Acceptable Use Policy

1. Lawful and authorized use

Use FacturaOS only for lawful business activity that you are authorized to conduct. You are responsible for licenses, registrations, taxes, consumer notices, worker obligations, professional rules, payment-provider rules, and industry requirements applicable to you.

2. Fraud, deception, and payment abuse

You may not use the service for:

• False, inflated, duplicate, misleading, or unauthorized invoices, estimates, payment requests, businesses, customers, identities, reviews, records, or evidence.
• Fraud, money laundering, sanctions evasion, terrorist financing, tax evasion, stolen payment credentials, card testing, artificial transactions, cash advances, or disguising transaction purpose.
• Chargeback manipulation, refund abuse, trial abuse, evasion of plan or seat limits, or unauthorized use of another person's account, identity, trademark, bank, or payment method.

3. Illegal, harmful, or infringing content and activity

You may not upload, sell, promote, request payment for, or facilitate:

• Illegal goods or services, activity requiring authorization you do not hold, or activity prohibited or restricted by a connected provider.
• Exploitation, trafficking, child sexual abuse material, non-consensual intimate material, credible threats, harassment, hate, violence, doxxing, stalking, or unlawful discrimination.
• Copyright, trademark, privacy, publicity, confidentiality, trade-secret, contractual, or other rights violations.
• Malware, phishing, credential theft, spam, unlawful marketing, deceptive links, malicious files, or instructions intended to harm people or systems.

4. Security and platform integrity

You may not:

• Probe, scan, test, exploit, or disclose vulnerabilities without prior written authorization through an approved security process.
• Bypass authentication, permissions, rate limits, plan gates, payment verification, maintenance controls, geographic controls, or security restrictions.
• Interfere with availability; overload, flood, or disrupt systems; introduce malicious code; scrape private data; or access accounts, records, files, APIs, or infrastructure without authorization.
• Reverse engineer, decompile, or circumvent technical protections except to the limited extent law expressly permits despite this restriction.

5. Automation, resale, and competitive misuse

Do not use bots, scripts, crawlers, bulk account creation, or automated access except through interfaces and limits we expressly authorize. Do not resell, sublicense, white-label, benchmark publicly, or provide FacturaOS as a service bureau without written permission.

Do not use non-public FacturaOS content, structure, screenshots, outputs, Customer Data, or reverse-engineered behavior to train, build, or operate a competing product. This does not restrict lawful use of your own exported Customer Data.

6. Sensitive and restricted data

Do not submit full payment-card numbers or security codes, HIPAA-regulated protected health information, Social Security numbers, government passwords, biometric templates, classified information, or other specially regulated data unless FacturaOS expressly authorizes it in writing. Do not use support or free-text fields to bypass controls.

7. Enforcement

We may investigate, request information, remove or preserve content, block messages or payment links, limit features, revoke invitations, suspend workspaces, terminate accounts, and report or cooperate with providers, financial institutions, affected parties, regulators, or law enforcement where reasonably appropriate.

We may consider severity, recurrence, intent, harm, legal requirements, provider instructions, and remediation. We are not required to disclose confidential detection methods or provide advance notice when doing so would increase risk.

8. Reporting

Report suspected abuse to contact@facturaos.com with the relevant workspace, invoice or payment reference, description, and non-sensitive evidence. Do not send passwords, full payment credentials, government identification numbers, or unnecessary personal information. Good-faith reports do not guarantee a particular action or disclosure of an investigation.