Information pursuant to Swiss law.

Company

MaiQ AG
Blegistrasse 23
6340 Baar
Switzerland

Represented by

Cinzia Bonetta, Managing Director and Founder

Contact

Email: info@maiq.io
MaiQ AgentC: agentc@maiq.io
Website: https://maiq.io

Commercial Register

Register Court: Commercial Register of the Canton of Zug
Register Number: CHE-137.004.932

Responsible for Content

MaiQ AG, Blegistrasse 23, 6340 Baar, Switzerland

Disclaimer

Liability for Content

As a service provider, we are responsible for our own content on these pages in accordance with general statutory provisions. We are not obliged to monitor transmitted or stored third-party information or to investigate circumstances that indicate illegal activity. Obligations to remove or block information under general law remain unaffected. Upon becoming aware of any legal infringements, we will remove the relevant content immediately.

Liability for Links

Our website contains links to external websites over whose content we have no influence. We cannot accept liability for such third-party content. The respective provider of each linked page is responsible for its content. Links were checked for legal violations at the time of linking. Upon becoming aware of any infringements, we will remove such links immediately.

Copyright

Content created by the site operators is subject to Swiss copyright law. Reproduction, editing, distribution, or any use beyond copyright law requires the prior written consent of the respective author. Downloads are permitted for private, non-commercial use only. Third-party content is marked as such. Upon becoming aware of copyright infringements, we will remove the relevant content immediately.

Effective date: October 2026

1. Scope of Application

These General Terms and Conditions ("GTC") govern the contractual relationship between MaiQ AG ("Provider") and its customers ("Customer") in connection with the use of the services and products offered ("Services"). The Services are directed exclusively at businesses and are not intended for consumers.

2. Subject Matter of the Contract

These GTC apply to all services and products offered by the Provider, including in particular access to the MaiQ platform and its components MaiQ AgentC, MaiQ TestingHub and FeedbackSuite (collectively the "Platform"), as well as one-time services such as the MaiQ AgentC Full Report.

3. Registration and Account Access

Registration is required to use the Platform. The Customer undertakes to provide truthful and complete information during registration. Access credentials must be kept confidential and may not be shared with third parties. The Customer is responsible for all activity that occurs under their account.

4. Services of the Provider

The Provider makes the SaaS-based Platform available to the Customer in accordance with the agreed conditions. Services include:

• Access to MaiQ AgentC, in which AI agents test websites and web applications via a URL provided by the Customer and document their findings with evidence such as screenshots and steps to reproduce.
• The MaiQ AgentC Full Report, a one-time test of one product carried out with MaiQ AgentC and reviewed by the Provider before delivery.
• Access to MaiQ TestingHub for planning, executing, and managing user tests of digital products.
• Access to FeedbackSuite for collecting, analysing, and managing user feedback.
• AI-based analysis features.
• Integration with third-party tester recruitment services and support for Bring Your Own Testers (BYOT) workflows.

The recruitment, management, and compensation of test participants is handled exclusively through the respective third-party service (e.g. TestingTime) or directly by the Customer. Where the Customer uses integrated tester recruitment services via the Platform, such services are charged on a pay-per-use basis in addition to the Platform subscription fee, as shown at the time of use. MaiQ AG bears no responsibility for the availability, conduct, or remuneration of test participants.

5. Authorised Testing

The Customer may only submit URLs of websites and web applications that it owns or that it is expressly authorised to test. On request, the Customer shall provide evidence of such authorisation.

During a test, the AI agents interact with the website or web application like a user. When creating a project, the Customer specifies whether the URL is a production environment or a test environment (e.g. staging); production is the default. The agents behave differently depending on this setting:

• Production environment: The agents only view and navigate. They may enter test data into fields, but are programmed not to submit forms and not to perform any action that changes data or triggers a transaction, such as orders, payments, bookings, registrations or messages to third parties. Checks that would require such an action are not carried out and are marked accordingly in the report.
• Test environment: Here the agents may also carry out actions that change data, such as submitting forms or completing a checkout with test data, in order to test complete user flows. The Customer is responsible for ensuring that an environment designated as a test environment is in fact one, i.e. that actions there have no real consequences such as real payments, orders or messages to real persons, and for providing test accounts or sandbox access where required.

