This Master Services Agreement was last updated on September 1, 2020

EVERTRUE MASTER SERVICES AGREEMENT

TERMS AND CONDITIONS

These Terms and Conditions (the “Terms”), including the Exhibits and Addendums hereto (the “Terms”), together with the Customer Cover Sheet, The MASTER SERVICES AGREEMENT  (the “Agreement”) is made as of the Effective Date set forth on the attached Customer Cover Sheet (the “Effective Date”) by and between EverTrue and the Customer, each of which are referred to herein as a “party” and collectively as the “parties”. The parties hereby agree as follows:
 

1. Definitions.  In this Agreement, the following terms shall have the meanings set forth below:

1.1 “Customer Data shall mean any data, information or material provided or submitted in its unaltered form by Customer (including, without limitation, Customer’s employees, agents and representatives) or Customer’s Users to EverTrue, in connection with using the Services or otherwise under this Agreement.

1.2 Confidential Information shall mean all confidential and proprietary information of a party (Disclosing Party) disclosed to the other party (Receiving Party), whether orally or in writing, that is designated as confidential or that reasonably should be understood to be confidential given the nature of the information and the circumstances of disclosure, including without limitation, Customer Data, Personal Information (as defined in Section 7.4), EverTrue Technology, other proprietary technology, business and technology processes and requirements, the terms of this Agreement (including pricing terms), product information, and financial information.  Confidential Information shall not include any information that: (i) is or becomes generally known to the public without breach of any obligation owed to the Disclosing Party; (ii) was known to the Receiving Party prior to its disclosure by the Disclosing Party without breach of any obligation owed to the Disclosing Party; (iii) was independently developed by the Receiving Party without breach of any obligation owed to the Disclosing Party; or (iv) is received from a third party without breach of any obligation owed to the Disclosing Party.  

1.3 “Documentation” shall mean EverTrue’s electronic instructions describing the functionality and use of EverTrue Technology and any information available on EverTrue’s website.

1.4 “EverTrue Technology” shall mean all of EverTrue’s proprietary technology, including the software offerings in Exhibit A, and other software, hardware, products, processes, algorithms, user interfaces, know-how, techniques, designs and other tangible or intangible technical material or information) used by EverTrue in providing the Services.

1.5 Intellectual Property shall mean all U.S. and foreign statutory and non-statutory intellectual property rights, including copyrights, patents, trademarks, service marks, registrations thereof and applications therefor; proprietary rights in information and data, including trade secrets and know how; and moral rights and other personal rights in inventions and original works.

1.6 Record shall mean data related to a unique constituent that Customer intends sharing with EverTrue.

1.7 “Service” or “Services” shall mean the services provided by EverTrue pursuant to this Agreement, including the customization and implementation services described at Section 2, access to EverTrue Technology and other offerings described in Exhibit A, if applicable.

1.8 Third Party Data shall mean data provided by EverTrue to Customer via the EverTrue Platform that is provided by a third party.

1.9 Updates shall mean the periodic updates, patches, fixes, maintenance releases and the like that EverTrue may automatically download or incorporate into the EverTrue Technology to ensure its ongoing functionality consistent with stated operational standards, as applicable.

1.10 User shall mean, in the case of EverTrue Platform, EverTrue Relationship Management, EverTrue Volunteer Management and EverTrue Console, Customer’s employees, representatives, consultants, contractors or agents, in each case who are authorized to use the Services and have been supplied user identification and passwords by Customer or by EverTrue at Customer’s request, or, in the case of EverTrue Volunteer Management, the Customer’s Volunteers.

1.11 “Volunteer Administrators” shall mean Customer’s employees, representatives, consultants, contractors or agents who are responsible for managing Customer’s Volunteers.

2. Implementation.

2.1 Promptly after the Effective Date, Customer shall provide EverTrue with information, resources and assistance as necessary to enable EverTrue to customize and implement, as applicable, the EverTrue Technology for Customer’s purposes.  If any such customization and/or implementation involve interfacing or connecting the EverTrue Technology to existing Customer systems, Customer shall be responsible for ensuring that EverTrue has the right to connect to such third party systems, for obtaining the consent of the owner or controller of the Third Party System, for facilitating access to APIs and other interfaces, and for notifying EverTrue in writing of any conditions or restrictions that apply to such connection or interface.  EverTrue shall not be responsible for any defect or failure in the Services due to errors in the Customer Data or third party systems.

2.2 If the customization or implementation of the EverTrue Technology described in Section 2.1 involve the incorporation of Customer’s name, logo or similar indicia (“Customer Marks”) into the EverTrue Technology, Customer hereby grants EverTrue the non-exclusive right and license to use and display the Customer Marks, solely during the Term, in furtherance of this Agreement, and for no other purpose.  EverTrue obtains no rights in the Customer Marks except for the limited right described in the preceding sentence, and Customer retains all right, title and interest in the Customer Marks. All use of the Customer Marks by EverTrue shall inure to Customer.

