Public Offer Agreement — Edition of October 20, 2026

MYCLOUD Limited Liability Company, hereinafter referred to as the "Provider", represented by its Director Ruslan Karimovich Kurbanov, acting on the basis of the Charter, publishes this Public Offer (hereinafter the "Offer"), which constitutes an official proposal to enter into an agreement for the provision of cloud, telecommunications and IT services.

This Offer is addressed to individuals, sole proprietors and legal entities, hereinafter referred to as the "Client".

In accordance with Article 370 of the Civil Code of the Republic of Uzbekistan, acceptance of this Offer constitutes full and unconditional acceptance of all terms and conditions of this Offer.

1. GENERAL PROVISIONS

1.1. This Offer governs the relationship between the Provider and the Client in the provision of the following services:

• web hosting: hosting of the Client's websites, web applications and databases on the Provider's servers;
• DNS hosting: serving DNS zones of the Client's domain names on the Provider's DNS servers;
• VPS/VDS virtual servers, including those with pre-installed application images;
• dedicated server rental;
• colocation: placement of the Client's equipment, rental of racks and rack sections, cross-connects and ports, remote hands services;
• MCDrive cloud data storage, S3 object storage, file sharing service;
• MCVMS cloud video surveillance, video analytics, long-term video archive storage;
• rental and sale of video surveillance equipment;
• backup and disaster recovery (DRaaS);
• server administration and monitoring;
• managed services: databases (DBaaS) and Kubernetes;
• cloud workstations (VDI) and 1C hosting in the cloud;
• corporate email;
• domain name registration and maintenance, SSL certificates;
• network and telecommunications services: IP addresses, guaranteed bandwidth;
• IT infrastructure audit and migration;
• technical support;
• other services published on the Provider's website.

1.2. Full and unconditional acceptance of this Offer shall be constituted by any of the following:

• registration of the Client on the Provider's website;
• creation of an Account;
• payment for services;
• use of the Provider's services;
• signing of electronic documents;
• use of the Client Panel;
• other actions confirming the intention to use the Provider's services.

1.3. From the moment of acceptance of the Offer, the Client shall be deemed to have read and agreed to all terms and conditions of this document.

1.4. The current version of the Offer is published on the Provider's official website.

1.5. The Provider may amend this Offer unilaterally by publishing a new edition on the Provider's website. The Provider notifies the Client of a new edition at least 10 (ten) calendar days before it takes effect by publishing it on the website and sending a notice via the Personal Account, by email or via the Provider's Telegram bot.

1.6. Continued use of the services after publication of a new version of the Offer constitutes the Client's consent to the amendments made.

2. TERMS AND DEFINITIONS

2.1. Provider — MYCLOUD LLC.

2.2. Client — an individual, legal entity or sole proprietor who has accepted this Offer.

2.3. Services — any services provided by the Provider.

2.4. Account — the Client's account in the Provider's systems.

2.5. Client Panel — the software interface for managing services.

2.6. VPS/VDS — a virtual private (dedicated) server.

2.7. Colocation — the service of placing the Client's equipment at the Provider's facility.

2.8. MCDrive — a cloud data storage service.

2.9. MCVMS — a cloud video surveillance service.

2.10. SLA — Service Level Agreement.

2.11. Tariff — the price and parameters of a specific service.

2.12. Content — any information placed by the Client.

2.13. Spam — mass unsolicited distribution of electronic messages.

2.14. DDoS attack — a distributed attack aimed at disrupting the availability of resources.

2.15. Abuse — violation of the rules for using the services, spam, malicious traffic, unlawful activity, or actions posing a threat to the infrastructure.

2.16. Dedicated Server — a physical server of the Provider made available for use by a single Client.

2.17. Rack (rack section) — a lockable space in a data center telecommunications rack provided to the Client for the placement of equipment.

2.18. Cross-connect — a physical cable connection within the data center between the Client's equipment and the equipment of a telecommunications operator, another client or the Provider's network.

2.19. Remote hands — work on the Client's equipment in the data center performed by the Provider's engineers at the Client's Request.

2.20. S3 — object storage accessible via a protocol compatible with Amazon S3.

2.21. Managed Service — a service under which the Provider assumes the administration of the infrastructure or platform to the extent defined by the tariff.

2.22. DRaaS — a disaster recovery service: maintaining a replica of the Client's server in the Provider's infrastructure with the ability to launch it.

2.23. Cloud Workstation (VDI) — a virtual desktop of a single named user hosted in the Provider's infrastructure.

2.24. Rented Equipment — equipment owned by the Provider and transferred to the Client for temporary use.

2.25. Request — the Client's submission via the ticket system, the Client Panel or another agreed channel instructing the Provider to perform work or change service parameters.

2.26. Billing Period — a calendar month, unless otherwise provided by the tariff.

2.27. Balance — the Client's personal account in the Personal Account to which the Client's payments are credited and from which service fees are debited.

2.28. Day — the period from 00:00 to 24:00 Tashkent time (UTC+5). All time limits and charge times in this Offer are stated in Tashkent time.

2.29. Consumer — a Client who is an individual ordering services for personal, family, household or other needs not related to business activity.

2.30. Trial Period and Promotion — provision of a service free of charge or on preferential terms for the period and on the conditions published on the Provider's website.

2.31. Retention Period — the period after suspension of a service during which the Client's data is kept and the service can be resumed without data loss (Section 21).

3. SUBJECT OF THE AGREEMENT

3.1. The Provider undertakes to provide the Client with services in accordance with the selected tariffs and service parameters.

3.2. The Client undertakes to:

• comply with the terms of this Offer;
• pay for the services in a timely manner;
• comply with the legislation of the Republic of Uzbekistan;
• not use the services for unlawful purposes.

