Terms of Service

Who This Agreement Is Between

These Terms of Service ("Terms") govern use of the CDO workforce management platform, operated by Innovative Platform Solutions, Inc. ("IPS", "we", "us"), a Nevada corporation, Nevada Business Identification # NV20253289204.

Two different relationships are covered here, and they are not the same:

• The Customer. The company that licenses CDO for its workforce. The Customer accepts these Terms by signing an order form or by using the platform. Where these Terms speak about fees, data ownership, indemnities or termination, they speak to the Customer.
• Authorized Users. The Customer's employees, foremen, office staff and administrators who sign in. If you are a worker using CDO because your employer gave you an account, the sections that apply to you are Accounts & Access, AI Features, and the acceptable-use rules below — not the commercial terms. Your employment relationship is with your employer, not with IPS.

Where the Customer has signed a separate written agreement with IPS, that agreement controls to the extent it conflicts with these Terms.

What CDO Is

CDO is a record-keeping and decision-support platform for field service and construction work. It provides time and attendance capture, job scheduling and dispatch, crew management, document and policy distribution, training and certification tracking, safety and injury recordkeeping, estimating and invoicing, and an AI assistant that answers questions about the data already in the system.

IPS provides the platform. The Customer decides how to configure it, what data to put in it, and what to do with what comes out.

What CDO Is Not

This section is deliberately specific. Several things the platform helps with are things it does not do, and confusing the two is how a customer gets hurt.

CDO is not a law firm, an accountant, or an HR consultancy. The platform surfaces California labor-law content, meal- and rest-break analysis, regulation summaries, OSHA recordability criteria and statutory deadlines. All of it is information and decision support, not legal advice. It does not create an attorney-client relationship. Regulatory text can be out of date, incomplete, or inapplicable to a particular situation. CDO never certifies that the Customer is in compliance with anything, and no screen in the platform should be read as saying so. Before acting on a compliance question, consult qualified counsel.

CDO does not make employment decisions. The Customer is the employer. Hiring, firing, discipline, scheduling, pay rates, classification and every other employment decision are the Customer's, made by its people. The platform records those decisions and flags things for human review; it does not make them.

CDO is not a safety-critical or emergency system. It must not be relied on to summon emergency help, to prevent injury, or as the sole means of communicating an urgent instruction to a worker in the field. In an emergency, call emergency services.

CDO is not a system of record for anything it does not hold. Where the Customer imports data from another system, or where another system remains authoritative, CDO reflects what it was given.

Accounts & Access

Accounts are created and assigned by the Customer. Access to data inside the platform is scoped by role: a worker sees their own records, a foreman sees their crew, office and administrative roles see more. The Customer assigns those roles and is responsible for keeping them correct — including removing access when someone leaves.

Every user agrees to:

• Keep their sign-in credentials and PIN confidential, and not share them with anyone.
• Provide accurate information, particularly in time and attendance records.
• Not attempt to access data belonging to another company, another crew, or another worker.
• Not attempt to probe, scan, disable, reverse-engineer or circumvent any security or access control in the platform, and not use automated means to extract data beyond ordinary use of the interface.
• Report any suspected unauthorized access promptly — to their supervisor, and to IPS at team@cdohr.ai.

We may suspend an account that is being used in breach of these rules, or where continued access presents a security risk. Where we can do so safely, we tell the Customer first.

Customer Data & Ownership

The Customer grants IPS a limited license to host, process, transmit, back up and display that data solely to provide and support the platform, and to comply with law.

What we do not do with it. We do not sell Customer Data. We do not share it with third parties for their own marketing. We do not use it to train machine-learning models, and the AI providers we use are under commercial terms that prohibit training on it. We do not use one Customer's data to serve another Customer.

Employment records. Where the data concerns the Customer's employees, the Customer is the business responsible for it and IPS acts as a service provider on the Customer's instructions. A worker who wants to access, correct or delete their employment records starts with their employer. This is described in full in the Privacy Policy.

Aggregated statistics. We may compute aggregate, de-identified statistics about how the platform is used — volumes, error rates, feature adoption — to operate and improve it. Such statistics never identify a Customer, a worker, or a customer of the Customer.

Security. We use reasonable technical and organizational measures to protect Customer Data, including encryption in transit and at rest, role-based access control and audit logging. No system is perfectly secure, and we do not warrant that it is. If we confirm a breach of security affecting Customer Data, we will notify the Customer without unreasonable delay and in any event within seventy-two (72) hours of confirming it, and give the Customer the information it needs to meet its own notice obligations, including any notice to affected individuals required by California Civil Code §1798.82 or other applicable law. We will keep the Customer informed as we learn more.

