Diligence Data Sharing Authorization

This Diligence Data Sharing Authorization (the “Authorization”) applies when an authorized representative of a company accepts a diligence invitation or data request from a specific venture capital, investment, or other investment-related firm through Lunaseed. It records the Company’s authorization for Lunaseed to process and make specified diligence information available to that firm for the applicable diligence engagement.

IMPORTANT: This Authorization is engagement-specific. Accepting it for one Requesting Firm does not authorize Lunaseed to share the Company’s information with another firm. A separate authorization is required for a separate firm or materially separate diligence engagement.

1. Definitions

• “Company” means the company on whose behalf an authorized representative accepts this Authorization through the applicable Lunaseed diligence invitation or data request.
• “Requesting Firm” means the venture capital, investment, or other investment-related firm that issued the diligence invitation or data request through which this Authorization is accepted.
• “Engagement” means the specific diligence request, workspace, and related follow-up activity associated with the invitation or data request through which this Authorization is accepted.
• “Diligence Information” means the information described in Section 3 that the Company, its founders, or authorized contributors submit, connect, select, or cause Lunaseed to generate for the Engagement.
• “Lunaseed” means Lunaseed Inc. and the Lunaseed platform and services.

2. Authorization Granted

By accepting this Authorization on behalf of the Company, you authorize Lunaseed to receive, host, process, organize, extract, index, analyze, transform, and display Diligence Information for the Engagement and to make that Diligence Information, including source-linked and derived diligence outputs, available to the Requesting Firm and its authorized users in accordance with Lunaseed’s permissions, product functionality, and applicable agreements.

This Authorization is limited to the operation of the Engagement. It does not transfer ownership of Company materials to Lunaseed or the Requesting Firm, does not authorize public disclosure of Company information, and does not give any recipient unrestricted rights to use Company information for unrelated purposes.

3. Information Covered by This Authorization

To the extent included in or generated for the Engagement, Diligence Information may include:

• Documents and files. Documents uploaded for the request or selected from the Company’s Lunaseed workspace, Vault, or other Company-controlled repository made available through Lunaseed.
• Company and engagement information. Company profile information, diligence responses, answers to follow-up questions, and other information entered into the Engagement.
• Contributor-provided materials. Information and files submitted by Company personnel or other contributors whom the Company authorizes to participate in the Engagement.
• Integration-derived information. Point-in-time data snapshots and resulting structured information captured from source systems that an authorized Company user separately connects or refreshes.
• Diligence outputs. Fact Sheets, source-linked evidence, Carter responses, Investigation reports, extracted facts, citations, conflicts, and other outputs generated from authorized Engagement information and made available within the Requesting Firm’s diligence workspace.
• Follow-up information. Additional documents, responses, or other materials submitted within the same Engagement in response to reasonable follow-up requests.
• Verification information. Founder-verification status, results, or other verification information only to the extent separately authorized through the applicable Founder Verification flow and made available under that separate authorization.

4. Engagement-Specific Scope

This Authorization applies only to the Requesting Firm and Engagement associated with the invitation or data request through which it is accepted. If a different firm invites the Company to diligence, the Company must provide a separate authorization before Lunaseed makes Company information available to that firm.

Reasonable follow-up requests from the same Requesting Firm within the same Engagement are covered by this Authorization. A materially separate diligence engagement, or a sensitive action governed by another authorization—such as founder verification—may require a new or additional affirmative authorization. Ordinary future integration connections are governed by the separately accepted Integration Data Access Authorization.

5. Who May Access Diligence Information

6. Company Authority and Responsibilities

By accepting this Authorization, the accepting user represents and confirms that:

• the accepting user is authorized to act on behalf of the Company for the Engagement and to provide this Authorization;
• the Company has the rights, permissions, or other lawful authority reasonably necessary to submit, connect, and share the Diligence Information it provides through Lunaseed;
• where Company materials contain information relating to employees, contractors, customers, investors, or other third parties, the Company is responsible for determining that it is permitted to provide that information for diligence;
• the Company will not intentionally submit information that it knows it is prohibited from sharing; and
• the Company will use reasonable care to keep information it submits for diligence current and not materially misleading.

This Section does not require the accepting user to personally verify every statement, accounting entry, source record, or third-party item contained in Company materials. The separate Diligence Submission Certification governs the Company’s final submission certification.

7. Integrations

This Authorization does not replace the Integration Data Access Authorization. A founder or other authorized Company representative must accept that authorization before the Company first connects an integration through Lunaseed. Once accepted, that separate authorization governs future Company-authorized integration connections unless it is materially revised, withdrawn, or otherwise ends under its terms. Individual connection selections are handled through the product and do not require this Diligence Data Sharing Authorization to be re-signed.

Lunaseed’s current integration design uses temporary authorization to capture a read-only, point-in-time diligence snapshot and then disconnects the source authorization after capture, subject to the capabilities and permissions of the applicable provider. Lunaseed does not use this Authorization as permission to write back to or modify a connected source system.

