General Terms of Service and Sale

Retyc - a service by TripleStack SAS

Version 1.1 - Effective as of: 24 May 2026

TripleStack SAS, a simplified joint-stock company (société par actions simplifiée) with a share capital of €1,000, registered with the Lyon Trade and Companies Register (RCS) under number 853 010 064, with its registered office at 12 B rue du Stade - 69290 Grézieu-la-Varenne (hereinafter "TripleStack"), operates the Retyc platform accessible at https://retyc.com (the "Platform").

PART I - GENERAL PROVISIONS

Article 1 - Purpose

These General Terms of Service and Sale (hereinafter the "Terms") are intended to define the conditions under which TripleStack provides the customer (the "Customer") and its users (the "Registered Users") with its services on the Platform (the "Services").

The Retyc Platform is a file storage and sharing service with end-to-end encryption, hosted exclusively on infrastructure located in Europe.

These Terms are organised into three parts:

Part I covers the general provisions applicable to all Customers, whether professional or consumer;
Part II covers the specific provisions applicable to Customers acting in a professional capacity (B2B);
Part III covers the specific provisions applicable to Customers acting as consumers within the meaning of French consumer law (B2C).

In the event of any conflict between the provisions of Part I and those of Parts II or III, the latter shall prevail.

Use of the Services is expressly conditional on acceptance of the Terms in their entirety, and the Customer and its Registered Users acknowledge that they have been communicated the Terms in a legible and comprehensible manner. Registration, access to the Platform, and use thereof in any capacity constitute full and unreserved acceptance of these Terms and of TripleStack's Personal Data Protection Policy in their latest version.

If the Customer is a legal entity, the signatory who accepts these Terms on behalf of and for the account of the Customer declares and warrants that they are authorised to bind the Customer to these Terms.

The Customer warrants compliance with these Terms by its Registered Users and remains fully liable to TripleStack for their use of the Services.

If any part of these Terms is found to be unlawful, invalid, or unenforceable, the relevant provisions shall be deemed unwritten, without affecting the validity of the remaining provisions.

The fact that TripleStack does not invoke a provision of these Terms at any given time shall not constitute a waiver of its right to invoke such provision at a later date.

Article 2 - Definitions

"Administrator": any person duly authorised by the Customer to manage the Customer's account and Organisation.

"Customer": TripleStack's contractual counterpart, whether acting in a professional capacity (B2B Customer) or as a consumer within the meaning of French consumer law (B2C Customer).

"B2B Customer": any Customer acting in the context of their commercial, industrial, craft, liberal, or agricultural activity, or acting as an agent on behalf of a public or private legal entity.

"B2C Customer" or "Consumer": any natural person acting for purposes that do not fall within the scope of their professional activity.

"Terms": these General Terms of Service and Sale.

"Personal Data": any information relating to an identified or identifiable natural person, within the meaning of Regulation (EU) 2016/679 (GDPR).

"Customer Data": files, information, documents, and any other content communicated or provided by the Customer and/or Registered Users on the Platform.

"DPA": the data processing agreement entered into between TripleStack and the B2B Customer, constituting an annex to these Terms for B2B Customers.

"Organisation": the entity linked to the Customer's account on the Platform.

"Free Plan": the free access offer to the Services, subject to the limitations defined on the Retyc website.

"Platform": the Retyc online service accessible at https://retyc.com, the use of which is governed by these Terms.

"Services": all features and services offered by TripleStack on the Platform, including storage, encryption, and file sharing. The Services are subject to change.

"Retyc website": the website accessible at https://retyc.com on which the various Services, features, and subscriptions offered are defined.

"TripleStack": a simplified joint-stock company (société par actions simplifiée unipersonnelle) with a share capital of €1,000, registered with the Lyon Trade and Companies Register (RCS) under number 853 010 064, with its registered office at 12 B rue du Stade - 69290 Grézieu-la-Varenne.

"Registered User": any person who has created an account on the Platform, authorised to access the Services by the Customer, regardless of the access rights granted to them.

