General Terms of Use

These terms replace the THINKEO General Terms of Use dated 22 April 2025.

1. Who we are

These Terms are entered into between cobl AI, a French simplified joint-stock company (société par actions simplifiée) with a share capital of 130,751 euros, registered under number 883 208 142 with the Bordeaux Trade and Companies Register (transfer to the Paris register in progress), with its registered office at 34 bis rue Vignon, 75009 Paris, France, and the client defined in section 2 (the "Client").

cobl AI, formerly named THINKEO, can be reached at:

• postal address: 34 bis rue Vignon, 75009 Paris, France
• email: contact@cobl.ai
• security vulnerability reports: security@cobl.ai

VAT number: FR83 883 208 142. President and publication director: Damien Hontang.

2. Definitions

Capitalised terms have the following meaning.

Agent: the conversational program run by cobl AI that interprets the User's requests, loads Skills and calls Tools to produce Documents inside a Project.

Sub-agent: a program derived from the Agent that carries out a delegated task. Some Sub-agents run without a direct request from the User, within the limits of section 6.5.

Tool: a single function the Agent can call. The list of Tools is fixed and closed. It is described in Schedule 4.

Skill: a set of instruction files and resources describing a piece of know-how, which the Agent loads on demand. Skills combine with each other and resolve in cascade across the Scopes defined below.

Use case: a business Skill matching a type of deliverable (sales proposal, RFP response, technical memo, security questionnaire, opportunity note, go/no-go analysis, bid evaluation, buyer-side analysis).

Design system: a Skill describing the layout, brand and templates applied to Documents.

Drive: the unified file space made available to the Client and to the Agent, organised into four Scopes.

Scope: the level at which a file or a Skill resolves in the Drive: system (know-how supplied by cobl AI), organisation, user, project. A more specific Scope overrides a more general one.

Organisation: the entity created on sign-up, to which Users, Projects, the Drive and Credits are attached. The Organisation is the boundary within which data is kept separate.

Project: a workspace holding Conversations, files and Documents. A Project usually matches a deal, an account or a tender.

Conversation: a series of exchanges between a User and the Agent. A Project can hold several Conversations.

Document: a page or set of self-contained pages produced by the Agent inside a Project, kept in the Project's versioned repository with its history.

Publication: the fixed visual rendering of a Document, available read-only through a link, under section 6.8.

Client Content: anything supplied by the Client or its Users, or pulled in from a Connector at their request: imported documents, data, instructions, and Skills specific to the Organisation or the User.

Connector: an integration with one of the Client's third-party tools (email, calendar, CRM, storage, video conferencing), switched on by a User and exposed to the Agent through an integration gateway.

Sandbox: the isolated, short-lived environment in which the Agent runs commands, sized according to Schedule 4.

Model: a language model or embedding model called by the Platform, directly or through a gateway. The list appears in Schedule 4.

Platform: the online service available at https://cobl.ai and https://app.cobl.ai, published and operated by cobl AI.

Services: all the features made available through the Platform.

Credit: the unit used to measure use of the Services. The counting rules are set out in section 8.

Pro Plan: a subscription taken out directly on the Platform, based on a monthly Credit package, at the public prices shown at https://cobl.ai/pricing.

Enterprise Plan: a subscription based on a Quote, which may include adjusted volumes, deployment options, federated authentication, a higher service level and specific contract terms.

Trial: the free use period set out in section 8.3.

User: a natural person authorised by the Client to access the Platform.

3. Purpose

cobl AI publishes and operates a Platform on which an Agent, equipped with Tools, Skills and a Drive, helps the Client's sales teams run their deals: reading incoming documents, producing the deliverables their customers expect, and handling the follow-up and actions that go with them.

The features and technical characteristics of the Services are described on the Platform.

These Terms set out how the Services may be used, and the rights and obligations of both parties.

They may be supplemented by specific terms for optional Services, in particular support, training or dedicated deployment. Those Services are covered by a separate Quote, which prevails over these Terms in the event of conflict.

Deploying the Platform on dedicated infrastructure, in a private cloud or on premise, is available on the Enterprise Plan only and is covered by a separate agreement.

4. Access to the Services

4.1 Legal capacity

The Services are available to any natural person with full legal capacity to enter into these Terms, and to any legal entity acting through a natural person with the capacity to contract on its behalf.

4.2 Professional use only

The Services are intended for professionals only, meaning any natural or legal person carrying out a paid activity on a regular basis.

5. Accepting these Terms

5.1 Pro Plan

The Client accepts these Terms by ticking the box provided during sign-up on the Platform. Without full acceptance, the Client cannot access the Services.

The box links to the version of these Terms published at https://cobl.ai/legal/general-terms-of-use. The version that applies is the one in force on the date of acceptance.

5.2 Enterprise Plan

A Quote is drawn up based on the Client's needs. The Client accepts it in writing, including by email, within one month of issue. Signing the Quote means accepting the Terms in force on its date.

