data (GDPR/UK/Switzerland) — Privacy and DPA Incorporated

12.1 Roles

With reference to the data of the Participants processed for the organization of the Client’s events, the Client is the Data Controller, and Eventboost operates as a Data Processor pursuant to Article 28 GDPR, within the limits of the Client’s instructions and the Contract. For events organised on behalf of an End Client, the End Client is the controller, the Client the processor and Eventboost a sub-processor, in accordance with Section 7.5 and Section 3.3 of the DPA.

12.2 DPA/Addendum

The processing conditions, including security measures (Art. 32 GDPR), breach management (Art. 33–34 GDPR), sub-processors, audits, support and transfers, are governed by the Personal Data Processing Addendum (DPA) published by Eventboost, which is incorporated into the Contract by reference in the version published on the date the Order is accepted. Previous versions are archived and available on request.

12-bis. AI Features

12-bis.1 As at the date of this version, the Services do not include AI Features. Eventboost may introduce them by informing the Customer; unless otherwise stated in the Order, their activation is optional and configurable by the Customer.

12-bis.2 Roles. For AI Features, Eventboost acts as provider and the Customer, which uses them in its events, as deployer within the meaning of the AI Act. Eventboost designs AI Features so that people are informed when they interact with an AI system and that generated content is marked where required by Article 50 of the AI Act. The Customer remains responsible for its obligations as deployer, including transparency on generated or manipulated content it publishes.

12-bis.3 Nature of outputs. Outputs of AI Features (e.g. matchmaking suggestions, generated text, summaries) are for support purposes, may contain errors and must be checked by the Customer before use. Eventboost does not warrant their accuracy, completeness or fitness for a particular purpose.

12-bis.4 Prohibited uses. The Customer must not use AI Features for practices prohibited by Article 5 of the AI Act or, without a specific written agreement, for purposes that would make the system high-risk under Annex III of the AI Act (e.g. selection or assessment of candidates or workers, access to education).

12-bis.5 Data. Eventboost does not use Customer Data to train or improve AI models, its own or third parties’, without the Customer’s written instruction. Model providers that process Customer Data are sub-processors under the DPA.

12.3 Privacy Policy

For the processing in which Eventboost operates as a Data Controller (e.g. account, billing, support, security, relationship management), Eventboost’s Privacy Policy applies.

12.4 UK & Switzerland

Where applicable, the parties undertake to comply with the UK GDPR/Data Protection Act 2018 and the Swiss Federal Data Protection Act (FADP/nFADP), as required by the DPA and applicable law.

12.5 International transfers

Eventboost adopts the safeguards provided for by applicable law (adequacy decisions, SCCs and the UK Addendum, or other suitable bases) as governed by the DPA.

13. Security and continuity of the Service

13.1 Eventboost takes technical and organizational measures appropriate to the nature of the Services and the risks, as described in the DPA and privacy documentation.

13.2 The Customer acknowledges that security also depends on the configurations, roles and behaviors of its Authorized Users.

13.3 Eventboost informs the Customer of significant security incidents affecting the availability, integrity or confidentiality of the Services, even where they do not involve a personal data breach, in accordance with Section 7.3 of the DPA.

14. Third-Party Services and Integrations

14.1 The Services may integrate or interoperate with third-party services (e.g. email providers, CRM, payments). Use of such services is subject to the third party’s terms.

14.2 Eventboost is not responsible for inefficiencies attributable to third parties beyond its reasonable control.

14-bis. Hosted content, notices and points of contact (Regulation (EU) 2022/2065 – DSA)

14-bis.1 Prohibited content. The Customer, Authorized Users and Participants must not publish through the Services content that is illegal or contrary to these T&Cs, including content infringing intellectual property rights, defamatory, discriminatory or hateful content, malware or phishing, and personal data of third parties without a legal basis.

14-bis.2 Notices. Anyone may report content they consider illegal by email to privacy@eventboost.com, with the subject line “Illegal content notice”, stating the reasons, the exact URL of the content, their name and email address (except where the law provides otherwise) and a statement of good faith.

14-bis.3 Decisions. Eventboost handles notices in a timely, diligent, non-arbitrary and objective manner. It may remove or disable access to content, or suspend an account, providing a clear statement of reasons to the Customer and, where applicable, to the author of the content, together with the available means of redress. The removal of illegal content does not constitute a breach by Eventboost.

