Terrestream℠ Commercial Addendum

Version 2.0 · Effective September 27, 2026 · Aerodyne Inc. d/b/a Terrestream

This Commercial Addendum ("Addendum") adds to our Terms of Service ("Terms") for businesses and other organizations. It's part of the contract between Aerodyne Inc., doing business as Terrestream ("we" or "us"), and the organization that uses the Device or Services as a Commercial User ("you"). Words defined in the Terms, such as "Device", "Readings", "Automated Outputs", "Life-Safety Device", "Services" and "Third-Party Platform", mean the same here.

1. Scope and how this Addendum fits

1.1 Who it applies to

This Addendum applies to you if you're a Commercial User: you use the Device or Services in a commercial, institutional, educational, health-care or multi-tenant setting, or you order through Terrestream Facilities (Terms §7.1). It doesn't apply to Consumers using the Device at home.

1.2 Order of precedence

These documents work together. If they conflict:

1. our Data Processing Agreement, if you've entered into it, controls on how we process personal information on your behalf (§9.1);
2. your accepted order controls its quantities, prices, dates, enabled services and any procurement exceptions we both expressly approved (§10);
3. this Addendum controls the other matters it covers; and
4. the Terms control everything else (Terms §2.4, §7.4).

Our Privacy Policy applies as it describes.

1.3 Accepting for your organization

Whoever accepts this Addendum for you confirms that they're authorized to bind you. In Terrestream Facilities, an organization owner or administrator accepts it, and we record the version, the time, who accepted and the app they used. You're then bound, and you're responsible for everyone who uses the Services through your accounts (§7.6). The person who accepts isn't personally liable just because they accepted for you (Terms §2.3).

1.4 Earlier versions and existing orders

For new orders and new acceptances, this Addendum replaces:

• the Facilities Commercial Terms of September 11, 2026; and
• the provisions of Terms version 1.1 (September 26, 2026) that applied only to Commercial Users, including §7, §13.7 and the Facilities SMS section.

An order accepted before September 27, 2026 keeps the document versions it incorporated until one of your owners or administrators accepts this Addendum, or a renewal or new order incorporates it. Past versions are at terrestream.com/legal/archive.

2. Building standards and certification

2.1 What's inside the Device

Every Device we sell uses:

• a Sensirion SEN66 module for particulate matter (PM1.0, PM2.5, PM4.0 and PM10), the VOC index, the NOx index, temperature, relative humidity and carbon dioxide (CO₂);
• a Bosch BMP390L sensor for barometric pressure; and
• a Texas Instruments OPT3001 sensor for ambient light.

Our sensor-compliance page (terrestream.com/legal/sensor-compliance) lists the components, and we update it when they change or when we add a configuration.

2.2 What the component makers say

On its SEN66 product page (sensirion.com/products/catalog/SEN66), Sensirion states that the SEN66 suits applications that must comply with indoor air quality standards such as RESET®, the WELL Building Standard™ and California's Title 24 building energy efficiency standards. Sensirion also publishes the SEN66 datasheet and specification statement on that page. Bosch and Texas Instruments publish datasheets for the BMP390L and the OPT3001 but no indoor air quality building-standard statement for them. Barometric pressure and ambient light aren't parameters that RESET® Air, the WELL Building Standard™, ANSI/ASHRAE 62.1, California Title 24 or LEED indoor environmental quality credits govern.

2.3 We don't vouch for those statements

These are the component makers' statements, not ours. We build the components into the Device, but we don't test, certify, audit or verify what their makers publish about them. We don't represent that the components keep those characteristics inside the Device or under real-world conditions. Each maker is responsible for its own statements, and you can check them at the sources cited. Our statements about the Device's accuracy are limited to its published specifications and Terms §6.

2.4 Device accreditation is separate

Programs such as RESET® Air, the WELL Building Standard™, LEED, Fitwel and BREEAM accredit complete monitors as systems, not the sensors inside them. Accreditation depends on the monitor's data pipeline, calibration program, placement, signaling, audit posture and more. A component maker's statement isn't accreditation of the Device. The Device's accreditation status is published at terrestream.com/legal/accreditation. As of September 27, 2026, it holds no device-level accreditation. Where our materials or the Services mention a building standard the Device isn't accredited under, the mention is informational only.

