SEMANTICSAV PLATFORM END-USER LICENSE AGREEMENT (EULA)

Copyright © Meta Forensics Corp.

IMPORTANT - READ CAREFULLY: This End-User License Agreement (“EULA”) is a legal agreement between you (either an individual or entity) and Meta Forensics Corp. (“Company,” “we,” “us,” or “our”) governing your use of the SemanticsAV SDK and its integration within the SemanticsAV Platform.

By installing, copying, or otherwise using the SemanticsAV SDK, you agree to be bound by the terms of this EULA. If you do not agree to these terms, do not install, copy, or use the SDK.

1. DEFINITIONS

“SemanticsAV Platform” or “Platform” means the integrated ecosystem comprising the SDK, the CLI, and optionally the Intelligence service, as defined below.

“SemanticsAV SDK” or “SDK” means the proprietary, closed-source binary analysis engine that provides on-device malware detection capabilities. The SDK is distributed as pre-compiled binary library files. Detection models are distributed separately and updated periodically. Both SDK binaries and detection models are subject to this EULA and represent the core technological innovation of the Platform.

“SemanticsAV CLI” or “CLI” means the official open-source (MIT-licensed) developer toolkit that serves as the primary user and programmatic interface to the SemanticsAV Platform. The CLI enables interaction with all Platform capabilities and is the sole component responsible for all network communications.

“SemanticsAV Intelligence” or “Intelligence” means the optional cloud service that provides deep contextual analysis and advanced threat intelligence. Intelligence is a separate service governed by its own Terms of Service.

“Publicly Available Platform” means the specific Linux and Unix-like operating system versions (including x86_64 and ARM64 architectures) of the SDK that Company makes available under this royalty-free EULA at its sole discretion.

“Analysis Output” means any data, information, results, reports, classifications, scores, metadata, verdicts, confidence ratings, or other analytical products generated by the SDK during its operation.

2. LICENSE GRANT AND SCOPE

2.1 Platform Tiers and License Scope

This EULA establishes two distinct licensing tiers based on operating system platform:

Tier 1: The Freeware Grant (Linux and Unix-like Systems)

Company grants you a perpetual, royalty-free, non-exclusive, worldwide license to use the Publicly Available Platform (Linux and Unix-like operating systems on x86_64 and ARM64 architectures) subject only to the restrictions in Section 3.

This freeware grant is intentionally broad and permissive to enable maximum adoption and integration.

Tier 2: Commercial Licensing Required (All Other Platforms)

Use of the SDK on any operating system not explicitly covered by Tier 1—including but not limited to Microsoft Windows, Apple macOS, proprietary embedded systems, mobile operating systems, or any custom platforms—is strictly prohibited under this royalty-free EULA and requires a separate written commercial license from Company.

2.2 Permitted Uses Under the Freeware Grant

Subject to compliance with Section 3, you may use the Publicly Available Platform for any purpose without limitation, including:

a) Personal and Non-Commercial Use

b) Internal Business Use

c) Commercial Service Provider Use

d) Commercial Redistribution

Redistribution Requirements:
- All recipients must be bound by this EULA
- This EULA must accompany all distributions
- SDK binaries must remain unmodified
- Redistribution is limited to platforms covered by Tier 1
- Attribution requirements in Section 3.3 must be fulfilled

3. RESTRICTIONS: THE THREE LAWS OF IP PROTECTION

While the Tier 1 freeware grant is intentionally permissive regarding usage and distribution, the following three restrictions are absolute and non-negotiable to protect the Platform’s intellectual property:

3.1 The Law of Secrecy: No Reverse Engineering

You may not, under any circumstances:
- Decompile, disassemble, or reverse engineer the SDK binaries
- Attempt to derive, reconstruct, or extract source code, algorithms, neural network architectures, or proprietary data formats
- Use automated tools, debugging techniques, or analysis methods to discover internal SDK implementation
- Circumvent, disable, or interfere with obfuscation, encryption, or protection mechanisms

This prohibition applies regardless of purpose—including academic research, security analysis, or interoperability—except to the extent expressly permitted by applicable mandatory law that cannot be waived by contract.

3.2 The Law of Non-Competition: No Competitive Development

You may not use the SDK, its functionality, or its Analysis Output to:

This prohibition is universal: It applies to internal projects, proof-of-concept systems, research prototypes, academic studies, and commercial products alike.

3.3 The Law of Acknowledgment: Mandatory Attribution

Any product, service, or distribution that incorporates, bundles, or redistributes the Publicly Available Platform must provide clear and conspicuous attribution to Meta Forensics Corp. and the SemanticsAV Platform.

