Corporate Documentation

1. Corporate Mission & Identity

VerveShots Inc. operates as a highly secure, private cloud infrastructure expressly engineered for the protection, retention, and controlled distribution of digital video assets. Incorporated and headquartered in Delaware, USA, our core mandate is to provide creative professionals, enterprise organizations, and film studios with a digital fortress immune to unauthorized extraction, throttling, and data scraping.

Our operational philosophy is strictly B2B and enterprise-focused. We do not engage in consumer data monetization, algorithmic timeline manipulation, or advertising-based revenue models. VerveShots is an infrastructure-as-a-service (IaaS) provider ensuring absolute fidelity and zero-knowledge privacy where technically feasible.

1.1. Core Architectural Tenets

• Zero-Trust Architecture: Every API call, upload instance, and playback request is fully authenticated. Node-to-node communication is strictly encrypted.
• Cryptographic Isolation: Tenant data is logically isolated. Encryption keys are dynamically generated per asset, ensuring a breach in one cluster cannot compromise another.
• Global Edge Proximity: We maintain tier-1 peering agreements and PoPs (Points of Presence) in over 150 countries to guarantee sub-50ms latency regardless of the user's origin.

2. Master Terms of Service (TOS)

Last Updated and Effective: April 2026

These Master Terms of Service govern your access to and use of the VerveShots platform, APIs, and associated global edge networks. By accessing the infrastructure or provisioning a workspace, you establish a legally binding contract with VerveShots Inc. Please read these terms comprehensively.

2.1. Account Provisioning and Security

Clients are solely responsible for safeguarding their authentication credentials, API keys, and cryptographic access tokens. VerveShots assumes no liability for unauthorized vault access resulting from compromised local endpoints or the mishandling of credentials by the Client's personnel. Any suspected breach must be reported to our Security Operations Center (SecOps) within 24 hours.

2.2. Grant of License and Intellectual Property Rights

You retain 100% of all intellectual property rights, title, and interest in and to the media assets uploaded to our servers. VerveShots claims no ownership over your content. By uploading media, you grant VerveShots a limited, non-exclusive, worldwide, royalty-free license solely to host, encrypt, transmit, and display the content as strictly directed by your account configurations and API calls.

2.3. Billing, Invoicing, and Payment Terms

Services are billed on a subscription basis ("Subscriptions"). You will be billed in advance on a recurring and periodic basis (such as monthly or annually), depending on the type of subscription plan you select when purchasing. You must provide VerveShots with accurate and complete billing information. If automatic billing fails to occur, VerveShots will issue an electronic invoice indicating that you must proceed manually, within a certain deadline date.

2.4. Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY APPLICABLE LAW, VERVESHOTS INC. SHALL NOT BE LIABLE FOR ANY INDIRECT, INCIDENTAL, SPECIAL, CONSEQUENTIAL, OR PUNITIVE DAMAGES, OR ANY LOSS OF PROFITS OR REVENUES, WHETHER INCURRED DIRECTLY OR INDIRECTLY, OR ANY LOSS OF DATA, USE, GOODWILL, OR OTHER INTANGIBLE LOSSES, RESULTING FROM (A) YOUR ACCESS TO OR INABILITY TO ACCESS OR USE THE SERVICES; (B) ANY UNAUTHORIZED ACCESS TO OR ALTERATION OF YOUR TRANSMISSIONS OR CONTENT; OR (C) ANY DELAY OR FAILURE IN PERFORMANCE RESULTING FROM CAUSES BEYOND OUR REASONABLE CONTROL. IN NO EVENT SHALL THE AGGREGATE LIABILITY EXCEED THE TOTAL FEES PAID BY YOU TO VERVESHOTS IN THE TWELVE (12) MONTHS PRECEDING THE CLAIM.

2.5. Governing Law and Arbitration

These Terms are governed by the laws of the State of Delaware, without regard to its conflict of laws principles. Any dispute arising from these Terms shall be resolved through binding arbitration administered by the American Arbitration Association (AAA) in San Francisco, California.

3. Acceptable Use Policy (AUP)

To maintain the structural integrity, security clearance, and legal standing of our global node network, all users must adhere strictly to this Acceptable Use Policy. Violation of the AUP grants VerveShots the right to immediately suspend or terminate access without refund, and to wipe associated data.

3.1. Prohibited Content

Clients may not utilize the infrastructure to store, transmit, or distribute:

• Material that violates local, federal, or international laws, including copyright infringement and trade secret violations.
• Child Sexual Abuse Material (CSAM). Any detection of CSAM is immediately reported to the National Center for Missing & Exploited Children (NCMEC) and relevant law enforcement agencies without warning.
• Content that promotes terrorism, extreme violence, or incites harm against individuals or groups.
• Malware, ransomware, algorithmic exploits, or any code designed to disrupt network operations.
• Non-consensual intimate imagery (NCII) or doxxing materials.