"Anonymous User": any person accessing the Platform without a registered account, in particular to download a shared file.

Article 3 - Registration and access to the Services

3.1 Access conditions

The Customer is solely responsible for the proper functioning of their hardware and their access to the Platform. All costs incurred in accessing the Platform, including connection costs and hardware acquisition costs, are the exclusive responsibility of the Customer.

TripleStack shall not be liable for any damage to the Customer's hardware caused by malware, or for any interruption to the Customer's Internet connection.

3.2 Creating a Customer account

Access to the Platform and Services is subject to the creation of a Customer account. Three access methods are available:

Simple registration: the Customer creates their account via the registration form and automatically obtains an Administrator profile, to which an Organisation is linked;
Invitation-based registration: the Customer joins the Platform on invitation from an existing Registered User and becomes a member of that user's Organisation, without being an Administrator;
Joining an Organisation after registration: an already registered Customer may, on invitation from an Administrator, join an existing Organisation as a member.

The Customer undertakes to provide truthful, accurate, up-to-date, and complete information, and to keep it up to date. TripleStack reserves the right to update the list of required information at any time.

3.3 Setting up Registered User permissions

The Administrator defines the login procedures and the scope of usage rights for Registered Users linked to the Customer's Organisation. Each Registered User is responsible for reading and accepting these Terms and providing truthful, accurate, up-to-date, and complete information.

3.4 Access security

Access to the Customer's personal space and Organisation is strictly personal and non-transferable. Passwords must not be shared or communicated to third parties under any circumstances. The Customer and its Registered Users are solely responsible for the preservation and confidentiality of their credentials, except in the event of a technical failure attributable to TripleStack.

In the event of loss, theft, or compromise of credentials resulting from the Customer's negligence or the action of a malicious third party, TripleStack shall not be held liable for the consequences of fraudulent use of the relevant account. The Customer undertakes to notify TripleStack without delay at legal@retyc.net in the event of actual or suspected compromise.

TripleStack shall not be held liable for identity theft in the event of fraudulent registration. Any person who discovers that their identity has been misappropriated must immediately contact TripleStack at legal@retyc.net.

If TripleStack has valid reasons to suspect that the information provided is false, inappropriate, outdated, or incomplete, it reserves the right to suspend or delete the Customer's account and to refuse any future use of the Services.

SSO Authentication. When the Customer uses an external single sign-on (SSO) solution to access the Platform, deactivating an account within the Customer's SSO system does not automatically deactivate the corresponding Retyc account; it only blocks authentication via that SSO channel. The management and deactivation of Retyc accounts are the exclusive responsibility of the Administrator. TripleStack shall not be held liable for any access to the Platform resulting from the Administrator's failure to deactivate the relevant Retyc account.

Article 4 - Retyc Services

4.1 Description of Services

TripleStack offers a secure file storage and sharing service with end-to-end encryption, hosted exclusively on infrastructure located in Europe. The various Services, features, and subscriptions offered are defined on the Retyc website.

The Customer may subscribe to the Free Plan or a paid subscription on a monthly or annual basis, renewable by automatic renewal under the conditions defined in Article 6.

4.2 Acceptable use policy

The Customer is responsible for all Customer Data communicated and used by them and their Registered Users via the Platform. The Customer undertakes not to resell the Services to third parties or to use them for purposes other than those defined herein. In the event of a breach, TripleStack may immediately suspend the Services, close the account, and terminate the contract.

Prohibited content. It is strictly prohibited to use the Platform to store, share or distribute any unlawful content, including: any content contrary to public order and morality, any child pornography content, any content glorifying terrorism or crimes against humanity, any content infringing the intellectual property rights of third parties, any content constituting an infringement of privacy or human dignity. TripleStack reserves the right to immediately remove any unlawful content brought to its attention and to terminate the relevant Customer's account, without prejudice to any legal action.

The Customer also undertakes not to circumvent the Platform's security features, not to disrupt its operation (spam, denial of service attacks, viruses), not to reverse-engineer the Platform, and not to use software or robots to access the Services without authorization. Any abuse identified must be reported to legal@retyc.net.