Required Attribution:
- Product documentation, legal notices, or “About” sections must include: “Powered by SemanticsAV” or “Malware detection provided by SemanticsAV Platform”
- Public-facing materials should acknowledge Platform use where reasonable
- Attribution must be visible to end users and may not be hidden in buried configuration files or source code comments

This ensures that as the Platform becomes foundational infrastructure, our contribution is appropriately recognized.

4. ADDITIONAL USE RESTRICTIONS

4.1 No Circumvention of Technical Protections

You may not:
- Bypass, disable, or interfere with license verification mechanisms, API rate limits, or access controls
- Modify wrapper code to circumvent usage restrictions or alter compliance mechanisms
- Use the Platform in violation of export control laws or for illegal purposes

4.2 Public Benchmarking Principles

Company encourages transparent, objective public benchmarking to advance the cybersecurity field. Publishers of benchmark results comparing the Platform to other products agree to:

a) Full Transparency: Disclose complete methodology, configurations, datasets, sample selection criteria, and exact product versions to enable independent verification.

b) Reproducibility: Make datasets, configurations, and testing tools available publicly or upon reasonable request.

c) Good Faith Comparison: Use the latest generally available Platform version configured per official documentation. Intentional misconfiguration or selective presentation designed to produce misleading results is prohibited.

d) Balanced Reporting: Present results with appropriate context, limitations, and acknowledgment that performance varies across environments.

Company reserves the right to publicly respond to and identify methodological deficiencies in benchmarks violating these principles.

5. DATA PROCESSING AND PRIVACY

5.1 SDK Architecture: Pure Offline Operation

The SemanticsAV SDK is a pure computational engine with zero embedded network communication capabilities. The SDK contains no networking code, performs no data transmission, and has no ability to communicate with external servers. All file analysis performed by the SDK occurs entirely on-device with complete network isolation.

5.2 CLI Architecture: The Transparent Network Gateway

The SemanticsAV CLI (open-source, MIT-licensed) is the sole and exclusive component responsible for all network communications within the Platform ecosystem. This architectural separation is your guarantee of transparency: You can audit the complete network behavior of the Platform by inspecting the open-source CLI code.

5.3 Privacy Policy Incorporation

Comprehensive details on data collection, processing, retention, user rights, and protection practices when using the Platform (including the optional Intelligence service) are provided in our Privacy Policy, which is incorporated herein by reference and forms an integral part of this EULA.

By using the SDK, CLI, or Intelligence service, you agree to be bound by both this EULA and the Privacy Policy.

6. INTELLIGENCE SERVICE

SemanticsAV Intelligence is an optional cloud service governed by separate Intelligence Terms of Service, which are incorporated herein by reference and form an integral part of this EULA when you access Intelligence.

Intelligence requires a valid API key obtained through the SemanticsAV Console and is subject to its own pricing, usage terms, and service level agreements. The SDK operates entirely offline during scanning and does not require Intelligence access for basic malware detection capabilities.

By accessing Intelligence, you agree to be bound by this EULA, the Intelligence Terms of Service, and the Privacy Policy.

7. INTELLECTUAL PROPERTY RIGHTS

The SDK and all intellectual property rights therein—including but not limited to copyrights, patents, trade secrets, trademarks, neural network architectures, training methodologies, and proprietary algorithms—are and shall remain the exclusive property of Meta Forensics Corp.

This EULA grants you usage rights but no ownership rights in the SDK. All rights not expressly granted herein are reserved by Company.

8. DISCLAIMER OF WARRANTY

THE SDK IS PROVIDED “AS IS” WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED. TO THE MAXIMUM EXTENT PERMITTED BY LAW, COMPANY DISCLAIMS ALL WARRANTIES, INCLUDING BUT NOT LIMITED TO:

COMPANY DOES NOT WARRANT THAT THE SDK WILL MEET YOUR REQUIREMENTS OR THAT ITS OPERATION WILL BE UNINTERRUPTED, SECURE, OR ERROR-FREE.

9. LIMITATION OF LIABILITY

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

a) IN NO EVENT SHALL COMPANY BE LIABLE FOR ANY SPECIAL, INCIDENTAL, INDIRECT, CONSEQUENTIAL, PUNITIVE, OR EXEMPLARY DAMAGES, INCLUDING BUT NOT LIMITED TO:
- Loss of profits or revenue
- Loss of data or information
- Business interruption
- Cost of substitute products or services
- Damage to reputation
- Failure to detect threats or malware

b) COMPANY’S TOTAL AGGREGATE LIABILITY ARISING OUT OF OR RELATED TO THIS EULA SHALL NOT EXCEED THE AMOUNT PAID BY YOU TO COMPANY FOR THE SDK IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM (WHICH MAY BE ZERO FOR THE PUBLICLY AVAILABLE PLATFORM).

c) THESE LIMITATIONS APPLY EVEN IF COMPANY HAS BEEN ADVISED OF THE POSSIBILITY OF SUCH DAMAGES AND REGARDLESS OF THE LEGAL THEORY (CONTRACT, TORT, NEGLIGENCE, STRICT LIABILITY, OR OTHERWISE).

