CRP AFFILIATE AGREEMENT Version: affiliate-agreement-2026-10-19-v1 Published: 2026-10-19 Commercial policy: founders-50-5-v1 1. Parties, purpose and effective date This agreement is between Credit Regulator Pro (CRP), 26 Main St East, Stewiacke, Nova Scotia B0N 2J0, Canada, and the individual or organization identified in the affiliate application (Affiliate). CRP’s program contact is admin@creditregulatorpro.com, telephone +1 647-612-7729. The person accepting identifies themselves and confirms authority to bind the Affiliate. An individual must be at least 18 and legally able to contract. The agreement takes effect when the authorized representative affirmatively accepts this version through the dedicated affiliate account. Acceptance does not guarantee qualification, activation, network admission, traffic, income or access to a paused feature. CRP must approve the actual organization and traffic source before referral promotion is activated. This agreement governs affiliate services, not a consumer’s separate CRP purchase. 2. Independent relationship and approved sources The relationship is non-exclusive. Neither party becomes the other’s employee, agent, partner in a legal partnership, franchisee or representative with authority to bind it. The Affiliate controls its own business and expenses and may not make commitments or collect money on CRP’s behalf. The Affiliate must provide accurate organization, contact, traffic-source and payee information, keep it current, protect its dedicated account and ensure its representatives are authorized. Approval applies to the reviewed sources and markets; materially different sources require review before use. Organization and sub-publisher activity remains the contracting Affiliate’s responsibility. 3. Commission rates and eligible cash The direct affiliate earns 50% of eligible collected revenue from genuine qualifying customer purchases during the customer’s first commission year. One directly introducing affiliate may receive an additional 5 percentage points of the same eligible revenue. There is no third level and no payment for joining or recruiting alone. Self-referrals and fabricated transactions are ineligible. Eligible collected revenue is actual verified cash collected excluding tax, discounts, credits and refunds, before processor fees. An organization distributing through sub-publishers receives its contracted commission pool; CRP does not pay a second full direct commission for the same sale. Network fees and separately agreed placement fees are additional costs, not part of the 55% commission allocation. List prices and projected renewals are not proof of collected revenue. 4. First-year payment eligibility The original successful-payment timestamp verified by the billing provider in UTC starts the first commission year. Eligibility ends exclusively at its first calendar-year anniversary; a February 29 start ends on February 28 the following year. Event arrival delays do not change economic dates. Monthly subscription payments qualify only when actually collected within that window. The initial annual payment qualifies; the next annual renewal does not. A qualifying one-report purchase earns the applicable share of its eligible one-time payment. Upgrades qualify only on eligible additional cash after credits; previously commissioned credited cash must not be rewarded twice. 5. Referral attribution and consent The approved click-to-first-purchase window is 90 days from an eligible referring click. A valid explicit partner code entered before initial binding takes precedence; otherwise the last eligible click applies. The binding is fixed at account creation or first purchase, preserves direct returns and must not overwrite an existing binding. These rules do not promise an unimplemented code-entry or cross-device feature. Tracking requires the supported approved integration and actual recorded consent where required. Consumers may continue without referral tracking. Browser restrictions, missing consent or absent account-binding evidence can prevent attribution. Neither party may fabricate consent, insert another party’s code or claim a conversion from a page view alone. A tracking exception must be investigated against retained evidence rather than resolved by inventing a transaction. 6. Rounding, reversals and statements Money is calculated in integer minor units. Round half up independently for each beneficiary on each original invoice line. Recompute the cumulative reward target from cumulative eligible cash and post only the difference from the reward already booked. Independent rounding can produce cent differences from a separately rounded combined percentage. Verified refunds, credits, chargebacks and corrections adjust the original line and commission obligation; a verified released reversal may restore it. Preserve the journal and original economic dates. A reversal after settlement may create a documented recovery or adjustment against future amounts where lawful; it does not authorize AI to debit an account. The Affiliate may dispute an entry with its identifier and supporting non-sensitive evidence. Failure to dispute immediately does not automatically waive an earned obligation. 7. Payment preparation, payees and human release Direct payment proposals follow a weekly cadence after 14 days of validation and a threshold of 25 units of the settlement currency. A network partner follows its disclosed network calendar and contract. The threshold affects ordinary batching and does not forfeit a valid unpaid earned balance. Final balances below threshold require separate resolution through the authorized human payment process. Actual payment requires verified payee identity, an approved destination, any legally required tax information and available funds. The Affiliate is responsible for its own taxes; CRP may make legally required withholding with an explanation. No currency conversion, fee or changed payment calendar is implied; such terms must be disclosed before agreement. Outgoing money is released only by an authorized human outside the agent runtime. A proposal or approval is not payment. Settled status requires independently verified evidence matching the beneficiary, destination, currency and amount. Destination changes invalidate pending proposals for review. A payment pause does not erase an already earned obligation. 