3.3. The specific list of services, their characteristics and prices are determined by tariffs, invoices, specifications, annexes or data in the Client Panel.

4. REGISTRATION AND ACCOUNT

4.1. To receive the services, the Client must complete registration.

4.2. The Client shall provide accurate information.

4.3. The Provider may request:

• passport details;
• registration documents;
• powers of attorney;
• proof of address;
• other documents.

4.4. The Provider may suspend the provision of services in the event of:

• provision of inaccurate information;
• failure to provide documents;
• suspected fraud;
• violation of the law.

4.5. The Client is solely responsible for the security of logins, passwords, API keys and other means of access.

4.6. All actions performed through the Client's Account shall be deemed to have been performed by the Client.

4.7. Clicking the "I agree" button in the Client Panel or continuing to use the services shall be deemed the Client's electronic consent.

5. PROCEDURE FOR PROVISION OF SERVICES

5.1. Services are provided 24 hours a day, unless otherwise provided by the tariff or the SLA.

5.2. The service commencement date shall be the later of the following dates:

• the date of service activation;
• the date of receipt of payment.

5.3. The Provider may carry out:

• preventive maintenance;
• emergency recovery work;
• equipment upgrades.

5.4. Where necessary, the Provider may temporarily restrict access to the services.

5.5. The Provider may engage third parties to provide the services.

5.6. The Provider does not guarantee 100% uninterrupted operation of the services. Interruptions may occur due to preventive maintenance, failures, DDoS attacks, and problems with backbone operators and third-party services.

5.7. The level of service availability ensured by the Provider is at least 99.5% per calendar year. The calculation of the availability level for the calendar year shall exclude interruptions caused by scheduled preventive maintenance of which the Client was notified in advance, by the circumstances specified in clause 5.6 and Section 25 of this Offer, by the Client's actions, and by the restriction or suspension of services in the cases provided for in this Offer.

5.8. The Provider may temporarily restrict or block services without prior notice if a threat to the security of the infrastructure arises.

5.9. Services are provided to persons aged 18 or over. Persons aged 14 to 18 may use the services with the written consent of their parents or other legal representatives; for persons under 14, the agreement is concluded by their legal representatives.

6. VPS/VDS AND DEDICATED SERVERS

6.1. The Provider provides computing resources in accordance with the selected tariff.

6.2. The Client is solely responsible for:

• server administration;
• software installation;
• backup;
• data protection;
• software updates.

6.3. Unless the administration service has been ordered separately, the Provider is not obliged to:

• configure software;
• fix application errors;
• ensure the security of the Client's software.

6.4. The Provider may restrict the operation of the Client's server in the event of:

• excessive load;
• DDoS attacks;
• distribution of malicious software;
• security breaches;
• use of prohibited software.

6.5. The Client is prohibited from:

• running cryptocurrency mining without written approval;
• conducting network scanning;
• password brute-forcing;
• operating botnets;
• using proxies for unlawful activities;
• mass distribution of spam;
• hosting malicious software.

6.6. The Dedicated Server remains the property of the Provider. The Provider ensures the operability of the hardware and the replacement of faulty components; data on the server's disks is destroyed irrecoverably after termination of the service.

6.7. Application images (WordPress, Docker, GitLab and others) are provided "as is" to speed up deployment. Third-party software included in the images is used under the license terms of its right holders. After deployment, the Client is solely responsible for the configuration, updating and security of the applications.

6.8. The Provider does not provide or sell licenses for commercial software (Windows Server, RDS CAL, MS SQL, Microsoft Office and others). The Client purchases such licenses independently and uses them on the Provider's servers if the license terms permit such use; the Client bears responsibility for the lawfulness of the licenses used.

7. COLOCATION

7.1. The Provider provides services for the placement of the Client's equipment in the Provider's data center.

7.2. The Client's equipment remains the property of the Client.

7.3. Equipment is handed over under an acceptance and transfer certificate.

7.4. The Provider ensures:

• placement of the equipment;
• power supply;
• network connectivity;
• basic physical security;
• access for the Client's authorized representatives.

7.5. The Client shall:

• use certified equipment;
• comply with power consumption limits;
• not create a threat to the data center infrastructure.

7.6. The Provider may disconnect the Client's equipment in the event of:

• a short circuit;
• overloading of the power grid;
• a security threat;
• an emergency.

7.7. After termination of the services, the Client shall collect its equipment within 5 business days.

7.8. If the Client does not collect the equipment within the period set in clause 7.7, the Provider may charge a storage fee equal to the daily colocation tariff for such equipment for each day of storage.

7.9. Rental of a rack or rack section provides the Client with a lockable space with the usable capacity (U) and connection ports specified in the tariff. Power for the rack (rack section) is paid for the total allocated load (power limit) chosen by the Client when ordering (for example, 6 kW or 10 kW) at the tariff rate per 1 W per day. The Client shall not exceed the allocated power limit; the limit is increased at the Client's Request.

7.10. Access of the Client's representatives to the rack is provided according to the list of authorized persons submitted by the Client, in the manner established by the data center rules. The Client is responsible for the actions of its representatives at the facility.

7.11. Cross-connects and ports are arranged by the Provider. The Client pays a one-time connection fee and a daily fee according to the tariff. The Client is prohibited from independently changing the cabling and from connecting equipment to ports not allocated to the Client.

7.12. Remote hands work is performed at the Client's Request and includes physical actions with the Client's equipment at the facility: rebooting, connecting a console, replacing components from the Client's spare parts kit, installing an operating system from the Client's media, cabling, and receiving and releasing equipment. Work performed on business days from 09:00 to 18:00 Tashkent time is included in the colocation fee up to 2 (two) hours of engineer time per billing period per Client Account; any unused balance does not carry over to the next period. Work in excess of this amount, work at other times, and work on weekends and public holidays is paid at the hourly rate according to the tariff, with a minimum charge of 1 hour; its cost and estimated time are agreed with the Client before the work begins. Software installation and configuration, and server assembly and upgrades, are not part of remote hands and are paid for separately.