14-bis.4 Points of contact. For Member State authorities, the European Commission and the European Board for Digital Services, and for recipients of the Services: privacy@eventboost.com. Languages: Italian and English.

14-bis.5 The Customer remains responsible for the content of its events and indemnifies Eventboost under Section 22.1.

15. Ticketing and payments (if applicable)

15.1 If the Customer uses the ticketing/payment functionality, the Order and/or the specific module define fees, flows, providers, and responsibilities.

15.2 Unless Eventboost is expressly designated in the Order as the merchant of record, Eventboost operates as a technology provider; the Client remains liable to the Participants for: prices, terms of sale, refunds, chargebacks, complaints, taxation, and compliance.

15.3 Eventboost may apply service fees to ticketing as indicated in the Order or in the price list referenced in the Order.

15.4 Accessibility. Upon request, Eventboost provides the available information on the accessibility of registration and payment pages against the requirements of standard EN 301 549, which refers to WCAG 2.1 level AA, including any known non-conformities. Where the Customer offers e-commerce services to consumers through the Services, it remains the service provider under Directive (EU) 2019/882 and the applicable national implementing legislation (in Italy, Legislative Decree 82/2022), and is responsible for the related accessibility statement.

16. Confidentiality

16.1 The information exchanged between the parties regarding the Contract is confidential and may not be disclosed to third parties without written consent, except when necessary for performance (tied subcontractors) or as required by law or authority.

16.2 Confidentiality obligations survive for 5 years from termination (or for the maximum permitted duration where required).

17. Intellectual Property

17.1 Eventboost retains all rights to the platform, software, trademarks, documentation and know-how.

17.2 The Customer retains all rights to its content and Customer Data.

17.3 The Client grants Eventboost a limited license to host and process Customer Data solely to provide the Services and to comply with legal obligations.

18. Support, Professional and Onsite Services

18.1 Any support packages, including hours, SLAs, professional and on-site services are governed by the Order or SOW.

18.2 Unless otherwise specified, services not included are invoiced on a final basis or according to the rates indicated in the Order/SOW.

19. Suspension of Service

19.1 Eventboost may suspend or restrict access (even partially) in the event of:

(a) arrears (art. 9); (b) unlawful use or material violation of the T&Cs; (c) security/abuse risk; (d) order of the Authority.

19.2 Where reasonably possible, Eventboost will notify you and indicate corrective measures.

20. Warranties

20.1 Eventboost undertakes to provide the Services with reasonable professional diligence, according to market standards for SaaS services.

20.2 Unless required by law, the Services are provided “as is/as available” and Eventboost does not guarantee the total absence of errors or specific results.

21. Liability and limitation

21.1 Eventboost’s overall liability for direct damages arising from the Contract is limited to the total amount paid by the Client for the Services subject to the claim (or to any other cap indicated in the Order), except for willful misconduct/gross negligence and liability not limited by law.

21.2 To the extent permitted, indirect or consequential damages (loss of profit, loss of opportunity, goodwill) are excluded, unless mandatory.

21.3 For UK: Nothing limits non-excludable liability (e.g. fraud, death/injury from negligence).

21.4 Nothing in the Contract limits or excludes Eventboost’s liability towards an injured person under the legislation implementing Directive (EU) 2024/2853 on liability for defective products. As between the Parties, where the damage is attributable to the Customer’s content, configurations, integrations or instructions, the Customer indemnifies Eventboost, without prejudice to any right of recourse provided by law.

22. Indemnity

22.1 Indemnification of the Client

The Client indemnifies Eventboost against third-party claims (including those from Participants) arising from: Client content, infringement of third-party rights, data processing and marketing activities carried out by the Client as Controller, ticket sales and refund conditions, event management, and use of the Services in breach of Sections 7.4, 7.5, 12-bis and 14-bis, including claims by End Clients.

22.2 Eventboost IP Indemnification

Eventboost indemnifies the Client against third-party claims alleging infringement of IP rights in the Services, except for the following exclusions: non-compliant use, unauthorized combinations or modifications, and third-party components not provided by Eventboost.

23. Non-renewal and termination

23.1 Termination upon expiry

The Customer may prevent the renewal under the terms of art. 10.2.

