VaultLeap Affiliate Program Agreement

This Affiliate Program Agreement (the "Agreement") is between you ("Affiliate," "you") and Klydo, Inc., a Delaware corporation doing business as VaultLeap ("VaultLeap," "we," "us"). It governs your participation in the VaultLeap Affiliate Program (the "Program"). You accept this Agreement by checking the acceptance box when you submit an application, and again each time you use your Tracking Link after we publish an updated version. If you participate on behalf of a company, you represent that you are authorized to bind it.

"Tracking Link" means a URL containing your unique code (for example, vaultleap.com/?via=yourcode) issued to you after approval. "Referred User" means a person who creates a new VaultLeap account attributed to your Tracking Link under Section 5. "Qualified Referral"means a Referred User who (a) completes VaultLeap's identity verification, and (b) receives Eligible Deposits totaling at least one hundred U.S. dollars ($100), or the equivalent, within ninety (90) days of account creation. "Eligible Deposits"means deposits received through licensed partner banking rails (ACH, SEPA, wire, or equivalent) via the Referred User's VaultLeap virtual account, consistent with the Eligible Volume definition in the VaultLeap Terms of Service; on-chain crypto transfers, internal wallet transfers, and blockchain-to-blockchain transfers do not count. "Bounty" means the referral fee described in Section 6.

Applications are reviewed individually by VaultLeap. We may approve or decline any application, and may pause or terminate any Affiliate's participation, at our sole discretion, with or without cause or notice. No Tracking Link exists, and nothing is owed, until we approve your application in writing (email suffices). Approval is personal to you and may not be transferred, sold, or sublicensed.

You are an independent contractor. This Agreement does not create any employment, agency, partnership, joint venture, or franchise relationship. You have no authority to make commitments on VaultLeap's behalf, and you will not represent otherwise. You are not an employee, broker, or agent of VaultLeap or of any of VaultLeap's banking or payment partners.

Attribution uses a first-party cookie with a ninety (90) day window on a last-click basis: the most recent valid affiliate code before account creation receives the attribution. A person can be attributed to at most one Affiliate, once, ever. Attribution requires the referred person's browser to permit the attribution cookie; referrals whose devices, settings, or consent choices prevent attribution do not create Qualified Referrals. VaultLeap's systems and records are the sole and conclusive record of attribution and qualification.

For each Qualified Referral, you earn a Bounty of ten U.S. dollars ($10), paid in USDC. Each Bounty is subject to a thirty (30) day review hold from the date the referral qualifies. Cleared Bounties are batched and paid monthly, in USDC on the Base network, to the payout address you designate in your partner dashboard (or, if you hold a VaultLeap account, to that account where supported). You are solely responsible for the accuracy of your payout address; transfers to the address you designate are final. No Bounty is owed while your participation is paused or terminated for cause, and no payment is made until you have provided any tax documentation we reasonably request.

A Bounty is reversed, and if already paid may be offset against future amounts, if before payment (or within a reasonable period after) the Referred User's account is closed for fraud or violation of VaultLeap's Terms of Service, the qualifying deposits are reversed or charged back, or we determine the referral was obtained in violation of Section 8. We may withhold payment of any amounts reasonably under investigation.

Each of the following is grounds for immediate termination and forfeiture of unpaid Bounties:

• Self-referrals, or referrals of accounts you own, control, or fund;
• Paying, rebating, or otherwise incentivizing people to sign up (including "get paid to sign up" schemes);
• Creating or facilitating fake, bulk, or synthetic accounts, or manufactured deposit activity;
• Bidding on VaultLeap brand terms (or misspellings) in paid search, or running paid ads that link directly to VaultLeap signup;
• Cookie stuffing, forced clicks, typosquatting, spam (email, SMS, or messaging), or any deceptive attribution technique;
• Marketing to, or targeting, persons in jurisdictions where VaultLeap does not offer services, or persons under 18;
• Directly promoting the VaultLeap Visa® Debit Card or any card feature (see Section 9);
• Registering social media accounts, domains, or apps that impersonate VaultLeap.

• You must clearly and conspicuously disclose your material connection to VaultLeap (compensation per referral) in every placement, consistent with the FTC's Endorsement Guides and any equivalent local requirements.
• You may not directly promote the VaultLeap Visa® Debit Card or any card feature. Card marketing is not part of this Program: content that markets, pitches, advertises, or drives signups for the card is prohibited, and no Bounty is ever paid for card activity. Incidental, factual reference to the card within broader editorial content is not a violation, but you may not create card-related claims, offers, or comparisons.
• You may not make false, unsubstantiated, or misleading claims about VaultLeap, including guarantees of earnings, yields, or approval; may not describe VaultLeap as a bank; and may not state or imply endorsement by any bank, network, or regulator.
• You must accurately state Program terms where you describe them, and update or remove content within five (5) business days of our request.

While approved, you have a limited, revocable, non-exclusive, non-transferable license to display VaultLeap's name and logo solely to promote VaultLeap under this Agreement and consistent with our brand guidelines. All goodwill inures to VaultLeap. The license ends automatically when your participation ends.

Bounties are compensation for marketing services. You are solely responsible for all taxes on amounts you earn. U.S. persons must provide a completed IRS Form W-9 on request, and VaultLeap will file information returns (for example, Form 1099) where required by law; non-U.S. persons must provide the appropriate Form W-8. We may suspend payment until valid documentation is received. The USD value of USDC at the time of payment is the reportable amount.

Your dashboard shows aggregate performance and per-referral status with masked identifiers only. You will not attempt to identify, contact, or re-identify Referred Users from Program data, and you will comply with applicable privacy and marketing laws (including consent requirements) in your own audience data practices. As between the parties, VaultLeap owns all Program data.

Either party may terminate participation at any time, with or without cause, on notice (email suffices). We may suspend attribution or payments immediately pending investigation. On termination without cause, Bounties already earned and cleared under Section 6 will be paid in the next monthly cycle; on termination for cause under Section 8 or 9, all unpaid Bounties are forfeited. Sections 4, 7, 11–17 survive termination.

We may modify this Agreement, including Bounty amounts and qualification criteria, on thirty (30) days' notice (email or dashboard notice suffices), and may modify it immediately where required by law or by our banking or payment partners. Changes apply prospectively; a Qualified Referral is paid at the rate in effect when it qualified. Your continued use of your Tracking Link after the notice period is acceptance of the change.

The Program is provided "as is." We do not warrant uninterrupted tracking or any level of earnings. To the maximum extent permitted by law, VaultLeap's total liability arising out of the Program is limited to the Bounties earned but unpaid in the six (6) months preceding the claim, and neither party is liable for indirect, incidental, special, or consequential damages. Nothing in this Agreement limits liability that cannot be limited by law.

You will defend and indemnify VaultLeap against third-party claims arising from your content, your marketing practices, or your breach of this Agreement, including claims arising from disclosures required by Section 9 that you failed to make.

By participating in the Program you also accept the VaultLeap Terms of Service and Privacy Policy, which are incorporated into this Agreement by reference; where this Agreement addresses the Program specifically, it controls for Program matters.

This Agreement is governed by the laws of the State of Delaware, without regard to conflict-of-law rules, and the state and federal courts located in Delaware have exclusive jurisdiction. This Agreement is the entire agreement about the Program and supersedes prior discussions. If any provision is unenforceable, the rest remains in effect. You may not assign this Agreement; we may assign it to an affiliate or successor. Notices to you go to the email on your application. Questions: [email protected].