7.13. The Provider performs remote hands work in accordance with the Client's instructions and shall not be liable for consequences caused by inaccurate or erroneous instructions, or for the operability of the Client's software and data after the work is performed.

7.14. Acceptance of equipment at the facility and its removal are documented by a certificate. The Provider may refuse to accept equipment that does not meet the data center's requirements.

8. MCDrive, S3 AND FILE SHARING

8.1. MCDrive provides the Client with cloud space for storing files.

8.2. The Client is solely responsible for:

• the content of the files;
• the lawfulness of data storage;
• backup;
• granting access to third parties.

8.3. The Provider does not inspect the content of the Client's files, except in cases of:

• requests from competent authorities;
• complaints from third parties;
• detection of violations of the law.

8.4. The Provider may restrict access to data:

• at the request of government authorities;
• in the event of a violation of the law;
• in the event of distribution of malicious software.

8.5. The Client is prohibited from storing:

• malicious software;
• materials that infringe copyright;
• prohibited content;
• extremist materials;
• illegal databases.

8.6. S3 object storage is provided with key-based access (Access Key / Secret Key) using keys created by the Client in the Client Panel. The Client independently manages the keys, access policies and public visibility of objects and is responsible for their disclosure.

8.7. Storage volume in MCDrive, S3 and the file sharing service is determined by the space actually occupied, including object versions and data that has been deleted but is still retained, and is paid for according to the tariff.

8.8. The provisions of clauses 8.2–8.5 also apply to S3 and the file sharing service.

8.9. When using the file sharing service, the Client independently determines the recipients, validity period and protection of links and is responsible for the content of the files sent and received. The Provider may disable a link upon receipt of a substantiated complaint. By placing its own logo and name, the Client warrants that it holds the rights to them.

9. MCVMS — CLOUD VIDEO SURVEILLANCE

9.1. MCVMS provides cloud storage of video recordings and remote access to video streams.

9.2. The Client is solely responsible for:

• the lawfulness of the video surveillance;
• obtaining the necessary consents;
• compliance with personal data legislation.

9.3. The Provider shall not be liable for:

• the quality of the Client's internet connection;
• the operability of third-party cameras;
• malfunction of the Client's equipment;
• loss of video recordings due to the Client's actions.

9.4. The Provider may limit archive storage in accordance with the tariff.

9.5. The retention period of video recordings is determined by the tariff plan.

9.6. The Client shall ensure:

• the security of credentials;
• protection of access to the cameras;
• the lawful use of the video surveillance system.

9.7. Video analytics functions (visitor counting, object detection, license plate recognition and others) are based on machine learning algorithms whose results are probabilistic in nature. The Provider does not guarantee absolute recognition accuracy; analytics results do not replace independent verification by the Client and do not in themselves constitute legally significant evidence.

9.8. The Client is solely responsible for ensuring the lawful use of video analytics, including recognition of state vehicle registration plates, and for informing persons within the video surveillance area.

9.9. Long-term (archive) storage of video recordings is provided for the period established by the tariff. Access to recordings moved to archive storage may be provided with the delay specified in the tariff. Upon expiry of the retention period or termination of the service, recordings are deleted irrecoverably.

9.10. From the effective date of this edition of the Offer, the parties' relationship regarding MCVMS services is governed by this Offer. The separate MCVMS public offer agreement and terms of use published earlier apply to the parties' relationship that arose before that date. MCVMS user manuals are for reference only.

10. EQUIPMENT RENTAL AND SALE

10.1. The Provider may transfer equipment (Bridge, IP cameras, switches and other equipment) to the Client for temporary use on rental terms.

10.2. Rented Equipment is the property of the Provider and is transferred to the Client under an acceptance and transfer certificate specifying the name, serial numbers and installation location.

10.3. The minimum rental term is determined by the tariff. If the Client terminates the rental before the minimum term expires, the Client shall pay the rent for the remaining part of the minimum term or purchase the equipment at an agreed price.

10.4. Installation and configuration of the equipment, as well as its replacement in the event of failure not caused by the Client, are included in the rental fee, unless otherwise specified in the tariff.

10.5. The Client shall use the equipment for its intended purpose, ensure its safekeeping, power supply and network connection, not open or modify the design of the equipment, and not transfer it to third parties.

10.6. In the event of loss, theft or damage to the equipment through the fault of the Client or third parties, the Client shall reimburse the Provider for the cost of the equipment or its repair in accordance with the tariff or an assessment report.

10.7. Upon expiry of the rental, the Client shall return the equipment to the Provider within 5 business days in good working order, subject to normal wear and tear. Dismantling is performed by the Provider, unless otherwise agreed by the parties.

10.8. After the minimum rental term expires, the Client may purchase the equipment on terms agreed by the parties.

10.9. The Provider may sell equipment (IP cameras, Bridge, switches, storage devices and other equipment) to the Client on the basis of an invoice. The name, quantity and price of the equipment are stated in the invoice; ownership and the risk of accidental loss pass to the Client upon delivery of the equipment under a waybill or certificate.

10.10. The Provider gives a warranty of 12 (twelve) months from the date of delivery for equipment sold, unless a longer period is set by the manufacturer or stated in the invoice. The warranty does not cover defects caused by violation of operating rules, mechanical damage, exposure to moisture, voltage surges or opening of the equipment by persons not authorized by the Provider.

