Website, Platform & Client Portal Usage Guidelines

These Platform Usage Guidelines ("Guidelines") govern access to and usage of all digital properties, client portals, staging sandboxes, code repositories, APIs, and AI conversational interfaces (including the Ely AI Assistant) owned and operated by LETSCOOKTECH.

Document ID: LCT-POL-PLATFORM-001 Status: ACTIVE Version: 3.0 Classification: PUBLIC / CLIENT PORTAL POLICY

By accessing our websites, logging into a project collaboration portal, or interacting with our technical infrastructure, you agree to comply with these Guidelines. Organizations are responsible for ensuring that all authorized team members, contractors, and agents adhere to these standards.

Users agree to interact with LETSCOOKTECH platforms exclusively for lawful, professional business purposes. The following actions are strictly prohibited:

• Unauthorized Security Probing: Port scanning, vulnerability fuzzing, penetration testing, or stress testing our production systems without prior written authorization from LETSCOOKTECH leadership. • Malicious Payloads: Uploading or injecting malware, ransomware, viruses, worms, backdoors, or malicious scripts into our file uploads or portal forms. • Automated Abuse: Scraping, crawling, or issuing automated high-frequency requests that bypass rate limits or degrade platform availability for other users. • Deceptive & Infringing Activities: Impersonating other organizations, transmitting unsolicited spam, or uploading copyrighted assets without authorization. • Unlawful Content: Storing or transmitting materials that are defamatory, harassing, sexually explicit, fraudulent, or in violation of applicable laws.

Access to client portals, staging deployments, and development repositories is restricted to authenticated users:

• Credential Hygiene: Users must maintain strong, unique passwords (minimum 14 characters) and avoid reusing personal credentials. • Multi-Factor Authentication (MFA): MFA is mandatory for administrative accounts, production deployment environments, and database consoles. • Individual Access Only: Account sharing across multiple staff members is prohibited. Individual credentials must be provisioned for each team member to preserve audit trail integrity. • Prompt Revocation: Clients agree to notify LETSCOOKTECH immediately upon the departure or reassignment of any staff member with access to project repositories or staging environments.

To prevent catastrophic credential leakage and security breaches, all users and clients must observe our Zero-Knowledge Secret Exchange Rule:

• No Plain-Text Credentials in Chat or Email: Passwords, production database connection strings, payment gateway secret keys, and private SSH keys must NEVER be pasted into Slack, WhatsApp, email, or ticketing systems. • Approved Vaults Only: All credential exchanges must occur through encrypted, time-limited secret vaults (e.g. 1Password, Bitwarden, Doppler, or AWS Secrets Manager). • No Raw Production PII: Real customer identity numbers, passwords, or payment card data must never be uploaded to staging environments or shared during development without prior cryptographic anonymization.

Ely is LETSCOOKTECH's intelligent technical architecture guide and qualification assistant:

• Architectural Guidance Only: Ely is designed to help prospective clients understand their technical bottlenecks, explore solution paths, review technology trade-offs, and qualify project requirements. • No Binding Legal or Financial Quotes: Information provided by Ely regarding estimated timelines or price ranges is diagnostic and indicative only. Binding commercial terms require a written Statement of Work (SOW) signed by an authorized LETSCOOKTECH director. • No Legal or Tax Counsel: Ely does not provide legal, tax, accounting, or regulatory advice. • Strict Confidentiality: Conversations with Ely are logged for diagnostic evaluation and system improvement. Users must never input proprietary secrets, private cryptographic keys, or unredacted patient/financial records into Ely chats.

All assets uploaded to LETSCOOKTECH systems (including images, code snippets, database dumps, and document attachments) must comply with our asset hygiene standards:

• Virus & Integrity Scanning: Uploads undergo automated virus scanning and MIME-type verification. • Intellectual Property Clearance: The uploading party warrants that they possess full legal rights, licenses, or authorizations to use and share the uploaded content. • Safe Storage & Retention: Assets uploaded to staging environments are retained strictly for the duration of the project lifecycle and are purged within 90 days of project closure unless covered by an active Care retainer.

LETSCOOKTECH reserves the right to enforce compliance to safeguard our infrastructure and client data:

• Level 1 (Notice): Inadvertent minor violations (e.g. accidental credential sharing in chat) trigger an immediate security warning and mandatory password rotation. • Level 2 (Temporary Suspension): Repeated non-compliance, unapproved automated scraping, or failure to secure compromised accounts results in temporary credential suspension until remediation. • Level 3 (Immediate Termination & Legal Escalation): Intentional attacks, malicious payload injections, data theft, or severe policy breaches result in immediate, permanent revocation of all portal and infrastructure access, followed by formal notification to law enforcement where required by law.