3. License and Restrictions.

3.1 EverTrue hereby grants to Customer a non-transferable, non-exclusive, worldwide right to use the EverTrue Technology solely for the purposes of Customer’s community relations (including, without limitation, fundraising and development purposes), subject to the terms and conditions of this Agreement.  All rights pertaining to the EverTrue Technology not expressly granted to Customer are reserved by EverTrue and its licensors.

3.2 Customer shall not: (i) use the Services except as expressly authorized by EverTrue; (ii) license, sublicense, sell, resell, transfer, assign, distribute, hypothecate, lease, loan or otherwise convey, commercially exploit or make available to any third party the Services or EverTrue Technology except as authorized in this Agreement;  (iii) knowingly send to EverTrue material containing software viruses, worms, Trojan horses or other harmful computer code, files, scripts, agents or programs, or otherwise interfere with or disrupt the integrity or performance of the Services; (iv) modify the Services or the EverTrue Technology, incorporate the Services or EverTrue Technology in whole or in part in any other product or create derivative works based on all or part of the Services or EverTrue Technology; and (v) share, disclose, or otherwise distribute any EverTrue Confidential Information, except as provided for in Section 2.1.  For the avoidance of doubt, nothing contained herein shall preclude or prohibit Customer from making updates to Customer’s IT infrastructure, provided that any such activities do not conflict with the restrictions set forth in this Section 3.2.

3.3 User logins are for authorized Users and cannot be shared or used by more than one individual User.

3.4 EverTrue may, from time to time and at its sole discretion, include as part of the Services access to Third Party Data. EverTrue makes no representations and disclaims all warranties with respect to the availability, accuracy or content of such Third Party Data. EverTrue may discontinue access to Third Party Data at any time and at its sole discretion. Any reliance on such data for any purpose is done solely at Customer’s risk. Customer shall not use any Third Party Data (whether alone or in combination with any other data) other than as used within the Services. All rights to any Third Party Data automatically terminate upon termination of this Agreement, and Customer shall, where practicable, delete all Third Party Data upon termination of the Agreement, other than any data that has been derived from Third Party Data in compliance with the terms of this Agreement prior to the termination.  Customer hereby grants to EverTrue all rights (including consents and licenses) to any Customer Data that are necessary for EverTrue to grant to such third party the licenses to use such Customer Data only as necessary to provide or operate the Services.

3.5 As part of the Services, EverTrue shall make the EverTrue Platform, EverTrue Relationship Management or EverTrue Volunteer Management software available for download by authorized Users.  When Users download the software, they will be required to agree to an End User License Agreement which will protect EverTrue’s rights and permit use of the software only for the purposes of the Services. For clarity, the parties agree that such End User License Agreement shall not materially conflict with the terms and conditions contained in this Agreement.

3.6 Withdrawal of Services. EverTrue may cancel access to all or part of Services at its sole discretion. If EverTrue cancels all or any part of Services, EverTrue shall notify Customer of such in a commercially reasonable manner and shall refund, pro rata, any fees paid in advance for the cancelled portion of the Services.

3.7 To the extent Customer Data contains any Personal Information (as defined by the California Consumer Privacy Act), Evertrue shall not retain, use, sell, or disclose such information other than as expressly stated in this Agreement or as needed to provide the Evertrue Technology.

4. Support Services.

4.1 EverTrue shall host the EverTrue Console on its or its third party provider’s servers and provide Customer and Users with access to the EverTrue Console via an application server web environment, as described in Section 7.6 below.  EverTrue shall use commercially reasonable efforts to provide access to the Services twenty-four (24) hours per day, seven (7) days per week, subject to scheduled maintenance and Force Majeure. EverTrue will inform Customer at least twenty-four (24) hours in advance of any scheduled maintenance.  If access to the EverTrue Console becomes unavailable due to problems with the servers, EverTrue will diligently repair any such problems so as to maintain Customer’s ability to use the Services.

4.2 EverTrue has industry standard backup and recovery procedures in place that provide for redundant copies of the EverTrue Platform and Customer Data within the EverTrue Platform; however, Customer is responsible for backing up Customer Data.  Data transmission between Customer and third party systems and EverTrue via any network are exclusively Customer’s responsibility. EverTrue assumes no responsibility for the reliability or performance of any data network or any data integrity, communications or connection problems Customer may experience that fall outside the EverTrue Platform, EverTrue Relationship Management or EverTrue Volunteer Management software.  EverTrue does not guarantee against data loss or inaccuracies of Customer Data due to connectivity issues or Customer’s hardware failures.

4.3 During the term of the Agreement, EverTrue shall supply Customer, and, in the case of EverTrue Volunteer Management, the Customer’s Volunteer Administrators with access to email and telephone support to handle support inquiries. Phone support and email support shall be available five (5) days a week, from Monday through Friday, from 9am – 5pm Eastern Standard Time. In the case of EverTrue Volunteer Management, Customer will be responsible for providing end-user support to Volunteers.

4.4 During the term of the Agreement, EverTrue shall supply Customer with various Customer Success services that may include in-person or on-premises User Training. If Customer requires on-premises User Training, Customer shall be responsible for reimbursing EverTrue for reasonable travel and out of pocket expenses related to EverTrue employees providing such User Training.

