Acceptable Use Policy

1. Introduction and Scope

This Acceptable Use Policy (“AUP” or “Policy”) governs the use of the Services provided by MoneyMind Profile (“we,” “us,” or “Company”). The Services include our software platform, applications, tools, features, and related services designed for financial service professionals to conduct client behavior profiling and risk profiling analysis, related to financial advisory activities.

This Policy applies to all users of the Services, including financial advisory firms, individual financial advisors, administrators, and any other authorized users (collectively, “Users” or “you”). By accessing or using the Services, you agree to comply with this Policy and all applicable laws and regulations.

2. Permitted Uses

The Services are designed exclusively for legitimate financial advisory purposes, including:

• Conducting client behaviour profiling and risk profiling assessments
• Servicing client relationships and advisory workflows
• Generating client profiling reports
• Maintaining records in compliance with applicable financial services regulations
• Collaborating with authorized colleagues within your organization
• Accessing educational resources and platform support materials

Users must ensure all use of the Services complies with applicable financial services regulations in Australia, the United Kingdom, and the United States, including ASIC requirements; FCA regulations (UK); SEC and FINRA rules (US); AML and KYC obligations; and data protection laws including GDPR, CCPA, and the Australian Privacy Principles.

3. Prohibited Activities

3.1 Illegal and Unauthorized Activities

You must not use the Services to engage in or facilitate any illegal, fraudulent, or deceptive activities; violate any applicable laws, regulations, or regulatory guidance in any jurisdiction; infringe upon intellectual property rights; violate privacy rights or misappropriate personal or confidential information; facilitate money laundering, terrorist financing, or other financial crimes; or process transactions involving sanctioned individuals or entities.

Unauthorized access and misuse: Access or attempt to access accounts, data, or systems you are not authorized to access; share login credentials or provide access to unauthorized individuals; use another person's account without their explicit authorization; circumvent, disable, or interfere with security features; probe, scan, or test the vulnerability of the Services; breach or attempt to breach any security or authentication measures.

3.2 Data Protection and Client Information Violations

Prohibited data practices: Collect, process, store, or transmit client personal data beyond what is necessary for legitimate advisory purposes; use client data for purposes other than those explicitly authorized; share, sell, or disclose client information to unauthorized third parties; fail to implement appropriate security measures; store regulated financial data in violation of applicable data protection standards including PCI DSS where applicable; upload or process data belonging to individuals who have not provided appropriate consent; retain client data longer than permitted by applicable regulations.

Client privacy violations: Use the Services in a manner that violates client confidentiality obligations; access or view client information for purposes unrelated to providing advisory services; fail to comply with client data subject rights requests (access, deletion, portability, etc.); transfer client data across borders in violation of applicable data protection laws.

3.3 Content and Communication Violations

You must not use the Services to create, upload, transmit, display, or distribute content that: is defamatory, libelous, threatening, harassing, abusive, or hateful; contains malware, viruses, worms, Trojan horses, time bombs, or other harmful code; violates the rights of any third party; contains false, misleading, or deceptive statements; promotes discrimination based on race, ethnicity, national origin, religion, gender, sexual orientation, disability, age, or other protected characteristics; contains adult content or content inappropriate for a professional financial services context; or misrepresents your qualifications, regulatory status, or authorization to provide financial advice.

3.4 Platform Integrity and Performance

System interference: Disrupt, interfere with, or degrade the performance, security, or availability of the Services; use automated systems (bots, scrapers, crawlers) to access the Services without authorization; overload, flood, or spam the Services; introduce content designed to interrupt, destroy, or limit functionality; reverse engineer, decompile, or disassemble the Services; create derivative works; remove, obscure, or alter any proprietary notices.

Resource abuse: Use the Services in a manner that consumes excessive computational resources; store, process, or transmit data unrelated to legitimate advisory activities; use the Services for cryptocurrency mining; deploy the Services for purposes of competing with or benchmarking against our platform.

3.5 Professional and Ethical Misconduct

Advisory practice violations: Provide financial advice beyond the scope of your professional qualifications or regulatory authorization; make unsuitable recommendations inconsistent with a client's risk profile or objectives; fail to conduct appropriate due diligence or suitability assessments; engage in churning, unauthorized trading, or other prohibited sales practices; make guarantees of investment performance or returns; provide advice while subject to undisclosed conflicts of interest.

Misrepresentation: Misrepresent your credentials, licenses, registrations, or professional affiliations; make false or misleading claims about investment products or strategies; claim endorsement by or affiliation with regulatory bodies without authorization; impersonate another adviser, firm, or entity; use the Services to facilitate pump-and-dump schemes, market manipulation, or insider trading.

3.6 Spam and Unsolicited Communications

You must not use the Services to generate or facilitate unsolicited commercial email (spam) or bulk communications; send communications to individuals who have not provided appropriate consent; engage in or facilitate phishing, spoofing, or social engineering attacks; distribute chain letters, pyramid schemes, or multi-level marketing solicitations; or harvest email addresses or other contact information without authorization.

3.7 Third-Party Services and Integrations

When using third-party integrations or connected services: you must comply with the terms of service and acceptable use policies of such third parties; you must not use integrations to circumvent restrictions or limitations in this Policy; you are responsible for evaluating the security and compliance of third-party services; you must not use our Services to access third-party services in violation of their terms.

3.8 Prohibited AI Activities

AI training & development: You must not use the Platform or any data accessed through it to train, develop, or improve artificial intelligence models, machine learning algorithms, or large language models; extract data for purposes of creating embeddings, vector databases, or AI-powered knowledge bases; or reverse engineer Platform AI features or algorithms.

Third-party AI tools: You must not input client data, personal information, or confidential business information into ChatGPT, Claude, Bard/Gemini, Copilot, or similar AI chatbots; use AI-powered browser extensions or plugins that transmit Platform data to external services; or upload Platform data to cloud-based AI services without proper data protection agreements.