The Provider takes reasonable technical measures to ensure that the agents comply with these rules. As with any AI-based system, unintended actions cannot be completely ruled out.

The Customer shall indemnify the Provider against all third-party claims arising from tests of websites or web applications for which the Customer was not authorised. The Provider may refuse, stop or delete tests if there are indications of unauthorised or abusive use.

6. AI-Generated Findings

Findings in MaiQ AgentC are generated with the help of artificial intelligence. Although each finding is challenged by an internal review agent before it is shown, findings may be incomplete or inaccurate. The Provider does not guarantee that all defects of a product will be identified. Findings and recommendations do not replace the Customer's own review; the Customer is responsible for checking them before acting on them.

For the Full Report, the Provider additionally reviews the findings with due care before delivery. The same limitations apply.

7. Use of the Platform

The Customer undertakes to use the Platform exclusively for lawful purposes. The Customer shall not upload or process content that violates applicable law or infringes third-party rights. Where confidentiality is required between the Customer and test participants, it is the Customer's sole responsibility to ensure this.

8. Credits

Tests in MaiQ AgentC consume credits. The number of credits per test type is shown on the pricing page.

Subscriptions include a monthly allocation of credits, also for annual billing. Unused credits expire at the end of the month in which they were allocated and are not carried over.

Credits have no cash value, are not transferable and are not refunded, including upon termination. The Provider may adjust the number of credits per test type with reasonable advance notice.

9. Fees and Payment

Use of the Platform is subject to a fee based on the chosen subscription plan, payable in advance (monthly or annually) via the Provider's payment service provider. Prices are stated in Swiss francs (CHF).

Subscriptions renew automatically for the same term unless cancelled in accordance with Section 16. Access is generally activated within one business day after receipt of payment.

The Provider reserves the right to adjust prices with reasonable advance notice. Continued use of the Platform following a price change constitutes acceptance of the updated pricing.

10. Full Report

The Full Report is a one-time service and does not create a subscription. It covers one product (one website or web application on one domain), as agreed with the Customer. The report is delivered by email within the time communicated to the Customer.

11. Availability

The Provider endeavours to ensure high availability of the Platform but does not guarantee uninterrupted access. Scheduled maintenance will be communicated in advance where possible.

12. Data Processing Agreement (DPA)

To the extent that the Customer processes personal data of third parties via the Platform (e.g. data of test participants, or personal data contained in screenshots and content of tested websites), MaiQ AG acts as a data processor on behalf of the Customer.

Subject matter and duration: Processing takes place for the purpose of providing the Services and for the duration of the contract. Nature and purpose: running tests, generating findings and reports, and storing the results. Types of personal data: data contained in screenshots and content of tested websites and web applications, test instructions, data and feedback of test participants, and account data of the Customer's users. Categories of data subjects: persons whose data appear on tested websites or web applications, test participants, and the Customer's employees using the Platform. MaiQ AG's obligations as processor are as follows:

• MaiQ AG processes personal data solely on the documented instructions of the Customer, including with regard to transfers abroad, and informs the Customer if it considers an instruction to infringe applicable data protection law.
• MaiQ AG ensures that persons authorised to process personal data are bound by confidentiality obligations.
• MaiQ AG implements appropriate technical and organisational security measures in accordance with applicable law.
• MaiQ AG notifies the Customer without undue delay of any breach of data security affecting personal data processed on the Customer's behalf.
• MaiQ AG assists the Customer in fulfilling its obligations regarding data subject rights, data security, notification of data security breaches and data protection impact assessments, to the extent required by law.
• The Customer grants MaiQ AG general authorisation to engage the subprocessors listed in the Privacy Policy. MaiQ AG will inform the Customer in advance of any intended changes to this list, giving the Customer the opportunity to object. MaiQ AG imposes equivalent data protection obligations on its subprocessors and remains responsible to the Customer for their compliance.
• Personal data is only transferred to countries without an adequate level of data protection where appropriate safeguards are in place, such as Standard Contractual Clauses.
• Upon termination of the contract, MaiQ AG will, at the Customer's election, delete or return all personal data processed on behalf of the Customer, unless statutory retention obligations apply.
• MaiQ AG provides the Customer with all information necessary to demonstrate compliance with applicable data protection obligations and supports audits conducted by the Customer or a mandated third party, with reasonable prior notice and at the Customer's expense.