The Quote may be followed by purchase orders validated by cobl AI. Any purchase order issued within two months on the basis of the Quote and validated by cobl AI means accepting the Terms in force on its date of issue.

In the event of conflict, the Quote prevails over these Terms and over purchase orders. The most recent Quote prevails over earlier ones.

6. The Services

6.1 Sign-up, Organisation and roles

Signing up creates an Organisation in the Client's name. The Client can then create access for its Users.

Two roles are available:

• Owner or administrator: manages the Organisation, invitations, roles, the Drive, Connectors, the subscription and the usage settings.
• Member: works with the Agent inside the Projects they have access to, without access to the administration of the Organisation's Drive.

The Client alone is responsible for creating access, for setting permissions and for how its Users use the Services. The email address given at sign-up is the login identifier. The Client warrants that the information provided is accurate and undertakes to keep it up to date.

The Client is responsible for keeping login credentials and passwords confidential. Any access made using them is deemed to have been made by the Client. The Client informs cobl AI without delay if it notices unauthorised access.

Authentication uses an email address and password, or a third-party identity provider. Enterprise federated authentication (SAML, OIDC) is reserved for the Enterprise Plan and offered on a case-by-case basis.

6.2 The Agent and its Tools

The Agent has a fixed, closed list of Tools, described in Schedule 4. It has no capability outside that list.

Every Tool call is checked against a strict schema before it runs. File paths are controlled to prevent any access outside the authorised workspace. The volume of content that can be read at once is capped, and each Conversation turn is limited to a maximum number of steps.

The Agent acts with the permissions of the User who started the Conversation, and within the limits of what that User can see inside their Organisation.

The User can stop the Agent at any time by cancelling the current Conversation.

6.3 Skills, Use cases and Design systems

cobl AI provides system-Scope Skills: Use cases, Design systems and business know-how. The Agent loads these Skills on demand.

The detailed content of system-Scope Skills is intellectual property of cobl AI. It is not mounted in clear text in the Client's space, it is stripped from the logs and traces that are kept, and it is not delivered to the Client. Only the name and description of each Skill are exposed.

The Client can create its own Skills at organisation, user and project Scope. These override system-Scope Skills. They are Client Content within the meaning of section 17.

6.4 The Drive

The Drive is presented as a single file system with four Scopes. Files are versioned: every change, whether made by a person or by the Agent, is kept with its author and timestamp, and can be undone.

Drive data is attached to the Organisation and filtered by that attachment on every read and every write.

6.5 Sub-agents and unprompted actions

Some Sub-agents may run without a direct request from a User, in particular to keep the Organisation's Drive up to date or to suggest actions on ongoing Projects.

Any proposed change to a shared resource of the Organisation, in particular the Organisation's Drive and its memory, requires explicit human approval. The Agent proposes, an authorised User decides.

No action with an external effect, in particular sending a message or changing a third-party system through a Connector, is carried out without a User's instruction or approval.

6.6 Third-party Connectors

The Client can switch on Connectors to its own tools. cobl AI relies for this on a third-party integration gateway identified in Schedule 2.

Switching on a Connector has the following consequences.

The User who switches on a Connector authorises the Agent to act on the third-party tool on their behalf, within the limits of the permissions they grant at connection time. The Client alone is responsible for the scope of those permissions and for the rights held by the User who grants them.

Two categories of generic tools offered by the gateway are excluded from what is made available to the Agent: remote shell access and the remote workspace. This exclusion is deliberate and permanent.

Data pulled in from a third-party tool becomes Client Content and follows sections 17 and 18 as well as the retention periods in Schedule 2.

The Client warrants that it has the rights needed to allow cobl AI to access that data and to process it as part of the Services.

cobl AI is not responsible for the availability, content, terms of use or changes of the connected third-party tools, nor for the consequences of an interruption or a change to their interfaces.

The User can revoke a Connector's access at any time. The connection is then cut and the Agent can no longer act on that tool.

6.7 Execution Sandbox

When the Agent needs to run a command, it does so inside a Sandbox provisioned for a given Project and User, separate from where Documents are stored.

Resources are sized and fixed, according to the values in Schedule 4. Sandboxes are stopped and destroyed automatically after a period of inactivity. Destructive commands are blocked before they run.

The Sandbox is only a temporary working copy. The reference content of Documents stays in the Project's versioned repository.

6.8 Sharing and publishing

Sharing a Document creates a read-only Publication, available through a link containing a unique identifier. Only the visual rendering is exposed: the Conversation history, the other Documents in the Project and the source files are not accessible to the recipient.

No account is needed to view a Publication. The Client alone decides whether to share a link and how widely.

The owner can revoke the link at any time, which makes the Publication immediately unavailable. An expiry date can be set at creation. As long as sharing stays active, the Publication reflects the current version of the Document.

cobl AI keeps no copy of the Document on the recipient's side and has no control over what the recipient does with it after viewing.

6.9 Export

Exporting a Document as PDF, Word or PowerPoint is streamed straight to the browser. Executable code is stripped before the file is sent to the conversion service. cobl AI keeps no exported file.