Hosting provider status. As a hosting provider within the meaning of Article 6 of French Act No. 2004-575 of 21 June 2004 on confidence in the digital economy (LCEN) and Regulation (EU) 2022/2065 on digital services (DSA), TripleStack is not subject to a general obligation to monitor content stored on the Platform. TripleStack shall not be held liable for content stored by the Customer unless TripleStack, having been informed of its unlawful nature, has failed to act promptly to remove it or render it inaccessible. Any unlawful content may be reported to TripleStack at legal@retyc.net.

4.3 Additional services and changes

The Platform and Services are subject to change. TripleStack may offer additional services or new features, which may be subject to additional conditions. TripleStack may at its sole discretion modify or remove any Service or feature. In the event of removal or material modification, TripleStack undertakes to notify the Customer in advance as soon as possible.

Article 5 - Financial terms

5.1 Pricing

The terms and prices relating to paid Services are communicated on the Retyc website. The Free Plan is available free of charge, subject to the limitations defined on the Retyc website.

Prices are quoted in euros, excluding VAT and including all taxes. The total amount is indicated in the subscription summary, both excluding and including all taxes.

Prices are subject to change. Any pricing change will be brought to the Customer's attention before coming into force, in accordance with the procedures set out in Article 14.

5.2 Plan changes

The Customer may change their chosen subscription plan during the subscription period. Such a change will take effect for the remainder of the current period and for subsequent renewals. Amounts due will be recalculated on a pro rata basis for the remaining period. Where a credit is due, the Customer will benefit from it in the following renewal period.

5.3 Payment terms

The order is payable in euros, in full on the date of the order. Payments are processed by Stripe, a payment services provider acting as an independent data controller for payment data. Stripe's general terms are available at https://stripe.com/fr/legal.

For subscriptions, the Customer is automatically billed at the beginning of each period for the applicable fees and taxes. The Customer must pay the total amount of each invoice without being able to offset any amounts claimed as owed by TripleStack.

The conditions applicable to late payment are defined in Part II for B2B Customers and in Part III for B2C Customers.

Article 6 - Term - Termination - Consequences

6.1 Term

The contract takes effect on the date of the Customer's registration. Paid subscriptions are taken out for a monthly or annual period and renewed by automatic renewal for successive identical periods, unless terminated as set out below. The Free Plan is entered into for an indefinite period.

For B2C Customers holding a paid subscription, TripleStack will notify the Customer, by any means capable of providing written evidence, of the renewal of the contract, at the latest one (1) month before the renewal date, in accordance with applicable consumer law provisions.

6.2 Termination by TripleStack

TripleStack may terminate the contract with immediate effect in the event of a serious breach by the Customer, in particular in the event of storage or sharing of unlawful content, a material breach of these Terms, or persistent non-payment.

For any other legitimate reason, TripleStack will notify the Customer of its decision to terminate the contract with reasonable prior notice of at least thirty (30) days, except in exceptional circumstances that make it impossible to maintain the Service during that period.

6.3 Termination by the Customer

The B2B Customer may terminate their subscription at any time. Termination takes effect at the end of the current subscription period, without renewal. The Free Plan account may be deleted at any time via the account settings.

The termination conditions applicable to B2C Customers are defined in Part III.

6.4 Consequences of termination

After account closure, the Customer, Administrator, and all Registered Users will be offered the opportunity to download their Customer Data available on the Platform, within the timeframes defined according to the type of subscription taken out. After this period, Customer Data is deleted immediately and permanently. Data that cannot be deleted without impairing the technical integrity of the Platform will be irreversibly anonymized immediately after this period, so that it can no longer identify the Customer or its Registered Users. No request for restitution or access to data can be honoured after this deletion.

Article 7 - Non-exclusivity

The Customer acknowledges that TripleStack has no obligation of exclusivity and may freely provide Services to other customers, including the Customer's competitors.

