Acceptable Use Policy

Version: 2026-10-28.1. Effective date: 28 October 2026.

1. Intended use

Use Finooi to review and organise your own financial information, or business information you have authority to handle. Personal, Sole Trader and Limited Company contexts help organise information; changing a context does not grant access to a different person's records or change who legally owns an asset.

Signed-in accounts, balances, transactions, transfers and monthly budgets save to your private workspace. Use only sample information in the separate demonstration; demo edits do not save as private financial records. See the Terms of Service and Privacy Policy for the present limits of the service.

2. Lawful and responsible conduct

You must have a lawful basis and any necessary authority for information you provide, particularly information identifying employees, customers, partners or other individuals. Do not include more personal information than is necessary. Do not upload or enter content that infringes intellectual property, confidentiality or another person's rights.

Do not use the service to facilitate fraud, theft, money laundering, tax evasion, harassment, discriminatory abuse or other unlawful or harmful activity. Do not fabricate ownership, income, liabilities or financial reports to deceive a lender, authority, business partner or another person. The application does not verify information for those purposes.

3. Access and security

You must not:

• Access, attempt to access or disclose another user's profile, workspace, session or financial information without authority.
• Guess or steal passwords, obtain recovery links, impersonate users, or buy, sell or share account access.
• Bypass authentication, ownership checks, Row Level Security, usage limits or restrictions on registration.
• Interfere with availability through abusive automation, denial-of-service traffic, malicious software or disproportionate requests.
• Probe, scan or exploit the service without explicit written permission defining the test scope. An account does not itself authorise security testing.
• Extract private information, publish credentials or vulnerabilities in a way that exposes people to harm, or use third-party information for unrelated purposes.

Report a suspected security issue to support@finooi.com. Include only the minimum evidence needed to explain it. Do not retain or distribute other users' information to demonstrate an issue, and do not send active credentials. No security-testing safe harbour or bug-bounty programme is offered.

4. Honest use of outputs

Do not remove demonstration labels or describe sample outputs as verified statements, live bank records, audited accounts or professional advice. Do not misrepresent the service as an authorised adviser, bank or government service. Forecasts and estimates must retain their limitations when you share them. The Financial Disclaimer applies to how the outputs should be understood.

5. Response to misuse

The operator may investigate credible reports and take proportionate steps to protect users and the service. Depending on severity, steps may include asking you to correct conduct, limiting a session, suspending access or ending access for serious or repeated misuse. Immediate restriction may be appropriate for a security incident, fraud or imminent harm. Information may be preserved or disclosed where there is an appropriate legal basis, not simply because an allegation has been made.

Where lawful and safe, the operator should explain action taken and provide a way to request review. No automated suspension process or appeal tool is implemented. Contact support@finooi.com to request review. Suspension is not a promise that data has been deleted or that any future subscription has been cancelled.

6. Policy status and changes

This policy applies with the Terms of Service and the same version identifier. Your explicit signup agreement is recorded against your verified user after email confirmation; no historical acceptance is created for existing users. We will communicate material changes and obtain any agreement required by law. The legal operator placeholder in the Terms remains outstanding. Nothing in this policy removes mandatory rights under applicable law.