User Acceptable Use Policy v1.1

Doughboy Platform · operated by Cameron James Moir · ABN 52 721 553 987 · Effective 10 July 2026

1. Who this is between

Streamables.live is the brand under which Cameron James Moir, ABN 52 721 553 987, of Queensland, Australia ("we", "us", "our") operates the Doughboy platform.

You are the individual user who has been granted a login to Doughboy by your organisation (e.g. your employer or the business that subscribes to Doughboy).

This is a personal agreement between you and us. The organisation that invited you has signed a separate Master Customer Agreement (linked in your invite); this User Acceptable Use Policy ("AUP") covers your individual responsibilities as a user.

2. Your account

You agree that:

• your Doughboy login is for you alone - don't share your email, password, or PIN with anyone, including other staff members at your organisation;
• you are responsible for everything that happens on your account, including any actions, records, or messages submitted under it;
• you'll keep your password and PIN private and reasonably secure;
• if you suspect someone else has accessed your account, you'll tell us and your organisation's admin immediately;
• you'll only access Doughboy from devices you reasonably trust, and you'll sign out (or use the Lock & Hand Off feature) when you leave a shared device.

2A. Our commitments to you

This AUP imposes obligations on you as an individual user. In return, we commit that:

• Reasonable notice. Absent a material breach of this AUP by you, or a legal or safety-and-security requirement to act sooner, we will not terminate your access to the platform without giving you and your inviting organisation reasonable notice.
• Confidentiality of your activity. We will not disclose your personal platform activity (including your batch logs, EOD reports, PIN, password, training progress, or messages) to anyone outside your inviting organisation, except: (i) to service providers strictly as needed to operate the platform, (ii) where required by law or a valid legal process, (iii) where necessary to protect the safety, security, or lawful rights of you, us, or another user, or (iv) in aggregated / de-identified form as described in our Privacy Policy.
• Data portability on exit. If you leave your inviting organisation, that organisation (via its Owner or Operations Manager) can request an export of your platform activity so you have a record of the work you did, subject to the organisation's own retention decisions.
• Fair application. We will apply this AUP consistently between similarly-situated users and will not enforce a term against you that we have chosen not to enforce against another user in the same circumstances.

3. What you can use Doughboy for

You can use Doughboy for the internal business operations of the organisation that invited you. That includes things like logging batches, viewing your team's schedules, completing training, submitting EOD reports, and the other day-to-day uses the platform supports.

You can't use Doughboy for any purpose outside that work, including for personal projects, for another business, or to provide services to anyone other than your inviting organisation.

4. What you can't do

You agree not to:

1. copy, save, screenshot, or otherwise extract the platform's source code, structure, workflows, calculation logic, or design with the intent to reproduce or replicate it elsewhere;
2. reverse engineer, decompile, disassemble, scrape, or use automated tools/bots to access the platform without our written permission;
3. attempt to access data or accounts that aren't yours, including those of other organisations on the platform;
4. probe or test the platform for security vulnerabilities (if you find one accidentally, please report it to doughboy@streamables.live rather than exploiting it);
5. use the platform to harass, abuse, or harm anyone, or in any way that breaks Australian law;
6. upload content you don't have the right to upload, or content that contains malware;
7. misrepresent your identity, role, or organisation in the platform;
8. reproduce, imitate, or substantially copy the visual design, user interface, layout, colour scheme, iconography, or overall look-and-feel of the platform in any product, service, software, or content you build, contribute to, or advise on - regardless of whether you use any of our code. This includes screenshots or annotated wireframes used as design references for another product.

5. Confidentiality

By using Doughboy you'll be exposed to confidential information about how the platform works, including:

• its calculation methods, formulas, and algorithms;
• the structure of its workflows, role hierarchy, and reports;
• the data schema and naming conventions visible through the interface.

You agree to:

• keep this information confidential during and after your use of the platform;
• only share what's necessary internally within your organisation;
• not share it with competitors, the public, or anyone outside your organisation.

This obligation continues indefinitely after your access ends. Information that becomes publicly known through no fault of yours isn't covered by this clause.

6. After you leave your organisation

If you leave the organisation that invited you, or your role changes such that you no longer need Doughboy access:

• your login will be deactivated by the organisation's admin;
• you must stop using the platform immediately;
• you must delete any local copies, exports, screenshots, or notes containing the platform's internal structure or methodology.

