Information Security Policy Agreement – CallBotIA™

Last updated: November 5, 2025

Between:

CallBotIA™ (hereinafter, “CallBotIA™”) and the Client (hereinafter, “You,” “Your Company,” “the Client”)

The following is agreed:

1. Subject Matter

This Agreement establishes the information security policies, responsibilities, and measures that will govern CallBotIA’s provision of customized Services to the Client, as well as the Client’s obligations regarding the information it provides.

2. Information Provided by the Client

2.1 The Client is exclusively responsible for the truthfulness, accuracy, integrity, and legality of all information provided to CallBotIA™ for the provision of the Services.
2.2 CallBotIA™ will rely on such information to provide the Services and has no obligation to verify its truthfulness or legality.
2.3 The Client assumes all responsibility to third parties for claims, damages, or sanctions arising from the information provided.

3. Third-Party Services

3.1 CallBotIA™ uses third-party services for the provision of its Services, including, but not limited to, Amazon Web Services, Microsoft Azure, Google Cloud Platform, OpenAI, ElevenLabs, Retell, Mistral, Zadarma, and Twilio, among other AI, telecommunications, and companies used and involved to fulfill the Objective of Generating the “Tailor-Made” Solution requested by the Client.
3.2 CallBotIA™ may modify, substitute, or add third-party service providers at any time without prior notice.
3.3 CallBotIA™ will not be responsible for the security, availability, or any incident related to such external services.
3.4 The Client is responsible for complying with the terms and conditions imposed by these third parties.

4. CallBotIA™ Information Security Policies

4.1 CallBotIA™ will implement reasonable technical and organizational measures to protect the Client’s information, such as:

• Access control and authentication.
• Data encryption in transit and at rest.
• Incident monitoring and detection.
• Periodic data backups.
• Continuous security assessments and improvements.

4.2 CallBotIA™ will notify the Client without undue delay of any security incident affecting their information.
4.3 CallBotIA™ does not guarantee absolute security and will not be responsible for access or incidents not caused by willful misconduct or gross negligence.

5. Client Responsibilities

5.1 The Client will protect their access credentials and immediately notify CallBotIA™ if they suspect any compromise.
5.2 The Client will use the Services in accordance with the law and for lawful purposes.
5.3 The Client will implement its own security measures to protect its information and systems.

6. Customized Services and Client Approval

6.1 CallBotIA™ will provide customized Services and Solutions tailored to the request of “The Client” that must be expressly approved by “the Client” before their implementation.

7. Limitation of Liability

7.1 CallBotIA™ will not be liable for indirect, incidental, special, or consequential damages, including loss of profits or data, except in cases of willful misconduct or gross negligence.
7.2 CallBotIA’s total liability will be limited to the amount paid by the Client in the last 2 (two) months prior to the event.

8. Term and Termination

8.1 This Agreement will be effective as long as CallBotIA™ provides Services to the Client.
8.2 Upon termination, CallBotIA will delete or return the Client’s information within a maximum period of 30 days, unless legal retention obligations apply.

9. Applicable Law and Jurisdiction

This Agreement shall be governed by the laws of the Republic of Argentina and any dispute shall be submitted to the Federal Courts of the City of Buenos Aires.

10. Incident Response Plan and Verification

10.1 CallBotIA™ will maintain a formal and documented incident response plan, which includes identification, containment, mitigation, communication, and resolution.
10.2 Periodic tests and simulations will be carried out to ensure the effectiveness of the plan and the training of personnel.
10.3 CallBotIA™ will notify the Client without undue delay of any incident affecting their information, providing details and actions taken.
10.4 The Client may request reasonable audits or reports on the implementation and effectiveness of the incident response plan, and CallBotIA™ will cooperate in this regard.
10.5 Following relevant incidents, CallBotIA™ will deliver detailed reports with analysis, impact, and corrective measures.
10.6 The implementation of the incident response plan is an essential contractual obligation; failure to comply may be considered a serious breach.

11. Audits, Monitoring, and Evaluations

11.1 The Client may carry out reasonable audits, with prior notice and under confidentiality, to verify compliance with the security policies, within a period of 30 (thirty) days from the Client’s claim, which must take into account that it must be requested through the channels established in The legal center and via email, specifying a reasonable reason.
11.2 CallBotIA™ will maintain records and documentation that support its security controls and incident management.

12. Risk Management and Continuity

12.1 CallBotIA™ will provide relevant information for the Client to assess risks related to security and the supply chain. These will be available to the client upon a reasonable request that must be made through the appropriate channels. Said reasons must be evaluated and approved by CallBotIA™, within thirty days.
12.2 CallBotIA™ will maintain contingency and business continuity plans to ensure minimum operational levels in the event of disruptive events.

13. Confidentiality and Personnel Control

13.1 CallBotIA™ and its personnel are obliged to maintain the confidentiality of the Client’s information during and after the term of the Agreement.
13.2 CallBotIA™ will conduct periodic security training and awareness programs for its personnel.

14. Changes and Updates

14.1 CallBotIA™ may modify service providers and security measures, notifying the Client only when such changes significantly affect the provision of the Service.

15. Return and Destruction of Information

15.1 Upon termination of the Agreement, CallBotIA™ will deliver to the Client all relevant technical documentation, records, and data.
15.2 CallBotIA™ will certify the safe and irreversible elimination of the stored information without exception.