6.10 Maintenance

For the duration of the Services, the Client benefits from maintenance, which may include:

• corrective maintenance, cobl AI using its best efforts to fix any fault reported;
• upgrade maintenance, carried out automatically and without prior notice, covering improvements to features and to the technical setup;
• planned maintenance.

Access to the Platform may be limited or suspended for maintenance. Downtime caused by planned maintenance does not count towards the availability rate in Schedule 3.

Changes to system-Scope Skills, Design systems and Models fall under upgrade maintenance. cobl AI may change, replace or withdraw a Model, in particular where its provider withdraws it or changes its terms, provided the level of quality and data protection remains equivalent.

6.11 Hosting

cobl AI undertakes, on a best efforts basis, to host Organisations and their Content in line with the state of the art, through the professional providers identified in Schedule 2.

The Platform's server functions are configured to run in the Dublin region, Ireland. The development, staging and production environments are isolated from one another.

Some processing, in particular calls to Models, takes place outside the European Union, as described in Schedule 2 and Schedule 4.

cobl AI applies the technical means required by the state of the art to secure the Platform and access to it, and takes reasonable precautions to keep data secure. The technical and organisational measures are set out in Schedule 2.

6.12 Technical support

cobl AI provides support by email at contact@cobl.ai and through the support channel built into the Platform. Terms and response times are set out in Schedule 3.

7. Service level

Availability and incident handling commitments are set out in Schedule 3. They apply to the Pro Plan from the first full month paid, and to the Enterprise Plan as set out in the Quote. They do not apply during the Trial.

Given how the internet works, cobl AI's liability is limited to the operation of its servers, whose outer boundary is the connection points. cobl AI is not responsible for access speeds, for slowdowns outside its servers, for failures of third-party networks, or for the quality of the Client's connection.

8. Payment terms

8.1 Credits

Use of the Services is measured in Credits.

Credits are consumed by any processing that calls a Model or a Sandbox, that is, by the Agent and its Sub-agents running: reading documents, generating and changing Documents, searching, and running commands.

No Credits are consumed by: creating and administering an Organisation, inviting Users, creating Projects, browsing and organising the Drive, reading and manually editing Documents, sharing and viewing Publications, and exporting.

Credits are pooled at Organisation level. The Client can follow its usage in real time from its Organisation settings, with a per-Document breakdown.

8.2 Pro Plan: packages, prices and top-ups

The Client picks a monthly Credit package from the tiers published at https://cobl.ai/pricing, and a monthly or annual billing mode. The number of Users and the number of Projects are not limited.

Prices are shown in euros excluding tax. Applicable VAT is added at payment.

Package Credits are granted each month and do not roll over. With annual billing, payment is made upfront for twelve months and Credits are granted month by month.

The Client can buy extra Credits in prepaid packs, at the price shown on the Platform. Purchased Credits do not expire and stack. The system uses package Credits first, then purchased Credits.

The Client can switch on auto top-up, which buys a pack of extra Credits when the package balance runs out. Auto top-up is offered switched on at checkout and the Client confirms the monthly spend limit as part of the purchase. The Client can switch it off or change the limit at any time from its Organisation settings. No automatic purchase can exceed that limit.

The Client is warned when usage reaches 80% and then 90% of the monthly package. No generation already running is interrupted when the balance runs out. A new generation is refused only when the monthly spend limit is reached, when auto top-up is off and the balance is empty, or during the Trial under section 8.3.

Moving to a higher package takes effect immediately, prorated. Moving to a lower package takes effect at the next renewal.

Above the highest published tier, the Client is invited to move to an Enterprise Plan.

8.3 Trial

Every new Organisation gets one free month of Trial, with no credit card, giving access to all features.

cobl AI may suspend generation for an Organisation on Trial once its usage reaches a threshold it sets and discloses on request, in order to prevent abuse.

At the end of the Trial, generating new Documents is suspended until a package is taken out. Existing Documents and Client Content stay readable, exportable and deletable, under section 10.3.

8.4 Enterprise Plan

The Enterprise Plan is priced individually, as set out in the Quote.

Deployment on dedicated infrastructure, in a private cloud or on premise, is available on the Enterprise Plan only. It is covered by a separate agreement. In that case the Credit system is switched off and billing follows that agreement.

8.5 Payment

On the Pro Plan, payment is made by card at sign-up and then at each renewal, through the payment provider identified in Schedule 2. Each payment and each purchase of extra Credits triggers a receipt by email.

On the Enterprise Plan, unless the Quote says otherwise, cobl AI issues monthly or annual invoices payable within 30 days of issue, by bank transfer.

The Client warrants that it holds the authorisations needed to make payment.

8.6 Late payment

Any late payment of a sum due automatically triggers, from the day after the payment date shown on the invoice:

• all sums owed by the Client becoming immediately due;
• suspension of the Services and of access to the Platform until full payment;
• late payment interest at three times the French statutory interest rate, plus a fixed recovery fee of 40 euros, without prejudice to further compensation if actual recovery costs are higher.

