Acceptable Use Policy

1. You must not

• Upload statements or financial documents you are not authorised to access or use.
• Use the Service for money laundering, terrorist financing, fraud, or any unlawful purpose, or to evade sanctions.
• Attempt to gain unauthorised access to the Service, other tenants' data, or the underlying infrastructure, or probe, scan or test its security without our prior written permission.
• Interfere with or disrupt the Service, including circumventing quotas, rate limits, authentication or plan entitlements.
• Share, resell or embed API keys in client-side or publicly accessible code.
• Reverse engineer, decompile or attempt to extract source code or models, except where that restriction is prohibited by law.
• Use the Service to build a substantially similar competing product, or to scrape it systematically.
• Upload malware, or content that infringes intellectual property or privacy rights.
• Upload special-category personal data (GDPR Art. 9) or criminal-offence data unless separately agreed in writing.

2. Responsible security research

We welcome good-faith security research. Report findings to security@bankstmt.com before disclosing them. Do not access, modify or exfiltrate other users' data, do not degrade the Service, and give us reasonable time to remediate. We will not pursue legal action for research conducted in good faith under these conditions.

3. Enforcement

We may investigate suspected violations and may suspend or terminate access, remove content, or report to authorities where appropriate. Where it is lawful and practical we will notify you first and give an opportunity to remedy. Suspension for a security risk or legal requirement may be immediate.

4. Reporting abuse

Report suspected abuse of the Service to support@bankstmt.com.

Contact

Questions about these documents or your data? Contact privacy@bankstmt.com. For security matters, contact security@bankstmt.com.