10.11. If a defect is found during the warranty period, the Provider repairs or replaces the equipment at its option. The rights of a Consumer Client regarding goods of inadequate quality, including the time limits for remedying defects, are determined by consumer protection legislation.

10.12. Installation and configuration of equipment sold are paid separately or included in the price of the kit if so stated in the invoice.

11. BACKUP AND DISASTER RECOVERY (DRaaS)

11.1. If the backup service has not been ordered separately by the Client, the Provider may, but is not obliged to, back up the Client's data.

11.2. In this case, the Provider does not guarantee:

• the existence of a backup copy;
• the possibility of recovery;
• the completeness of backup copies.

11.3. The Client shall independently create backup copies of mission-critical data.

11.4. The backup service, when ordered separately, is provided with the parameters (frequency, number of restore points, retention depth, encryption) determined by the tariff. Backup storage volume is paid for based on the space actually occupied.

11.5. The Client shall ensure the installation and operability of the backup agent, access to the systems being backed up, and sufficient resources to perform the backup. The Provider notifies the Client of failed backup jobs by an agreed method.

11.6. Where backups are encrypted with the Client's key, the Provider has no access to the key; if the key is lost, data recovery is impossible.

11.7. Data restoration from a backup is performed at the Client's Request within the time frame determined by the tariff. The Client checks the completeness of the restored data and confirms the result.

11.8. As part of the DRaaS service, the Provider maintains a replica of the Client's server with the update frequency (RPO) and number of restore points determined by the tariff. The replica is kept powered off; a fee is charged for its storage according to the tariff.

11.9. The replica is launched at the Client's Request or according to a scenario agreed by the parties. The target launch time (RTO) is determined by the tariff. From the moment the replica is launched until it is stopped, computing resources are paid for at the VPS tariffs.

11.10. The Client is responsible for the consistency of applications and databases in the replica, for configuring the network infrastructure (DNS, VPN, routing) for failover to the replica, and for conducting test launches. The Provider recommends conducting a test launch at least once per quarter.

11.11. Transfer of data back to the Client's infrastructure after the incident has been resolved is performed at the Client's Request and is paid for separately, unless otherwise provided by the tariff.

12. ADMINISTRATION, MONITORING AND MANAGED SERVICES

12.1. The administration service includes the work listed in the selected tariff (installation of updates, security configuration, backup control, monitoring, incident response and other work). Work not included in the tariff is performed at the Client's Request and paid for separately.

12.2. The Provider responds to incidents as quickly as possible, with priority according to the tariff; the response time depends on the nature of the incident and is calculated from the moment the Request is registered or the monitoring alert is triggered. Response time is not resolution time.

12.3. To provide managed services, the Client grants the Provider the necessary access to servers and systems and promptly informs the Provider of changes made by the Client or third parties. The Provider shall not be liable for failures caused by such changes, or for the operation of the Client's application software, unless its maintenance is included in the tariff.

12.4. Scheduled work on managed services is performed during maintenance windows agreed with the Client. The Provider may perform urgent work to remediate vulnerabilities without prior approval, with subsequent notification of the Client.

12.5. For administration services, the Provider provides the Client with a monthly report on the work performed via the Client Panel or by another agreed method.

12.6. The monitoring service includes checking the availability and parameters of the Client's objects at the frequency set by the tariff and sending notifications to agreed channels (Telegram, email and others). The Provider shall not be liable for delayed or undelivered notifications for reasons attributable to third-party services and telecommunications operators. Resolution of detected problems is not part of the monitoring service, unless the tariff provides for response by the Provider's engineer.

12.7. As part of the "Database as a Service" offering, the Provider ensures the installation, updating, backup, monitoring and basic configuration of the DBMS server. The Client independently manages the structure and content of the databases; the Client's superuser access may be restricted. Recommendations on query optimization are advisory in nature.

12.8. As part of the "Managed Kubernetes" offering, the Provider ensures the operation of the cluster control plane components, version updates and node operability. The Client is solely responsible for the deployed applications, their configuration, container images and data. The Provider may update cluster versions with prior notice to the Client. Cluster nodes are paid for at the VPS tariffs.

12.9. The Provider may refuse to execute a Request if its execution violates the law or the terms of the Offer, poses a threat to the security of the infrastructure, or falls outside the Provider's competence.

13. CLOUD WORKSTATIONS AND 1C IN THE CLOUD

13.1. A Cloud Workstation is provided to a single named user; simultaneous use of one workstation by several persons is not permitted. The number of workstations is changed at the Client's Request.

13.2. The Client independently manages its employees' accounts, ensures the use of two-factor authentication and promptly reports the deactivation of workstations. The data of a deactivated workstation is retained for 30 calendar days and is then deleted.

13.3. The Provider does not provide or sell licenses for Windows, Microsoft Office and other commercial software used on the workstations. The Client purchases such licenses independently and is responsible for the lawfulness of their use in a cloud environment.

13.4. As part of the "1C in the Cloud" service, the Provider provides a server, installs the 1C:Enterprise platform, arranges user access, daily backup of the information bases and platform updates. Updates of standard configurations are performed to the extent provided for by the tariff.

13.5. Licenses for the 1C:Enterprise platform and configurations are purchased by the Client independently or through the Provider under a separate invoice. The Provider is not the right holder of 1C software products.

13.6. The Provider does not provide services for customizing configurations, bookkeeping or consulting on accounting and tax matters, and shall not be liable for the correctness of data in the Client's information bases.

13.7. Migration of the Client's information bases is performed at the Client's Request; the Client provides the bases in an agreed format and verifies the result of the migration.

14. CORPORATE EMAIL

14.1. The Provider provides mailboxes on the Client's domain name. The Client confirms that it holds the rights to the domain name and configures the DNS records (MX, SPF, DKIM, DMARC) independently or through the Provider at the Client's Request.

