END USER TERMS OF SERVICE & ACCEPTABLE USE POLICY

1. INTRODUCTION & RELATIONSHIP TO THE CLIENT

These End User Terms of Service ("Terms") govern your ("you", "Viewer", or "End User") access to and use of the Enxora Stream secure video player and related technology (the "Platform"), which is embedded by a third party ("Client") into the Client's own website, learning portal, or application ("Client Platform") from which you are viewing this content.

By clicking "Play", "Accept", "Continue", or by otherwise accessing or using the Platform, you acknowledge that you have read, understood, and agree to be bound by these Terms, our Privacy & Monitoring Notice (Section 4), and our general Privacy Policy at enxorastream.com/privacy-policy. If you do not agree, you must not use the Platform, and you should contact the Client regarding alternative access to the Content.

If you are a minor, you may use the Platform only with the involvement or consent of a parent, guardian, educational institution, or other person authorized to provide such consent, where required by applicable law. If you are entering into these Terms on behalf of an employer, an educational institution, or other organization, you represent that you have the authority to bind that party, and "you" refers to both you and that party.

2. DEFINITIONS

1. "Platform" means the Enxora Stream video player, SDK, and all associated security, monitoring, and delivery technology, however embedded or displayed.
2. "Client" means the business, individual, or organization that has licensed the Platform from Enxora and embedded it into the Client Platform to deliver Content to you.
3. "Content" means any video, audio, image, or associated material made available to you through the Platform.
4. "Viewer Data" means any data collected from or about you through the Platform, including your IP address, device/browser information, approximate location, session activity, watermark identifiers, and — where the relevant add-on is enabled by the Client — webcam imagery, facial verification data, or other biometric identifiers captured via "Proctor-AI", and human-activity/liveness check data.
5. "Monitoring Technologies" means the Dynamic IP Watermarking, Human Activity Check, Proctor-AI (AI webcam monitoring / face verification), and Multiple Viewer Detection features described in Section 4.
6. "Restricted Conduct" has the meaning given in Section 5.

3. SCOPE OF ENXORA'S ROLE

Enxora provides the Platform to the Client as a technology and security service provider. Enxora processes Viewer Data on the instructions of the Client, for the purposes of delivering, securing, and protecting the Content, detecting unauthorized recording or redistribution, and providing analytics to the Client. Enxora does not sell Viewer Data and does not use it for its own independent marketing purposes. The Client is the party that determines what Content is shown to you and which Monitoring Technologies are switched on, and is generally responsible for determining the purposes for which Viewer Data is collected. The precise data-protection role of each party (including whether Enxora acts as a processor, sub-processor, joint controller, or otherwise under applicable law such as GDPR, UK GDPR, CCPA/CPRA, or equivalent) is set out in the separate Data Processing Agreement between Enxora and the Client. Questions about why particular data is collected, or requests to access, correct, or delete your data, should first be directed to the Client; Enxora will support the Client in responding to such requests as required by law and by that Data Processing Agreement.

4. MONITORING TECHNOLOGIES & YOUR CONSENT

Depending on the plan the Client has purchased, some or all of the following technologies may be active while you view Content. Please read this section carefully before continuing.

4.1 Technologies that may be active

• Source Spoofing / Absolute Domain Jail — technical measures that hide the true video address and restrict playback to authorized domains. These do not collect additional personal data beyond standard web request data (e.g., your IP address, browser type).
• Dynamic IP Watermarking — your IP address and/or display name (as provided by the Client) may be visibly overlaid onto the video you are watching. If the video is captured, screen-recorded, or re-shared without authorization, this overlay may remain visible in the resulting copy, which may help identify the source of that copy. Enxora does not automatically know, and this feature does not by itself detect, whenever a recording or screen capture has occurred.
• Human Activity Check — periodic, non-intrusive prompts or checks designed to confirm a human viewer (rather than an automated recording script) is present.
• Proctor-AI (webcam monitoring / face verification) — where enabled by the Client, the Platform may request access to your device camera to verify your identity, detect the presence of additional unauthorized viewers, or monitor engagement. This involves processing image data from your camera and, depending on how this feature is implemented, may involve processing biometric data as defined under applicable law.
• Multiple Viewer Detection — automated analysis (which may use webcam input) to detect whether more than one person is viewing a single authorized session.

None of the Monitoring Technologies described above access, scan, or monitor your device beyond what is described for that specific feature. In particular, Proctor-AI and Multiple Viewer Detection only access your camera feed after you grant browser permission and only for the specific purpose described; the Platform does not monitor your device's other applications, files, screen contents outside the browser tab, or general device activity.

4.2 Consent - especially for webcam and biometric features

Camera-based and biometric monitoring will not activate without your affirmative, separate consent. Where the Client has enabled Proctor-AI or Multiple Viewer Detection, the Platform will present a clear, standalone consent prompt before requesting camera access, explaining what is captured, why, how long it is retained, and how to withdraw consent. If you decline, you will not be able to access the portion of the Content that requires that feature, but declining consent will not otherwise penalize you or be treated as a breach of these Terms.