5. Fees and Renewal Billing.

5.1 Customer shall pay EverTrue the charges set forth on the Cover Sheet. The License Fee is invoiced on the Effective Date, and on first day of the Renewal Term in the event of any renewal of this Agreement. The One-Time Implementation Fee is invoiced on the Effective Date. Travel and out of pocket User Training expenses are invoiced after training is completed. Invoices are due and payable thirty (30) days after the Effective Date or on the first day of the Renewal Term in the event of any renewal of this Agreement.

5.2 Customer shall be responsible for, and shall pay or reimburse EverTrue for, all applicable state, local, federal and governmental taxes, duties or charges of any kind that may be levied upon either party in connection with this Agreement except for taxes levied on EverTrue’s net income unless Customer is a tax-exempt entity. Customer will furnish proof of such status upon written request.

5.3 If this Agreement is renewed in accordance with Section 11.1 of this Agreement, EverTrue shall send an invoice for the fees owed for the Renewal Term, as provided for in Section 5.1.  The renewal charge will be equal to the prior term’s License Fee or equal to the Renewal Term License Fee outlined on the Cover Sheet, unless EverTrue has given Customer at least ninety (90) days’ prior written notice of a fee increase. Any such pricing increase shall not exceed seven percent (7%) above the prior term’s License Fee, unless the pricing in the prior term was designated in the Customer Cover Sheet as promotional or one-time.

6. Ownership.

6.1 The license granted to Customer does not convey any rights in the EverTrue Technology, express or implied, or ownership in the Service or any intellectual property rights thereto.  EverTrue (and its licensors, where applicable) shall retain all rights, title and interest, including in any intellectual property or other proprietary rights, in and to the EverTrue Technology and the Services, any derivative works or improvements thereof that are made by either party, or by any third party under contract with such party, and in any suggestions, ideas, enhancement requests, feedback, recommendations or other information provided by Customer or any other party relating to the Services, excluding always the Customer Data and Customer Marks.  The service marks, logos and product and service names associated with the Services are marks of EverTrue or third parties (collectively, the “Marks”).  Customer shall have the right to use and display such Marks for the purposes of the Services and promotion of the Services to Users, subject always to EverTrue’s trademark usage policies.  All use of the Marks, and any goodwill associated therewith, will inure solely to EverTrue.

6.2 All title and intellectual property rights in and to the Customer Data and Customer Marks are owned exclusively by Customer, provided that EverTrue may use the Customer Data in an anonymous and aggregated form, without restriction.

6.3 Without limitation of the foregoing, all technology, software or other material developed, invented, created or authored by any party in connection with the Services shall belong solely and exclusively to the developing party, including all Intellectual Property relating thereto.

7. Confidential Information.

7.1 Each party shall not disclose to any third party the other party’s Confidential Information and shall limit access and use to those of its employees and agents who require such access and use in connection with its rights and obligations under this Agreement.  Each party shall take appropriate action with its employees and agents to satisfy its obligations hereunder and shall protect the other’s Confidential Information as it protects its own Confidential Information, but in any event with not less than a reasonable degree of care.

7.2 The obligations set forth in this Section 7 shall not apply to information (a) previously known to the receiving party prior to disclosure by the disclosing party, (b) which is or becomes publicly known through no wrongful act of the receiving party, (c) received from a third party under no confidentiality obligation with respect to the Confidential Information, or (d) required to be disclosed under administrative or court order, or in an arbitration or litigation arising out of a dispute between the parties or their successors or assigns.  If a party is legally required to disclose any Confidential Information, that party shall, to the extent allowed and practicable, provide the other party prompt notice of such requirement so that the other party may seek a protective order or other appropriate remedy or waive compliance with respect to that disclosure.

7.3 Each party agrees that, in addition to any other remedies available, the other shall be entitled to injunctive relief to enforce the terms of this Section 7.

7.4 Each party is responsible for: (i) the security of non-public or personally identifiable information (“Personal Information”) on the systems under its control; and (ii) data security issues arising from its systems or directly resulting from its own third party vendors or subcontractors, if any, in connection with the Services.  Each party will maintain commercially reasonable information security practices designed to prevent unauthorized or unlawful access to, use, disclosure or alteration of Personal Information (collectively, a “Security Incident”).  In the event of a Security Incident involving the other party’s Personal Information, the affected party will promptly (a) assess the nature and scope of the Security Incident; (b) identify the Personal Information involved, if any; (c) take appropriate steps to contain, control and stop the Security Incident; and (d), in the event Personal Information was compromised and it is reasonably suspected that such compromise could result in a breach of this Section 7, promptly notify the other party of the Security Incident, subject to any request by law enforcement or other government agency to withhold such notice pending the completion of an investigation.

