Acceptable Use Policy

1. Lawful and honest use

• Use the Service only for lawful, personal purposes, in relation to financial accounts you own or are legally authorised to access.
• Do not use the Service for or in connection with fraud, money laundering, terrorism financing, tax evasion, sanctions evasion or the concealment of proceeds of crime.
• Do not misrepresent your identity, impersonate any person, or register an account with false details.
• Do not link, or attempt to link, another person's financial accounts without lawful authority. Doing so may be a criminal offence, including under the Criminal Code Act 1995 (Cth) and state legislation.

2. Account security

• Keep your credentials confidential and use a strong, unique password.
• Do not share, sell or transfer your account.
• Notify contact@vectapp.io immediately if you suspect your account has been compromised.
• Do not attempt to access another user's account or data under any circumstances.

3. System integrity

• Do not probe, scan or test the vulnerability of the Service, or attempt to breach any security or authentication measure, without our prior written consent. Good-faith security research can be arranged through contact@vectapp.io.
• Do not introduce malware, or interfere with the proper working of the Service or its infrastructure.
• Do not scrape, harvest or bulk-extract data from the Service, or access it by automated means other than interfaces we provide for that purpose.
• Do not reverse engineer, decompile or disassemble any part of the Service except to the extent permitted by law.
• Do not resell, sublicense, or commercially exploit the Service or data derived from it without our written agreement.

4. Fair use of the AI agent

• Do not attempt to circumvent Token metering, plan limits or usage controls.
• Do not use automated scripts to submit bulk queries to the agent.
• Do not attempt prompt injection, jailbreaking, or extraction of system prompts, other users' data or our proprietary orchestration.
• Do not use the agent to generate content that is unlawful, deceptive, defamatory, harassing or harmful.
• Do not attempt to make the agent provide financial product advice, execute transactions, or otherwise act outside its disclosed, read-only design.

5. Fraud prevention

We operate fraud and abuse monitoring across registrations, connections, billing and agent usage. We may:

• request identity verification where we reasonably suspect misuse
• suspend or restrict accounts while we investigate suspected fraud or unauthorised access
• cancel transactions or purchases we reasonably believe are fraudulent
• report suspected criminal conduct to law enforcement and cooperate with lawful investigations

If you notice suspicious activity on your underlying bank, broker or super accounts, contact the relevant institution immediately. Vecta is read-only and cannot stop or reverse transactions at your institution.

6. Consequences of breach

Depending on the severity of the breach, we may issue a warning, remove content, restrict features, suspend your account, or terminate it. For serious breaches we may terminate immediately without notice. Fees already paid are handled in accordance with the Billing and Refunds Policy and your rights under the Australian Consumer Law.

7. Reporting

To report a breach of this policy, suspected fraud, or a security vulnerability, contact contact@vectapp.io. We take reports seriously and handle them confidentially.