10. TERM AND TERMINATION

10.1 Term

This EULA is effective from the date you first install or use the SDK and continues until terminated.

10.2 Termination for Breach

Your rights under this EULA will terminate automatically and immediately without notice if you:
- Violate any restriction in Section 3
- Use the SDK on non-covered platforms without proper licensing
- Fail to comply with any material term of this EULA

10.3 Effect of Termination

Upon termination, you must:
- Immediately cease all use of the SDK
- Destroy all copies of the SDK in your possession or control
- Remove the SDK from all systems and distributions
- Certify destruction in writing if requested by Company

Sections 3, 7, 8, 9, 11, and 12 survive termination.

11. COMPLIANCE AND AUDIT

11.1 Audit Rights

Company reserves the right to audit your use of the SDK to ensure compliance with this EULA. You agree to:
- Cooperate with reasonable audit requests
- Provide access to relevant records, systems, and documentation
- Allow Company or its representatives to verify compliance

11.2 Remedies for Non-Compliance

If an audit reveals non-compliance, you agree to:
- Immediately cease all non-compliant activities
- Pay applicable commercial license fees retroactively
- Reimburse Company’s reasonable audit costs if non-compliance exceeds 5%

12. GENERAL PROVISIONS

12.1 Governing Law

This EULA shall be governed by and construed in accordance with the laws of the Republic of Korea, without regard to conflict of law principles.

12.2 Jurisdiction

Any disputes arising under or related to this EULA shall be subject to the exclusive jurisdiction of the courts of the Republic of Korea. You consent to personal jurisdiction in these courts.

12.3 Entire Agreement

This EULA, together with the incorporated Privacy Policy and Intelligence Terms of Service, constitutes the entire agreement between you and Company regarding the SDK and supersedes all prior agreements, understandings, negotiations, and discussions, whether oral or written.

12.4 Amendments

This EULA may only be modified by a written agreement signed by an authorized representative of Company. Company may update this EULA for new versions of the SDK, with updated terms applying to such new versions.

12.5 Severability

If any provision of this EULA is held invalid, illegal, or unenforceable, the remaining provisions shall remain in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid while preserving original intent.

12.6 No Waiver

Failure by Company to enforce any right or provision shall not constitute waiver of such right or provision. Any waiver must be in writing and signed by Company.

12.7 Export Compliance

You agree to comply with all applicable export control laws and regulations. You may not use, export, or re-export the SDK except as authorized by applicable law.

12.8 Government Use

If you are a government entity, the SDK is provided as “Commercial Computer Software” with only those rights granted to non-government users under this EULA.

12.9 Assignment

You may not assign or transfer this EULA or any rights granted herein without Company’s prior written consent. Company may freely assign this EULA. Any attempted unauthorized assignment is void.

12.10 Third-Party Components

The CLI and other Platform components may include third-party open-source software governed by their own licenses. See https://github.com/metaforensics-ai/semantics-av-cli/blob/main/ThirdPartyNotices.txt for details. Such licenses apply only to their respective components and do not extend to the SDK.

12.11 License Precedence

In the event of conflict between this EULA and any other license:
- This EULA governs exclusively with respect to the SDK
- Other licenses apply only to their respective components
- Rights granted under other licenses do not extend to or modify SDK terms

13. CONTACT AND LICENSING INQUIRIES

General inquiries:
contact@metaforensics.ai

Commercial licensing:
sales@metaforensics.ai

Privacy matters:
privacy@metaforensics.ai

GitHub Repository:
https://github.com/metaforensics-ai/semantics-av-cli

14. ACCEPTANCE

By installing, copying, downloading, accessing, or otherwise using the SDK, you acknowledge that you have:
- Read this EULA in its entirety
- Understand its terms and conditions
- Agree to be legally bound by this EULA
- Have the authority to enter into this agreement

If you do not agree to these terms, do not use the SDK.

© 2025 Meta Forensics Corp. All rights reserved.

SemanticsAV™ is a trademark of Meta Forensics Corp.

Version: 1.0
Effective Date: October 1, 2025