TERMS OF SERVICE

• "Company", "we", "us" — Disqnect AS, org. nr. 932 953 005, registered in Oslo, Norway.
• "Customer", "you" — the natural or legal person purchasing or using the Product.
• "Consumer" — a Customer who is a natural person acting for purposes outside their trade, business, craft, or profession, as defined by Directive 2011/83/EU and Norwegian forbrukerkjøpsloven.
• "Business Customer" — a Customer acting in the exercise of their trade, business, craft, or profession.
• "Device" — the qEY cybersecurity research device.
• "Q" — the Q software platform operated by Disqnect.
• "Product" — the Device, Q, and any associated software, services, or documentation, collectively.

By purchasing, accessing, or using the Product, you agree to be bound by these Terms of Service ("Terms"), our Privacy Policy, and our Refund Policy, which are incorporated into these Terms by reference. If you do not agree, do not purchase or use the Product.

Nothing in these Terms affects your statutory rights as a Consumer under applicable mandatory consumer protection law, including Norwegian forbrukerkjøpsloven, angrerettloven, and EU Directives 2011/83/EU and 2019/771. Where these Terms conflict with mandatory consumer protection rules, the mandatory rules prevail.

The qEY is designed for:

• Authorised security testing and penetration testing
• Security research and education
• Network assessment with explicit written authorisation from the system owner
• Personal learning in controlled, isolated environments

YOU EXPRESSLY AGREE NOT TO USE THE DEVICE FOR:

• Any illegal activities under applicable law, including but not limited to Norwegian straffeloven §§ 201–204 (unauthorised access, data breach), EU NIS2 Directive (EU) 2022/2555, and equivalent local laws in your jurisdiction
• Unauthorised access to computer systems, networks, or data
• Surveillance, interception, or monitoring of communications without lawful authority
• Harassment, stalking, or invasion of privacy
• Testing on systems you do not own or lack explicit written permission to test
• Any activity that violates applicable local, national, or international law
• Any malicious or harmful purpose

Violation of these prohibitions may result in criminal and civil liability under applicable law.

The Product may:

• Cause interference with electronic devices or networks
• Trigger security alerts or defensive measures on target systems
• Cause unintended effects on systems under test
• Not function as expected in all environments

For Business Customers, to the maximum extent permitted by applicable law: the Product is provided "as is" without additional warranties beyond those required by Norwegian kjøpsloven. This does not exclude liability for defects caused by gross negligence or wilful misconduct.

To the maximum extent permitted by applicable law:

• Disqnect's total liability for any claim arising from or related to the Product shall not exceed the purchase price you paid for the Product
• Disqnect shall not be liable for indirect, incidental, special, consequential, or punitive damages, or loss of profits, revenue, data, or use

This limitation does not apply to: (a) liability for death or personal injury caused by negligence; (b) fraud or fraudulent misrepresentation; (c) liability that cannot be excluded or limited under applicable mandatory law, including Consumer statutory rights under forbrukerkjøpsloven; or (d) liability arising from gross negligence (grov uaktsomhet) or wilful misconduct (forsett).

Business Customers only: You agree to indemnify, defend, and hold harmless Disqnect from any third-party claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising from:

• Your use or misuse of the Product in breach of these Terms
• Your violation of applicable law or regulation
• Your infringement of any third-party rights

This section does not apply to Consumers. Indemnification obligations under this section do not apply to the extent the claim arises from Disqnect's own negligence, wilful misconduct, or breach of these Terms.

The Product contains capabilities that may be subject to export controls under:

• The Wassenaar Arrangement on Export Controls for Conventional Arms and Dual-Use Goods and Technologies
• EU Dual-Use Regulation (EU) 2021/821, including Annex I Categories 4 and 5, and the Article 5 cyber-surveillance catch-all
• Norwegian eksportkontrollloven (LOV-1987-12-18-93) and eksportkontrollforskriften (FOR-2013-06-19-718)

You agree not to export, re-export, transfer, or make available the Product, directly or indirectly, to any destination, end-user, or for any end-use prohibited or restricted under applicable export control laws without prior written authorisation from the relevant authorities. Prohibited destinations include, but are not limited to, countries subject to comprehensive EU or Norwegian sanctions.

By purchasing the Product, you represent and warrant that: (a) you are not located in, or a national or resident of, any country subject to comprehensive EU or Norwegian trade sanctions; (b) you are not on any applicable denied-party, sanctioned-entity, or restricted-party list; and (c) you will not use the Product for any end-use prohibited by applicable export control laws.

If you are a Consumer purchasing via our website (distance sale), you have the right to withdraw from the purchase within 14 days without giving any reason, in accordance with Norwegian angrerettloven §§ 20–28 and EU Directive 2011/83/EU.

The withdrawal period expires 14 days after the day on which you, or a third party designated by you (other than the carrier), physically receives the goods.

To exercise the right of withdrawal, you must inform us of your decision by an unequivocal statement (e.g., email to theis@disqnect.com). You may use the model withdrawal form below, but it is not obligatory.

If you withdraw, we will reimburse all payments received from you, including standard delivery costs, without undue delay and no later than 14 days from the day we are informed of your decision. You must return the goods without undue delay and no later than 14 days from the day you communicated your withdrawal. You bear the direct cost of returning the goods.

For full details, see our Refund Policy.

You are responsible for any personal data you collect, process, or store using the Device. You must ensure your data processing complies with GDPR, applicable national data protection laws, and any other relevant regulations. This includes obtaining lawful basis for processing and respecting data subject rights.

We reserve the right to:

• Suspend or terminate your access to Q or associated services if you breach these Terms
• Refuse service to anyone we reasonably believe is using the Product for prohibited purposes as described in Section 4
• Disable Device connectivity if required by law, court order, or regulatory authority

Termination of services does not affect your ownership of the Device hardware. Where we terminate for cause, we will provide reasonable notice where practicable. Your statutory rights as a Consumer are not affected by this section.

These Terms are governed by the laws of Norway.

Any disputes arising from or in connection with these Terms shall be submitted to Oslo tingrett (Oslo District Court) as the court of first instance.

Consumers in the EU/EEA: This choice of law and forum does not deprive you of the protection of the mandatory consumer protection rules of your country of habitual residence (Rome I Regulation Art. 6; Lugano Convention Arts. 15–17). You may bring proceedings in the courts of your country of domicile, and proceedings may only be brought against you in your country of domicile.

We may update these Terms from time to time. Material changes will be communicated via email to the address associated with your purchase, or by prominent notice on our website, at least 30 days before they take effect. Your continued use of the Product after the effective date constitutes acceptance of the updated Terms. If you do not agree, you may stop using the services (this does not affect your ownership of the Device hardware or your statutory rights).

These Terms, together with our Privacy Policy and Refund Policy, constitute the entire agreement between you and Disqnect regarding the Product. In the event of conflict between these documents, these Terms prevail, except where mandatory consumer protection law provides otherwise.