Your confidentiality obligations under clause 5 continue after your access ends. The use-restraint in clause 8 also applies for a limited period after your access ends. Otherwise you're free to move on - clause 8 does not stop you working in the hospitality or software industry generally, only from using what you learned inside Doughboy to compete with us.

7. What happens if you breach this AUP

7.1 Ordinary breaches - no personal financial penalty

For ordinary day-to-day breaches - sharing your login once with a colleague, forgetting to sign out on a shared device, screenshotting a page for a training aid, or other honest mistakes - this AUP is a behavioural agreement, not a commercial contract. If we notice a breach, we'll usually raise it with you and your organisation's admin. If it's serious we may suspend or revoke your access. We won't invoice you personally for an ordinary breach, and there are no liquidated damages or general monetary penalties attached to your acceptance of this AUP.

Any commercial liability for breach of intellectual-property, confidentiality, or restraint clauses at the organisation level sits under the Master Customer Agreement your organisation has signed.

7.2 Deliberate IP theft or replication - personal liability applies

Clause 7.1 is not permission to copy Doughboy. If you deliberately breach any of:

• clause 4(a) - copying, saving, screenshotting, or extracting the platform's source code, structure, workflows, calculation logic, or design with the intent to reproduce or replicate it elsewhere;
• clause 4(b) - reverse engineering, decompiling, disassembling, scraping, or using automated tools/bots to access the platform without our written permission;
• clause 4(h) - reproducing, imitating, or substantially copying the platform's visual design, UI, layout, colour scheme, iconography, or overall look-and-feel;
• clause 5 - the confidentiality obligations covering the platform's calculation methods, formulas, algorithms, workflow structure, role hierarchy, reports, and data schema; or
• clause 8 - the use-restraint / non-compete on our IP;

and that conduct causes us commercial harm - including (without limitation) by contributing to or being used in a competing product, being disclosed to a competitor or a competitor's employee, being incorporated in a derivative work, or being published or transmitted outside the organisation that invited you - then you are personally liable to us, in your own right, for:

1. Injunctive relief. We may seek an immediate injunction from any court of competent jurisdiction to stop the breach, prevent further disclosure or use, and require you to deliver up or destroy any materials embodying the breach. You acknowledge that damages alone are not an adequate remedy and consent to injunctive relief being granted without the need for us to prove actual damage.
2. Actual damages. Our actual, direct, and consequential losses caused by the breach, including but not limited to lost revenue, lost licence fees, the reasonable costs of investigating and remediating the breach, and the reasonable value of the intellectual property you copied or disclosed measured on the market-royalty basis.
3. Reasonable legal costs. Our reasonable legal costs of enforcement on a solicitor-and-own-client basis, to the maximum extent permitted by law.

"Deliberately" means intentionally or with reckless disregard for whether the conduct breached this AUP. Genuine mistakes, one-off oversights, and conduct you promptly self-report and cooperate to remediate do not amount to deliberate breach.

7.3 Rights we retain outside this AUP

The rights in clause 7.2 are additional to, and not in substitution for, any rights we have independently of this AUP - including under the Copyright Act 1968 (Cth), the Corporations Act 2001 (Cth), the equitable action for breach of confidence, the tort of inducing breach of contract, and any other law or equity. Election to pursue one remedy does not prevent us from pursuing others.

7.4 Statutory rights preserved

Nothing in this clause 7 excludes, restricts, or modifies any right, guarantee, or remedy you have under the Australian Consumer Law or any other non-excludable statutory right. If any part of clause 7.2 is found to be an unfair contract term or otherwise unenforceable, it is read down to the minimum extent necessary and the rest continues to apply.

7.5 If you're not sure

If you're unsure whether an action would breach this AUP, contact us first at doughboy@streamables.live before doing it. We'd rather answer the question than have to enforce a breach.

8. Use-restraint and non-compete on our IP

This clause is a use-restraint, not a general restraint of trade. It doesn't stop you working in the hospitality industry, at a bakery, at a kitchen-tech company, or building software generally - your career and your general skills are yours. It stops you from using what you learned inside Doughboy to compete with Doughboy.