8. Founder Verification

Founder verification is a separate process. This Authorization does not itself authorize a background or identity verification, does not substitute for any disclosure, consent, or authorization required by the verification provider or applicable law, and does not determine what verification information may be displayed to the Requesting Firm.

Verification information is included within the scope of this Authorization only after the applicable founder separately completes the Founder Verification Disclosure & Authorization and only to the extent the resulting information is permitted to be made available through Lunaseed.

9. Use, Downloads, and Copies by the Requesting Firm

Lunaseed may permit the Requesting Firm to view, open, download, export, cite, or otherwise use particular items of Diligence Information according to product functionality and permissions. Where a recipient lawfully downloads or exports information, Lunaseed may no longer be able to technically retrieve or delete every copy held outside Lunaseed.

The Requesting Firm may also have independent legal, compliance, investment-recordkeeping, or audit obligations that require it to retain certain information. Nothing in this Authorization requires Lunaseed to represent that information lawfully received by the Requesting Firm can later be recalled from the Requesting Firm’s separate systems.

This Authorization is not an NDA between the Company and the Requesting Firm. Any separate confidentiality, nondisclosure, investment, or other agreement between those parties remains independent of this Authorization.

10. Withdrawal and Ending Future Access

The Company may decline to provide additional information and may contact Lunaseed to request that future access to Company-controlled information in the Engagement be restricted or ended, subject to the status of the Engagement, applicable agreements, legal requirements, and Lunaseed’s technical capabilities. Ending future access may prevent or materially limit completion of diligence.

A withdrawal or access restriction is prospective. It does not retroactively invalidate access that was authorized before the change and does not automatically erase copies that the Requesting Firm or another authorized recipient lawfully viewed, downloaded, exported, or retained before access ended.

11. Retention and Deletion

Lunaseed retains and deletes Diligence Information in accordance with its Privacy Policy and applicable organization agreements. Customer data is generally retained while the relevant account or engagement remains active.

• Valid deletion request. Applicable customer data is removed from active production stores, including applicable PostgreSQL records, Amazon S3 objects, integration snapshots, MongoDB archive copies, and other active production stores, within 30 days, except for limited records that Lunaseed must or reasonably needs to retain for legal, billing, security, fraud-prevention, dispute, or audit purposes.
• Termination without a deletion request. Lunaseed may provide a 30-day export or recovery period and then delete or de-identify applicable customer content from active systems within 90 days, subject to permitted retention exceptions.
• Backups. Encrypted rolling backups are retained for up to 35 days and then automatically expire or are overwritten. Deleted information may remain in an encrypted backup until the applicable backup expires.

These deletion commitments apply to copies controlled by Lunaseed. They do not require Lunaseed to delete copies independently retained by the Requesting Firm or another recipient outside Lunaseed after lawful access.

12. Ownership and Limited Rights

As between the Company and Lunaseed, the Company retains its ownership rights in Company materials and information. The Company grants Lunaseed only the limited rights reasonably necessary to process, generate, display, and share Diligence Information as authorized by this document and the applicable Lunaseed agreements. Lunaseed retains ownership of the Lunaseed platform, software, models, workflows, templates, and other proprietary technology.

13. No Investment Commitment or Professional Advice

Sharing Diligence Information does not obligate the Requesting Firm to make an investment or other transaction and does not constitute a representation by Lunaseed that any information is complete, accurate, verified, or suitable for a particular investment decision. Lunaseed provides diligence infrastructure and source-linked outputs; it does not provide legal, tax, accounting, or investment advice.

14. Relationship to Other Lunaseed Terms

This Authorization supplements the Lunaseed Terms of Service and Privacy Policy and, where applicable, the agreements governing the Requesting Firm’s use of Lunaseed. Separate documents govern contributor access, integration access, founder verification, and final diligence submission certification.

If this Authorization conflicts with a more general Lunaseed term solely about whether the Company authorized sharing with the specific Requesting Firm for this Engagement, this Authorization controls for that limited question. Otherwise, the applicable Lunaseed agreements continue to govern.

If Lunaseed materially changes the scope of this Authorization in a way that expands the categories of information or recipients covered for an existing Engagement, Lunaseed may require a new affirmative acceptance before the expanded sharing occurs.

15. Electronic Acceptance and Evidence

Checking the acceptance box and selecting “Accept Invitation,” “Accept Request,” or an equivalent affirmative button constitutes electronic acceptance of this Authorization. The accepting user represents that they intend to be bound by this Authorization on behalf of the Company.

Lunaseed may retain an audit record of the acceptance event, including the accepting user, Company, Requesting Firm, Engagement identifier, timestamp, document version, IP address, and device or browser information, together with other technical records reasonably necessary to evidence the acceptance.

16. In-Product Acceptance

The following acceptance language is intended to appear in the Founder/Company invitation flow:

17. Contact

Questions about this Authorization may be sent to legal@lunaseed.io. Product-support questions may be sent to support@lunaseed.io. Privacy questions may be sent to privacy@lunaseed.io.