You may withdraw consent to ongoing camera-based monitoring at any time by ceasing use of the affected feature or by contacting the Client; withdrawal may mean you can no longer access Content that requires that verification step.

If you are a minor, or accessing the Platform in an educational context involving minors, camera-based and biometric monitoring must not be enabled without appropriate parental/guardian or institutional consent obtained by the Client in accordance with applicable law (including, where relevant, COPPA, GDPR Article 8, or local equivalents); Enxora relies on the Client to obtain and document such consent before enabling these features for a minor's session.

4.3 Retention and security of Viewer Data

Viewer Data is retained only for as long as necessary for the purposes described above and as instructed by the Client, and is protected using reasonable technical and organizational security measures. Full details are set out in our Privacy Policy and in the Data Processing Agreement between Enxora and the Client.

5. ACCEPTABLE USE - PROHIBITED CONDUCT

You agree that, while using the Platform, you will not, and will not attempt to, assist, or permit any other person to:

• record, capture, screen-record, screenshot, download, rip, or otherwise duplicate any Content, in whole or in part, other than through functionality expressly provided by the Platform for that purpose;
• circumvent, disable, interfere with, reverse-engineer, or attempt to defeat any Monitoring Technology, watermark, domain restriction, or other protection measure;
• share, sell, sublicense, broadcast, or redistribute your access credentials, session link, or the Content to any person not authorized by the Client;
• access the Platform using automated means (bots, scrapers, headless browsers) or through any domain, application, or environment not authorized by the Client;
• permit more than one individual to use a single authorized viewing session, where the Client's plan restricts sessions to a single Viewer;
• probe, scan, or test the security of the Platform, or otherwise attempt to gain unauthorized access to Enxora's or the Client's systems;
• use the Platform for any unlawful purpose, or in a manner that infringes the intellectual property, privacy, or other rights of Enxora, the Client, or any third party.

This Section does not prohibit good-faith security research carried out for the purpose of identifying and responsibly reporting vulnerabilities to Enxora, provided that such research: does not access, copy, modify, or disclose other users' data or Content; does not disrupt or degrade the Platform, the Client Platform, or any Client's systems; and is reported promptly to contact@enxora.com, with no public disclosure of the vulnerability before Enxora has had a reasonable opportunity to investigate and address it.

Enxora reserves the right (but has no obligation) to detect, log, and act on suspected Restricted Conduct using the Monitoring Technologies described above, and to share evidence of suspected Restricted Conduct with the relevant Client.

6. CONSEQUENCES OF VIOLATION

1. The Client controls your access to its courses, content, and account, and may suspend or terminate that access at its discretion in accordance with its own terms with you. Separately, Enxora may restrict or suspend your technical access to the Platform itself, immediately and without prior notice, where Enxora reasonably believes this is necessary to protect the security or integrity of the Platform, to prevent or respond to suspected Restricted Conduct or other abuse, or to comply with applicable law.
2. Enxora may retain watermark, session, and log data associated with suspected Restricted Conduct for as long as reasonably necessary to investigate, enforce these Terms, cooperate with the Client, or comply with law, even after your access is suspended or terminated.
3. Enxora reserves the right to pursue civil or refer for criminal enforcement any unauthorized access, circumvention, or infringement carried out in violation of these Terms or applicable law (including copyright, computer-misuse, and unauthorized-access statutes), independently of any action taken by the Client.
4. Nothing in this Section limits any right or remedy the Client may separately have against you under its own terms of service or purchase agreement with you.

7. INTELLECTUAL PROPERTY

The Platform, including its software, source code, design, watermarking technology, trademarks, and all related intellectual property, is and remains the sole and exclusive property of Enxora Pvt Ltd. Content made available through the Platform remains the property of the Client or its respective licensors. Except for the limited right to view Content as authorized by the Client, these Terms grant you no license, right, or interest in the Platform or the Content, and you acquire no right to copy, modify, distribute, publicly perform, or create derivative works from either.

8. NO WARRANTY

9. LIMITATION OF LIABILITY

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW:

1. Enxora shall not be liable for any claim, loss, or damage arising from or relating to the Content, including its accuracy, legality, availability, or your purchase of or inability to access it — such claims lie solely against the Client.
2. Enxora shall not be liable for any indirect, incidental, special, consequential, exemplary, or punitive damages, including loss of data, profits, or goodwill, arising out of or relating to your use of the Platform, even if advised of the possibility of such damages.
3. Because you do not pay Enxora directly for use of the Platform, Enxora's total aggregate liability to you arising out of or relating to these Terms or the Platform, for all claims in the aggregate, shall be limited to the fullest extent permitted by applicable law, and in no event shall exceed the minimum amount that may be enforced against a consumer under the mandatory law of your jurisdiction.
4. Nothing in these Terms excludes or limits liability that cannot be excluded or limited under applicable law, including liability for death or personal injury caused by negligence, or fraud.

