In consideration of LivePerson permitting, and Intigriti facilitating, the undersigned Researcher to participate in the LivePerson Conversational Cloud bug bounty program (the "Program"), Researcher hereby states and agrees as follows:

1. All information provided by Researcher concerning his/her identity for use by Intigriti and LivePerson in connection with the Program or use of the Intigriti Service is true and accurate.

2. Researcher will comply with all Researcher Guidelines as posted at https://kb.intigriti.com/en/articles/2642655-researcher-guidelines, and Researcher shall be contractually obligated directly to LivePerson for compliance with those Researcher Guidelines. LivePerson shall be entitled to enforce all rights and obligations (whether attributable to "Customer" or "Intigriti") set forth in sections 4-14 and 17 of such Researcher Guidelines directly in its own name and on its own behalf as the direct intended beneficiary of the same. LivePerson may enforce such rights and obligations directly in the jurisdictions and venues and pursuant to the applicable law set forth therein. Researcher waives any objection to such enforcement by LivePerson on grounds that LivePerson is not a direct party to or intended thirdparty beneficiary of the Researcher Guidelines, is not the party to whom such right or obligation is attributable under the Researcher Guidelines, or otherwise lacks legal standing for such enforcement.

3. Researcher is not: (i) a resident or citizen of, and will make no Submission from, a country against which the United States has issued export sanctions or other trade restrictions (e.g., Cuba, Iran, North Korea, Sudan and Syria, among others); (ii) employed by LivePerson, Inc. or any of its affiliates; (iii) an immediate family member of a person employed by LivePerson, Inc. or any of its affiliates; or (iv) less than 18 years of age.

4. Researcher will promptly disclose, in accordance with the Researcher Guidelines, for the benefit of LivePerson, any and all vulnerabilities of which he/she becomes aware that are within the scope of the Program, and shall not withhold or unreasonably delay such disclosure for any reason.

5. Absent prior written authorization from LivePerson, Researcher agrees not to disclose to any third party, and not to post or otherwise publish in any way, any information about (i) any vulnerability in any LivePerson system discovered at any time by Researcher, or (ii) any information concerning the design, architecture, structure, operation or functionality of any LivePerson system disclosed to or discovered by Researcher in connection with the Program.