If a card payment fails, cobl AI informs the Client and suspends generation after seven days, without deleting Client Content.

9. Right of withdrawal

Where the Client meets the conditions of article L221-3 of the French Consumer Code and the subscription falls within articles L221-1 and following of that code, the Client has a right of withdrawal of fourteen days from acceptance of these Terms.

The Client exercises this right by sending cobl AI the form in Schedule 1, duly completed, or any unambiguous statement of its wish to withdraw.

A Client on the free Trial under section 8.3 accesses the Services with no financial commitment for one month. When the Client then takes out a package, it expressly asks for the service to start immediately and acknowledges that, if it withdraws, it still owes the amount matching the period elapsed and the Credits used up to the point it communicates its decision.

10. Term and termination

10.1 Term

The Pro Plan runs for one month or one year depending on the billing mode chosen, and renews automatically for periods of the same length.

The Enterprise Plan runs for the term set out in the Quote.

10.2 Termination

The Client can cancel at any time from its Organisation settings or by writing to contact@cobl.ai. Cancellation takes effect at the end of the current period. Any period started is owed in full.

Extra Credits bought and not used are not refunded.

cobl AI may terminate a Client's subscription on thirty days' written notice, without prejudice to section 15.

10.3 What happens on termination

From termination, access to the Platform and generation of new Documents stop.

The Client has thirty days from the end of the contract to ask for its Client Content and Documents to be returned, under section 22. After that, cobl AI deletes them as set out in Schedule 2.

11. Evidence

The Client accepts that the data collected on the Platform and on cobl AI's systems is evidence of what happened under these Terms. The Client can access that data from its Organisation.

12. The Client's obligations

12.1 The Client alone is responsible for how its Users use the Services, and warrants that they comply with these Terms.

12.2 The Client undertakes to comply with applicable law and not to infringe the rights of third parties or public order.

12.3 The Client acknowledges that it has read the characteristics and technical constraints of the Services.

12.4 The Client undertakes to give cobl AI the information needed to deliver the Services and to cooperate actively.

12.5 The Client alone is responsible for Client Content. It warrants that it holds all the rights and authorisations needed to supply it and to have it processed as part of the Services, including for data pulled in from a Connector. It alone is responsible for its accuracy, lawfulness and completeness.

12.6 The Client undertakes to use the Services for itself only. It may not assign, license or transfer any of its rights or obligations to a third party.

12.7 The Client undertakes that Client Content is lawful and does not infringe public order, public decency or the rights of third parties. The following are prohibited: child sexual abuse material, pornographic, defamatory, insulting, racist, obscene, violent, xenophobic or revisionist content, infringing content, content damaging the image of a third party, and false content or content promoting unlawful activity.

12.8 The Client undertakes not to upload to the Platform any classified defence information or information subject to export control rules, unless cobl AI agrees in writing beforehand and the applicable measures are defined.

12.9 The Client acknowledges that the Services require an internet connection, for which it alone is responsible.

12.10 The Client will indemnify cobl AI against any claim, action or demand arising from a breach of its obligations or warranties, and will cover any loss, cost or award resulting from it.

13. Nature of the Services and use of artificial intelligence

13.1 Documents are produced automatically by one or more Models. They may contain errors, inaccuracies or false statements, including when they look coherent and well sourced.

13.2 Documents do not replace the advice of a qualified professional. It is for the Client to read, check and approve every Document before using it, sending it to a third party or basing a decision on it. The Platform provides live rendering, manual editing and approval points for that purpose.

13.3 Documents reflect the state of the Models' knowledge at their last update and only the Client Content made available to the Agent.

13.4 Two Clients making similar requests may get similar Documents. cobl AI does not warrant that Documents are unique.

13.5 Models may carry biases that affect Documents. cobl AI uses its best efforts to spot and correct biases built into the Services, through regular evaluation campaigns, and takes corrective measures when significant biases are found. cobl AI is not responsible for biases introduced by Client Content.

13.6 cobl AI does not intend the Services for high-risk uses within the meaning of Regulation (EU) 2024/1689 and does not intend to be a provider of a high-risk AI system. The Client undertakes not to use the Services for a use classified as high-risk by that regulation, nor for the practices it prohibits. The Client undertakes not to modify the Services in a way that would give them that classification.

13.7 Where the Client sends a Document produced by the Services to third parties, it is for the Client to meet its own disclosure obligations, in particular under article 50 of Regulation (EU) 2024/1689.

13.8 The Client keeps control over what is sent to Models. At each Conversation turn, the following are sent: the system instructions, the catalogue of available Skills limited to their name and description, the working memory of the User, the Project and the Conversation, the history of the current Conversation, and the content of the files the Agent reads in the workspace available to the User. The following are not sent: data from other Organisations, files the Agent has not opened, and the detailed content of cobl AI's proprietary Skills.

14. Prohibited behaviour

14.1 It is prohibited to use the Services for unlawful or fraudulent activity, to harm public order, to break into a third party's systems, or for any practice that diverts the Services from their purpose.