7.5 Customer understands and agrees that EverTrue may use cookies, web beacons and/or other technologies to collect certain personally non-identifiable data in connection with this Agreement, which data may include, among other things, information such as Customer’s or User’s IP address, pages viewed by Customer or a User, date, time and domain type.  Such information, which is collected passively using various technologies, cannot be used to specifically identify Customer or any User. EverTrue may store such information itself or such information may be included in databases owned and maintained by EverTrue affiliates, agents or service providers. EverTrue may use such information and pool it with other information to track, for example, the total number of users of the EverTrue Platform, the number of visitors to each area or interactive object within the EverTrue Platform, and the domain names of any visitors’ internet service providers.

7.6 RESERVED.

7.7 EverTrue will use commercially reasonable administrative, technical, and physical safeguards to prevent the unauthorized access, use or disclosure of data in violation of any applicable laws, including the Family Educational Rights and Privacy Act (“FERPA”). Customer also acknowledges that by issuing user identifiers and passwords for its authorized end-users, Customer controls, defines and manages access to the data that will be used by Customer and its Users within the EverTrue Platform.  Customer is responsible for (i) compliance with all foreign and domestic privacy laws and regulations that may be applicable to Customer’s use of the EverTrue Platform, (ii) securing all necessary prior consents for the collection, storage, and use of data within the EverTrue Platform, and (iii) creation of, and compliance with, applicable policies regarding access and use by Users of any data.

8. Warranty; General Obligations.

8.1 EverTrue warrants that during the Term, the Services will perform substantially as described in accordance with the Documentation made available by EverTrue.  Customer’s sole remedy and EverTrue’s sole responsibility for any failure of the Services to conform to this warranty shall be EverTrue’s commercially reasonable efforts to modify the Services so as to conform to this warranty, or, if EverTrue is unable to do so, a pro-rated refund of the fees paid for the period of non-conformance of Services.  In the event of any uncured material breach of this warranty lasting longer than thirty (30) days, Customer may terminate this agreement in accordance with Section 11.2.

8.2 Customer covenants that throughout the term of this Agreement, Customer shall be responsible for all activity occurring under Customer’s User accounts and shall: (a) comply with all applicable laws and regulations with respect to Customer’s use of the Services under this Agreement, including those related to data privacy and the transmission of technical or personal data; (b) only use the Services as contemplated by this Agreement; and (c) assume all liability for any unauthorized use of the Services by Customer and Customer’s employees, officers, affiliates and agents.  Customer acknowledge that EverTrue shall have the right, from time to time, to provide Updates or otherwise upgrade the Services. Customer shall notify EverTrue immediately of any unauthorized use of any password or account or any other known or suspected breach of security.

9. Disclaimer of Warranties and Limitation of Liability.

9.1 EXCEPT AS STATED IN SECTION 8.1, EVERTRUE PROVIDES THE SERVICES TO CUSTOMER “AS IS” AND DISCLAIMS ANY AND ALL REPRESENTATIONS AND WARRANTIES OF ANY KIND, EXPRESS, STATUTORY, IMPLIED OR OTHERWISE, INCLUDING WITHOUT LIMITATION WARRANTIES OF MERCHANTABILITY, NONINFRINGEMENT OR FITNESS FOR A PARTICULAR PURPOSE AND WARRANTIES ARISING FROM COURSE OF DEALING OR COURSE OF PERFORMANCE.  EVERTRUE DOES NOT WARRANT THAT THE SERVICES WILL OPERATE UNINTERRUPTED OR ERROR-FREE. NO ORAL OR WRITTEN INFORMATION OR ADVICE GIVEN BY ANY EVERTRUE EMPLOYEE OR REPRESENTATIVE SHALL CREATE A WARRANTY FOR THE SERVICE, AND CUSTOMER MAY NOT RELY ON ANY SUCH INFORMATION OR ADVICE. EVERTRUE’S LICENSORS EXPLICITLY DISCLAIM ANY AND ALL WARRANTIES WITH RESPECT TO THE SERVICE. IN ADDITION, EVERTRUE HEREBY DISCLAIMS ANY AND ALL LIABILITY PERTAINING TO (I) THE TRANSMISSION OF INFORMATION OVER THE INTERNET, OR (II) ANY IMPAIRMENT OR DISRUPTION OF CUSTOMER’S CONNECTION TO THE INTERNET OR ACCESS TO THE SERVICE.

9.2 TO THE FULL EXTENT ALLOWED BY LAW, NEITHER CUSTOMER NOR EVERTRUE (AND ITS LICENSORS, WHERE APPLICABLE) SHALL IN ANY EVENT BE HELD LIABLE, WHETHER BASED UPON CONTRACT, INDEMNITY, WARRANTY, TORT (INCLUDING NEGLIGENCE), STRICT LIABILITY OR OTHERWISE, FOR ANY INDIRECT, INCIDENTAL, CONSEQUENTIAL, SPECIAL, PUNITIVE OR EXEMPLARY DAMAGES (EVEN IF A PARTY HAS BEEN ADVISED OF OR COULD HAVE REASONABLY FORESEEN THE POSSIBILITY OF SUCH DAMAGES), SUCH AS, BUT NOT LIMITED TO, LOSS OF REVENUE, PROFITS OR BUSINESS, COSTS OF DELAY, COSTS OF LOST OR DAMAGED DATA OR DOCUMENTATION. SOME STATES AND JURISDICTIONS DO NOT ALLOW FOR THE EXCLUSION OR LIMITATION OF INCIDENTAL OR CONSEQUENTIAL DAMAGES, SO THIS LIMITATION AND EXCLUSION MAY NOT APPLY TO THIS AGREEMENT.

