X FUTURO WEBSITE TERMS OF USE Version: x-futuro-website-terms-2026-07-16-v8 Effective date: 2026-07-16 Revision note: v8 updates the cross-reference in section 12 from Data-Handling Notice v10 to v11; no other term changes. Operator X Futuro株式会社 (corporate number 3120001231380) Registered office: 1-5-15 Hirakawacho, Chiyoda-ku, Tokyo 102-0093, Japan 1. Scope These terms govern access to and use of the X Futuro public website, public trust materials and encrypted-inquiry service. They do not govern contracted architecture, operations, security or other professional services. Contracted services are governed by the executed master services agreement, statement of work, authorization documents and data-processing terms, which prevail if they conflict with these website terms. 2. Business use and engagement eligibility The website is intended for organizations and persons acting for business purposes. It is not an online consumer storefront and does not display a standing offer capable of acceptance through the website. Engagement availability depends on customer identity and contracting authority, lawful purpose, end user, end use, sanctions status, export-control classification, delivery scope and X Futuro's capacity. X Futuro may request information reasonably necessary to evaluate eligibility, authority, legality, capacity and risk. It may decline or stop an inquiry or proposed engagement when those matters cannot be established or when the proposed work is outside its scope. 3. Inquiries do not create a contract Submitting an inquiry, receiving a receipt, receiving a reply, discussing scope or receiving indicative information does not create a contract, agency relationship, fiduciary duty, service obligation, confidentiality obligation beyond the published data-handling notice, or duty to accept work. An engagement exists only after authorized representatives execute the required written agreements and authorization documents. 4. Safe inquiry content The first inquiry must contain only the minimum information needed to establish contact and describe the general problem. Do not submit passwords, private keys, tokens, recovery codes, production data, personal data concerning another person, detailed network topology, raw vulnerability results, exploit code, malware or instructions intended to cause unauthorized access or harm. Attachments are not accepted. If sensitive material is later necessary, X Futuro will agree a separate authorized transfer method and retention period in writing. 5. Prohibited use Users must not use the website or inquiry service to: - access, test, scan, interfere with or obtain data from a system without the system owner's explicit authority; - submit malware, exploit payloads, stolen credentials, unlawful content or content that infringes another person's rights; - evade rate limits, probe the intake infrastructure, impersonate another person, conceal the true contracting party or misstate authority, end user or end use; - request work that violates applicable law, sanctions, export controls, a court order or a third party's enforceable rights; - degrade availability, automate abusive submissions, or use a receipt as evidence that X Futuro approved or authorized any activity. The responsible disclosure policy is not blanket authorization to test X Futuro or third-party infrastructure. 6. Authorization before security or production work No security test, production access or action affecting confidentiality, integrity or availability may begin through a website inquiry alone. Before such work, X Futuro requires verified customer identity and authority, written authorization, identified assets, permitted techniques, time and action limits, data-handling rules, stop conditions and escalation contacts. High-impact actions require human approval under the applicable engagement documents. 7. Website availability and service levels The website and inquiry service may be changed, suspended, rate limited or withdrawn for maintenance, security, legal or operational reasons. No uptime, response-time, recovery-time, deletion-verification or other service-level commitment applies to the public website unless a signed contract expressly states it. Any project SLA, including an availability target, applies only to the service and measurement method defined in the signed contract. 8. Information and no reliance Website material is general business and technical information. It is not legal, tax, accounting, compliance or investment advice, and it is not a substitute for an assessment of a particular environment. Trust statements and machine-readable baselines describe the stated scope and version; they do not guarantee that all risks, vulnerabilities or failures can be prevented. 9. No warranty To the maximum extent permitted by applicable law, the website and public materials are provided as available and without implied warranties of uninterrupted operation, error-free content, fitness for a particular purpose or non-infringement. X Futuro will correct confirmed material errors in published trust statements through a new version rather than silently rewriting the historical record. 10. Liability for website use Nothing in these terms excludes or limits liability that cannot lawfully be excluded or limited. Subject to that rule, X Futuro is not liable for indirect, consequential, special or punitive loss arising solely from access to, inability to use, or reliance on the public website. Liability for contracted services is determined exclusively by the applicable executed contract. 11. Intellectual property Unless otherwise stated, X Futuro株式会社 owns the site-specific text, visual design, first-party visual assets, original source code and X Futuro marks, to the extent protected by applicable law. Third-party fonts, open-source software, standards and other licensed components remain subject to the rights and licences of their respective owners. Users may view and make a reasonable internal copy for evaluating X Futuro or verifying a public trust statement. No other reproduction, modification, commercial redistribution, trademark use or creation of a misleading derivative is permitted without prior written authorization. Statutory quotation, analysis, security research and other mandatory exceptions remain unaffected. 12. Data handling The collection, encryption, location, retention, disclosure and rights-request rules for the inquiry service are described in the X Futuro Data-Handling Notice, version x-futuro-data-notice-2026-07-15-v11. Users should read that notice before submitting an inquiry. The notice version recorded with a submission governs that submission unless mandatory law requires otherwise. 13. Third-party services and links A link or reference to a third-party service does not constitute endorsement or a warranty. The third party's terms and data practices govern its service. X Futuro does not authorize a user to transmit customer technical content to a third party merely by mentioning that service on the website. 14. Governing law and jurisdiction These website terms are governed by the laws of Japan, without regard to conflict-of-law rules. Subject to any mandatory forum or dispute right that cannot be waived, the Tokyo District Court has exclusive jurisdiction as the court of first instance over disputes arising solely from the website or these terms. The governing law, dispute process and jurisdiction for contracted services are stated in the executed contract. 15. Changes and severability Material changes are published under a new version and effective date. If a provision is held unenforceable, it is limited or severed only to the extent necessary; the remaining provisions continue to apply. Failure to enforce a provision once is not a waiver. 16. Language This English text is the governing version of these website terms unless another expressly identified governing-language version is published. A translated version is provided for convenience unless it states otherwise.