Article 8 - Platform availability - Force majeure

The Platform is in principle accessible 24 hours a day, 7 days a week, except for interruptions, whether planned or not, for maintenance purposes or in cases of force majeure as recognized by French courts, including in particular the occurrence of a natural disaster, armed conflict, terrorist attacks, industrial action, a strike at TripleStack or its suppliers, or an imperative order from public authorities.

Where possible, TripleStack will notify the Customer in advance of maintenance or update operations. TripleStack will use its best efforts to ensure that the Platform is continuously accessible and restored as quickly as possible in the event of an interruption.

TripleStack undertakes to take all measures in accordance with best practices to guarantee the IT security of its Services, in particular against the risks of intrusion or viruses. TripleStack reserves the right to interrupt the operation of the Services when the security of the Platform is threatened.

No credit, refund, or service credit will be issued in the event of a planned maintenance downtime, without prejudice to the B2C Customer's legal rights.

Article 9 - Personal data protection

Each party is required to comply with applicable personal data protection regulations, and in particular the GDPR and the French Act on Information Technology, Files, and Civil Liberties of 6 January 1978 as amended.

TripleStack's Personal Data Protection Policy is available at https://retyc.com/legal/data-policy. It forms an integral part of these Terms.

Payments are processed by Stripe, which acts as an independent data controller for payment data collected in that context. The processing of this data is governed by Stripe's privacy policy, available at https://stripe.com/fr/privacy.

The conditions governing data processing in the context of the relationship between TripleStack and B2B Customers, pursuant to Article 28 of the GDPR, are governed by the DPA annexed to these Terms, the conclusion of which is mandatory for all B2B Customers.

Article 10 - Intellectual property

10.1 TripleStack's rights

The Retyc Platform, its interfaces and applications, as well as all elements relating to the TripleStack and/or Retyc trademarks - including logos, designs, images, photographs, and illustrations - remain the exclusive property of TripleStack and are protected by intellectual property law.

Nothing in these Terms shall give the Customer or its Registered Users the right to use the name TripleStack or Retyc, or their trademarks, logos, domain names and other distinctive attributes.

TripleStack grants the Customer a personal, non-transferable, and non-exclusive license authorizing them to access and use the Platform exclusively within the scope of the Services. The Customer is not authorized, except where required by mandatory legal provisions, to modify, decompile, disassemble, or create a derivative work based on the Platform.

10.2 Warranty against infringement

TripleStack declares that it holds all intellectual property rights relating to the Platform and warrants that the Platform does not constitute an infringement of any pre-existing work. TripleStack indemnifies the Customer against any action, claim, or opposition based on an intellectual property right. For its part, the Customer undertakes to immediately notify TripleStack of any infringement of the Platform of which it becomes aware.

Article 11 - Customer Data

TripleStack undertakes to take all measures in accordance with best practices to guarantee the integrity of Customer Data, in particular through regular backups. The Customer remains solely responsible for backing up their own data and is the sole holder of rights over that data.

The Customer grants TripleStack and its sub-processors established in the European Union a non-exclusive, limited to the territory of the European Union, royalty-free, and non-transferable license, solely for the purpose of performing the Services. This license automatically terminates upon the cessation of the contractual relationship.

The Platform and Customer Data are hosted exclusively on infrastructure located within the European Union. The current list of hosting providers is available and kept up to date at https://retyc.com/legal/subprocessors.

The Customer declares and warrants that they hold all necessary authorisations for the use of their Customer Data and that such use does not infringe the rights of third parties.

Within the technical architecture of the Platform, Customer Data is end-to-end encrypted. TripleStack does not hold the decryption keys that would allow it to access the content of files stored by the Customer, or the encrypted metadata ( file names and types). Accordingly, in the event of a requisition from a competent administrative or judicial authority relating to the content of Customer Data, TripleStack will cooperate with the said authority within the limits of its technical access capabilities and will communicate the account information and unencrypted technical metadata in its possession. Unless the requisition prevents it from doing so, TripleStack will inform the Customer without delay.