Outputs. As between the parties, the Customer owns the reports, exports, drafts and other outputs the platform generates for it from Customer Data, including AI-generated drafts once the Customer accepts them, subject to any rights of third parties. Similar outputs may be generated for other customers from their own data.

Data Processing (CCPA)

This section is the contract the California Consumer Privacy Act requires between a business and its service provider. It applies whenever IPS processes personal information of the Customer's workforce, applicants or customers (“Customer Personal Information”), and it prevails over anything else in these Terms that conflicts with it.

• Role. The Customer is the business and IPS is its service provider under Cal. Civ. Code §1798.140(ag). The Customer discloses Customer Personal Information to IPS only for the limited and specified business purpose of providing the platform described in these Terms and the order form.
• No sale or sharing. IPS will not sell or share Customer Personal Information.
• Limited use. IPS will not retain, use or disclose Customer Personal Information for any purpose other than that business purpose, including any other commercial purpose, or outside the direct business relationship with the Customer, except as the CCPA and its regulations permit a service provider to do (11 CCR §7050), such as building and improving the platform, detecting security incidents and preventing fraud, and computing de-identified statistics. IPS will not combine Customer Personal Information with personal information it receives from or on behalf of another person, except as those regulations permit.
• Same protection. IPS will comply with the CCPA and provide the same level of privacy protection the CCPA requires of the Customer.
• Oversight. The Customer may take reasonable and appropriate steps to ensure IPS uses Customer Personal Information consistently with the Customer's obligations, including reviewing IPS's written security and privacy practices on request, and, on notice, to stop and remediate any unauthorized use.
• Notice if we cannot comply. IPS will notify the Customer within five (5) business days if it determines it can no longer meet its obligations under the CCPA.
• Subprocessors. IPS will engage subprocessors only under a written contract that imposes obligations at least as protective as these. The categories of subprocessors are described in the Privacy Policy, and IPS will provide the Customer with the current list on request. IPS will give the Customer at least thirty (30) days' notice before adding one that will process Customer Personal Information, and the Customer may object on reasonable grounds. If an objection cannot be resolved, the Customer may terminate the affected service and receive a pro-rata refund of prepaid fees.
• Requests from individuals. IPS will help the Customer respond to requests from workers and other individuals to know, access, correct, delete or limit their personal information, and will pass on any request it receives directly.
• Risk assessments. IPS will give the Customer the information it reasonably needs for its own risk assessments under the CCPA regulations, including for precise geolocation, clock-in photographs and injury records.
• Return and deletion. At the end of the relationship, IPS returns and deletes Customer Personal Information as described in Term, Termination & Your Data After.
• Certification. IPS understands and will comply with the restrictions in this section.

Customer Responsibilities

The Customer is responsible for:

• Compliance with employment law. Wage and hour rules, meal and rest periods, overtime, recordkeeping, workplace safety, and every other obligation of an employer, remain the Customer's. The platform assists; it does not assume those duties.
• Telling its workforce. The Customer must inform its workers about the platform and, where the law requires it, obtain their consent — particularly for location collection, clock-in photographs, voice recordings and text messaging. IPS provides the disclosures; the Customer is the one with the employment relationship. This includes any notice and acknowledgment a state requires before electronic monitoring of employees (for example New York Civil Rights Law §52-c, Connecticut General Statutes §31-48d and Delaware Code title 19, §705) and any notice required when automated tools inform employment decisions (for example under California's Civil Rights Council regulations and the Illinois Human Rights Act).
• Consent to text messages. The Customer represents that each worker whose number it enters has agreed to receive operational text messages from the platform, keeps a record of that consent, and tells IPS promptly when a worker withdraws it by any means. Messages the Customer sends through the platform to its own customers are the Customer's messages, and the Customer is responsible for having their consent and honoring their opt-outs and quiet hours under the Telephone Consumer Protection Act and state law.
• Human review of automated outputs. The Customer will not discipline, dismiss, demote or change the pay of a worker on the sole basis of an automated output of the platform. Any such decision is made by a person at the Customer with the authority to review the evidence and change the outcome, and the Customer gives the worker any notice the law requires.
• Accuracy and configuration. Pay rates, geofences, crew assignments, roles, job data and settings are entered and maintained by the Customer. Calculations are only as good as what they are calculated from.
• Its own payroll. Reviewing and approving what the platform produces before using it to pay anyone.
• Lawful use. Not using the platform to harass, surveil unlawfully, discriminate, or otherwise break the law; and not using it in a way that violates the rights of its workers. The Customer will not use the platform to infer a worker's emotional state or to monitor activity protected by Section 7 of the National Labor Relations Act.
• Its users. Acts and omissions of its Authorized Users, as if they were the Customer's own.