23.2 Termination for Breach

Each party may terminate in the event of a material breach that has not been remedied within 15 days of a written warning (or a different term if not remediable).

23.3 Immediate Termination

Eventboost may terminate with immediate effect in the event of: serious breach of security/abuse, wrongdoing, repeated arrears, or insolvency proceedings by the Client.

23.4 Effects

On termination: rights of use cease; accrued amounts remain due; retention/export (art. 11), switching (art. 11-bis) and DPA (art. 12) apply; clauses survive by their nature (IP, confidentiality, limitations, law/forum, etc.).

24. Force Majeure

No party is responsible for delays or non-compliance due to events beyond reasonable control (such as generalized blackouts, natural events, government measures, conflicts, and pandemics), subject to the obligation to mitigate.

25. Compliance (exports, sanctions, anti-corruption)

The Customer undertakes not to use the Services in violation of applicable export control, international sanctions, or anti-corruption laws.

26. Notices

Formal communications are sent to the addresses indicated in the Order or in the Client’s account, by email and/or certified email or registered mail, where applicable; operational communications can be sent via email or in-app.

27. Assignment

The Client may not assign the Agreement without Eventboost’s written consent. Eventboost may assign the Agreement in connection with reorganizations, mergers, or transfers of companies, ensuring the continuity of essential obligations.

28. Changes to the T&Cs

Eventboost may update the T&Cs for legal, technical, security, or Service evolution reasons. Each version is identified by a number and an effective date and is archived; the Customer may request the version applicable to its Order. For material changes, Eventboost will provide reasonable notice (via email or in-platform notification). Your continued use of the Services after the modifications become effective constitutes your acceptance, subject to mandatory remedies.

29. Governing Law and Jurisdiction

Unless otherwise provided for in the Order, the law and the court depend on the Contracting Entity:

• Eventboost S.r.l. (Italy): Italian law; exclusive court of Milan.
• Eventboost SA (Switzerland): Swiss law; exclusive jurisdiction of Lugano.
• Eduversal Ltd (UK): law of England and Wales; exclusive jurisdiction of London.
• Eventboost Inc. (NY, USA): New York State law; exclusive jurisdiction of New York County, NY.

30. Final clauses

30.1 Entire Agreement

The Contract replaces previous understandings on the same subject.

30.2 Severability

The nullity/ineffectiveness of a clause does not affect the remaining clauses.

30.3 Language

In the case of translations, the version indicated as prevailing on the site or in the Order shall prevail.

ITALY ADDENDUM — Eventboost S.r.l.

Scope. This Addendum Italia applies only when the Contracting Entity is Eventboost S.r.l. In the event of a conflict with the Master Terms, this Addendum shall prevail to the extent of the matters herein.

1) Payments, invoicing and late payment (business-to-business relations)

1. Payment terms. Unless otherwise agreed in the Order, invoices are payable within 30 (thirty) days of the invoice date.

2. Event within 30 days. If the event date is less than 30 days from the acceptance of the Order, Eventboost may request payment in whole or in part before the event date, subject to the terms indicated in the Order and/or on the invoice.

3. Suspension for delay. In the event of a payment delay exceeding 7 (seven) days, Eventboost may suspend all or part of the provision of the Services until the full balance is paid, without prejudice to the right to terminate the Contract in the cases provided for (see art. 2).

4. Default interest and recovery costs (B2B). In relations between companies and/or professionals, in the event of late payments, the provisions of Legislative Decree 231/2002 on late payments in commercial transactions shall apply, where and to the extent applicable, including the following:

• the automatic application of default interest from the due date without the need for formal notice, and
• Eventboost’s right to reimbursement of recovery costs (including, where applicable, the minimum lump sum required by law and any additional costs reasonably incurred), to the extent permitted.

This is without prejudice to any further remedies provided by law and/or the Order.

5. Exceptions and different agreements. Any other agreement on payment terms, advances, milestones or special conditions must result from the Order.

2) Express termination clause (Article 1456 of the Italian Civil Code)

Pursuant to and for the purposes of art. 1456 of the Italian Civil Code., Eventboost may terminate the Contract by simple written notice to the Client if the Client:

(a) fails to fulfil the payment obligations within the established terms and the default remains beyond the tolerance terms indicated in the Order and/or in the Master Terms; and/or

(b) seriously violates use restrictions (e.g., unlawful use, compromise of security, abuse/spam, unauthorized access, scraping, unauthorized resale); and/or

(c) seriously breaches data protection obligations and/or instructions applicable to processing under the DPA.