2.5 No promise of certification

We don't promise that using the Device or its data will earn certification credits, points or prerequisites, or meet the requirements of any building, workplace, environmental, wellness or similar certification program. Certification bodies and regulators set their own requirements for devices, placement, calibration, data quality, chain of custody and audit evidence. You're responsible for confirming, with the program and qualified consultants, whether the Device and your deployment meet them.

3. Regulatory use and publishing data

3.1 Not regulatory instrumentation

The Device is consumer- and commercial-grade indoor air quality instrumentation, not certified regulatory instrumentation (Terms §6.4). Readings and Automated Outputs aren't suitable for regulatory submissions, enforcement filings, citizen-suit pleadings or other evidence that requires certified or reference-grade monitoring, unless qualified professionals independently validate them with instruments accepted for that purpose. Any such use is at your own risk.

3.2 No promise of regulatory compliance

The Device doesn't ensure or show compliance with any federal, state, provincial or local requirement, including rules on workplace exposure, building performance, the environment, health, safety and energy performance. You must independently confirm that your monitoring practices, instruments and data quality meet every requirement that applies to you. If you rely on the Device as the only basis for compliance, you do so at your own risk, and to the extent the law allows, we aren't liable for it.

3.3 Publishing or sharing Device data

Some places restrict publishing or using air quality data from monitors that aren't certified. You're responsible for making sure that any publication, sharing or other dissemination of Readings or Automated Outputs, including through exports, reports, screenshots or a Third-Party Platform, complies with every law that applies. Readings and Automated Outputs come from our own methods, which aren't certified reference methods. We don't represent that they'll be accepted in any legal, regulatory or administrative proceeding; the tribunal decides their admissibility and weight. To the extent the law allows, we aren't liable for fines, penalties, judgments or other actions arising from your dissemination, and §8.3 applies.

4. Building automation

You're responsible for integrating Device data with any building management system, building automation system or other automated control. Before you use Device data for demand-controlled ventilation, energy optimization or automated heating, ventilation and air-conditioning (HVAC) control, validate it against instruments and professional standards suited to your deployment. The Device isn't designed or warranted to be the only sensor input to a demand-controlled ventilation system. To the extent the law allows, and subject to Terms §11.5, we aren't liable for HVAC performance, energy use, occupant comfort, indoor air quality outcomes or equipment damage arising from such an integration, whether caused by sensor inaccuracy, data delays, lost connectivity or anything else. Terms §9.3–§9.4 also apply: never use the Device or its data for safety-critical control.

5. Occupants, tenants, employees and visitors

If the Device is in a space used by tenants, employees, students, patients, visitors or other people, you're responsible for:

• (a) Notice. Telling them clearly that the Device is there and what it measures, including that it's informational only and isn't a Life-Safety Device (Terms §4).
• (b) Consent. Getting any consent that landlord-tenant, employment, privacy or other law requires before you deploy the Device where other people may be present.
• (c) Accessibility. Meeting accessibility law, such as the Americans with Disabilities Act (42 U.S.C. § 12101 et seq.), Section 508 of the Rehabilitation Act (29 U.S.C. § 794d), the Accessibility for Ontarians with Disabilities Act, 2005 and similar laws.
• (d) Agreements. Following your leases, occupancy agreements and employment agreements.
• (e) Children. Where children are present, such as in a school or daycare, meeting the child-privacy and education laws that apply to you. Occupancy estimates combined with class schedules or rosters could identify individuals (Privacy Policy §12).

Our in-home notice has wording you can adapt. For Consumers, telling people about the Device is a recommendation (Terms §13.5); for you, it's a requirement. To the extent the law allows, we aren't liable for occupants' claims arising from your deployment, such as claims about privacy, indoor air quality or non-disclosure, and §8.3 applies.

6. Expert review and checking your Devices

For Consumers, Terms §5.5 and §6.3 are recommendations. For you, they're requirements.

6.1 Expert review

Before you make any operational, safety, compliance, health or financial decision based on Readings or Automated Outputs, get independent review by a qualified professional suited to the decision, such as a certified industrial hygienist, a licensed HVAC engineer, a licensed medical professional or a lawyer.

