Acceptable use

The short version

Run your business, and do not use ours to harm anyone. Everything below follows from that, and this policy will stay short enough to read in full.

What you may not do

This section will be a definitive list rather than an illustrative one. As drafted today it covers the following.

• Break Nigerian law, or use Xeruvi to help someone else break it.
• Store or send someone else's personal information that you had no right to collect.
• Contact your clients through Xeruvi in ways they have not agreed to, including bulk messages they did not ask for.
• Connect a bank account that is not yours or that you are not authorised to connect.
• Present figures produced by Xeruvi as audited accounts, a valuation, or a professional opinion.
• Attempt to reach another business's data, test our security without asking us first, or work around a limit on your plan.
• Resell, rebrand or sublicense the product, unless we have agreed to it in writing.
• Automate access in a way that degrades the service for other people.

Security research

We would rather hear about a vulnerability than read about it. This section will set out how to report one, what we commit to in response, and what we will not do to a researcher acting in good faith.

What happens if you break it

This section will set out the steps we take, from asking you to stop through to suspending or closing an account, and what notice you get at each point.

It will also say what we do when the breach is serious enough that we cannot give notice first.

Reporting a problem

How to tell us that someone is misusing Xeruvi, what to include, and what we will do with the report.