The right to compensation for damages within the limits of the law and the provisions on the limitation of liability remain unaffected.

3) Electronic invoicing (SDI) and necessary data

1. Obligation and methods. If the Customer is subject to the obligation to issue electronic invoices in Italy, Eventboost will issue an electronic invoice through the Exchange System (SDI) in accordance with applicable regulations.

2. Necessary data. The Client undertakes to provide promptly and correctly, also for SDI purposes, at least the following data (where applicable):

• Company name, registered office, VAT number and/or Tax Code;
• SDI Recipient Code (7 characters) and/or PEC for receiving electronic invoices;
• any additional information required by law (e.g. VAT regime, CIG/CUP references if applicable, order/order references).

3. Customer’s Responsibilities. The Customer is responsible for the accuracy of the data provided. Eventboost is not liable for delays or the inability to deliver the electronic invoice due to incorrect or incomplete data communicated by the Customer. Any reversal, reissue, or correction activities may require technical time and, where appropriate, reasonable administrative costs.

4) Formal communications and PEC

Where applicable, formal notices may also be sent by certified email to the addresses indicated in the Order or in the Client’s account, in addition to the methods provided for in the Master Terms.

5) Liability and mandatory rules

Nothing in the Agreement limits liability in cases where the limitation or exclusion is not permitted by mandatory statutory provisions. The limitations of liability provided for in the Master Terms apply within the maximum limits allowed by Italian law (including what may be relevant pursuant to Article 1229 of the Italian Civil Code).

6) Applicable law and jurisdiction

The Contract is governed by Italian law and, for any dispute, the Court of Milan has exclusive jurisdiction, as provided for by the Master Terms, except for mandatory jurisdiction.

US ADDENDUM — Eventboost Inc. (New York City)

Effective Date: November 2, 2026

Applicability. This US Addendum applies only if the Contracting Entity is Eventboost Inc. and/or the Order is invoiced by Eventboost Inc. In the event of a conflict between this US Addendum and the Master Terms, this US Addendum will control for US Customers.

1. US Compliance; Customer Responsibilities

1.1 Customer compliance. Customer is solely responsible for complying with all applicable federal, state, and local laws and regulations relating to its events and its use of the Services, including (as applicable) ticket sales terms, refunds and chargebacks, tax collection and remittance, consumer disclosures, marketing and email/SMS rules, accessibility, and venue safety.

1.2 Attendee relationship. Unless Eventboost is expressly designated as the merchant of record in the Order, Customer is the seller/organizer of record and remains responsible for its relationship with Attendees and for all claims arising from the event, ticketing, refunds, or chargebacks.

2. Third-Party Services; Payment Processing

2.1 Third-party terms. The Services may interoperate with third-party services (e.g., payment processors, email providers, streaming, CRMs). Customers’ use of any third-party service is subject to that provider’s terms and policies.

2.2 Payment processors. If payment/ticketing is enabled, payment processing is provided by third-party processors. Customer must comply with the processor terms and applicable card network rules; Eventboost is not responsible for processor downtime, chargeback decisions, or card network actions.

3. DISCLAIMERS (US Drafting)

3.1 DISCLAIMER OF WARRANTIES. EXCEPT AS EXPRESSLY STATED IN THE AGREEMENT, THE SERVICES ARE PROVIDED “AS IS” AND “AS AVAILABLE”. EVENTBOOST DISCLAIMS ALL WARRANTIES, WHETHER EXPRESS, IMPLIED, STATUTORY, OR OTHERWISE, INCLUDING ANY IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, TITLE, NON-INFRINGEMENT, AND ANY WARRANTIES ARISING FROM COURSE OF DEALING OR USAGE OF TRADE.

3.2 No guarantee of outcomes. Eventboost does not warrant that the Services will be uninterrupted or error-free, or that any outputs (including analytics, recommendations, matching, insights, automations) will be accurate, complete, or fit for Customer’s purposes.

4. LIMITATION OF LIABILITY

4.1 EXCLUSION OF CERTAIN DAMAGES. TO THE MAXIMUM EXTENT PERMITTED BY LAW, IN NO EVENT WILL EVENTBOOST BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES, OR FOR ANY LOSS OF PROFITS, REVENUE, BUSINESS, GOODWILL, OR DATA, EVEN IF EVENTBOOST HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES.

