CONVESIO ACCEPTABLE USE POLICY

Last Updated: March 3, 2026

This Acceptable Use Policy (“AUP”) forms part of the Convesio Terms of Service and applies to all users of the Convesio platform, including visitors to the Site and Customers using Convesio services, including but not limited to hosting infrastructure, payment services (ConvesioPay), AI services, CRM tools, communication tools, and related software and infrastructure (collectively, the “Services”).

This AUP describes activities that are prohibited in connection with use of the Services. The purpose of this Policy is to ensure that the Services are used in a lawful, responsible, and secure manner that protects Customers, end users, and the integrity of the Convesio platform.

By accessing or using the Services, you agree to comply with this AUP. You are responsible for the actions of your Authorized Users, employees, contractors, agents, clients, and any other parties who access the Services through your account.

Convesio may update this AUP from time to time. Continued use of the Services constitutes acceptance of the updated Policy.

1. GENERAL COMPLIANCE

Customers must use the Services in compliance with all applicable laws, regulations, and industry standards.

Customers may not use the Services to engage in unlawful, harmful, fraudulent, or abusive activities, including activities that:

• violate any local, state, national, or international law
• infringe the intellectual property rights of others
• interfere with or disrupt the integrity or performance of the Services
• compromise the security or privacy of other users or third parties

Customers must cooperate with reasonable investigations of suspected violations of this Policy.

2. ILLEGAL OR HARMFUL CONTENT

Customers may not use the Services to store, transmit, distribute, or facilitate the distribution of any content that is unlawful or harmful, including but not limited to content involving:

• copyright, trademark, trade secret, patent, or other intellectual property infringement
• fraud, impersonation, or deceptive practices
• phishing, social engineering, or credential harvesting
• illegal gambling operations
• child sexual abuse material or exploitation
• sex trafficking or non-consensual sexual activity
• harassment, threats, or abuse directed at individuals or groups
• hate speech or promotion of violence or discrimination

Convesio reserves the right to remove or disable access to any content that violates this Policy or applicable law.

3. PAYMENTS AND FINANCIAL MISUSE

Customers using ConvesioPay or any payment-related functionality may not use the Services to facilitate fraudulent, deceptive, or prohibited financial activity.

Prohibited payment activities include, but are not limited to:

• payment laundering or transaction laundering
• processing payments on behalf of undisclosed third parties
• card testing or automated payment probing
• artificially inflated transactions or self-payment schemes
• fraudulent subscriptions or deceptive billing practices
• processing payments for prohibited merchant categories as defined by card networks or payment processors
• circumvention of card network rules, processor rules, or payment security standards

Convesio may suspend payment processing capabilities or terminate accounts engaged in suspected payment abuse or fraud.

4. REGULATED DATA AND PRIVACY

Customers may process regulated data, including health information, financial information, or personal data, only when using Convesio services designed to support such use and subject to applicable agreements, including but not limited to:

• Business Associate Agreements (BAAs)
• Data Processing Agreements (DPAs)
• payment processing agreements
• applicable privacy and security policies

Customers are responsible for ensuring compliance with all applicable regulations including but not limited to:

• HIPAA
• PCI-DSS
• GDPR and applicable privacy laws
• consumer protection and data protection regulations

Customers must implement reasonable safeguards to protect sensitive data processed through the Services.

5. SECURITY AND INFRASTRUCTURE ABUSE

Customers may not use the Services to interfere with, compromise, or attempt to gain unauthorized access to systems, networks, or data.

Prohibited activities include:

• attempting to bypass security controls
• unauthorized vulnerability scanning or penetration testing
• attempting to access data not intended for the Customer
• exploiting software vulnerabilities without authorization
• deploying malware, viruses, or other harmful code
• attempting to disrupt platform monitoring, logging, or security controls

Customers must immediately notify Convesio if they become aware of any unauthorized access, security vulnerability, or breach involving the Services.

6. INFRASTRUCTURE AND RESOURCE ABUSE

Customers may not use the Services in a manner that unreasonably consumes infrastructure resources or disrupts the stability of the platform.

Prohibited activities include:

• operating botnets or distributed attack infrastructure
• launching or participating in distributed denial-of-service (DDoS) attacks
• running unauthorized cryptocurrency mining operations
• conducting large-scale scraping or automated traffic generation that degrades platform performance
• intentionally creating excessive load on infrastructure systems

Convesio may impose technical limits or suspend services where necessary to maintain platform stability.

7. MESSAGING AND MARKETING ABUSE

Customers using Convesio CRM, communication tools, or messaging services must comply with applicable messaging and marketing laws, including but not limited to:

• CAN-SPAM
• TCPA
• CASL
• other applicable anti-spam and consumer protection regulations

Customers may not:

• send unsolicited bulk messages without appropriate consent
• distribute spam or deceptive communications
• harvest contact information for unsolicited outreach
• send messages that misrepresent the sender or purpose of the communication

Accounts associated with spam or abusive messaging may be suspended or terminated immediately.

8. AI AND AUTOMATION MISUSE

Customers using Convesio AI services may not use AI features to:

• generate unlawful, harmful, or deceptive content
• conduct automated attacks against websites, systems, or users
• extract, reverse engineer, or replicate AI models or training methods
• bypass safeguards designed to prevent harmful output
• generate large-scale automated spam or abusive content

Convesio may monitor usage patterns to ensure AI tools are used responsibly.

9. PLATFORM INTERFERENCE

Customers may not interfere with the normal operation of the Services or attempt to circumvent platform limitations.

Prohibited activities include:

• reverse engineering, decompiling, or disassembling platform software except where permitted by law
• copying, modifying, or creating derivative works of the Services without authorization
• systematically retrieving data to build a competing database or service
• using automated systems to access the Services in ways not intended by Convesio
• attempting to bypass technical restrictions or usage limits

10. AGENCY AND MULTI-TENANT RESPONSIBILITY

Customers who operate on behalf of third parties, including agencies, developers, consultants, or service providers managing multiple client accounts, are responsible for ensuring that all downstream users comply with this Acceptable Use Policy.

Customers remain fully responsible for the actions of their clients, end users, or subcontractors who access the Services through their accounts.

11. BACKUP AND STORAGE RESTRICTIONS

Customers may not use Convesio storage infrastructure for the purpose of storing large-scale backups generated by third-party backup systems unless those backups are generated by or managed through Convesio Services.

Customers may use third-party backup tools provided that backup files are stored outside of Convesio infrastructure.

12. LINKING AND PUBLIC SEARCH ENGINES

Customers are granted a limited, non-exclusive right to create text hyperlinks to the Convesio Site for informational purposes, provided that such links do not portray Convesio in a false, misleading, derogatory, or defamatory manner.

Operators of public search engines are permitted to use automated tools to index publicly available content from the Site solely for the purpose of creating searchable indices of such content.

Convesio reserves the right to revoke these permissions at any time.

13. ENFORCEMENT

Convesio may investigate any suspected violation of this Acceptable Use Policy.

If Convesio determines that a violation has occurred, Convesio may take any action it deems appropriate, including:

• removing or disabling access to content
• suspending or limiting access to the Services
• blocking payment transactions
• terminating accounts
• reporting illegal activity to law enforcement or regulatory authorities

Convesio reserves the right to take action without prior notice where necessary to protect the security, integrity, or availability of the Services.

14. REPORTING VIOLATIONS

If you become aware of any violation of this Acceptable Use Policy, you must promptly notify Convesio.

Reports may be submitted through Convesio support channels or security reporting mechanisms.