8. Risk holds and fraud review There is no blanket 180-day reserve. A specific risk hold must have an evidence-based reason, expiry and review rule, with the affected balance and available explanation recorded. Confidential security details may be withheld where disclosure would create risk or be unlawful, but this does not permit an unexplained permanent forfeiture. Suspected fraud, duplicate transactions, payee impersonation, tracking interference or privacy violations may pause the affected campaign or obligation while reviewed. The Affiliate may provide a response and seek review through the program contact. Legitimate unaffected earnings remain obligations; an allegation alone is not proof that every transaction is invalid. 9. Truthful promotion and prohibited conduct Use only approved current product claims, coverage, prices, currencies and resources. CRP helps consumers review supported credit-report information and prepare evidence-linked correspondence. Do not promise a score increase, deletion, correction, legal outcome, universal report support, legal representation or guaranteed earnings. Preserve fictional-example labels and do not invent testimonials or results. Clearly disclose the material affiliate relationship with each recommendation, including each relevant social platform, article, newsletter or video. Do not hide it only in a remote policy page. A suitable starting disclosure is: “Affiliate disclosure: the publisher may earn a commission when you purchase through its link.” Adapt placement and content to applicable law and channel requirements. No spam, deceptive advertising, impersonation, cookie stuffing, forced redirects, click fraud, unauthorized software, misleading brand domains, concealed incentives or unauthorized use of another publisher’s identifiers is permitted. Do not buy advertisements using CRP brand keywords or create a CRP-branded account/domain without written permission. Incentivized, coupon or paid-search campaigns require specific approval before use. Editorial opinions must remain honest; no commission guarantees editorial coverage or ranking. 10. Email, messaging and campaign costs Each party is responsible for applicable communications and advertising law in its markets, including Canadian anti-spam requirements where applicable. Keep evidence of the lawful basis for commercial messages, identify the sender and represented business, provide valid contact information and a working unsubscribe mechanism, and honor objections and withdrawal promptly within applicable deadlines. Do not purchase or scrape addresses and treat them as consent. CRP system messages require an authorized purpose, recipient or channel, valid suppression checks and configured limits. Agreement acceptance is not separate consent to all marketing. Service notices necessary to administer this agreement must remain distinguishable from optional promotion. A paid placement or network commitment requires a separate written description of deliverables, cap, fees, calendar and authorization before commitment. An operating ceiling is not a funded account or a promise to reimburse unapproved expenses. No party may commit the other to spending without authority. 11. Privacy, security and consumer separation Process only the personal information necessary for authorized affiliate functions and lawful purposes. Use appropriate access controls, retention, confidentiality and security safeguards. Minimal opaque attribution references do not grant access to consumer accounts or reports. Do not collect or upload consumer credit reports, identification, assessment contents, payment-card data or private correspondence into affiliate operations. Do not sell affiliate reporting or use it to identify, profile or contact consumers outside the authorized purpose. Handle requests for access, correction, withdrawal or deletion through the appropriate responsible party. Retain only records needed for lawful financial, dispute, security or compliance purposes; a deletion request does not authorize destruction of required audit evidence. Notify the other party without undue delay after discovering a security or privacy incident affecting shared program information, take reasonable containment steps and preserve necessary evidence. Each party remains responsible for its legally required notices and regulatory reporting. This clause is not permission for unrestricted sharing or a substitute for a required separate data-processing or international-transfer arrangement. 12. Intellectual property and permitted materials CRP retains its names, marks, product content and supplied materials. While approved participation continues, CRP grants a limited, non-exclusive, non-transferable, revocable permission to use approved materials and marks solely for authorized CRP promotion, subject to brand, disclosure and coverage instructions. No ownership is transferred. The Affiliate retains its original editorial content and grants CRP only the permission needed to review approved placements and retain compliance evidence. CRP needs separate permission to republish that content as marketing. Neither party may remove notices, misrepresent endorsement or use material without the necessary rights. Stop using withdrawn or outdated supplied material promptly after notice; lawful archival editorial references may remain if accurate and no longer presented as an active referral offer. 13. Confidentiality Protect non-public business, security, payee, contractual and reporting information disclosed for the program. Use it only to perform the agreement and disclose it only to authorized people or providers with equivalent duties and a need to know. Public agreement terms and published rates are not confidential merely because they appear here. Confidentiality does not cover independently developed information, information lawfully known without restriction, information that becomes public without breach, or information lawfully obtained from another source. Legally compelled disclosure is permitted with notice where lawful and reasonable steps to limit disclosure. These duties survive termination for three years; personal information, trade secrets and credentials remain protected for as long as applicable law or their nature requires. 