4.2 CAP ON LIABILITY. TO THE MAXIMUM EXTENT PERMITTED BY LAW, EVENTBOOST’S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATING TO THE AGREEMENT WILL NOT EXCEED THE AMOUNTS PAID BY CUSTOMER TO EVENTBOOST FOR THE SERVICES GIVING RISE TO THE CLAIM DURING THE TWELVE (12) MONTHS IMMEDIATELY PRECEDING THE EVENT FIRST GIVING RISE TO LIABILITY (OR ANY DIFFERENT CAP EXPRESSLY SET OUT IN THE ORDER).

4.3 Essential basis. Customer acknowledges that the fees reflect the allocation of risk set forth in the Agreement, and that the limitations in this Section form an essential basis of the bargain.

5. Time Limit to Bring Claims

To the maximum extent permitted by law, any claim arising out of or relating to the Agreement must be brought within one (1) year after the cause of action accrued; otherwise, it is permanently barred.

6. Indemnification (US Procedure)

6.1 Customer indemnity. Customer will defend, indemnify, and hold harmless Eventboost, its affiliates, and their respective officers, directors, employees, and agents from and against any third-party claims, demands, actions, damages, liabilities, losses, costs, and expenses (including reasonable attorneys’ fees) arising out of or relating to:

(a) Customer’s events, ticket sales, refunds, chargebacks, taxes, or consumer disclosures;

(b) Customer content or materials, including alleged infringement or misappropriation;

(c) Customer’s violation of law or third-party rights;

(d) Customer’s collection or processing of personal data as controller/business (including failure to provide notices or obtain consents required by applicable law); or

(e) Customer’s use of the Services in violation of the Agreement.

6.2 Process. The indemnified party will: (i) promptly notify the indemnifying party of the claim; (ii) allow the indemnifying party to control the defense and settlement (provided no settlement admits wrongdoing or imposes obligations on the indemnified party without its prior written consent); and (iii) provide reasonable cooperation at the indemnifying party’s expense.

7. CLASS ACTION WAIVER; JURY TRIAL WAIVER

7.1 CLASS ACTION WAIVER. TO THE MAXIMUM EXTENT PERMITTED BY LAW, EACH PARTY AGREES THAT ANY DISPUTE, CLAIM, OR CONTROVERSY ARISING OUT OF OR RELATING TO THE AGREEMENT WILL BE BROUGHT ONLY IN THAT PARTY’S INDIVIDUAL CAPACITY AND NOT AS A PLAINTIFF OR CLASS MEMBER IN ANY PURPORTED CLASS, COLLECTIVE, CONSOLIDATED, OR REPRESENTATIVE PROCEEDING.

7.2 JURY TRIAL WAIVER. TO THE MAXIMUM EXTENT PERMITTED BY LAW, EACH PARTY KNOWINGLY, VOLUNTARILY, AND IRREVOCABLY WAIVES ANY RIGHT TO A TRIAL BY JURY IN ANY ACTION OR PROCEEDING ARISING OUT OF OR RELATING TO THE AGREEMENT.

8. Governing Law; Venue (New York)

This US Addendum and any dispute arising out of or relating to the Agreement will be governed by the laws of the State of New York, without regard to conflict-of-laws principles. Subject to Section 7 above, the parties submit to the exclusive jurisdiction and venue of the state and federal courts located in New York County, New York.

9. Privacy and Data Protection (US Overlay)

Where US privacy laws apply, Customer remains responsible for providing legally required notices and obtaining legally required consents for its Attendees and communications. Eventboost’s roles as Processor for Attendee data (under the DPA incorporated in the Master Terms) and as Controller for account/billing/support data (under the Privacy Notice) remain unchanged.

10. SMS Program

Text messages sent to Attendees through the Services by Eventboost Inc. on behalf of Customers are governed by the SMS Terms and Conditions published at https://eventboost.com/sms-terms-conditions/. Customer is responsible for obtaining recipients’ prior express consent where required by applicable law (including the Telephone Consumer Protection Act) and carrier rules, for honoring opt-out requests and for the content of its messages. Mobile opt-in data and consent are not shared with third parties for marketing purposes.