14.2 It is prohibited to copy or divert the concept, technology, Skills, Design systems, data or any other part of the Platform belonging to cobl AI.

14.3 It is prohibited to attempt to extract, reconstruct or publish the content of system-Scope Skills, the system instructions or any other part of the Platform that is withheld from the spaces available to the Client, in particular through prompts designed for that purpose.

14.4 The following are also prohibited: any behaviour that interrupts, slows down or prevents the continuity of the Services, any intrusion attempt, any misuse of system resources, any action placing a disproportionate load on the infrastructure, and any breach of security and authentication measures.

14.5 It is prohibited to sell, transfer or give a third party access to the Services, or to resell any part of that access.

14.6 It is prohibited to use the Services, their outputs or their execution traces to train, fine-tune or evaluate a competing system.

15. Consequences of a breach

Where the Client breaches these Terms or applicable law, cobl AI may take any appropriate measure, in particular suspending or removing the access of the User responsible, deleting the Content connected to the breach, taking legal action, and informing the competent authorities.

Any serious breach may lead to the Organisation being closed immediately by any written means. Except in an emergency or where the law requires otherwise, cobl AI informs the Client beforehand and allows a reasonable time to fix the breach.

16. cobl AI's liability and warranties

16.1 cobl AI uses its best efforts to deliver quality Services and regularly checks that they work and are available.

cobl AI is not responsible for temporary difficulty or inability to access the Services caused by circumstances outside its network, by the failure of equipment or networks not included in the Services, by an interruption from a telecoms operator or internet provider, by an action or a configuration of the Client, or by force majeure.

16.2 Because the Services rely on non-deterministic Models, the Client accepts that cobl AI cannot warrant that they will meet all of its needs, nor that every document format can be handled.

16.3 cobl AI is not a party to the relationship between the Client and its own customers, prospects or suppliers. It is not liable for difficulties arising from those relationships, nor is it a party to any dispute concerning them, in particular regarding the deals and tender procedures run through the Platform.

cobl AI is not responsible for the commercial outcome of the Client's deals. It does not warrant that the Documents produced will let the Client win a deal, be shortlisted in a tender or reach any commercial result.

16.4 cobl AI is not responsible for decisions taken by the Client or by a third party it appoints, nor for Client Content, over which it exercises no control, checking or moderation.

16.5 Subject to mandatory law, the Services are provided as is. cobl AI does not warrant that they will be free of errors or defects, nor that, being standard, they will specifically meet the Client's needs and expectations.

16.6 cobl AI is not responsible for errors, omissions or inaccuracies in Client Content, nor for their effect on the Documents produced.

16.7 cobl AI is not liable for a malicious intrusion into an Organisation unless it is shown that the security measures in place were seriously deficient, nor for a lack of care by the Client or its Users in keeping their credentials confidential.

16.8 In any event, cobl AI's liability is limited to direct proven loss suffered by the Client, and capped at the total amount received by cobl AI under these Terms during the twelve months before the event giving rise to liability.

17. Intellectual property

17.1 cobl AI's property

The systems, software, structures, infrastructure, databases and code, together with the system-Scope Skills, Use cases and Design systems supplied by cobl AI, and the content of any kind used by cobl AI on the Platform, are protected by applicable intellectual property rights.

Any disassembly, decompilation, extraction, reuse, copying, reproduction, display or distribution of these items, in whole or in part, without cobl AI's authorisation, is prohibited.

These Terms give the Client only a personal, non-exclusive and non-transferable right to use the Services for the duration of its subscription.

17.2 The Client's property

The Client keeps all rights in Client Content, including in the Skills it creates at organisation, user and project Scope.

The Client grants cobl AI, for the time needed to deliver the Services and for that purpose only, a non-exclusive, worldwide, royalty-free licence to host, reproduce, technically adapt and transmit Client Content to Models. This licence ends with the contract.

17.3 Documents produced

The Client owns the Documents produced through the Services, to the extent they are protectable, together with all rights attached to them. To the extent cobl AI holds any economic rights in those Documents, it assigns them to the Client as they are produced, exclusively and definitively, for the full legal term of protection, worldwide and for all forms of use.

This assignment does not cover the Skills, Design systems, templates, methods and tools developed by cobl AI and used to produce the Documents, which remain its exclusive property, nor third-party material included in them.

For the avoidance of doubt, the Client's trade marks, logos and brand elements applied to Documents remain the Client's property and are not covered by any reservation by cobl AI.

The Client is under no obligation to use the Documents.

17.4 Aggregated data

cobl AI may produce, from Platform usage data, aggregated and anonymised statistics that cannot identify the Client, its Users or its customers, and use them to operate, measure and improve the Services. This data contains no Client Content.

17.5 No training

Client Content and Documents are not used to train, fine-tune or improve any artificial intelligence model, whether a cobl AI model or a third-party model.

cobl AI imposes the same prohibition by contract on the Model providers it uses. The applicable terms are described in Schedule 4 and the corresponding contract documents can be shared on request as part of a vendor qualification process.