The Customer, as data controller, is responsible for ensuring that the processing of personal data via the Platform has a lawful basis and that data subjects have been informed in accordance with applicable law.

13. Liability

The Provider is liable only for damages caused by gross negligence or wilful misconduct. Liability for indirect damages, consequential losses, or loss of profit is excluded to the extent permitted by applicable law.

To the extent permitted by law, the Provider's total liability is limited to the fees paid by the Customer in the twelve months preceding the event giving rise to the claim. This also applies to unintended actions of the agents on the Customer's website or web application.

14. Intellectual Property

All rights in and to the Platform and any content provided thereon remain with the Provider or its licensors. Subject to payment of the applicable fees and compliance with these GTC, the Provider grants the Customer a limited, non-exclusive, non-transferable, non-sublicensable licence to access and use the Platform solely for the Customer's internal business purposes during the subscription term. This licence is granted to the contracting organisation only and may not be assigned or transferred to any third party.

Reports and findings concerning the Customer's products may be used by the Customer without restriction, including sharing them with its own clients.

The Provider may use anonymised and aggregated data that does not identify the Customer or its products to operate and improve the Platform.

15. Data Access and Confidentiality

MaiQ personnel access the content of customer accounts (e.g. tests, findings, reports, uploaded files or tester feedback) only where this is necessary to provide the Services, in particular to prepare and review a Full Report, to provide support at the Customer's request, to carry out technical operations, to resolve security incidents, or to comply with legal obligations. All MaiQ personnel with any form of system access are bound by confidentiality obligations. MaiQ AG does not sell customer data or content and does not pass it on to third parties, except to the subprocessors listed in the Privacy Policy insofar as necessary to provide the Services, or where required by law.

16. Term and Termination

Subscriptions run for the chosen term (monthly or annually) and renew automatically for the same term. The Customer may cancel at any time with effect from the end of the current term, either via the customer portal of the payment service provider or by email to the Provider. Fees already paid are not refunded, unless mandatory law provides otherwise.

The Provider may terminate a subscription with 30 days' notice to the end of the current term. The Provider may suspend or terminate access immediately in the event of material breach of these GTC, in particular in the case of unauthorised testing under Section 5. Upon termination, any remaining credits expire.

17. Amendments to the GTC

The Provider reserves the right to amend these GTC at any time with reasonable advance notice. Continued use of the Platform following notification constitutes acceptance. The Customer may terminate the contract with effect from the date the changes take effect if they object.

18. Governing Law and Jurisdiction

These GTC are governed by Swiss law. The exclusive place of jurisdiction is Zug, Switzerland, subject to mandatory statutory provisions.

19. Severability

Should any provision of these GTC be invalid or unenforceable, the remaining provisions remain in full force. The invalid provision shall be replaced by a valid provision that most closely achieves its economic purpose.

Effective date: October 2026

MaiQ AG is committed to protecting your personal data. This Privacy Policy explains what personal data we collect, for what purposes and on what legal basis, and with whom we share it.

Controller

MaiQ AG
Blegistrasse 23
6340 Baar
Switzerland
Email: info@maiq.io

For data protection enquiries, contact us at info@maiq.io. We are not currently required to appoint a formal data protection officer.

1. Data Collected When Visiting Our Website

When you visit maiq.io for informational purposes, our servers automatically collect standard technical data including IP address, browser type, operating system, pages accessed, and timestamps.

Legal basis: Legitimate interest in operating and securing our website (Art. 31 nFADP; Art. 6(1)(f) GDPR).

Our website uses a consent management platform. Non-essential cookies are only set with your prior consent, which you can manage at any time via the cookie banner. We use web analytics to analyse website usage in anonymised and aggregated form.

2. Data Collected via Contact Form or Email

When you contact us, we collect your name, email address, company name, and message content.