UK / Switzerland – Eventboost SA (CH), Eduversal Ltd (UK)

Effective Date: November 2, 2026

Applicability. This Addendum applies where the Contracting Entity is Eduversal Ltd (UK) and/or Eventboost SA (Switzerland). In the event of a conflict, this Addendum prevails over the Master Terms for those entities.

1. UK carve-outs and statutory rights

1.1 Non-excludable liability (UK). Nothing in the Agreement limits or excludes liability for: (a) death or personal injury caused by negligence; (b) fraud or fraudulent misrepresentation; or (c) any other liability that cannot lawfully be limited or excluded.

1.2 Reasonableness (UK). Any limitation or exclusion of liability is intended to apply only to the extent permitted under applicable law (including the Unfair Contract Terms Act 1977, where applicable), and shall be interpreted accordingly.

2. Warranties and “reasonable endeavours”

2.1 Standard of care (UK). Eventboost will perform the Services with reasonable skill and care consistent with industry standards for SaaS services.

2.2 No absolute uptime promise unless agreed. Any uptime/SLA commitments apply only if expressly set out in the Order or a dedicated SLA policy; otherwise Eventboost will use reasonable endeavours to maintain availability.

3. Liability framework (UK/CH)

3.1 Excluded losses. Subject to Section 1.1 above and to the extent permitted by law, Eventboost will not be liable for: loss of profit, loss of revenue, loss of business opportunity, loss of goodwill, or indirect/consequential losses.

3.2 Cap. Subject to Section 1.1 above, Eventboost’s total aggregate liability arising out of or relating to the Agreement shall not exceed the amounts paid by Customer for the Services giving rise to the claim during the twelve (12) months preceding the event first giving rise to liability (or any different cap stated in the Order).

3.3 Swiss note. Under Swiss law, liability limitations do not apply in cases of unlawful intent or gross negligence, where such limitations are not permitted; this Agreement is to be construed in accordance with applicable Swiss mandatory rules.

4. Suspension and termination — operational alignment

4.1 Non-payment. Where payment is overdue by more than 7 days, Eventboost may suspend the Services (fully or partially) after giving notice where reasonably practicable, and reinstate upon payment.

4.2 Event timing (<30 days). Where the event date is less than 30 days from Order acceptance, Eventboost may require advance payment (in whole or in part) as stated in the Order; failure to pay may result in suspension and/or termination for cause.

5. Data protection specifics (UK GDPR / Swiss nFADP)

5.1 UK GDPR. Where UK GDPR applies, the DPA is deemed to include any UK-specific required terms, including international transfer mechanisms such as the UK Addendum to the EU SCCs or the UK IDTA, as applicable (as implemented in the DPA).

5.2 Switzerland (nFADP). Where Swiss data protection law applies, the DPA and security measures shall be interpreted to meet Swiss requirements (including transparency, data security and cross-border safeguards), as implemented in the DPA.

5.3 International transfers. Transfers outside the UK/EEA/Switzerland will be subject to the safeguards and contractual mechanisms described in the DPA (EU SCCs, UK addendum/IDTA, and any Swiss addendum language where required).

5.4 Complaints (UK). Where Eduversal Ltd acts as controller (for example, for account, billing and support data), data subjects may submit data protection complaints to privacy@eventboost.com. Eduversal Ltd acknowledges each complaint within 30 days of receipt, takes appropriate steps to respond without undue delay and informs the complainant of the outcome, in accordance with section 164A of the Data Protection Act 2018. Data subjects may also lodge a complaint with the Information Commissioner’s Office. Where Eduversal Ltd acts as processor, complaints are forwarded to the Customer in accordance with the DPA.

6. Confidentiality — equitable relief

Eventboost may seek injunctive or equitable relief (in addition to other remedies) for threatened or actual breaches of confidentiality or misuse of intellectual property, where available under applicable law.

7. Governing law and jurisdiction (confirmations)

7.1 UK. If the Contracting Entity is Eduversal Ltd, the Agreement is governed by the laws of England and Wales and the courts of London have exclusive jurisdiction (subject to non-excludable statutory rights).

7.2 Switzerland. If the Contracting Entity is Eventboost SA, the Agreement is governed by Swiss law and the courts specified in the Master Terms (e.g., Lugano) have exclusive jurisdiction.