14. Term, suspension and termination Either party may terminate participation on 30 days’ written notice. CRP may suspend an affected source immediately for a credible security, privacy, legal or fraud risk, and may terminate immediately for fraud, unlawful activity or a material breach that cannot reasonably be cured. For a remediable material breach, provide notice and at least 10 business days to cure unless immediate action is reasonably necessary to protect people or comply with law. On termination, stop new referral promotion and unauthorized mark use, revoke access as appropriate, and return or delete confidential information except required retained records. Termination does not erase earned obligations or retrospectively change accepted rates. Valid existing customer bindings retain the remaining first-year commission eligibility under the accepted terms. Valid pre-termination clicks remain subject to their original 90-day first-purchase window and evidence requirements; new post-termination referrals do not qualify. Fraudulent or otherwise ineligible transactions remain subject to documented correction. Statement access or an equivalent evidence channel must remain available for resolving surviving balances. 15. Versions, amendments and organization exceptions CRP must retain the accepted version and identify material proposed amendments before they take effect. Material contract or commission changes require affirmative acceptance for future affected activity; continued use alone is not a substitute for assent. A proposed change cannot erase an already earned obligation or shorten an existing accepted customer eligibility period. A separately signed organization or network addendum may override only the provisions it expressly identifies. Rates, commission pools, network costs, payment calendar and any attribution incompatibility must be disclosed and resolved before activation. A knowledge-base article, inbound message or AI output cannot amend this agreement. Administrative corrections that do not change obligations must remain traceable. 16. Responsibilities and service limitations Each party represents that it has authority to enter this agreement and will act lawfully within the permitted scope. The Affiliate must hold the rights needed for its content and traffic sources; CRP must hold the rights needed to provide its supplied materials. Each remains responsible for its own personnel and providers. CRP does not guarantee uninterrupted service, tracking across every device, network acceptance, future traffic, consumer outcomes or revenue. Pause and recovery may be needed for unavailable providers or unverified inputs. Reasonable safeguards, correction of known errors and preserved earned obligations still apply. Nothing excludes a warranty, duty or remedy that applicable mandatory law prevents a party from excluding. 17. Third-party claims Each party will defend and indemnify the other against reasonable third-party claims and resulting direct losses to the extent caused by its fraud, willful misconduct, unlawful promotion, infringement by materials it supplied, or material breach of confidentiality or data-security obligations. Responsibility is reduced to the extent the other party caused the loss; an indemnity does not cover the other party’s independent wrongdoing. The party seeking protection must give prompt notice, reasonable cooperation and reasonable control of the defense to the responsible party, subject to conflicts of interest. No settlement may admit fault, impose non-monetary duties or compromise the protected party’s rights without its consent, not unreasonably withheld. Neither party may recover the same loss twice. 18. Liability allocation To the extent law permits, neither party is liable to the other for indirect or consequential losses or speculative lost profits. Ordinary aggregate contractual liability under this agreement is limited to CAD 10,000 for each party. These limits do not reduce earned payment obligations, verified repayment obligations, liability for fraud, willful misconduct or gross negligence, confidentiality or data-security breaches, third-party indemnities under section 17, or liability that mandatory law does not allow to be limited. This allocation does not make the Affiliate a guarantor of consumer debts or permit unilateral seizure of funds. 19. Disputes and governing law Raise a dispute with the program contact and the relevant entry, dates and non-sensitive evidence. The parties will attempt good-faith resolution for 30 days after notice, without preventing urgent protective relief, mandatory reporting or action needed to preserve a limitation period. The agreement is governed by Nova Scotia law and applicable federal Canadian law. Subject to non-waivable applicable rights and jurisdiction requirements, the courts of Nova Scotia have jurisdiction. No mandatory private arbitration or class-action waiver is imposed by this agreement. Nothing purports to remove mandatory privacy, advertising or other protections that apply in a relevant market. 20. Notices, succession and general terms Send contractual notices to CRP at admin@creditregulatorpro.com or the postal address in section 1; CRP uses the Affiliate’s verified program contact or a recorded portal notice. Use a contact method the recipient can reasonably access and keep evidence of delivery. An automated status is not proof that a disputed notice was received. Keep contact details current. Neither party may assign the agreement in a way that reduces accrued obligations. CRP may transfer it with its business to a successor that assumes the obligations and lawful data-custody responsibilities, with notice to the Affiliate. Other assignments require consent, not unreasonably withheld. Successor access does not grant AI payment-execution authority. This agreement and expressly identified signed addenda constitute the agreement on this subject. Invalid provisions are severed only as necessary, without eliminating mandatory rights or the remaining obligations. A delay in enforcement is not automatically a waiver. Force majeure may excuse affected non-payment performance while reasonably mitigated and communicated; it does not cancel already earned money obligations. 21. Electronic acceptance and retained copy Before submitting, open this version and save or print it. Identify the Affiliate accurately, enter the authorized representative’s name, and affirmatively confirm agreement and authority using the unchecked acceptance controls. This electronic act is intended to record assent to this exact text; it is not a marketing-consent checkbox. CRP records the authenticated affiliate subject, organization, representative name, version, SHA-256 text hash, complete accepted text and server-side acceptance time in its audit history. The Affiliate may access its own agreement history and retained copy. A provider, owner or AI cannot impersonate the Affiliate’s representative. Application remains pending qualification and activation; no checkbox activates payments or an unverified integration.