8.1 What you agree not to do

During your access to the platform, and for the restraint period in clause 8.2 after your access ends, you will not, in any capacity - including as an employee, contractor, founder, director, adviser, shareholder, or agent of any person or entity - directly or indirectly:

1. [Senior-role only] Build a substitute product using our IP or observations. Create, design, contribute to, advise on, or otherwise help develop any software product, service, platform, or feature whose purpose is substantially similar to Doughboy - specifically including kitchen production management, dough batch tracking, bakers-percentage or dough recipe management, end-of-day kitchen reporting, hospitality production analytics, or dough / bake yield forecasting - where that product uses, is informed by, or is derived from any of: (i) the platform's source code, structure, workflows, calculation methods, formulas, algorithms, or data schema; (ii) the confidential information covered by clause 5; (iii) your observations of how the platform works internally; or (iv) any exports, screenshots, notes, or materials taken from the platform. This paragraph (a) applies only if your role in the platform was Owner, Operations Manager, Exec Chef, or Head Chef at any time during your access. It does not apply to Pizza Chef, Dough Production, Kitchen Staff, or Driver roles - those users don't see enough of the platform internals for a build-a-substitute restraint to be reasonably necessary.
2. Reproduce our functionality or visual design. Reproduce the platform's functionality, purpose, user flows, calculation methods, or visual look-and-feel (as covered by clauses 4(a), 4(h), and 5) in any competing product - even if you rewrite it from scratch. Building a clone in a different codebase is still a clone. This paragraph applies to all users.
3. Enable someone else to do (a) or (b). Share, sell, license, or disclose any of the confidential information covered by clause 5, or any materials taken from the platform, to any person or entity that operates or is planning to operate a product described in (a) - or accept engagement from such a person or entity in a role where you would use that information. This paragraph applies to all users.
4. Solicit our customers or team. Approach any Doughboy customer organisation you learned about through your access, or any Doughboy team member, for the purpose of enabling any product described in (a). This paragraph applies to all users who, in the course of their access, had contact with Doughboy customers or team members outside their inviting organisation.

8.2 Restraint period (cascading)

The restraint period in clause 8.1 applies for the longest of the following that is enforceable in the jurisdiction where you carry on the restricted conduct:

1. twelve (12) months after your access ends;
2. nine (9) months after your access ends;
3. six (6) months after your access ends;
4. three (3) months after your access ends; or
5. one (1) month after your access ends.

These periods are cumulative alternatives. If a court holds one period unenforceable as unreasonable, the next-shortest period applies, and so on. It is our clear intention that a court read down any unreasonable period to the next-shortest enforceable one rather than strike the whole clause. The 12-month top of the cascade reflects the periods actually upheld by Australian courts for narrowly-drawn use-restraints against senior kitchen-lead and management personnel with material exposure to platform internals; shorter cascade steps apply for staff and users with less exposure.

8.3 What this restraint does NOT stop you from doing

For clarity, clause 8.1 does not prevent you from:

• working for another bakery, pizzeria, restaurant group, or any other food-service business - this restraint is not about your career in kitchens;
• working for a software company, including one whose products serve the hospitality industry, provided you don't use any Doughboy IP, confidential information, or observations there;
• using general skills, know-how, and professional experience you had before your access to Doughboy;
• using publicly-known information about dough production, kitchen management, or baking that is or becomes public through no fault of yours;
• working on a product that is not substantially similar to Doughboy as described in clause 8.1(a);
• holding shares in a listed company that happens to operate a competing product, provided your holding is less than 5% of that company and you have no involvement in the competing product.

8.4 Reasonableness and severability

Clause 8.1 is drafted to protect a legitimate commercial interest - our source code and confidential development methodology - and to target only the use of our IP and confidential information, not your general career or pre-existing skills. We acknowledge that, if this restraint is ever tested in a court applying the Australian Consumer Law, we bear the onus under s 24(4) of Sch 2 to the Competition and Consumer Act 2010 (Cth) of showing that the term is reasonably necessary to protect our legitimate interests. If any part of clause 8 is held unenforceable in any jurisdiction, the remaining parts continue to apply and the unenforceable part is read down to the minimum extent necessary.

8.5 Remedies for breach of this clause

The remedies in clause 7.2 (injunctive relief, actual damages, and reasonable legal costs) apply equally to a deliberate breach of clause 8. Breach of clause 8 is a "deliberate" breach for the purposes of clause 7.2 - clause 8 is a targeted restraint that you can't stumble into by accident.

8.6 Interaction with any employment contract you sign

If you also sign an employment contract with your inviting organisation that contains restraint or confidentiality clauses, clause 8 sits alongside those. Your inviting organisation cannot waive our rights under clause 8 without our written consent, and nothing in your employment contract limits our ability to enforce clause 8 against you directly.