Loss of private key password. The Platform distinguishes between the account login password (which can be recovered via the standard reset procedure) and the encryption private key password, which protects access to the user's encrypted data. In the event of loss of the private key password, TripleStack is technically absolutely unable to restore the encrypted data in clear text, regardless of the cause of such loss. This impossibility is an inherent and irremediable consequence of the Platform's zero-knowledge architecture. The Customer and its Registered Users are responsible for keeping this password with the utmost care. TripleStack accepts no liability for data loss resulting from loss of the private key password.

TripleStack may aggregate raw, statistical, and anonymised data relating to the use of the Platform, for public disclosure and/or communication to third parties.

Article 12 - Liability

12.1 TripleStack's liability

TripleStack accepts no liability for the results obtained by the Customer and Registered Users from their use of the Services. As the Platform is a standard service designed to satisfy the largest number of customers, TripleStack cannot guarantee that it is adapted to the Customer's specific needs.

As TripleStack is subject to a best-efforts obligation, it shall in no event be liable for direct or indirect damages suffered by the Customer resulting from Platform unavailability. Under no circumstances shall TripleStack be required to indemnify intangible or indirect damages such as, without limitation: loss of business, profit, opportunity, commercial prejudice, or lost revenue.

In any event, TripleStack's financial liability shall not exceed the amounts paid by the Customer for the Services that gave rise to the claim during the previous twelve (12) months.

The above limitations of liability apply to the extent permitted by applicable law. For B2C Customers, they apply without prejudice to the rights conferred by consumer law, and in particular the statutory conformity guarantee defined in Part III.

12.2 Customer's liability

The Customer is required to ensure and warrants compliance with these Terms by all of its Registered Users. The Customer is solely responsible for Customer Data and is responsible for removing any disputed or unlawful content.

Article 13 - Confidentiality

The Parties mutually undertake a general obligation of confidentiality with respect to all confidential information exchanged in connection with the Services, excluding information that is generally known to the public.

The Parties undertake to keep all confidential information strictly secret, not to use it for any purpose other than the performance of the Services, and not to disclose it to third parties without prior written consent, except in the event of an imperative request from a competent public authority.

This confidentiality obligation shall remain in force after the expiry or termination of the contractual relationship for a period of three (3) years.

Article 14 - Amendments to the Terms

These Terms are subject to change. In the event of a material amendment, the Customer and Registered Users will be notified in advance, and in any event at least fifteen (15) days before the amendments come into force, via the Platform or any other appropriate means.

If the Customer refuses the new Terms, they may terminate their subscription in accordance with the conditions of Article 6.

Article 15 - Language

In the event of any conflict or inconsistency between the provisions of the various language versions of these Terms, the French version shall prevail.

Article 16 - Evidence, retention, and archiving

The computerised records maintained in TripleStack's systems in accordance with best practices shall constitute evidence of communications and transactions carried out on the Platform, which the Parties may invoke in their relations. In the event of any discrepancy between TripleStack's records and the documents held by the Customer, the Parties may submit their respective evidence to the assessment of the competent court.

Article 17 - Contact

For any questions regarding these Terms:

By email: legal@retyc.net;
By registered mail with acknowledgement of receipt: TripleStack SAS, 12 B rue du Stade, 69290 Grézieu-la-Varenne, France.

PART II - SPECIFIC PROVISIONS FOR B2B CUSTOMERS

The provisions of this Part apply exclusively to Customers acting in the context of their professional activity.

Article 18 - B2B Customer status

In order to subscribe to the Services as a B2B Customer, the Customer must be a trader, carry out an independent professional activity, or act in the context of their usual and principal professional activity, or be an agent acting on their own behalf or a public legal entity. If the Customer is a legal entity, the signatory of these Terms declares and warrants that they are authorised to bind the Customer.

Article 19 - DPA - Data processing on behalf of the B2B Customer

In the context of providing the Services, TripleStack processes Personal Data on behalf of the B2B Customer, acting as a processor within the meaning of Article 28 of the GDPR.