9.3 EXCEPT FOR LIABILITY UNDER SECTIONS 7 (CONFIDENTIALITY) AND 10 (INDEMNIFICATION), THE MAXIMUM LIABILITY OF EVERTRUE ARISING OUT OF OR IN ANY WAY CONNECTED TO THIS AGREEMENT SHALL NOT EXCEED THE AMOUNT OF FEES ACTUALLY PAID BY AND/OR DUE FROM CUSTOMER IN THE TWELVE (12) MONTH PERIOD IMMEDIATELY PRECEDING THE DATE THE CAUSE OF ACTION AROSE OR REASONABLY SHOULD HAVE BEEN DISCOVERED, AND IN NO EVENT SHALL EVERTRUE’S LIABILITY EXCEED $1,000,000.  IN NO EVENT SHALL EVERTRUE’S LICENSORS HAVE ANY LIABILITY ARISING OUT OF OR IN ANY WAY CONNECTED TO THIS AGREEMENT.

9.4 NOTWITHSTANDING THE ABOVE, NOTHING IN THIS AGREEMENT SHALL LIMIT OR EXCLUDE EITHER PARTY’S LIABILITY TO THE OTHER FOR ACTS OF GROSS NEGLIGENCE OR INTENTIONAL MISCONDUCT OF SUCH PARTY OR ITS EMPLOYEES OR AGENTS OR FOR DEATH OR PERSONAL INJURY.

10. Indemnification.

10.1 EverTrue shall indemnify Customer from and against claims that the Services or the EverTrue Technology infringe any third party’s U.S. Intellectual Property and all damages and costs awarded or paid in settlement and reasonable attorney’s fees with respect thereto, provided that Customer (a) promptly notify EverTrue of any such claim and cooperate with EverTrue in the defense thereof and (b) give EverTrue sole control of the defense and settlement of the claims. EverTrue will have no obligation with respect to any claim arising out of or based upon Customer Data, Customer Marks, Customer’s modification of the Services or use of the Services in a manner not permitted by this Agreement.

10.2 If the Services or the EverTrue Technology or any part thereof provided under this Agreement is the subject of a claim, suit or proceeding for infringement of any U.S. Intellectual Property, or in the event of any adjudication that the Services or EverTrue Technology infringes upon any U.S. Intellectual Property, EverTrue, at its expense, shall (a) secure for Customer the right to continue using the Services or the EverTrue Technology or part thereof; (b) replace or modify the Services or the EverTrue Technology or part thereof to make it non-infringing; or (c) if reasonable efforts to achieve the foregoing are not available on commercially reasonable terms, either party shall have the right to terminate this Agreement upon written notice to the other party and EverTrue shall refund any fees prepaid to EverTrue for the period after such termination, provided that EverTrue’s obligation to refund such prepaid fees shall not impact Customer’s remedies against EverTrue for non-conforming Services under this Agreement.  For clarity, any changes made by EverTrue to the EverTrue Technology pursuant to the preceding sentence shall not impact EverTrue’s warranties to the Customer contained in this Agreement.

10.3 Customer shall, at its own expense, indemnify and hold EverTrue, its licensors and each such party’s parent organizations, subsidiaries, affiliates, officers, directors, employees, attorneys and agents harmless from and against any and all claims, costs, damages, losses, liabilities and expenses (including attorneys’ fees and costs) arising out of or in connection with any and all claims alleging that the Customer Data or Customer Marks, or any use thereof, infringes or violates the Intellectual Property rights, contract rights, or other rights of any third party.  EverTrue shall (a) promptly notify Customer of any such claim and cooperate with Customer in the defense thereof and (b) give Customer sole control of the defense and settlement of the claims.

11. Term and Termination.

11.1 Term.  This Agreement shall be effective as of the Effective Date and shall continue for the period set forth on the Cover Sheet (the Initial Term) and, upon expiration of the Initial Term, shall automatically renew for successive renewal terms of equivalent length as the Initial Term or for the Renewal Term specified on the Cover Sheet (each successive renewal term, a Renewal Term) (collectively, the Term), unless (i) either party provides written notice of its intent not to renew prior to ninety (90) days before the expiration of the then-current term, or (ii) this Agreement is otherwise terminated in accordance with this Section 11.