9. Privacy

Our Privacy Policy describes in detail how we collect, use, and store your personal information. By accepting this AUP you acknowledge you've read the Privacy Policy and consent to your data being handled as described there.

Important context: the organisation that invited you can see what you do on the platform. This is normal workplace platform access - your admin can see your activity, your batch logs, your training progress, etc. This is no different from how a workplace email or shift-roster app works.

10. Australian Consumer Law

Nothing in this AUP is intended to exclude any rights you have under the Australian Consumer Law or other non-excludable statutory rights. If any clause is unfair under that Act or otherwise unenforceable, it's read down to the minimum extent necessary, and the rest of the AUP continues to apply.

11. Acceptance and record-keeping

When you accept this AUP via the first-login dialog, we record:

• the date and time of your acceptance;
• your IP address;
• your browser user-agent string;
• the version of this AUP you accepted (currently v1.1);
• the full legal name you typed.

This record is admissible as evidence of your agreement in any proceeding, including any proceeding to enforce clauses 4, 5, 7, or 8.

12. Changes

We may update this AUP from time to time. For any material change, we'll notify users by email or in-app at least 30 days before the change takes effect, and you'll be asked to re-accept the new version at your next login. Continued use after the effective date is acceptance of the updated version.

13. Governing law and cross-border enforcement

13.1 Governing law and primary forum

This AUP is governed by the laws of Queensland, Australia. Courts of Queensland are the primary forum for disputes under it. For enforcement of clauses 5, 7, and 8 against a person who is outside Queensland, we may also seek injunctive relief or damages in any court of competent jurisdiction in the place where the breach occurs or where the person resides or does business.

13.2 Preservation of IP remedies outside this AUP

Nothing in this AUP limits any right or remedy we have independently of it under intellectual property or trade secret law wherever we operate. In particular, and without limitation:

• we may pursue infringement of our copyright in the platform's source code, user interface, graphics, and other original works under the Copyright Act 1968 (Cth) in Australia and under the Copyright Act (17 U.S.C. Chapter 5) in the United States;
• we may pursue misappropriation of our trade secrets under the equitable action for breach of confidence in Australia and under the Defend Trade Secrets Act (18 U.S.C. § 1836) and applicable state trade-secret statutes in the United States;
• we may pursue circumvention of technological access controls under the Copyright Act 1968 (Cth) in Australia and under the DMCA anti-circumvention provisions (17 U.S.C. § 1201) in the United States;
• choice of Queensland law under clause 13.1 does not waive the availability of any of the above remedies in the United States federal or state court of competent jurisdiction, in the courts of the United Kingdom, the European Union, Canada, New Zealand, or any other jurisdiction where the alleged infringement occurs or has effect.

13.3 California mandatory law - preservation of remaining clauses

If any provision of clause 8 (use-restraint) would be unenforceable under mandatory law of the state or country where you reside or operate - including, without limitation, California Business and Professions Code § 16600 as expanded by SB 699 (Cal. Stats. 2023, ch. 157) and AB 1076 (Cal. Stats. 2023, ch. 828), or any equivalent statutory or judicial rule voiding non-compete or use-restraint clauses in that jurisdiction - that provision is deemed omitted from your copy of this AUP only in that jurisdiction. Clauses 4, 5, and 7 (including 7.2 personal liability for deliberate IP theft) continue in full force in every jurisdiction regardless of the enforceability of clause 8.

13.4 Choice-of-forum for non-Australian users

Nothing in clause 13.1 forces you to litigate in Queensland if you reside outside Australia; you may raise a defence or counterclaim in the court of your ordinary residence. The Queensland-law choice in 13.1 governs the interpretation of this AUP, but does not override any mandatory law of your place of residence (such as consumer-protection statutes that cannot be contracted around).

14. General

• Severability. If any clause of this AUP is held unenforceable, it is read down to the minimum extent necessary and the rest continues to apply.
• No waiver. Our failure to enforce a clause immediately is not a waiver of our right to enforce it later.
• Assignment. You may not assign your rights or obligations under this AUP. We may assign ours to a successor of our business.
• Survival. Clauses 4, 5, 6, 7, and 8 survive termination of your access.

15. Contact

Questions about this AUP, your account, or how Doughboy handles your data: doughboy@streamables.live