14.2. The price of corporate email consists of fees for the platform (including the first domain), the number of mailboxes, the total storage volume and additional domains at the unit prices set by the tariff. Add-on services (backups, domain monitor, email migration) are paid separately according to the tariff.

14.3. The Client is prohibited from using email for mass mailings, spam and phishing. The Provider may set limits on sending messages and restrict sending if spam or mailbox compromise is detected.

14.4. Anti-spam and anti-virus filtering is performed automatically; the Provider does not guarantee that all unwanted messages will be blocked or that there will be no false positives.

14.5. The Provider has no access to the content of the Client's correspondence, except in cases provided for by law and automated processing by filtering systems.

14.6. Deletion of a mailbox by the Client is irreversible: the mailbox data is deleted at the moment of deletion. Individual emails and mailboxes can be restored only if the email backup service is enabled and within the backup retention depth. Data retention periods upon suspension of the service are set out in Section 21.

15. DOMAINS AND SSL CERTIFICATES

15.1. The Provider may provide domain name registration and SSL certificate services.

15.2. The Client is solely responsible for:

• timely renewal;
• the accuracy of registration data;
• compliance with the registrars' rules.

15.3. The Provider does not guarantee the registration of any specific domain name.

15.4. The Provider shall not be liable for a refusal by the registrar.

15.5. Registration and renewal of domain names and SSL certificates are paid for per period (a year or another term established by the registrar or certificate authority). Paid registration and renewal services are non-refundable.

15.6. The Provider notifies the Client of the expiry of a domain or certificate. Automatic renewal is performed if there are sufficient funds on the Client's balance, unless the Client has disabled auto-renewal.

15.7. Registration of domains in the .uz zone is carried out in accordance with the rules of the national domain zone administrator; the Client undertakes to comply with them.

15.8. Issuance of an SSL certificate depends on the Client passing the certificate authority's validation; the Provider shall not be liable for refusal to issue or revocation of a certificate by the certificate authority. Free Let’s Encrypt certificates are provided "as is".

15.9. Upon the Client's application, the Provider ensures the transfer of the domain name to another registrar in the manner established by the rules of the domain zone.

16. NETWORK SERVICES

16.1. IP addresses are provided to the Client for use during the term of the service and remain at the disposal of the Provider. The Client may not transfer IP addresses to third parties or use them outside the Provider's infrastructure.

16.2. The Provider may replace allocated IP addresses for technical reasons with at least 10 calendar days' notice to the Client, or immediately in the event of a security threat.

16.3. Upon termination of the service, IP addresses are released and may be allocated to other clients.

16.4. Unless the tariff provides for guaranteed bandwidth, the access speed is stated as the maximum possible ("up to") and may vary depending on network load.

16.5. Guaranteed bandwidth is provided at the port of the Provider's equipment; the Provider shall not be liable for data transfer speeds outside its network.

16.6. Traffic and bandwidth are metered by the Provider's tools; the metering data serve as the basis for settlements.

16.7. In the event of a DDoS attack on the Client's resources, the Provider may apply traffic filtering, bandwidth limitation or temporary disconnection of the attacked addresses (blackhole) to protect the infrastructure.

16.8. Announcement of the Client's own IP address blocks and establishment of BGP sessions are carried out under a separate agreement upon the Client's provision of documents confirming its rights to the addresses (LOA).

17. INFRASTRUCTURE AUDIT AND MIGRATION

17.1. The IT infrastructure audit service is provided on the basis of terms of reference agreed by the parties. The result of the audit is a report containing a description of the current state, recommendations and a target architecture. The recommendations in the report are advisory in nature.

17.2. Migration is performed according to an agreed plan specifying the stages, deadlines and responsible persons. The Client provides the Provider with access to the systems being migrated and complete and up-to-date data, and ensures the participation of its specialists.

17.3. The Client maintains the source infrastructure and data in working order until the migration result is confirmed. Switching of traffic and DNS records is carried out at an agreed time.

17.4. The Provider shall not be liable for the operability of the Client's software that is incompatible with the target environment, for licensing restrictions of such software, or for data not provided by the Client for migration.

17.5. The migration result is accepted by the Client under a certificate. Comments shall be submitted within 5 business days of notification of completion of the work; in the absence of comments, the work shall be deemed accepted.

17.6. When a VPS is ordered, the Provider consults the Client and assists with migrating a server or website by advising on the procedure. Migration performed by the Provider is carried out at the Client's Request and paid for in accordance with the tariff; such work does not include modification or reconfiguration of the Client's software.

18. TECHNICAL SUPPORT AND REQUESTS

18.1. Technical support is provided through the ticket system of the Client Panel.

18.2. The Provider may use:

• telephone;
• Telegram;
• email;
• other communication channels.

18.3. Response time depends on the category of the inquiry and the workload of the support service.

18.4. The Provider is not obliged to provide free of charge:

• server administration;
• correction of the Client's program code;
• programming training;
• web design work.

18.5. The priority of processing inquiries is determined by the Provider.

18.6. Requests containing:

• insults;
• threats;
• obscene language;
• an incorrect description of the problem,

may be rejected.

18.7. Requests for work (remote hands, administration, changes to service parameters) are accepted from the Client's authorized persons through the ticket system of the Client Panel or the Provider's Telegram bot. The Provider may request confirmation of authority.

18.8. The cost of paid work under a Request is agreed with the Client before the work begins. Actual time spent is recorded rounded up to the interval established by the tariff (1 hour for remote hands work), or, if no such interval is specified, to 30 minutes.

18.9. Any unused balance of a package of hours or other work volumes included in the tariff does not carry over to the next billing period, unless otherwise specified in the tariff.