17.6 Feedback

Suggestions and improvement feedback sent by the Client may be used freely by cobl AI, without payment or attribution. The Client should not send information it considers confidential as feedback.

18. Personal data

The terms on which cobl AI processes personal data on the Client's behalf, as a processor, are set out in Schedule 2, which serves as a data processing agreement within the meaning of article 28 of Regulation (EU) 2016/679.

Processing carried out by cobl AI on its own behalf, as a controller, in particular account management, billing and the commercial relationship, is described in the privacy policy published at https://cobl.ai/legal/privacy-policy.

19. Confidentiality

cobl AI undertakes to use Client Content only to perform these Terms and not to disclose it to a third party, except at the Client's request or with its express agreement, and subject to the use of the providers identified in Schedule 2.

This obligation does not cover information already known to cobl AI, already public or becoming public without breach of these Terms, lawfully received from a third party, or whose disclosure is required by an authority under applicable law.

The Client is under the same obligation regarding the non-public parts of the Platform it becomes aware of, in particular the system instructions and system-Scope Skills.

20. Testimonials and commercial references

Subject to their prior agreement, cobl AI may use testimonials from the Client and its Users to promote the Services, on its own channels and those of its partners, in any language, with reasonable changes of framing and format, without payment.

The Client authorises cobl AI to name it and to reproduce its trade mark or logo as a commercial reference, for the duration of its subscription and for two years after it ends. The Client may withdraw this authorisation at any time in writing; cobl AI then stops using the reference on the material it updates, within a reasonable time.

21. Force majeure

cobl AI is not liable for failing to perform its obligations where that failure is due to an event of force majeure within the meaning of article 1218 of the French Civil Code. It informs the Client as soon as possible. If the event lasts more than three months, either party may terminate by right, without notice or compensation, by registered letter with acknowledgement of receipt.

22. Data return

At the end of the Services, the Client may ask in writing, within thirty days, for the Client Content and Documents of its Organisation to be returned.

Return is made in standard, open and usable formats: Documents as PDF, DOCX and PPTX, Drive files in their original format, structured data as CSV or JSON.

The cost of the return operations is covered by the fee paid by the Client. The Client cooperates actively in the recovery. cobl AI then deletes the data as set out in Schedule 2 and can issue a deletion certificate on request.

23. Changes to these Terms

cobl AI may change these Terms at any time.

On the Pro Plan, cobl AI informs the Client of any material change by email and by a notice in the Platform, at least thirty days before it takes effect. A Client that does not accept the new version may cancel free of charge before that date. Continuing to use the Services after that date means accepting the change.

On the Enterprise Plan, the Terms that apply are those accepted when the Quote was signed. A new version takes effect when a new Quote is signed.

24. Language

These Terms are written in French. This English version is provided for information. In the event of conflict or dispute over the meaning of a term or a provision, the French version prevails.

25. Governing law and jurisdiction

These Terms are governed by French law.

In the event of a dispute over their validity, interpretation or performance, the courts of Paris have exclusive jurisdiction, subject to any mandatory rules of procedure to the contrary.

These Terms apply on the same basis to Clients established outside the European Union, including in the United States. The commitments on not reusing Client Content, not training models and confidentiality set out in sections 17.5, 18 and 19 are identical for every Client, whatever their country of establishment and wherever the processing takes place.

Schedule 1: withdrawal form

Complete and return this form only if you wish to withdraw from the contract.

To: cobl AI Address: 34 bis rue Vignon, 75009 Paris, France Email: contact@cobl.ai

I hereby give notice of my withdrawal from the contract for the cobl AI Services.

• Subscription date:
• Client name:
• Client address:
• Date:
• Signature (only if this form is sent on paper):

Schedule 2: personal data

This Schedule serves as a data processing agreement within the meaning of article 28 of Regulation (EU) 2016/679. It can be provided separately.

1. Roles of the parties

As part of the Services, cobl AI processes personal data on behalf of the Client, as a processor. The Client acts as controller.

Each party undertakes to comply with applicable law, in particular Regulation (EU) 2016/679 and French Act no. 78-17 of 6 January 1978 as amended.

2. Description of the processing

Purpose: delivering the Services described in these Terms, that is, allowing the Client to produce, review, share and export professional documents using an artificial intelligence agent, and to organise its Organisation's knowledge.

Nature of the operations: collection, recording, organisation, structuring, storage, adaptation, retrieval, consultation, use, disclosure by transmission, making available, combination, erasure.

Categories of data:

• User identification data: name, email address, membership of an Organisation, role;
• connection data and technical logs;
• usage data: token volume, associated costs, response times;
• the content of Conversations between the User and the Agent;
• any personal data contained in Client Content imported by the Client or pulled in from a Connector, whose nature the Client alone determines.

Categories of data subjects: the Client's Users, and any person whose data appears in Client Content, in particular the contacts involved in the Client's deals.