Automated extraction: You must not deploy bots, scrapers, crawlers, or automated tools to extract data; use API access to bulk download data for non-operational purposes; or systematically copy large portions of Platform content.

Approved AI use cases: Use MoneyMind Profile's built-in AI features as intended.

4. Data Security and Compliance Obligations

4.1 Security Requirements

Users must maintain strong, unique passwords and enable multi-factor authentication where available; immediately report any suspected security incidents, data breaches, or unauthorized access; implement appropriate organizational and technical security measures for client data; ensure all devices used to access the Services have up-to-date security software; encrypt sensitive client data both in transit and at rest where technically feasible; and limit access to the Services to authorized personnel on a need-to-know basis.

4.2 Regulatory Compliance

Users are solely responsible for maintaining all required licenses, registrations, and authorizations; complying with all applicable financial services regulations in jurisdictions where they operate; maintaining adequate professional indemnity insurance; implementing and maintaining AML and CTF programs; conducting KYC and customer due diligence procedures; maintaining appropriate records; filing required regulatory reports; and responding to regulatory inquiries and examinations.

4.3 Client Consent and Authorization

Before using the Services to collect or process client data, you must obtain appropriate consent from clients; provide clients with clear privacy notices explaining how their data will be used; ensure clients understand the nature and purpose of behavior profiling and risk profiling assessments; maintain records of client consent and authorization; and honor client requests to access, correct, or delete their personal information.

5. Monitoring and Enforcement

5.1 Our Rights

We reserve the right to monitor use of the Services to ensure compliance with this Policy and detect violations; investigate suspected violations; access, preserve, and disclose account information and content where necessary to comply with legal obligations; remove or disable access to content that violates this Policy; and implement technical measures to prevent or mitigate prohibited activities.

5.2 Consequences of Violations

Progressive enforcement:

• First violation (minor): Written warning and requirement to cease prohibited activity immediately.
• Subsequent or serious violations: Temporary suspension of account access (typically 7-30 days).
• Repeated or severe violations: Permanent termination of account and access to Services.

Immediate actions for severe violations: We may immediately suspend or terminate access without prior notice for activities that pose immediate risk to security, integrity, or availability; violations of law or regulations (including financial crimes); serious data protection violations or security breaches; activities that harm or risk harm to other users or their clients; and fraud, impersonation, or material misrepresentation.

Additional consequences: Removal of content and data; reporting to law enforcement or regulatory authorities as required; cooperation with investigations; pursuit of legal remedies including claims for damages; forfeiture of fees paid (no refunds for terminated accounts); prohibition from creating new accounts.

5.3 User Reporting

If you become aware of any violation of this Policy by another user, please report it immediately to support@moneymindprofile.com. We investigate all reports and take appropriate action.

6. Disclaimers and Limitations

6.1 No Professional Advice from Company

The Services are tools to assist you in providing financial advice to your clients. We do not provide financial, legal, tax, or investment advice. You are solely responsible for the accuracy and appropriateness of advice provided to clients; ensuring advice is suitable for each client's individual circumstances; complying with all professional and regulatory obligations; and the interpretation and application of risk profiles and behaviour assessments.

6.2 Third-Party Content and Services

The Services may contain or provide access to third-party data, content, tools, or services. We do not endorse, warrant, or guarantee the accuracy, reliability, or completeness of third-party content; the performance or availability of third-party services; the compliance of third-party services with applicable regulations; or the security or privacy practices of third-party providers.

6.3 Service Availability

While we strive to maintain high availability, we do not guarantee uninterrupted or error-free access to the Services. We may suspend or restrict access for maintenance, upgrades, or security reasons. We are not liable for any loss or damage resulting from service interruptions.

7. Changes to This Policy

We may modify this Policy at any time. We will provide notice of material changes by posting the updated Policy on our website with a new “Last Updated” date, sending email notification to the primary contact for your account, or displaying an in-platform notification upon your next login. Your continued use of the Services after the effective date of changes constitutes acceptance of the revised Policy.

8. Relationship to Other Agreements

This Policy is incorporated into and forms part of your Master Subscription Agreement or other governing agreement with us. You must also comply with our Privacy Policy, our Repeat Infringer Policy, any industry-specific terms or requirements applicable to your jurisdiction, and all applicable laws and regulations.

9. Jurisdictional Considerations

As we operate in Australia, the United Kingdom, and the United States, users must ensure compliance with the most stringent applicable requirements across these jurisdictions. Users should be aware of and comply with:

Australia

• ASIC Regulatory Guides (particularly RG 175, RG 244, RG 146)
• Corporations Act 2001
• Australian Privacy Principles under the Privacy Act 1988
• AML/CTF Act 2006

United Kingdom

• FCA Handbook and Principles for Businesses
• Senior Managers and Certification Regime (SM&CR)
• UK GDPR and Data Protection Act 2018
• Money Laundering, Terrorist Financing and Transfer of Funds Regulations 2017

United States

• Investment Advisers Act of 1940
• Securities Exchange Act of 1934
• Gramm-Leach-Bliley Act (GLBA)
• SEC rules and FINRA regulations
• State-specific regulations for registered investment advisers
• Bank Secrecy Act and USA PATRIOT Act requirements

10. Contact Information

For questions about this Policy, to report violations, or to request clarification on permitted uses: support@moneymindprofile.com.

11. Severability

If any provision of this Policy is found to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect. The invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable while preserving the original intent.

12. Governing Law and Dispute Resolution

This Policy and any disputes arising from it shall be governed by the laws specified in your Master Subscription Agreement. Any disputes shall be resolved in accordance with the dispute resolution provisions of that Agreement.