Acceptable Use Policy
What you may not do with Frabo, Adam, the API, connected apps, or payments — and what happens if someone does.
This policy forms part of, and is incorporated by reference into, the Frabo OS Terms of Service (the "Terms"). Capitalised terms used but not defined in this policy have the meanings given in the Terms. Where mandatory law applicable to you confers greater rights, those rights prevail. The summary above is provided for convenience only. Nothing herein constitutes legal, tax, or financial advice.
Section 1 — Purpose and Application
1.1 The Service handles funds, customer data, and messages sent in Customer's name. This Acceptable Use Policy (this "AUP") sets out the conduct required to protect Customers, their customers, and the Service. It applies to every Account, every Authorized User, every application built on the API, and every action Adam performs at a user's request. Customer is responsible for compliance by its Authorized Users and by any application it authorises.
Section 2 — Unlawful Activity
No user shall:
- (a) use the Service to violate any law, or to facilitate any violation by another person, including tax evasion, money laundering, sanctions evasion, or fraud;
- (b) upload or process data that the user has no right to use, such as another person's bank statements or customer lists obtained without authorisation; or
- (c) where accepting payments through the Service, sell or promote any product or service prohibited by Stripe or the card networks, including any business on Stripe's Restricted Businesses list.
Section 3 — Payments and Funds
No user shall:
- (a) issue a pay link or invoice other than for genuine goods or services actually provided, at the price agreed with the customer;
- (b) use pay links to transmit funds on behalf of a third party, to obtain cash from card accounts, or to test card credentials;
- (c) misrepresent the business, its owners, or its products or services during Stripe onboarding; or
- (d) use chargebacks or disputes to obtain the Service without payment.
Section 4 — Email, Social Media, and Messaging
No user shall:
- (a) send unsolicited commercial messages. Users shall message only persons who have consented or with whom they have an existing relationship, honour every unsubscribe request, and include accurate sender identification;
- (b) use Adam to impersonate any person, company, or governmental body, or to create deceptive reviews, fabricated testimonials, or invented figures;
- (c) harass, threaten, or abuse any person, including Frabo personnel; or
- (d) post through a connected account in breach of the relevant platform's rules.
Section 5 — Security and Platform Integrity
No user shall:
- (a) access or attempt to access any account, data, or system not belonging to that user, or circumvent sign-in, re-authentication, role permissions, approvals, rate limits, or billing;
- (b) probe, scan, or load-test the Service without Frabo's prior written permission;
- (c) upload malware or any code designed to harm a computer, or attempt to manipulate Adam through hidden instructions in documents, emails, or web pages (prompt injection); or
- (d) scrape the Service, copy it to build a competing product, or resell access without a written agreement.
Section 6 — Responsible Disclosure
6.1 Persons who discover a security vulnerability should report it to [email protected]. Frabo welcomes good-faith reports and shall not pursue legal action against researchers who act in good faith and follow responsible-disclosure practices, including refraining from accessing data beyond what is necessary to demonstrate the issue and allowing Frabo a reasonable period to remediate before disclosure.
Section 7 — Developers and Connected Applications
Each developer shall:
- (a) request only the scopes its application requires, and use data solely for the purposes the account holder approved on the consent screen;
- (b) keep client secrets, access tokens, and webhook signing secrets confidential, and verify every webhook signature;
- (c) not sell or share data received through the API, and delete it when an account holder disconnects the application; and
- (d) where listed in the Frabo app store, describe the application accurately and keep that description current.
Section 8 — Adam and AI Features
No user shall:
- (a) use Adam to generate unlawful content, sexual content involving minors, or content intended to incite violence or hatred;
- (b) present AI Output — including tax worksheets, payroll figures, financing summaries, or legal or medical text — to others as professional advice without independent review by the user or a qualified adviser; or
- (c) attempt to extract other customers' data, system prompts, or credentials from Adam.
Section 9 — Enforcement
9.1 Measures. Depending on the severity of a violation, Frabo may issue a warning, remove content, suspend a feature (such as email sending or pay links), suspend the Account, or terminate it. Where funds or other persons are at risk, Frabo may act without prior notice and shall explain its action afterwards.
9.2 Reporting to Authorities. Where required by law, Frabo shall report unlawful activity to the competent authorities and cooperate with valid legal process. Frabo may notify Stripe or the relevant social platform where misuse involves its service.
9.3 Review. A user who believes an enforcement action was taken in error may reply to the notice or write to [email protected], and a member of Frabo's staff shall review the action.
Section 10 — Reporting Abuse
Spam, fraud, security issues, or any other conduct prohibited by this AUP may be reported to [email protected], with links or screenshots where available.
Frabo OS is a subsidiary of USRA, LLC.