Data Processing Addendum — Beta Period

Effective: May 12, 2026 Last updated: May 12, 2026

1. Scope

This Data Processing Addendum ("DPA") forms part of the agreement between Super Mega Lab LLC ("Processor" or "Super Mega Lab") and the customer identified in the applicable order or end user license agreement ("Customer" or "Controller") (together, the "Agreement") and applies to Processor's Processing of Personal Data on behalf of Customer in connection with the Services.

Effective Date: The date Customer accepts the Agreement or the date this DPA is countersigned, whichever is later.

2. Beta Period — no Processing

During the Beta Period of the Services, Processor does not Process any Personal Data on behalf of Customer. The Software runs entirely on the user's device and does not transmit Personal Data to Processor's infrastructure. Specifically, Processor does not receive, store, or have access to:

• Source code, file contents, file paths, or file names from Customer's development environment;
• Repository names, remote URLs, branch names, commit hashes, commit messages, or other version control metadata;
• Prompts, AI completions, model inputs or outputs, or assistant conversations;
• Editor activity, keystrokes, telemetry events, behavioral analytics, or product usage events;
• Diagnostics, error reports, or crash dumps;
• Repository visibility status;
• IP addresses or other connection metadata.

Because no Personal Data is Processed on behalf of Customer during the Beta Period, the substantive obligations described in a full Data Processing Addendum (Customer Instructions, Sub-processors, Data Subject Rights, Security Incident Notification, International Data Transfers, Return and Deletion) do not apply during the Beta Period.

3. End of the Beta Period

A full Data Processing Addendum will be published at https://agenticbookmarks.com/legal/dpa when the subscription verification service launches. Customer will be notified at least thirty (30) days in advance.

4. Confidentiality

To the extent Processor's personnel become aware of any information about Customer or Customer's end users through support communications or other limited interactions during the Beta Period, Processor shall ensure that such personnel are bound by appropriate confidentiality obligations.

5. Governing Law

Except where mandatory data protection law requires otherwise, this DPA is governed by the laws of the State of Delaware, USA.

6. Notices

Notices under this DPA shall be sent to:

• Processor: Super Mega Lab LLC, Legal Department, contact@supermegalab.com, 16192 Coastal Highway, Lewes, Delaware 19958
• Customer: as set out in the Agreement

7. Order of Precedence

In the event of any conflict or inconsistency between this DPA and the Agreement with respect to Processing of Personal Data, this DPA controls.

8. Term

This DPA takes effect on the Effective Date and continues until the Agreement terminates or expires, or until superseded by the full DPA published at the end of the Beta Period.

Signature Block