Duration: the duration of the Services, plus the retention periods in paragraph 6.

Special category data: the Client undertakes not to send data covered by article 9 of the Regulation, unless cobl AI agrees in writing beforehand and appropriate measures are defined.

3. cobl AI's obligations

Instructions: cobl AI processes data only for the purposes listed above and in line with the Client's documented instructions, including on transfers outside the European Union. It informs the Client if an instruction appears to breach the Regulation.

Security and confidentiality: cobl AI applies the technical and organisational measures described in paragraph 5 and makes sure that the people authorised to process the data are bound by confidentiality.

No training: the personal data processed is not used by cobl AI or by its providers to train, fine-tune, develop or improve any artificial intelligence model. cobl AI imposes this prohibition on its providers, including Model providers.

Assistance: cobl AI assists the Client and responds as quickly as possible to any request relating to data subject rights, a data protection impact assessment, or a request from a supervisory authority or the Client's data protection officer.

Data breaches: cobl AI notifies the Client of any personal data breach as soon as possible after becoming aware of it, and no later than 48 hours, and provides all useful information.

Documentation and audit: cobl AI makes available to the Client, on request, the information needed to demonstrate that it meets its obligations. The Client may carry out an audit once a year at its own expense, on two weeks' notice, during business hours and without affecting security measures, the confidentiality of other clients' data or the running of production. cobl AI may reject an auditor belonging to a competitor. The audit report is sent to cobl AI for comment and is confidential information.

4. Sub-processors

The Client authorises cobl AI to use the sub-processors listed below.

If the list changes, cobl AI informs the Client in writing beforehand, stating the activities concerned and the identity and location of the new sub-processor. The Client has fifteen days to raise legitimate, reasoned objections. Failing that, it is deemed to have accepted. If disagreement persists, the Client may terminate without penalty.

cobl AI enters into a contract with each sub-processor containing data protection obligations at least equivalent to those in this Schedule, and remains fully responsible for their performance.

Embeddings are computed on cobl AI's own infrastructure, without a third-party provider.

The current list is published at https://cobl.ai/legal/subprocessors.

5. Technical and organisational measures

cobl AI applies the following measures.

Separation: Projects, Documents, Conversations and Drive files are attached to an Organisation and filtered by that attachment on every read and every write. These checks are explicit in the code of every sensitive server function.

Encryption: data is encrypted in transit with TLS and at rest by the infrastructure providers, in line with their published commitments, whose references can be shared on request. cobl AI does not apply field-level encryption or dedicated key management at application level.

Access control: authentication by email and password or through a third-party identity provider, signed tokens, roles per Organisation, invitations with a limited validity period. Technical administration access for the cobl AI team is restricted by configuration to internal email accounts.

Execution isolation: every command runs inside a sized Sandbox, capped in duration and output volume, stopped and destroyed automatically after inactivity, with destructive commands blocked.

Agent controls: a fixed and closed list of Tools, schema validation before every call, file path checks, caps on the volume read and on the number of steps per turn, mandatory human approval for any change to a shared Organisation resource, and the ability for the User to interrupt at any time.

Minimising what is sent to Models: automatic context compression, large tool results reduced to a reference, older history summarised, detected secrets stripped before summaries are stored.

Traceability: every Conversation turn is kept with its author and timestamp, together with application logs, observability of exchanges with Models, and session replay on a sample and systematically on error.

Backups: application data is backed up regularly by the database host, on a retention cycle that can be shared on request.

Penetration testing: cobl AI has penetration tests carried out by an independent third party. The most recent test was in April 2026. A summary can be shared on request as part of a vendor qualification process.

Certifications: cobl AI holds no independent certification to date. Its infrastructure providers hold their own certifications, whose references can be shared on request.

6. Retention and deletion

6.1 During the contract

Client Content, Documents and their history, Conversations, the search index and the Organisation's memory are kept for the duration of the contract.

The Client can delete a file, a Document, a Conversation or a Project from the Platform at any time.

6.2 Deleting a Project or a User

Deleting a Project is immediate and permanent. There is no bin and no archive. It erases the Documents and their history, the Conversations, the project-Scope files and the associated search index, and stops and destroys the matching Sandbox.

Deletion covers the versioned repository itself, not just a deletion record: the Project's history is not kept.

Deleting a User account immediately and irreversibly erases the associated personal data, except for connection logs kept for traceability.

Creating, changing and deleting User accounts is the Client's sole responsibility.

6.3 After the contract ends

The Client has thirty days from the end of the contract to ask for its data to be returned, under section 22 of the Terms.

After that, cobl AI deletes all Client Content, Documents, Conversations, search indexes and Drive files belonging to the Organisation. A deletion certificate is issued on request.

Data is purged from backups at the end of the database host's backup retention cycle. [To be completed]

The following are kept longer under legal obligations: invoices and accounting records, for ten years.

6.4 Technical logs and traces

The data below is not attached to a Project and follows its own rolling retention period, independent of the life of the Project. It is deleted at the end of that period, or when the Organisation's account is closed if that happens first.