The conditions under which TripleStack processes this data on behalf of the B2B Customer are exclusively governed by the DPA, the conclusion of which is mandatory and constitutes a condition of access to the Services for all B2B Customers. The DPA is annexed as Annex 1 to these Terms.

Article 20 - SLA and availability

TripleStack undertakes to ensure Platform availability of at least 99% per calendar month, excluding planned maintenance downtime and force majeure events within the meaning of Article 8.

In the event of unplanned unavailability resulting in a monthly availability rate of less than 99%, the B2B Customer may request in writing from TripleStack at legal@retyc.net the issuance of a credit calculated on a pro rata basis for the duration of the unavailability observed during the relevant monthly period. This credit will be applied against the next billing due date.

The request must be submitted within thirty (30) days of identifying the unavailability. The credit constitutes the sole compensation owed by TripleStack for Platform unavailability, without prejudice to the provisions of Article 12.

Article 21 - Data portability

At any time during the term of the contract and during a period of thirty (30) days following termination or expiry of the contract, the B2B Customer may request TripleStack to export all of its Customer Data in a standard, usable format. TripleStack undertakes to make the tools necessary for such export available within a reasonable timeframe.

Upon expiry of the thirty (30) day period following the end of the contractual relationship, Customer Data will be permanently deleted from TripleStack's systems, unless a legal retention obligation applies.

Article 22 - Late payment (B2B)

In the event of late payment, and in accordance with Articles L. 441-10 et seq. of the French Commercial Code, late payment penalties shall be due automatically, without prior notice, at the rate applied by the European Central Bank to its most recent refinancing operation, plus ten (10) percentage points. A fixed indemnity of forty (40) euros for recovery costs shall also be due automatically.

Article 23 - B2B commercial references

TripleStack is authorised by the B2B Customer to cite the provision of the Services as a commercial reference with its customers and prospects, and to use the Customer's distinctive signs (trademark, logo) for this purpose, provided that such use is limited to reference purposes and is not likely to harm the Customer's image.

Article 24 - Governing law and jurisdiction (B2B)

These Terms are governed by French law.

In the event of any dispute relating to the formation, performance, interpretation, or termination of these Terms, the Parties shall endeavour in good faith to find an amicable solution within thirty (30) days of notification of the dispute by the more diligent party.

Failing an amicable solution, exclusive jurisdiction is granted to the competent courts of Lyon, notwithstanding plurality of defendants or warranty claims.

Article 25 - Enterprise plan and dedicated infrastructure

The Enterprise plan, as defined on the Retyc website, may provide for the deployment of dedicated infrastructure on behalf of the Customer, on servers chosen by the Customer or made exclusively available to them.

In such a case, these standard Terms and the annexed DPA do not apply in their entirety. The specific conditions applicable to the Enterprise plan, in particular with regard to hosting, liability, data processing, and service levels, are subject to specific contractual arrangements negotiated between TripleStack and the Customer.

In the absence of a signed specific contract, these Terms apply on a supplementary basis.

PART III - SPECIFIC PROVISIONS FOR B2C CUSTOMERS (CONSUMERS)

The provisions of this Part apply exclusively to Customers acting as consumers within the meaning of French consumer law.

In the event of any conflict between the provisions of this Part and those of Part I, the provisions of this Part shall prevail.

Article 26 - Pre-contractual information

In accordance with Articles L. 111-1 et seq. of the French Consumer Code, TripleStack makes the following information available to B2C Customers prior to subscription, in a legible and comprehensible manner:

the essential characteristics of the Services, available on the Retyc website;
the price of the Services or, for the Free Plan, its free nature and applicable limitations;
the date on which TripleStack undertakes to provide the Services;
information relating to TripleStack's identity and contact details;
the termination terms and conditions for exercising the right of withdrawal;
the existence and conditions for implementing the statutory conformity guarantee.

Article 27 - Right of withdrawal

In accordance with Articles L. 221-18 et seq. of the French Consumer Code, the B2C Customer has a right of withdrawal of fourteen (14) days from the conclusion of the contract, without having to give any reason or pay any penalties.