Device-dependent features. Time capture, location and photographs depend on workers' mobile devices, their operating-system permissions, battery state and network connectivity. Where a device does not report, the platform records the absence rather than inventing a value — but the Customer should not assume complete coverage from any device-dependent feature.

Text messaging. Text messages depend on mobile carriers and devices, are subject to volume limits, and are not guaranteed to be delivered or to arrive at a particular time. Text messaging is not a substitute for direct contact where something is urgent.

AI Features

Output can be wrong. Large language models produce plausible text that is sometimes inaccurate. Summaries, classifications, drafted documents and answers must be verified before they are relied on — particularly anything touching pay, discipline, safety or a legal deadline.

It will not give professional advice. The assistant is not a lawyer, doctor, accountant or licensed professional and will not provide legal, medical, tax or immigration advice. Users are told they are speaking to an automated system, not a person.

It cannot make employment decisions. It cannot hire, fire, discipline, approve final pay, or make any binding employment decision. Where it flags a possible violation or a possible recordable injury, that flag is a prompt for a human determination, not the determination itself.

Automated decision support. Some features compute indicators about workers — possible meal- and rest-break violations, timecard anomalies, attendance patterns and production figures — for the Customer's managers to review. These outputs are decision support. IPS will:

• keep, for the Customer's account, the indicators used in connection with an employment decision and the information behind them for four (4) years, or export them to the Customer on request, so the Customer can meet the record-keeping rules of the California Civil Rights Council's regulations on automated-decision systems;
• not build these features to use a characteristic protected by the California Fair Employment and Housing Act or similar laws, or a stand-in for one;
• give the Customer the information it reasonably needs to explain an indicator to a worker, to carry out a human review, and to give any notice, access or opt-out that the CCPA regulations on automated decision-making technology or other state law require of the Customer; and
• cooperate reasonably with the Customer's own testing of these features and with any inquiry by a government agency.

Do not type sensitive identifiers into chat. Message content is sent to third-party model providers. Social Security numbers, bank account or routing numbers and medical details should never be entered into the assistant; no CDO workflow asks for them there. See the Privacy Policy.

Conversations are logged and may be reviewed by the Customer's authorized personnel for quality, training, audit and compliance. Workers retain their rights under Section 7 of the National Labor Relations Act to discuss wages and working conditions with coworkers; logging is not a tool to monitor protected concerted activity.

Third-Party Services

The platform connects to services the Customer chooses to enable — accounting systems, cloud storage, mapping, payment processing, prior field-service tools — and to infrastructure providers we use to run it. The categories of service providers are described in the Privacy Policy, and the notice we give before adding one is in Data Processing (CCPA).

Where the Customer connects its own account at a third party, the Customer's agreement with that third party governs that service. We are not responsible for a third party's availability, changes to its interfaces, or its handling of data once it is in that party's own system at the Customer's direction. If a third party changes or discontinues something we depend on, we will make reasonable efforts to adapt, and will tell the Customer if a feature is affected.

Fees

Fees, billing frequency and payment terms are set out in the order form or written agreement between IPS and the Customer. Unless that document says otherwise, fees are charged per active user per month, invoiced monthly, payable within thirty (30) days, and exclusive of taxes. An active user is a person with an active CDO account at any time during the billing month.

Features marked “coming soon”. Features our website or order form describe as coming soon are not part of the subscription until we release them, and the fees do not include a commitment to deliver them by a particular date.

We will give the Customer at least thirty (30) days' written notice before a fee change takes effect, and a fee change never applies retroactively to a period already invoiced.

Authorized Users are never charged. If you are a worker using CDO, the platform costs you nothing; your employer pays for it.

First-Month Guarantee

• Who it is for. A new Customer, on its first paid subscription to CDO. It applies once per Customer.
• How to use it. Email team@cdohr.ai from an administrator's address within thirty (30) days of the date of the first invoice. You do not need to give a reason.
• What we refund. The subscription fees paid for that first month, to the original payment method, within thirty (30) days of the request. It does not cover taxes we have already remitted, third-party charges such as payment-processing or carrier fees, or services bought separately, such as custom data migration.
• What happens next. We cancel the subscription at the end of that first month, unless you tell us you want to continue, and your data is handled as described in Term, Termination & Your Data After, including the sixty-day export window.

Term, Termination & Your Data After

These Terms apply for as long as the Customer uses the platform. Unless the order form says otherwise, the subscription is month to month: it renews automatically each month, and either party may cancel it at any time with effect at the end of the then-current billing month. Where an order form sets a longer term, it says how that term renews and how to cancel it.

We may suspend or terminate for material breach that is not cured within thirty (30) days of written notice, or immediately where continued operation would be unlawful or would present a serious security risk.

