Acceptable Use Policy

This policy applies to everyone who uses the Nuntiq platform: our customers and their users, their suppliers in the supplier portal, partners and their consultants, and anyone using our APIs ("you"). It is part of the agreement or terms under which you use Nuntiq. If you are a customer, you are responsible for activity under your account: by your users, by the suppliers and contractors you invite to or provision in the platform, and through the credentials and API keys you issue. You are not responsible for what third parties you have not invited send to your receiving addresses; we handle unsolicited or malicious incoming mail as part of the service.

1. Use the platform for its purpose

Nuntiq is for receiving, processing and exchanging accounts payable documents and related data. Do not use it to:

• break any law, or to infringe anyone's rights, including privacy and intellectual property;
• send or store content that is fraudulent, deceptive, defamatory, harassing or obscene, or that you have no right to share;
• send spam, phishing, or messages unrelated to legitimate accounts payable work through platform notifications, or flood receiving addresses with automated traffic that is not invoices or related documents;
• process special categories of personal data (such as health data) unless your agreement with Nuntiq expressly allows it.

2. Keep the platform and other customers safe

Do not:

• upload or send malware, or files designed to exploit a vulnerability;
• access, or try to access, data, accounts or systems you are not authorized for, including other customers' tenants;
• share your user account, credentials or API keys, or keep API keys where others can read them (for example in public code repositories);
• bypass or try to bypass rate limits, authentication, IP restrictions, region settings or other controls;
• overload the platform, for example with load or stress tests, automated requests beyond normal integration use, or scraping;
• use connector code or integrations to scan networks, mine cryptocurrency, attack third parties, or reach systems other than the ones the integration is meant for;
• copy, reverse engineer or resell the platform, or use it to build a competing service, except where the law allows it.

If an API key or credential may have been exposed, rotate it promptly; that is enough. If you know or suspect that it was used by someone not authorized, also tell us at security@nuntiq.com so we can help you investigate.

3. Security testing

Do not test the security of the platform (penetration tests, vulnerability scans, attempts to break isolation) without our written permission. You can ask at security@nuntiq.com; we may, at our discretion, agree to a test and set its scope, timing, environment and terms, or offer our own security documentation instead.

4. AI features

The platform uses AI to read and enrich documents. Do not use AI features, or AI apps connected to the platform, to:

• try to extract the instructions, prompts or models behind them, or to make them produce content unrelated to your documents;
• submit content designed to manipulate them (prompt injection) into changing other data, bypassing controls or revealing information;
• make decisions with legal or similarly significant effects on people without human review.

Check AI results before you rely on them: they can be wrong.

5. Reporting vulnerabilities

If you find a security issue, tell us at security@nuntiq.com with enough detail to reproduce it. Please give us reasonable time to fix it before disclosing it, do not access or change other people's data, and stop as soon as you have shown the issue. We will not take legal action against good-faith research that follows these rules.

6. What we do if this policy is broken

We may investigate suspected breaches, remove content, and suspend or restrict access (for example deactivate an API key or user) where needed to protect the platform, our customers or others, or to comply with the law. Where we can, we tell the customer first and give them a chance to fix the problem. Serious or repeated breaches may lead to termination under the agreement.

7. Changes

We may update this policy to reflect changes in the platform, the law or security practice. The date of the last update is shown at the top. We announce material changes to customers at least 30 days before they take effect. An update does not reduce a customer's rights under a signed agreement during its current term: a change that would materially do so applies to that customer from its next renewal, unless the customer agrees earlier or the change is required by law or to address a security risk.

Questions: legal@nuntiq.com.