To exercise this right, the B2C Customer must notify TripleStack of their decision to withdraw before the expiry of the fourteen (14) day period, by any means capable of providing written evidence, in particular:

by email to: legal@retyc.net;
by registered mail with acknowledgement of receipt to: TripleStack SAS, 12 B rue du Stade, 69290 Grézieu-la-Varenne, France.

The B2C Customer may use the model withdrawal form available on the Platform, although this is not mandatory.

In the event of exercise of the right of withdrawal, TripleStack will reimburse the B2C Customer for all amounts paid, without undue delay and no later than fourteen (14) days after the date on which TripleStack is informed of the decision to withdraw, using the same payment method as that used for the initial transaction.

In accordance with Article L. 221-28, 1° of the French Consumer Code, the B2C Customer who wishes the performance of the Services to begin before the expiry of the fourteen (14) day withdrawal period may expressly request this at the time of subscription. In this case, the B2C Customer expressly acknowledges that they will lose their right of withdrawal once the Services have been fully performed before the expiry of that period. If the Services have only been partially performed at the date on which the B2C Customer exercises their right of withdrawal, TripleStack will retain an amount corresponding to the Services provided up to the date of withdrawal, calculated on a pro rata basis for the subscription period taken out.

Article 28 - Statutory conformity guarantee

In accordance with Articles L. 224-25-1 et seq. of the French Consumer Code, applicable to digital content and services, TripleStack is required to provide the Services in conformity with the contract for the duration thereof.

In the event of a lack of conformity, the B2C Customer is entitled to have the Services brought into conformity or, if this is impossible or has not been carried out within a reasonable period, to termination of the contract and, where applicable, a price reduction.

Article 29 - Protection against unfair terms

In accordance with Article R. 212-2 of the French Consumer Code, no clause in these Terms may have the object or effect of suppressing or reducing the B2C Customer's right to redress in the event of a breach by TripleStack of any of its legal or contractual obligations.

Article 30 - Termination and refund (B2C)

The B2C Customer may terminate their paid subscription at any time. Termination takes effect at the end of the current subscription period, without automatic renewal.

In the event of termination by TripleStack for a reason not attributable to the B2C Customer, TripleStack will reimburse the B2C Customer for the portion of amounts paid corresponding to the unused subscription period, pro rata temporis.

In the event of late payment by a B2C Customer, TripleStack will send the Customer a prior formal notice by any means capable of providing written evidence. In the absence of regularisation within fifteen (15) days of this formal notice, TripleStack may suspend and then terminate the Services. Late payment interest at the statutory rate shall apply from the expiry of this period.

Article 31 - Consumer mediation

In the event of a dispute, the B2C Customer may freely use consumer mediation, under the conditions provided for in Articles L. 611-1 et seq. of the French Consumer Code, after first contacting TripleStack at legal@retyc.net.

The competent mediator is the CM2C - Centre de la Médiation de la Consommation de Conciliateurs de Justice, 14 rue Saint-Jean, 75017 Paris - https://www.cm2c.net.

Article 32 - Governing law and jurisdiction (B2C)

These Terms are governed by French law.

In the event of a dispute with a B2C Customer, the French courts shall have jurisdiction. The B2C Customer retains the right to bring proceedings before the court of the place where they resided at the time of conclusion of the contract or at the time of the damaging event, in accordance with applicable consumer law provisions.

Annex 1 - DPA

The DPA is available on the Retyc website at the following address: https://retyc.net/legal/dpa.

Annex 2 - Model withdrawal form

(Complete and return this form only if you wish to withdraw from the contract)

To the attention of TripleStack SAS, 12 B rue du Stade, 69290 Grézieu-la-Varenne - legal@retyc.net

I/We () hereby give notice of my/our () withdrawal from the contract for the provision of the following services:

Ordered on () / received on ():

Name of consumer(s):

Address of consumer(s):

Signature of consumer(s) (only if this form is submitted on paper):

Date:

(*) Delete as applicable.