3.2. Network Abuse and Exploitation

Clients may not engage in activities that compromise the platform, including but not limited to:

• Reverse engineering the DRM wrappers or attempting to decrypt AES-256 blocks outside of authorized client applications.
• Initiating Distributed Denial of Service (DDoS) attacks or network probing against our edge nodes.
• Utilizing automated scripts, bots, or scrapers to extract telemetry data or mass-download assets bypassing standard protocols.
• Using the platform for cryptocurrency mining or distributed computational processing.

4. Privacy Policy & Data Architecture

VerveShots treats privacy as an architectural imperative. We comply comprehensively with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), the Virginia Consumer Data Protection Act (VCDPA), and other international privacy frameworks.

4.1. Data Collection and Telemetry

We do not collect behavioral advertising data. We have no ad-network integrations. The data we collect is strictly limited to operational telemetry required for service delivery:

• Account Data: Billing information, corporate email addresses, and cryptographic keys.
• Network Telemetry: Bandwidth consumption, node routing efficiency, concurrent connection counts for load balancing, and edge-server logs.
• Security Logs: IP addresses and user-agent strings specifically for detecting anomalous access patterns, geo-blocking enforcement, and preventing brute-force attacks.

4.2. GDPR & CCPA Data Subject Rights

Depending on your jurisdiction, you possess the right to access, rectify, download, or erase your personal data. You may also object to the processing of your data. Requests can be submitted directly via the admin portal or by emailing our Privacy Officer. We commit to fulfilling verifiable requests within 30 days.

4.3. Third-Party Subprocessors

We do not sell data to data brokers. We utilize certified third-party subprocessors exclusively for core functionalities (e.g., Stripe for payment processing, AWS/GCP for bare-metal compute). All subprocessors are audited annually and bound by strict Data Processing Agreements (DPAs) and Standard Contractual Clauses (SCCs) for international transfers.

4.4. Data Retention, Export, and Erasure

Upon account termination, all media assets are subjected to cryptographic erasure (crypto-shredding) across all distributed nodes within 72 hours. Telemetry and billing logs are retained only as long as legally required for tax and compliance purposes (typically 7 years).

5. Service Level Agreement (SLA)

VerveShots guarantees enterprise-grade availability for critical media delivery operations. This SLA applies to all Enterprise and Professional tier clients.

5.1. Uptime Commitment

We commit to a 99.99% Monthly Uptime Percentage for our core ingestion and playback APIs. If we fail to meet this SLA, eligible clients will receive service credits according to the following schedule:

• 99.9% to < 99.99%: 10% Service Credit of the monthly bill
• 99.0% to < 99.9%: 25% Service Credit of the monthly bill
• < 99.0%: 50% Service Credit of the monthly bill

5.2. Credit Claims and Exclusions

To receive a Service Credit, you must submit a claim to our SecOps team within 30 days of the incident. The SLA does not apply to any performance issues caused by:

• Factors outside of our reasonable control (e.g., natural disaster, war, terrorist act, riots, government action, or a network or device failure external to our data centers).
• The use of services, hardware, or software not provided by VerveShots.
• Scheduled maintenance (as defined below).

5.3. Scheduled Maintenance Windows

Routine infrastructure maintenance and node updates are scheduled during off-peak hours (between 02:00 and 05:00 UTC) and do not count against the Uptime Commitment. Clients will be notified at least 7 days in advance of any maintenance requiring downtime exceeding 5 minutes.

6. Anti-Piracy & DMCA Policy

VerveShots respects the intellectual property rights of others and strictly complies with the Digital Millennium Copyright Act (17 U.S.C. § 512). Our infrastructure is built to protect copyright holders, and we actively cooperate with studios to prevent the unauthorized distribution of copyrighted material.

6.1. Takedown Procedures

If you believe your copyrighted work has been uploaded to our network without authorization, you must submit a formal DMCA takedown notice containing the following statutory requirements:

• A physical or electronic signature of the copyright owner or a person authorized to act on their behalf.
• Identification of the copyrighted work claimed to have been infringed.
• Identification of the material that is claimed to be infringing, along with the specific VerveShots URL/Hash or database ID.
• Contact information of the complaining party (address, telephone number, email).
• A statement that the complaining party has a good faith belief that use of the material in the manner complained of is not authorized by the copyright owner, its agent, or the law.
• A statement that the information in the notification is accurate, and under penalty of perjury, that the complaining party is authorized to act on behalf of the owner.

6.2. Counter-Notice Procedures

If you believe that your content was removed by mistake or misidentification, you may file a counter-notice. The counter-notice must include your signature, identification of the removed material, a statement under penalty of perjury that you have a good faith belief the material was removed by mistake, and your consent to the jurisdiction of the federal court.

6.3. Repeat Infringer Policy

In strict accordance with the DMCA, VerveShots maintains a "Repeat Infringer" policy. Accounts found to be repeatedly utilizing our network to host pirated or unauthorized copyrighted material (defined as receiving three or more valid takedown notices within a 12-month period) will be permanently terminated without notice, refund, or data retrieval options.