19. COST OF SERVICES AND PAYMENT PROCEDURE

19.1. The cost of services is determined by the Provider's tariffs. The Provider may change the tariffs unilaterally, notifying the Client at least 10 (ten) calendar days before the changes take effect by the methods specified in clause 1.5.

19.2. Tariffs are published on the Provider's official website. Tariff changes do not apply to periods paid by the Client before the changes take effect (including domains, SSL certificates and other services paid periodically). A Client who does not agree with the new tariffs may cancel the services and receive a refund of the Balance in accordance with clause 19.11.

19.3. Services are provided on a prepayment basis.

19.4. Fees for services billed daily are debited from the Balance every day at 00:00 for the Day that begins. The Day on which a service was activated is not charged. If the Client deletes a resource before 00:00, no fee is charged for the next Day. For services billed by volume (GB, Mbps, number of units), the fee is calculated on the actual volume at the time of the charge.

19.5. One-time services (installation, connection, audit, work under a Request) are paid on the basis of an invoice or debited from the balance upon confirmation of the Request. Services with periodic payment (domains, SSL certificates) are paid in advance for the entire period.

19.6. For services with a minimum term (equipment rental and others specified in the tariff), the Client undertakes to pay for the service throughout the entire minimum term.

19.7. Payment methods:

• bank transfer;
• Payme;
• Click;
• Uzum;
• Rahmat;
• UZCARD;
• HUMO;
• other methods available on the website.

19.8. The Client bears bank fees at its own expense.

19.9. If the Balance is insufficient for the next charge, the provision of services is suspended. The consequences of suspension and the periods of data retention and deletion are set out in Section 21.

19.10. The Provider notifies the Client of an approaching zero Balance and of the suspension of services via the Personal Account, by email or via the Telegram bot. Failure to receive a notice for reasons attributable to the Client (incorrect contact details, notifications switched off) does not release the Client from the consequences of non-payment.

19.11. The Client may cancel the services at any time and request a refund of the unused Balance. The refund is made upon the Client's request sent via the Personal Account or to the Provider's email address within 10 (ten) business days from the date the request is received: to legal entities and individual entrepreneurs — to their bank account; to individuals — to the bank card or account from which the payment was made, or to other details confirmed by the Client.

19.12. The following are withheld from the refund amount:

• the cost of services provided up to the date of cancellation;
• the Client's share of the cost of services paid by the Provider to third parties that cannot be cancelled (domain registration and renewal, SSL certificates, licenses);
• the Provider's actual and documented costs of making the refund (bank and payment system fees).

19.13. Amounts credited to the Balance by the Provider under Promotions (bonuses, discounts, free periods) are not refundable. If services are terminated due to the Client's violation of the law or the Offer, the Provider may withhold from the Balance the amount of documented losses caused by such violation; the remaining amount is refunded in accordance with clause 19.11.

19.14. The Provider provides legal entities and individual entrepreneurs with electronic invoices and certificates of services rendered via the electronic document management system every month, no later than the 5th day of the month following the billing period. A certificate is deemed accepted if the Client does not send reasoned objections within 10 (ten) business days of its dispatch.

19.15. Settlements are made in Uzbek soums (UZS).

19.16. The Provider is not a VAT payer; prices for services are stated and paid without VAT.

19.17. Trial Periods and Promotions (including free use of a service for a set period) are provided on the conditions published on the Provider's website on the page of the relevant service or Promotion; such conditions form part of this Offer while they are in effect. After the Trial Period ends, the service continues to be provided for a fee according to the tariff if there are funds on the Balance, unless the Client has cancelled it.

20. PROHIBITED USE

20.1. The Client is prohibited from using the services for:

• unlawful activities;
• distribution of malicious software;
• DDoS attacks;
• spam;
• phishing;
• fraud;
• distribution of prohibited content;
• copyright infringement;
• distribution of viruses;
• unauthorized access to information;
• hosting pornographic materials;
• distribution of extremist materials.

20.2. The following is prohibited:

• using resources for mining without approval;
• creating excessive load;
• using anonymous proxies for unlawful purposes;
• using resources to circumvent blocking in violation of the law.

20.3. The Provider may:

• restrict access;
• block the services;
• delete the Account;
• transfer information to the competent authorities.

20.4. The full list of prohibited actions may be additionally governed by a separate Abuse Policy or Acceptable Use Policy published on the Provider's website.

21. BLOCKING, SUSPENSION, DATA RETENTION AND DELETION

21.1. The Provider may temporarily block the Account.

21.2. Grounds for blocking:

• violation of the Offer;
• violation of the law;
• non-payment;
• complaints from third parties;
• abuse complaints;
• suspicious activity;
• DDoS attacks;
• security compromise.

21.3. The Provider may delete the Account:

• in the event of gross violations;
• in the event of repeated violations;
• in the event of non-payment;
• at the Client's request.

21.4. If a service is suspended due to insufficient funds on the Balance, the Client's data is kept for the following Retention Period:

• VPS/VDS, dedicated servers, cloud workstations, 1C in the cloud, managed databases, Kubernetes, DRaaS replicas — 7 (seven) calendar days;
• web hosting (website files and databases) — 7 (seven) calendar days;
• DNS hosting (DNS zones and records) — 7 (seven) calendar days;
• MCDrive, S3 object storage, the file exchange service, backups — 7 (seven) calendar days;
• MCVMS — 7 (seven) calendar days for archive recordings stored on the date of suspension (no new recordings are made during this period);
• corporate email — 30 (thirty) calendar days;
• dedicated IP addresses — 7 (seven) calendar days, after which they may be assigned to other clients;
• domain names and SSL certificates — until the end of the paid registration period; without funds, no renewal is made, and the domain's further status is governed by the registrar's rules.

