Acceptable use policy

This policy forms part of the terms of use.

1. Permitted uses

• Analysing your own business or personal financial documents.
• Analysing documents you are authorised to process for a business you operate or advise.
• Running calculators, saving scenarios and comparing them.
• Generating reports for your own planning, lender conversations or bookkeeping context.
• Learning how the formulas work from the formula library.

2. Prohibited conduct

• Unlawful activity, fraud, money laundering or tax evasion.
• Uploading documents you have no right to process, or scraped third-party financial records.
• Presenting outputs as audited statements, credit decisions, or professional advice.
• Attacking the Service: injection attempts, credential stuffing, denial of service, automated scraping, or probing other users' data.
• Circumventing authentication, rate limits, row-level security or usage quotas.
• Reverse engineering secrets, keys, prompts or internal endpoints.
• Reselling or white-labelling the Service without written permission.

3. Upload rules

• Supported formats only: CSV, XLSX and digital (text-based) PDF statements.
• No malware, macro payloads, zip bombs or files crafted to exploit parsers.
• Do not upload credentials, PINs, OTPs, full card numbers or CVVs. The Service never needs them, and any such values found are treated as sensitive and masked or rejected.
• Keep uploads within the posted file size and page-count limits.

4. AI-specific rules

The AI Layer reads documents into a draft structure and explains figures the deterministic engine has already computed. You must not attempt to make it produce authoritative numbers, bypass the mandatory review step, or act as an adviser. Instructions embedded inside uploaded documents are treated strictly as data — see prompt-injection defence.

5. Fair use

Limits on file size, pages per document, concurrent jobs and AI analyses per hour keep the Service responsive for everyone. Automated or scripted use that defeats those limits is not permitted.

6. Reporting abuse or a vulnerability

Report suspected abuse, or a security issue, through the contact page. Please include enough detail to reproduce, avoid accessing other people's data while testing, and give us reasonable time to fix before disclosure.

7. Enforcement

Depending on severity we may rate-limit, warn, suspend or terminate access, and where the law requires it, preserve or disclose relevant records. We will tell you the reason unless doing so would compromise an investigation or breach the law.