After that window, we delete or de-identify Customer Data within a further ninety (90) days, except where retention is required by law or where records are needed to resolve a dispute. Backups age out on their own schedule and are not individually searchable; data in them is not restored to service.

Sections that by their nature should survive termination do: data ownership, confidentiality, disclaimers, limitation of liability, indemnification, and governing law.

Confidentiality

Each party may learn confidential information of the other. Each will protect the other's confidential information with at least the care it uses for its own, and will use it only to perform under these Terms. This does not apply to information that is public through no fault of the receiving party, was already known to it, is independently developed, or is lawfully received from a third party. Disclosure compelled by law is permitted, with notice to the other party where legally allowed.

Warranties & Disclaimers

What we do promise. We will provide the platform with reasonable skill and care, consistent with generally accepted industry practice. We will not materially reduce core functionality during a paid term without notice.

What we do not promise. Except as stated above, the platform is provided "as is" and "as available", and IPS disclaims all other warranties, express or implied, including implied warranties of merchantability, fitness for a particular purpose, title and non-infringement.

In particular, and without limiting the above, we do not warrant that: the platform will be uninterrupted or error-free; that defects will be corrected within any particular time; that any calculation, flag, classification, AI output or compliance analysis is accurate or sufficient for the Customer's purposes; that text messages will be delivered, or delivered on time; or that any device-dependent feature will capture every event.

Limitation of Liability

To the maximum extent permitted by law:

• Neither party is liable for indirect, incidental, special, consequential, exemplary or punitive damages, or for lost profits, lost revenue, lost goodwill or lost data, however caused and on any theory of liability.
• Each party's total aggregate liability arising out of or relating to these Terms will not exceed the amount the Customer paid IPS for the platform during the twelve (12) months preceding the event giving rise to the claim.

Nothing here limits a worker's rights against their own employer, or any right a worker has under employment, privacy or labor law. This section allocates risk between IPS and the Customer.

Indemnification

By IPS. We will defend the Customer against a third-party claim that the platform, as provided by us, infringes that third party's intellectual property rights, and will pay damages finally awarded or agreed in settlement. This does not apply to claims arising from Customer Data, from the Customer's configuration or use in breach of these Terms, or from combination with anything we did not supply.

By the Customer. The Customer will defend IPS against a third-party claim arising from Customer Data, from the Customer's use of the platform in breach of these Terms or of law, or from an employment claim brought by the Customer's own worker — and will pay damages finally awarded or agreed in settlement.

In each case the indemnified party must promptly notify the other, give reasonable cooperation, and allow the indemnifying party to control the defense. No settlement that admits fault or imposes an obligation on the indemnified party may be made without its consent.

Governing Law

These Terms are governed by the laws of the State of Nevada, without regard to its conflict-of-law principles. The parties submit to the exclusive jurisdiction of the state and federal courts located in Clark County, Nevada.

This choice of law and venue governs the commercial relationship between IPS and the Customer. It does not affect any right a worker has under the law of the state where they work, including California employment, wage-and-hour and privacy law, and it does not waive any protection that cannot be waived by agreement.

If a provision of these Terms is held unenforceable, it is modified to the minimum extent necessary to make it enforceable, and the rest remains in force.

Language. These Terms are written in English, and we publish a Spanish translation for convenience. If the two conflict, the English version controls, except where applicable law requires the Spanish text to control.

Changes to These Terms

We may update these Terms. For a change that materially reduces the Customer's rights or materially increases its obligations, we will give at least thirty (30) days' notice before it takes effect, through the platform or by email to the Customer's administrators. If the Customer does not accept a material change, it may terminate before the change takes effect and receive a pro-rata refund of fees paid for the unused period.

Non-material changes — clarifications, corrections, new section headings — take effect when posted. The date at the top of this page always reflects the current version.

Changes in this version (October 27, 2026). Clarifications only, effective when posted: service providers are described by category, with the current list of subprocessors available on request; the description of text messaging and security measures is stated in general terms; and examples were removed from the paragraph on features described as coming soon.

Pending effective date. The Customer obligations added to Customer Responsibilities on October 3, 2026 — notices for electronic monitoring and automated decisions, consent to text messages, human review of automated outputs, and the uses the Customer will not make of the platform — take effect on November 2, 2026, thirty days after they were posted.

Contact

Questions about these Terms, or notices under them:

Innovative Platform Solutions, Inc.
CDO Workforce Management Platform
1887 Whitney Mesa Drive #7773
Henderson, NV 89014
Nevada Business Identification # NV20253289204
Email: team@cdohr.ai

If you are a worker and your question is about your own hours, pay, schedule or records, your employer holds those records and directs how they are handled. Contact your employer first; we support them in responding.