21.5. No fee is charged for the Retention Period unless the tariff provides otherwise. If the Balance is topped up during the Retention Period, the service is resumed with the stored data. After the Retention Period expires, the data is deleted irreversibly, and the service can only be resumed as a new order.

21.6. If the Client deletes a resource (server, storage, bucket, mailbox, camera) or cancels a service, the data is deleted at the moment the resource is deleted or the service is terminated, without a Retention Period, unless an enabled backup service provides otherwise. The Client shall export any data it needs before deleting a resource or cancelling a service.

21.7. If blocked on the grounds set out in clause 21.2, the data is kept for the time needed for verification, but not less than the periods in clause 21.4, and where an authorized government body has made a demand — for the period set by that demand or by law.

21.8. The Client's equipment placed under the colocation service is not deleted. When the service is suspended, the Provider may disconnect the equipment's power and network and retain it until the debt is paid; the equipment is handed over in accordance with clauses 7.7–7.8.

21.9. Account and payment information and primary accounting documents are kept for the periods set by accounting and tax legislation, regardless of the deletion of services. An Account with no active services and a zero Balance may be deleted 12 (twelve) months after the last activity. An Account with a positive Balance is not deleted without refunding the balance in accordance with clause 19.11.

22. PERSONAL DATA

22.1. The Provider processes the personal data of Clients who are individuals, individual entrepreneurs and representatives of legal entities in accordance with the Law of the Republic of Uzbekistan "On Personal Data" and the Privacy Policy published on the Provider's website.

22.2. The following data is processed: last name, first name and patronymic; passport details and other information needed for identification; contact details (phone, email address, messenger account); bank details; payment information; IP addresses and Personal Account login logs. The Provider does not receive full bank card details: they are processed by payment systems.

22.3. Personal data is processed to conclude and perform the agreement, identify the Client, make payments and keep accounting records, provide technical support and send service notifications, ensure security and prevent fraud, and comply with legal requirements.

22.4. By accepting the Offer, a Client who is an individual consents to the processing of their personal data for the purposes set out in clause 22.3. A Client who provides the Provider with personal data of third parties (employees, representatives) warrants that they have consented to such transfer.

22.5. Personal data of citizens of the Republic of Uzbekistan is processed in databases physically located in the Republic of Uzbekistan. The Provider ensures the registration of personal data databases in the State Register of Personal Data Databases in accordance with the law.

22.6. Personal data may be transferred without separate consent only to the extent necessary to provide the services or required by law: to banks and payment systems, domain name registrars and certification authorities, telecom operators and notification delivery services, the Provider's contractors bound by confidentiality obligations, and authorized government bodies at their request. Personal data of Clients is transferred across borders only where necessary to carry out the Client's instruction (for example, registering a domain in an international zone or issuing a certificate by a foreign certification authority).

22.7. Personal data is kept for the term of the agreement and, after its termination, for the periods set by accounting, tax and other legislation. Security logs are kept for the periods set by law or, where no such periods exist, for no more than 12 (twelve) months.

22.8. The Client may obtain information about the processing of their personal data, demand its correction, blocking or destruction if the data is incomplete, outdated or processed unlawfully, and withdraw consent to processing. Requests are sent to info@mycloud.uz and handled within the time limits set by law. Withdrawal of consent required to perform the agreement results in termination of the services.

22.9. The Client agrees to receive service notifications (about the Balance, operation of services, changes to the Offer and tariffs) by SMS, email, messengers and phone. Advertising messages are sent only with the Client's separate consent, which the Client may withdraw at any time.

22.10. For data that the Client places in the services (contents of servers and storage, video recordings, email), the Provider does not determine the purposes and means of processing and only stores and transmits it technically on the Client's instructions. The Client is the owner and/or operator of such data and is responsible for the lawfulness of its processing, including obtaining the consent of personal data subjects.

22.11. The Provider's website uses cookies and web analytics services on the terms described in the Privacy Policy. Analytics cookies are used only with the visitor's consent.

23. CONFIDENTIALITY

23.1. The parties undertake not to disclose confidential information.

23.2. Confidential information includes information about:

• the Client;
• infrastructure;
• settings;
• commercial terms;
• technical parameters.

23.3. The restrictions do not apply to information that is:

• publicly available;
• disclosed as required by law;
• transferred to government authorities.

24. LIABILITY OF THE PARTIES

24.1. The parties bear liability in accordance with the legislation of the Republic of Uzbekistan.

24.2. The Provider shall not be liable for:

• lost profits;
• indirect damages;
• loss of data not caused by the Provider, including loss resulting from the Client's actions, the Client's lack of backups or expiry of the Retention Period;
• actions of third parties;
• Internet outages;
• the operation of third-party services;
• actions of registrars;
• power supply failures outside the Provider's area of responsibility;
• consequences of DDoS attacks;
• loss, damage or unlawful use of the Client's data by third parties.

24.3. The Provider does not guarantee absolute and uninterrupted 24/7 availability of the services.

24.4. The Provider's liability is limited to actual damage, but not more than the cost of services paid by the Client for the 3 (three) months preceding the breach. This limitation does not apply to liability for intentional breach of obligations or where limitation of liability is not permitted by law, including consumer protection legislation.

24.5. The Provider shall not be liable for the Client's content.

24.6. The Provider shall not be liable for IP addresses being placed on blacklists or for the operation of third-party reputation systems.

24.7. The Client is solely responsible for:

• backup;
• information security;
• software updates;
• compliance with the law;
• placement of materials that infringe copyright and other intellectual property rights of third parties.

24.8. The Client undertakes to compensate the Provider for losses caused by a breach of this Offer.

24.9. The Provider does not carry out pre-moderation or continuous monitoring of the Client's content.

24.10. With respect to managed services, work under Requests and migration services, the Provider shall not be liable for consequences arising from incomplete or incorrect data, instructions and access provided by the Client, or from the Client's failure to follow the Provider's recommendations.