6.2 Verification, recalibration and replacement

You must:

• (a) check each Device regularly against known references or co-located reference-grade instruments;
• (b) recalibrate as the Device documentation and Firmware release notes direct; and
• (c) replace or decommission a Device when its accuracy falls below what your use requires.

You set that threshold, with expert advice where appropriate (§6.1).

6.3 Effect on our liability

Subject to Terms §11.5, we aren't liable for a decision made without the review in §6.1, or for inaccurate Readings caused by not verifying, recalibrating or replacing a Device when it was due.

7. Accounts, fleet and security

For Consumers, some of these steps are recommendations (Terms §13). For you, they're requirements.

7.1 Account administrators

Designate at least one account administrator who has authority to bind you and who accepts this Addendum for you. In Terrestream Facilities, organization owners and administrators hold this role.

7.2 Users and roles

• Give each person their own login and only the access they need. Don't share logins (Terms §13.2).
• Assign roles with care. In Terrestream Facilities, the roles are owner, administrator, facilities manager, responder, installer, viewer and billing contact.
• Make sure everyone who uses the Services through your accounts follows the Terms and this Addendum.
• Keep your user lists accurate, and remove or change access promptly when someone's role changes or ends, including departing employees and former tenants.

7.3 Network and account security

Terms §13.1–§13.2 apply. In addition:

• where technically feasible, put Devices on a network segment dedicated to smart devices, such as a separate VLAN or guest network, isolated from your main computers;
• make sure everyone who can manage your organization, Devices or alerts turns on two-step verification; and
• report any suspected compromise of a Device or account, and any vulnerability you find, promptly (Terms §13.4).

7.4 Updates

Make sure each Device installs Firmware updates within 30 days after we notify you of them. Updates install automatically when a Device is connected to Wi-Fi (Terms §15.1), so keep your Devices connected and don't block our update servers. Keep the Mobile App, and the browsers you use for the Web Dashboard and Terrestream Facilities, up to date.

7.5 Security lapses

Terms §13.6 also applies to a failure to meet §7.3 or §7.4: if harm you claim was materially caused by that failure, our warranty and liability obligations are reduced to the extent of that contribution, but only where there's a direct causal link.

7.6 Responsibility for your users

You're responsible for the acts and omissions of your administrators and users when they use the Services through your accounts. An individual administrator or user isn't personally liable under the Terms or this Addendum just because they accepted them for you or manage your account. This does not create a personal guarantee through ordinary acceptance; fraud, willful misconduct and acting without authority remain subject to applicable law.

8. Liability and indemnity

8.1 What the Terms already cover

The limited warranty (Terms §10), the limitation of liability (Terms §11) and the indemnity procedure (Terms §12.2) apply to you. For a security incident involving personal information we process for you under the DPA, the DPA's liability terms apply (DPA §13).

8.2 Commercial losses

In addition to Terms §11.2–§11.3, and to the extent the law allows, we aren't liable for:

• lost building certifications, certification points or eligibility;
• lost green-building tax incentives, rebates or credits;
• lost profits, revenue or business opportunities;
• lost productivity or business interruption;
• sick-building-syndrome or indoor air quality claims by occupants;
• regulatory fines, penalties, enforcement actions or remediation costs; or
• lost tenant revenue, lease value or occupancy.

The cap in Terms §11.1 controls our total liability, and Terms §11.5 still applies.

8.3 Your indemnity

In addition to your indemnity in Terms §12.1, you'll indemnify, defend and hold harmless Aerodyne Inc. and its officers, directors, employees, agents and affiliates against claims, damages, losses, liabilities, judgments, settlements, costs and expenses, including reasonable attorneys' fees, arising out of or relating to:

• (a) your publication, sharing or commercial use of Readings or Automated Outputs in violation of laws on air quality data from monitors that aren't certified (§3.3);
• (b) your unauthorized modification, disassembly or reverse engineering of a Device, or tampering with its Firmware, including circumventing secure boot or code signing, in breach of Terms §3.3 or §14.5;
• (c) a claim by an occupant, tenant, employee, patient, student, visitor, prospective buyer, real-estate agent or broker, home inspector, appraiser, lender, contractor or other third party arising from your reliance on, sharing of or display of Readings or Automated Outputs for health, safety, environmental, occupational, certification, real-estate or operational decisions;
• (d) your violation of a building, fire or occupational health and safety code, including a citation for using the Device in place of code-required equipment;
• (e) any use that Terms §14 prohibits, including safety-critical control (Terms §9.4);
• (f) your failure to install or maintain the life-safety systems that Terms §4.5 requires;
• (g) automated actions through a Third-Party Platform or a building system (§4; Terms §9), including heating, ventilation, humidifier, damper or fan actions, whether caused by Device data, an integration failure or a Third-Party Platform error;
• (h) your User Content (Terms §17.2); or
• (i) your breach of the Terms or this Addendum, including a breach by any of your administrators or users.