Legal basis: Legitimate interest in responding to your enquiry (Art. 31 nFADP; Art. 6(1)(f) GDPR), or pre-contractual measures where applicable.

Retention: Retained for as long as necessary to handle your enquiry, and thereafter as required by law.

3. Data Collected When Scheduling a Demo

When you book a demo call via our scheduling tool, your name, email address, and preferred meeting time are processed by our scheduling service provider.

Legal basis: Legitimate interest in organising appointments and pre-contractual measures.

4. Data Collected When Using the MaiQ Platform

To use the Platform (MaiQ AgentC, MaiQ TestingHub and/or FeedbackSuite), registration is required. We collect:

• Name, email address, and login credentials.
• Company name, address, and role.
• Technical metadata (IP address, timestamps, device/OS information) for security and fraud prevention purposes.

Legal basis: Performance of a contract (Art. 31 nFADP; Art. 6(1)(b) GDPR).

Retention: For the duration of the contractual relationship and thereafter as required by statutory obligations.

5. Data Processed When Running Tests with MaiQ AgentC

When you run a test with MaiQ AgentC, we process the URL you provide, the instructions you enter for the test, the content and screenshots of the tested pages, technical data of the test run, and the resulting findings and reports.

The tested pages may contain personal data of third parties, for example names or contact details shown on a website. For such data, the Customer is the controller and MaiQ AG processes it as a processor on the Customer's behalf (see Section 12 of the GTC).

Legal basis: Performance of a contract (Art. 31 nFADP; Art. 6(1)(b) GDPR).

Retention: For the duration of the contractual relationship. Upon termination, the data is deleted or returned at the Customer's election, unless statutory retention obligations apply.

6. Automated Processing and AI-Based Analysis

The content of tested pages and uploaded design files is analysed using AI services, in particular those of Anthropic PBC (USA), to generate findings, usability insights and recommendations. Under the provider's commercial terms, this data is not used to train AI models.

This analysis concerns digital products and does not constitute automated decision-making in relation to individuals within the meaning of Art. 22 GDPR or equivalent provisions under nFADP.

7. Payment Data

Payments are processed by Stripe. When you pay, Stripe collects your payment details and the billing information you provide (such as name, email address, company and address), and shares the information required for billing and account activation with us. MaiQ AG does not store payment card data. Stripe processes payment data as an independent data controller in accordance with its own privacy policy.

8. Data Collected When Applying for Employment

If you apply to MaiQ AG, we collect the information you provide (name, contact details, CV, certificates, and other application documents).

Legal basis: Pre-contractual measures (Art. 31 nFADP; Art. 6(1)(b) GDPR).

Retention: Retained for the duration of the recruitment process and deleted within 6 months thereafter, unless you have consented to retention in our talent pool or a longer period is required by law.

9. Your Rights

Under applicable data protection law (Swiss nFADP and, where applicable, EU GDPR), you have the following rights:

To exercise your rights, contact us at info@maiq.io. We will respond within one calendar month. We may ask you to verify your identity.

10. Subprocessors and International Data Transfers

MaiQ AG engages the following categories of service providers who may process personal data on our behalf. Where providers are located outside Switzerland or the EEA, we rely on EU Standard Contractual Clauses or equivalent safeguards.

We do not sell personal data and do not pass it on to third parties for their own purposes, such as advertising. Personal data is only disclosed to the service providers listed below, insofar as this is necessary to provide our services, or where we are legally obliged to do so.

A current list of subprocessors including their privacy policies is available upon request at info@maiq.io.

11. Data Security

MaiQ AG implements appropriate technical and organisational measures to protect personal data against unauthorised access, loss, or destruction, in accordance with applicable law. Complete security of electronic data transmission cannot be guaranteed.

12. Social Media

Our website contains links to our LinkedIn and Instagram profiles. When you access these links, data including your IP address may be transmitted to LinkedIn Corporation (USA) or Meta Platforms Ireland Ltd. (Ireland) respectively. We have no control over their data processing. Please refer to their respective privacy policies for further information.

13. Changes to This Privacy Policy

We reserve the right to update this Privacy Policy to reflect changes in legal requirements or our data processing practices. The date of the most recent update is indicated at the top of this document.