11.2 Termination for Breach; Suspension.  Either party may terminate this Agreement if the other party commits any material breach of this Agreement and fails to remedy the breach within thirty (30) days after written notice of the breach is given.  In the event that EverTrue fails to remedy the material breach within thirty (30) days after written notice of the breach is given, Customer will be entitled to reimbursement of a pro rata portion of the corresponding Annual License Fee (for example, if the Agreement is terminated on the sixth (6th) month anniversary of a Renewal Term, then one-half of the Annual License Fee paid by Customer to EverTrue corresponding to such Renewal Term shall be reimbursed to Customer).  In addition, if Customer is delinquent in making payments to EverTrue when due, EverTrue may suspend access to the Services. Late payments shall be subject to interest of one percent (1.0%) per month on any outstanding balances, or the maximum allowed by law, whichever is less, in addition to all reasonable and customary expenses of collection.

11.3 Handling of Customer Data Upon Suspension/Termination.  Upon termination or suspension of the Services, all access of Customer and its Users to the EverTrue Technology and the Services shall cease.  If EverTrue is hosting Customer Data: (a) after the expiration of a reasonable period after termination, not less than ninety (90) days, subject to applicable law, EverTrue will irretrievably delete Customer Data; and (b) upon Customer’s written request within thirty (30) days of termination of this Agreement (other than by reason of Customer’s breach), EverTrue will, where applicable, make available to Customer a file of the Customer Data, provided that Customer has paid in full all undisputed amounts owed to EverTrue.

12. General.

12.1 Compliance with Laws.  Each party shall comply with all applicable laws with respect to its performance under this Agreement.

12.2 Publicity.  Customer acknowledges and agrees that EverTrue may identify Customer as a Customer of EverTrue, and may display Customer’s name and logo on EverTrue’s website for such purposes, for so long as this Agreement is in effect or until Customer revokes its consent in writing, whichever is earlier.

12.3 Notices.  All notices and other communications under this Agreement will in writing and delivered by certified mail, with return receipt requested.  Notices to Customer will be delivered to Customer’s mailing address on record with EverTrue. Notices to EverTrue will be delivered to EverTrue, Inc., 330 Congress St., 2nd Floor, Boston, MA 02210.  A notice will be deemed given upon the expiration of forty-eight (48) hours (if sent by mail or post).   

12.4 Entire Agreement.  This Agreement constitutes the entire agreement between the parties and supersedes all prior oral or written agreements or communications, with regard to the subject matter described herein.  This Agreement may only be modified in writing, signed by both parties.

12.5 Assignment.  This Agreement may not be assigned or transferred by either party without the prior written consent of the other party; provided, however, that either party may assign this Agreement to any successor or assign of its business, whether by merger, change of control, or sale of all or substantially all of its assets.  Subject to the prior sentence, any attempt to assign this Agreement or any rights hereunder without the prior written approval of the other party shall be null and void.

12.6 Waiver and Severability.  Waiver by a party of any default by the other shall not be deemed a waiver of any other default.  If any term or condition of this Agreement is determined to be invalid or unenforceable in whole or in part for any reason, this Agreement shall be reformed to be valid and enforceable consistent with the intention of the parties as expressed herein to the greatest extent permitted by law.

12.7 No Third Party Benefits.  This Agreement is entered into solely for the respective benefit of the parties and their permitted successors and assigns, and nothing in this Agreement will be construed as giving any right, remedy or claim under this Agreement to any third parties.

12.8 Force Majeure.  Neither party shall be in default to the extent that failure to perform any obligation under this Agreement is caused solely by supervening conditions beyond its control, including acts of God, fire, natural disaster, war, terrorism, riot or other civil disturbance, outages of electrical, telecommunications or computer server hosting services, acts of government or labor strikes or lockouts (“Force Majeure”), provided that such party shall use its best efforts to overcome any such Force Majeure.

12.9 Governing Law; Jurisdiction and Venue.  This Agreement shall be governed by the laws of the Commonwealth of Massachusetts, without regard to its principles of conflicts of laws. Customer hereby expressly consent to the personal jurisdiction of the state and federal courts located in Boston, Massachusetts for any action or proceeding arising from or relating to the Agreement.

12.10 Relationship of the Parties.  The relationship of the parties shall be that of independent contractors.  Nothing herein shall be construed to create any agency, partnership, joint venture or similar relationship or to subject the parties to any implied duties or obligations respecting the conduct of their affairs which are not expressly stated herein.  Neither party shall have any right or authority to assume or create any obligation or responsibility, either express or implied, on behalf of or in the name of the other party, or to bind the other party in any matter or thing whatsoever.