The procedure in Terms §12.2 applies. The cap in Terms §11.1 limits our liability, not your obligations under this section.

9. Personal information

9.1 Data Processing Agreement

If you need us to process personal information on your behalf, you can enter into our standard Data Processing Agreement ("DPA") at terrestream.com/legal/dpa by countersigning it (Terms §7.3). Under the DPA, we act as your processor (or service provider) for "Customer Personal Data", as the DPA defines it: personal information that arises from your deployment of the Device under the DPA, not including de-identified or aggregate data (Privacy Policy §3.4). The DPA covers processing instructions, confidentiality, security measures, sub-processors, requests from individuals, breach notification, audit cooperation, the return or deletion of data when our relationship ends, and cross-border transfers. It controls if it conflicts with the Terms, this Addendum or the Privacy Policy about that processing. Existing signed DPAs remain governed by their incorporated versions unless validly amended; publication alone does not change them.

9.2 Regulated settings

The standard DPA includes one optional schedule, the Quebec Law 25 written-mandate schedule. If you need other terms for a regulated setting, such as health care or education, ask us for a separate addendum. Those terms apply only once we sign them. Until then, deploying the Device where such terms are required is at your own risk, and §5 and §8.3 apply.

9.3 Sub-processors

Our current sub-processors are listed at terrestream.com/legal/sub-processors, including Twilio, which sends Terrestream Facilities text messages (§11). Under the DPA, we give you at least 30 days' notice of a new sub-processor, and you can object on reasonable data-protection grounds within 15 days (DPA §7).

9.4 Your staff and building data

For the building information we process for you, your own privacy notice and the DPA apply, and you decide how it's used. Our Privacy Policy covers the account and alert information of your Terrestream Facilities staff (Privacy Policy §14).

When the Facilities commercial relationship ends, we record its contractual termination or expiration date; a suspension or billing pause alone does not start the closure period. If the customer makes no return/deletion election, we delete the organization’s data from active systems after 90 days from that date. This default applies to every Facilities customer, with or without a DPA. An elected return/deletion follows the applicable agreement and instructions. Required records and legal holds, backup rotation and confirmation of completed deletion remain distinct. Personal accounts and device identities are separate; another owner’s data is not included. Ambiguous custody or an unresolved legal hold requires review and must not be reported as completed deletion. After verified delivery of an elected return, we delete the active copy by the same 90-day deadline measured from contractual termination or expiration. If delivery is not verified, we escalate the case rather than erase the only undelivered return copy. We retain only records required by applicable law or a valid legal hold, restrict their use to that purpose, and delete them when that reason ends. Applicable mandatory shorter deadlines and existing signed agreements control.

10. Terrestream Facilities orders

Terrestream Facilities (facilities.terrestream.com) is our service for organizations that monitor many rooms. This section applies to Facilities orders.

10.1 Quotes, pilots and accepted orders

A quote request, estimate request, pilot request or request for NET 30 invoicing is an inquiry only. It isn't an accepted order. It doesn't authorize shipment, create a commercial account, start monitoring, extend credit or require either of us to go ahead. An order becomes binding only when your authorized procurement representative accepts the identified order revision and the document versions it incorporates, and we record that acceptance. A purchase-order number or your standard purchasing terms change our agreement only if we both expressly accept the change in writing. Public institutions may ask us to review a procurement rider.

An indicative estimate stays available for 30 days after it's created, unless it states another expiry date. A final quote states its own validity period. Estimated savings and avoided-loss scenarios are illustrations, not promised results or credits against a purchase.

10.2 Planning and hardware prices

Estimates start from one sensor per selected room as a planning assumption, not a coverage guarantee. Room layout, partitions, airflow, pipe exposure and placement may call for more sensors.