The detailed content of cobl AI's proprietary Skills is stripped from the traces that are kept. A cleaning step removes detected secrets from summaries before they are stored.

7. Transfers outside the European Union

Application hosting, the database, the sandboxes, product analytics and embedding computation are located in the European Union.

Transfers to the United States take place for:

• calls to Models (Anthropic, Amazon Web Services), covering the Conversation context;
• the Connector integration gateway (Composio), covering the data exchanged with the third-party tools switched on by the User;
• application monitoring and session replay (Sentry), observability of exchanges with Models (Braintrust), lifecycle messaging (Customer.io) and subscription management (Autumn).

These transfers are covered by the standard contractual clauses adopted by the European Commission, supplemented where needed by additional measures.

The commitments on not reusing data, not training models and confidentiality described in sections 17.5 and 19 of the Terms apply identically wherever the processing takes place and whatever the Client's country of establishment.

A copy of the clauses applying to a given transfer is provided to the Client on reasoned request.

8. The Client's obligations

The Client undertakes to:

• send only relevant and necessary data, excluding special category data unless cobl AI agrees in writing beforehand;
• collect the data it sends lawfully, fairly and transparently, and make sure there is a legal basis for that collection and that data subjects are informed;
• keep a record of processing activities and comply with the principles of the Regulation;
• set roles and Connectors in line with the data minimisation principle.

Schedule 3: service levels

1. Scope

This Schedule applies to the Pro Plan from the first full month paid, and to the Enterprise Plan as set out in the Quote. It does not apply during the Trial.

2. Incident categories

Critical incident: the Platform is completely unavailable, or no User can access their Projects or start a generation, with no workaround.

Major incident: a fault makes an essential feature unusable (generation, export, sharing, Drive access, Connectors) for some or all Users, with a workaround that is possible but costly.

Minor incident: any other fault that does not prevent normal use of the Services.

3. Reporting and handling

The Client reports any incident through the support channel built into the Platform or to contact@cobl.ai, with as much information as possible.

Support hours are 9:30 to 12:30 and 13:30 to 18:30, Monday to Friday, excluding French public holidays. Any period starting within support hours ends at the same time on the last working day of that period.

cobl AI tells the Client where the incident comes from. If the Services are not the cause, no maintenance is owed. Otherwise, cobl AI classifies the incident within four working hours and then fixes it within:

• critical incident: six working hours after classification;
• major incident: 48 working hours after classification;
• minor incident: three working days after classification.

If it cannot fix the incident within those times, cobl AI uses its best efforts to offer a workaround within 24 working hours for a critical incident and three working days for a major incident.

4. Availability

cobl AI uses its best efforts to keep the Platform available 24 hours a day, 7 days a week, and commits to monthly availability of 99.5%.

Availability is calculated monthly as: (total time minus downtime) divided by total time, times one hundred.

Downtime means a failure for which cobl AI is responsible. It starts at the first of these two events: a report from the Client, or a finding by cobl AI. Downtime runs from the report to the notice of restoration, less any delay caused by the Client.

The following are excluded from the calculation: downtime due to planned maintenance, to a suspension provided for in these Terms, to force majeure, to the failure of a network or third-party service not included in the Services, or to an action by the Client.

Schedule 4: agent, tools and models

1. The Agent's Tools

The Agent has a fixed, closed list of Tools. It has no capability outside that list.

The categories of Tools are:

• file operations: list, read, write, edit, copy, move, delete, create a folder, convert;
• memory: read, write, propose a change to the Organisation's memory subject to human approval;
• search: search history, search the knowledge base, web search;
• execution: run a command in the Sandbox, take a screenshot;
• production: generate an image, load a Skill;
• distribution: share a Project, export a Document;
• interaction: ask the User a question;
• Connectors: the Tools exposed by the integration gateway for the Connectors switched on by the User, excluding remote shell access and the remote workspace.

2. Sandbox

These values may vary by plan. They may change as part of upgrade maintenance, without materially reducing the service provided.

3. Models

Main Model: Claude, supplied by Anthropic, called through a central AI gateway that handles authentication and call observability. Routing may go through Amazon Bedrock.

Secondary Models: lighter models are used for supporting tasks (context summarisation, automatic Project titling, vector search). They do not receive the full Conversation context.

Open-weight Models: open-weight models may be used for some supporting tasks.

Embeddings: embeddings are computed on cobl AI's own infrastructure, in the European Union, without a third-party provider.

Commitments applying to providers: the data sent is not used to train, fine-tune or improve the models, by cobl AI or by its providers. This commitment applies identically whatever the Client's country of establishment.

Prompts sent to Model providers are not kept by them for more than thirty days.

The Client's own Models: on the Enterprise Plan, the Client may ask for routing to its own provider contract or to a model it hosts. This is assessed case by case and covered by the Quote.

4. Changes to this Schedule

The list of Models changes over time. cobl AI publishes the current list at https://cobl.ai/legal/models and informs the Client of any material change as set out in section 6.10.