EVERTRUE MASTER SERVICES AGREEMENT
EXHIBIT A:  OFFERINGS DEFINITIONS

Customer’s entitlement to these offerings is detailed on the Customer Cover Sheet. Absence of any reference to an offering on the Customer Cover Sheet shall mean that no entitlement is conferred. When referencing these offerings, the Agreement may either reference the Offering or their Trade Names. In the event of conflict between this Exhibit and the Customer Cover Sheet, the Customer Cover Sheet shall prevail.
OfferingDefinitionTrade Name(s)
EverTrue PlatformThe software made available to Customer as a Service to help understand, identify and segment constituents in order to drive engagement, research and fundraising resultsGivingTree, EverTrue Pro
EverTrue ConsoleThe software made available to Customer as a Service for onboarding and ongoing management of Customer Data. 
EverTrue Relationship ManagementThe software made available to Customer as a Service to help manage fundraising efforts, measure team performance and maximize frontline efficiency. EverTrue Relationship Management includes the EverTrue Platform software.EverTrue Frontline
EverTrue Volunteer ManagementThe software made available to Volunteers as a Service to help perform fundraising efforts while helping Customer manage volunteer teams. EverTrue Volunteer Management includes the EverTrue Platform software. 
Wealth DataCertain Third Party Data provided by Windfall Data, Inc and made available to Customer through the EverTrue Platform. The Customer is entitled to download such data to the Customer’s customer relationship management software.Windfall service
Prospect Discovery ServiceThe Service by which, on a frequency specified on the Customer Cover Sheet, EverTrue identifies major gift prospects based on analytics against its “TrueView” insights, digital engagement and affinity, as well as other indicators from the EverTrue Platform. 
Career Monitoring ServicesThe Service by which, once per calendar quarter, EverTrue provides verified job and title changes for those who self-identify as alumni of Customer on LinkedIn.Career Moves
TrueView Exports EntitlementThe entitlement for Customer to export the following data (displayed within the Enrichment or Engagement tab of the Constituent Profile in the EverTrue Platform): employment data, interest data, social handles and profile URLs, Windfall data (if applicable), Facebook engagements 
EverTrue EssentialsThe Service which includes entitlement to Wealth Data, Career Monitoring Services, and certain other data and Third Party Data available through the EverTrue Platform. 
EverTrue Digital Advancement Program ManagementThe Service described in Exhibit B, if applicableEverTrue Premier

EVERTRUE MASTER SERVICES AGREEMENT
DATA PROCESSING ADDENDUM

This Data Processing Addendum (the “Addendum”) is made by and between EverTrue, Inc. (“Company”) and the EverTrue customer (“Customer”).
This Addendum is incorporated into the EverTrue Master Services Agreement (“Agreement”) between the Company and the Customer and applies in respect of the provision of the EverTrue technology (“Services”) to the Customer if the Processing of Customer Personal Data (as defined below) is subject to the GDPR, only to the extent the Customer is a Controller of Customer Personal Data and Company is a Processor. The Addendum is intended to satisfy the requirements of Article 28(3) of the GDPR and is intended to comply with the Commission of the European Communities’ Decision 2004/915/EC (the Set II SCCs). This Addendum shall be effective for the term of the Agreement.

1. Definitions

1.1 For the purposes of the Addendum:
1.1.1 Customer Personal Data means the Personal Data described under Section 2 of this Addendum, in respect of which the Customer is the Controller;
1.1.2 Data Protection Legislation means all applicable legislation relating to data protection and privacy including without limitation the GDPR, together with any national implementing laws in any Member State of the European Union or, to the extent applicable, in any other country, as amended, repealed, consolidated, or replaced from time to time;
1.1.3 GDPR means the General Data Protection Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data; and
1.1.4 Personal Data”, “Data Subject”, “Personal Data Breach”, “Process”, “Processor and Controller will each have the meaning given to them in the GDPR.
1.2 Capitalized terms not otherwise defined herein shall have the meaning given to them in the Agreement.

2. Details of The Processing

2.1 Categories of Data Subjects. This Addendum applies to the Processing of Customer Personal Data relating to Customers’ alumni and their relatives, donors and employees.
2.2 Types of Personal Data. Customer Personal Data includes Personal Data, the extent of which is determined and controlled by the Customer in its sole discretion, uploaded to or published, displayed or backed up by the Customer or its end users through the Services, such as (i) relating to Customers’ alumni and their relatives and donors including name, address, phone number, email address, employment, relationship, historical giving, location geocoding, events attended and data made public by Data Subjects on third-party services including posts and career information; (ii) relating to Customers’ employees including name, email address, account ID and location when the Services are used.     
2.3 Subject-Matter and Nature of the Processing. The subject-matter of Processing of Customer Personal Data by Company is the provision of the Services to the Customer that involves the Processing of Customer Personal Data. Customer Personal Data will be subject to those Processing activities which Company needs to perform in order to provide the Services pursuant to the Agreement and any applicable statement of work.
2.4 Purpose of the Processing. Customer Personal Data will be Processed by Company for purposes of providing the Services set out into the Agreement and any applicable statement of work.
2.5 Duration of the Processing. Customer Personal Data will be Processed for the duration of the Agreement, subject to Section 10 of this Addendum.