For an accepted launch order, new sensors cost US$249 each for 1 to 10 new units, and US$199 each when the order includes 11 or more new units. The 11-unit price applies to every new unit in that order. Existing sensors don't count toward the quantity. Boxed spares count as hardware but carry no monitoring fee until they're eligibly commissioned. The accepted order states shipping, taxes, installation and other services; an estimate with unconfirmed charges isn't an all-in price. The compatibility of existing Devices and eligibility for an offer need our confirmation. A pilot order states its own package price, number of sensors and buildings, and included monitoring.

10.3 Monitoring and renewal

An eligible sensor includes its first 12 months of Facilities monitoring only if the accepted order includes that offer and our system records the sensor as commissioned into the monitoring service you contracted for and enabled. Inventory setup, shipment, a demonstration or an unqualified first reading doesn't start the included period. After it, monitoring costs US$49 a year for each active commissioned sensor, billed annually, but only under a separately accepted renewal, purchase order or other documented authorization from you. The hardware price and any volume offer are those expressly accepted in the order; no new offer changes existing accepted contracts or billing records. There's no per-user or per-building monitoring fee. Moving a sensor doesn't restart its included period, and an authorized replacement inherits the remaining period. A temporary loss of connectivity doesn't remove an allocated monitoring seat.

The included period doesn't turn into paid service automatically. Before a renewal, we'll identify the covered sensors, the renewal dates, the annual price and what happens to the service if you don't renew. Nothing is charged or renewed without your documented authorization under your accepted procurement process.

10.4 NET 30 and invoices

NET 30 is available only after our staff approve you and the order. A request for NET 30 isn't credit approval and isn't a payable invoice. An invoice states the accepted order, the issue date and the actual due date. Unless the accepted order says otherwise, payment is due 30 calendar days after the invoice date. This Addendum sets no automatic late fee. Invoice status, payment, shipment, account setup and service activation are separate records and approvals.

10.5 What Facilities does and doesn't do

Facilities provides only the Device and service functions that your accepted order identifies as enabled. Automatic room evaluation, incident creation, and escalation by email or text message are included only when your order's availability schedule expressly enables them. We don't offer voice-call alerts.

Readings describe conditions near each sensor. They depend on placement, power, connectivity, operating conditions and how recent the data is. Missing or out-of-date data isn't evidence that conditions are acceptable. Room readings don't establish whether a window is open, the temperature of a pipe, whether mold is present or what causes a heating problem. You remain responsible for placement, working power and network access, physical checks, required inspections, winterization, maintenance and responding to what you find. Alignment with a building standard doesn't establish RESET® or WELL certification (§2).

Facilities isn't emergency dispatch or a life-safety alarm, and it doesn't guarantee against freezing, leaks, mold, property damage or injury. Terms §4 applies in full.

10.6 Existing protections

The limited warranty and its disclaimers (Terms §10), the liability and indemnity terms (Terms §11, §12 and §8 of this Addendum) and the DPA's data-protection terms apply unchanged unless we both expressly accept a rider. This Addendum creates no warranty, service level, damages cap, uncapped alert obligation or insurance-backed performance guarantee beyond those in the Terms, and no indemnity from us. It gives us no additional right to publish your name or logo, or to use personal information to train models.

10.7 Procurement and insurance

Insurance requirements, certificates, additional-insured status, waivers of subrogation, primary or noncontributory wording and special indemnities apply only if issued coverage supports them and we expressly accept them in a written order schedule or rider. No insurer is a party to, or a guarantor of, the service. This Addendum doesn't represent that any particular insurer, policy, limit, certificate or endorsement is in force.

11. Facilities text-message (SMS) alerts

This section sets out the program terms and the privacy terms for Terrestream Facilities text messages. The same terms are published at facilities.terrestream.com/sms. Availability. Facilities SMS delivery is currently disabled. These terms govern enrollment and service only when messaging is made available after the applicable provider, carrier and consent requirements are satisfied.

11.1 The program

When the program is available, Aerodyne Inc. sends Terrestream Facilities text messages to staff who choose to receive them. They cover verification codes, building conditions, monitoring interruptions and responder notifications. They're service messages, not marketing. Text alerts are optional, and consent isn't a condition of purchase. We don't make voice calls.