10. YOUR INDEMNIFICATION OF ENXORA

You agree to indemnify, defend, and hold harmless Enxora Pvt Ltd, its officers, directors, employees, and agents from and against any claims, liabilities, damages, losses, and expenses (including reasonable legal fees) arising out of or in any way connected with: (a) your intentional or knowing engagement in Restricted Conduct; (b) your unlawful, fraudulent, or malicious use of the Platform; (c) your infringement of any third-party intellectual property or other right through deliberate misuse of the Platform; or (d) any Content you knowingly and unlawfully upload, submit, or transmit through any interactive feature of the Platform, if applicable. This indemnity does not extend to your ordinary, good-faith use of the Platform as permitted by these Terms.

11. RELATIONSHIP DISPUTES — YOUR REMEDY IS AGAINST THE CLIENT

You acknowledge and agree that: (a) Enxora is not a party to, and has no responsibility for, any agreement between you and the Client regarding Content, payment, refunds, or course/service delivery; (b) any dispute concerning the Content, its quality, your purchase, or the Client's conduct must be brought against the Client, not Enxora; and (c) Enxora is, however, an intended third-party beneficiary of any terms the Client has with you to the extent those terms incorporate or reference these Terms, and may enforce those provisions directly against you.

12. PRIVACY

Our collection and use of Viewer Data is further described in our Privacy Policy, available at enxorastream.com/privacy-policy, which is incorporated into these Terms by reference. In the event of a conflict between that Privacy Policy and Section 4 of these Terms regarding Monitoring Technologies, the more specific and protective provision shall control.

13. DISPUTE RESOLUTION; GOVERNING LAW

Before filing any claim, you agree to first contact Enxora at contact@enxora.com and attempt in good faith to resolve the dispute informally for at least thirty (30) days.

During this thirty (30) day period, you and Enxora will use good-faith efforts to discuss and attempt to resolve the dispute. Depending on the nature and complexity of the dispute, Enxora may extend this informal discussion period beyond thirty (30) days.

If you do not submit your dispute or complaint to Enxora within seven (7) days of the event giving rise to it, Enxora is not obligated to review or discuss the dispute, although Enxora may elect to do so at its sole discretion. If you do not submit your dispute or complaint within sixty (60) days of the event giving rise to it, Enxora will not review or discuss the dispute under any circumstances.

The seven (7) day and sixty (60) day periods referred to in this Section may only be varied by a binding judgment or order of a court of competent jurisdiction that expressly modifies them. If you intend to rely on such a judgment or order, you must promptly notify Enxora of it. Nothing in this Section affects either party's right to appeal or otherwise challenge that judgment or order in accordance with applicable law.

Enxora may pause or discontinue its review or discussion of any dispute or complaint at any time, with or without notice to you or to the person who submitted the dispute. If Enxora discontinues its review or discussion before the informal discussion period described in this Section has otherwise ended, that period will be treated as complete, and you may proceed to the next stage of dispute resolution under this Section.

Engaging in this review and discussion process does not guarantee that your dispute or complaint will be resolved to your satisfaction, and does not limit your right to proceed to the next stage of dispute resolution under this Section if it is not resolved.

Arbitration & Class Action Waiver: Except where prohibited by applicable law, any dispute arising out of or relating to these Terms or the Platform that is not resolved informally shall be resolved by binding, individual arbitration, and you and Enxora each waive any right to participate in a class, collective, or representative action or class-wide arbitration. Where this arbitration provision is found unenforceable in your jurisdiction (for example, under certain EU/UK/US consumer-protection rules), the applicable courts identified below shall have exclusive jurisdiction instead.

These Terms are governed by the laws of the Democratic Socialist Republic of Sri Lanka, without regard to conflict-of-law principles, and, subject to the arbitration provision above, the courts of Sri Lanka shall have exclusive jurisdiction except that where you are a consumer resident in a jurisdiction that grants you the right to rely on mandatory local consumer-protection law or local court jurisdiction (e.g., an EU member state, the UK, or a US state), nothing in this Section removes those mandatory rights.

14. CHANGES TO THESE TERMS

Enxora may revise, update, or expand these Terms from time to time including to reflect new features, functionality, Monitoring Technologies, or other changes to the Platform by posting a revised version of these Terms with a new effective date. Material changes affecting Monitoring Technologies or your rights will, where feasible, be highlighted via the Client's platform or a renewed consent prompt. Your continued use of the Platform after a revised version of these Terms takes effect constitutes your acceptance of that revised version; if you do not agree, you should stop using the Platform and contact the Client regarding alternative access to the Content.

15. GENERAL PROVISIONS

1. Entire Agreement: These Terms, together with the Privacy Policy, constitute the entire agreement between you and Enxora regarding the Platform.
2. Severability: If any provision is held invalid or unenforceable, the remaining provisions continue in full force and effect.
3. No Waiver: Enxora's failure to enforce any provision is not a waiver of its right to do so later.
4. Assignment: You may not assign these Terms; Enxora may assign these Terms in connection with a merger, acquisition, or sale of assets.
5. Survival: Sections 6–13 survive termination of your access to the Platform.
6. Contact: Questions about these Terms may be directed to contact@enxora.com.