3. Processing of Customer Personal Data

3.1 The parties acknowledge and agree that Customer is the Controller of Customer Personal Data and the Company is the Processor of that data. Company will only Process Customer Personal Data as a Processor on behalf of and in accordance with the Customer’s prior written instructions, including with respect to transfers of personal data. Company is hereby instructed to Process Customer Personal Data to the extent necessary to enable Company to provide the Services in accordance with the Agreement.
3.2 If Company cannot process Customer Personal Data in accordance with Customer’s instructions due to a legal requirement under any applicable European Union or Member State law, Company will (i) promptly notify the Customer of such inability, providing a reasonable level of detail as to the instructions with which it cannot comply and the reasons why it cannot comply, to the greatest extent permitted by applicable law; and (ii) cease all Processing of the affected Customer Personal Data (other than merely storing and maintaining the security of the affected Customer Personal Data) until such time as the Customer issues new instructions with which Company is able to comply. If this provision is invoked and Customer delays issuing new instructions, Customer will continue to be liable for payment of the Services per the Agreement.
3.3 Each of the Customer and the Company will comply with their respective obligations under the Data Protection Legislation. Customer shall ensure that Customer has obtained (or will obtain) all rights and consents (if required) which are necessary for Company to Process Customer Personal Data in accordance with this Addendum.
3.4 Company will at all times provide an adequate level of protection for Customer Personal Data, wherever processed, in accordance with the requirements of applicable data protection law.

4. Confidentiality

4.1 Company will ensure that any person whom Company authorizes to Process Customer Personal Data on its behalf is subject to confidentiality obligations in respect of that Customer Personal Data.

5. Security Measures

5.1 Company will implement appropriate technical and organizational measures to protect against accidental or unlawful destruction, loss, alteration, unauthorised disclosure of, or access to Customer Personal Data.
5.2 Company will, at the Customer’s request, provide the Customer with reasonable assistance as necessary for the fulfilment of the Customer’s obligation to keep Customer Personal Data secure.

6. Sub-Processing

6.1 Customer authorizes Company to appoint sub-Processors to perform specific services on Company’s behalf which may require such sub-Processors to Process Customer Personal Data. The current list of sub-Processors is maintained at https://www.evertrue.com/subprocessors/. The Customer may subscribe to updates concerning the addition or replacement of any sub-Processors and Customer will have an opportunity to object to such changes on reasonable grounds within thirty (30) business days after being notified. If the parties are unable to resolve such objection, either party may terminate the Agreement by providing written notice to the other party.
6.2 Company will enter into a binding written agreement with the sub-processor that imposes on the sub-processor the same obligations that apply to Company under this Addendum. Where any of its sub-processors fails to fulfil its data protection obligations, Company will be liable to the Customer for the performance of its sub-processors’ obligations.

7. Data Subject Rights

7.1 Company will, at the Customer’s request, provide the Customer with assistance necessary for the fulfilment of the Customer’s obligation to respond to requests for the exercise of Data Subjects’ rights. Company shall not respond to such requests without Customer’s prior written consent and written instructions. Customer shall be solely responsible for responding to such requests.

8. Personal Data Breaches

8.1 Company will notify the Customer without undue delay after it becomes aware of any Personal Data Breach affecting any Customer Personal Data. At the Customer’s request will promptly provide the Customer with all reasonable assistance necessary to enable the Customer to notify relevant security breaches to the competent data protection authorities and/or affected Data Subjects, if Customer is required to do so under the GDPR. Customer is solely responsible for complying with data incident notification requirements applicable to Customer and fulfilling any third-party notification obligations related to any data incidents.

9. Data Protection Impact Assessment; Prior Consultation

9.1 Company will, at the Customer’s request, provide the Customer with reasonable assistance to facilitate conducting data protection impact assessments and consultation with data protection authorities, if the Customer is required to engage in such activities under the GDPR, and solely to the extent that such assistance is necessary and relates to the Processing by the Company of the Customer Personal Data, taking into account the nature of the Processing and the information available to the Company.

10. Return or Deletion of Customer Personal Data

10.1 Company will return or delete, at Customer’s choice, Customer Personal Data to the Customer after the end of the provision of Services relating to the Processing of Customer Personal Data, and delete existing copies unless the applicable European Union or member state law requires storage of the data.

11. Information

11.1 The Company will, at Customer’s request, provide the Customer with all information necessary to enable the Customer to demonstrate compliance with its obligations under the GDPR, and allow for and contribute to audits, including inspections, conducted by the Customer or an auditor mandated by the Customer, to the extent that such information is within Company’s control and Company is not precluded from disclosing it by applicable law, a duty of confidentiality, or any other obligation owed to a third party, and provided that such audits shall be carried out with reasonable notice during regular business hours not more often than once per year. Company will immediately inform Customer if, in its opinion, an instruction from Customer infringes the Data Protection Legislation.

12. Liability

12.1 Each party’s liability towards the other party under or in connection with this Addendum will be limited in accordance with the provisions of the Agreement.
12.2 The Customer acknowledges that the Company is reliant on the Customer for direction as to the extent to which Company is entitled to Process Customer Personal Data on behalf of Customer in performance of the Services. Consequently, the Company will not be liable under the Agreement for any claim brought by a Data Subject arising from any action or omission by the Company, to the extent that such action or omission resulted directly from the Customer’s instructions or from Customer’s failure to comply with its obligations under the applicable data protection law.

13. General Provisions

13.1 With regard to the subject matter of this Addendum, in the event of inconsistencies between the provisions of this Addendum and the Agreement, the provisions of this Addendum shall prevail.