11.2 Consent and enrollment

Only the person who controls a mobile number may enroll it. Administrators can't enroll a number or give consent for anyone else. To enroll:

1. sign in to your organization's Facilities account and open My notifications;
2. enter your own mobile number, read the SMS consent notice and check the separate consent box; then
3. enter the six-digit code we text you. The code expires after 15 minutes.

The consent box says:

I agree to receive automated Terrestream Facilities text messages from Aerodyne Inc. at my mobile number about building conditions, monitoring interruptions, and responder notifications. Message frequency varies. Message and data rates may apply. Reply STOP to unsubscribe or HELP for help. Consent is optional and is not a condition of purchase.

We record your consent, the version of the notice you accepted, when you verified your number and any withdrawal. After you verify, an administrator can add your number to an escalation schedule. Enrolling doesn't assign you to a building or turn on monitoring.

11.3 How often, and what it costs

Message frequency varies with your organization's incidents, its responder coverage and verification requests. Message and data rates may apply.

11.4 Stopping texts and getting help

• Stop. Reply STOP to our sending number to stop all texts from it. STOPALL, UNSUBSCRIBE, CANCEL, END, QUIT, REVOKE and OPTOUT also work. A STOP applies to your number for every organization. To stop alerts from one organization only, use My notifications. A message already on its way may still arrive.
• Help. Reply HELP for help, or contact support at terrestream.com/contact?dept=support.
• Starting again. After a STOP, text START to the sending number identified in your enrollment, then give fresh consent and verify your number again in My notifications. Your administrator must review responder coverage before incident alerts resume.

11.5 Delivery and its limits

A text alert includes the building and room names, a short description of the condition, when it was observed, the next check and a link to the incident. Texts may be delayed or not delivered, and carriers aren't liable for delayed or undelivered messages. Text alerts aren't an emergency service or a substitute for required building inspections. Receiving a text doesn't acknowledge an incident: use Terrestream Facilities to record who's responsible and what was done. In an emergency, call 911 or your local emergency number.

11.6 Your mobile number and privacy

We use your mobile number and consent record only to verify your number and to send the alerts you choose. We store the number encrypted. Your organization's administrators can see a masked version of your number, its verification status and delivery status, so they can manage responder coverage. Twilio, our service provider, processes the messages only to deliver them.

Mobile information and text-message opt-in data and consent are never sold, rented or shared with third parties or affiliates for marketing or promotional purposes. This applies despite anything else in this Addendum, the Terms or our Privacy Policy. SMS consent isn't permission to send you marketing.

You can withdraw consent at any time in My notifications or by replying STOP. After you withdraw, or if your organization removes you, we keep only what we need to honor your choice and to show that you consented: a one-way fingerprint of your number, and the consent record for 3 years after you withdraw (Privacy Policy §7.1, §14).

11.7 Changes to these SMS terms

This section describes the same operational SMS purposes as enrollment notice facilities-sms-2026-09-26. It does not assert that messaging is enabled or that anyone has newly subscribed. Existing consent records keep their original version and date. Changes follow Terms §20.5. New recipients, marketing use or materially expanded purposes require the appropriate separate consent before use. A translation alone does not create a new subscription.

12. Disputes, changes and contact

12.1 Disputes

Terms §19 governs disputes about this Addendum, and the DPA points to it for disputes about the DPA (DPA §16).

12.2 Changes

We may change this Addendum as Terms §20.5 describes. For Terrestream Facilities, we'll give your owners and administrators at least 30 days' notice by email, and one of them accepts the new version in Terrestream Facilities. An accepted order keeps the versions it incorporated, as §1.4 describes.

12.3 Notices and contact

Notices follow Terms §21.4 and your accepted order.

• Quotes, pilots and orders: terrestream.com/contact?dept=sales
• Support: terrestream.com/contact?dept=support. Customer support isn't an emergency service (Terms §22.3).
• Legal notices: terrestream.com/contact?dept=legal · Aerodyne Inc., Attn: Legal, 8 The Green, Ste A, Dover, DE 19901, USA
• Privacy: terrestream.com/contact?dept=privacy
• Security: terrestream.com/contact?dept=security

---

Terrestream℠ is a service mark of Aerodyne Inc.; the leaf logo and “Breathe Better. Live Smarter.®” are registered trademarks of Aerodyne Inc. Patents pending.