24.11. The Provider shall not be liable for decisions made by the Client on the basis of monitoring data, video analytics or audit reports.

24.12. For time when a service was unavailable for reasons attributable to the Provider and not excluded by clause 5.7, the Client may request a recalculation within 30 (thirty) calendar days: the cost of the service for the period of unavailability, rounded up to full hours, is credited back to the Balance.

25. FORCE MAJEURE

25.1. The parties are released from liability for failure to perform or improper performance of obligations caused by force majeure, that is, circumstances that are extraordinary and unavoidable under the given conditions.

25.2. Such circumstances include, in particular:

• natural disasters, fires and floods not caused by the party;
• military action, mass riots, epidemics;
• acts of government bodies that make performance impossible;
• accidents and outages in third-party power supply networks and backbone communication networks whose duration exceeds the redundancy provided by the Provider;
• large-scale cyberattacks that cannot be repelled by reasonable security measures.

25.3. Failures of the Provider's own equipment, software and infrastructure are not force majeure unless they are caused by the circumstances listed in clause 25.2.

25.4. The affected party notifies the other party within 3 (three) business days from the moment this becomes possible. Notice of widespread circumstances may be given by publication on the Provider's website or status page.

25.5. If force majeure lasts more than 30 (thirty) calendar days, either party may withdraw from the agreement; the unused Balance is refunded in accordance with clause 19.11.

26. DISPUTE RESOLUTION

26.1. The parties undertake to resolve disputes through negotiations.

26.2. For Clients that are legal entities and individual entrepreneurs, the pre-trial claim procedure is mandatory. A Client who is an individual may send a claim, but this is not a precondition for going to court.

26.3. The period for considering a claim is 15 business days.

26.4. Disputes with Clients that are legal entities and individual entrepreneurs are heard by the economic court at the Provider's location. Disputes with Clients who are individuals are heard by the civil court under the rules of jurisdiction established by law; a Consumer Client may file a claim at their place of residence or at the Provider's location.

26.5. The applicable law is the legislation of the Republic of Uzbekistan.

26.6. The Offer is published in Uzbek, Russian and English. In the event of discrepancies between the Uzbek and Russian versions, the Uzbek version prevails. The English version is a convenience translation and has no legal force.

27. ELECTRONIC DOCUMENT MANAGEMENT

27.1. The parties recognize the legal force of:

• electronic documents on recognized platforms for interaction between organizations (Didox, etc.);
• electronic invoices and certificates;
• notifications from the Client Panel;
• email notifications.

27.2. Electronic documents are equivalent to paper documents.

28. ANTI-CORRUPTION POLICY

28.1. The Provider adheres to a policy of zero tolerance for corruption, bribery and other unlawful acts in its activities.

28.2. The Provider and the Client undertake to:

• not offer, promise, give or accept bribes, illegal remuneration or other undue benefits in any form, whether monetary, material or non-material;
• not take actions aimed at exerting unlawful influence on officials, government authorities or counterparties;
• not use the Provider's services for the purpose of legalizing (laundering) proceeds of crime;
• comply with the requirements of the anti-corruption legislation of the Republic of Uzbekistan, including the Law of the Republic of Uzbekistan "On Combating Corruption".

28.3. The Client undertakes not to attempt to obtain any advantages, benefits or privileges circumventing the established terms of the Offer by transferring remuneration to the Provider's employees.

28.4. The Provider's employees may not demand or accept any remuneration, gifts or other valuables from the Client in connection with the provision of services.

28.5. If facts of corrupt conduct are discovered, either party shall immediately notify the other party and, where necessary, the competent government authorities.

28.6. A breach of this section by one party entitles the other party to withdraw from the agreement unilaterally and to claim compensation for the losses caused. The breaching party is liable in accordance with the legislation of the Republic of Uzbekistan.

29. TERM OF THE AGREEMENT

29.1. This Offer takes effect from the moment of its publication.

29.2. The agreement is deemed concluded from the moment of acceptance.

29.3. The agreement is valid for an indefinite term.

29.4. The Client may cancel the services at any time by deleting the resources in the Personal Account or by sending a notice via the Personal Account, by email or via the Provider's Telegram support. The Balance is refunded in accordance with clause 19.11.

29.5. The Provider may terminate the provision of services:

• if the Client breaches the Offer or the law;
• for non-payment — in accordance with Section 21;
• if it discontinues the relevant service — with at least 30 (thirty) calendar days' notice to the Client and a refund of the Balance.

29.6. This version of the Offer takes effect from the date specified upon its publication. Previous versions of the Offer are kept on the Provider's website and apply to the relations of the parties for the period of their validity.

30. PROVIDER DETAILS

MYCLOUD LLC
Address: 57 Bogishamol Street, Tashkent 100058, Republic of Uzbekistan
Settlement account: 2020 8000 9057 4274 8001
Bank: JSCB "Aloqabank"
Bank code (MFO): 00401
TIN (INN): 311045816
Registration number: 2362063
License: No. 217248 (register number L-4603170) dated 02.02.2024, perpetual, issued by the Ministry of Digital Technologies of the Republic of Uzbekistan for the design, construction and operation of telecommunication networks and the provision of telecommunication services
VAT payer: no
Website: https://mycloud.uz
Email: info@mycloud.uz
Phone: (+998) 71 205-52-92
Director: Ruslan Karimovich Kurbanov

This Offer is published in Uzbek, Russian and English; in the event of discrepancies, the Uzbek version prevails, and the English version has no legal force. Edition of October 20, 2026, effective from November 1, 2026; the previous editions of September 1, 2026 and December 25, 2025 are available on the Provider's website.