Acceptable Use Policy

This Acceptable Use Policy (the "Policy") governs how you and your users may access and use the software, platform and related services (the "Services") provided by izzytap Portal ("izzytap", "we", "us" or "our"), an independent software company based in Dubai, United Arab Emirates. It applies to every person who accesses the Services through your account, whether they are your staff, contractors, agents or your own customers ("End Clients").

This Policy forms part of, and is incorporated into, our Terms of Service. Capitalised terms not defined here have the meaning given in those terms. If there is any conflict between this Policy and the Terms of Service on a question of permitted use, this Policy prevails.

You must use the Services lawfully, honestly and only for legitimate business purposes connected to your corporate service, business-setup or compliance practice. In particular, you agree to:

• comply with all applicable laws, regulations and professional or licensing obligations that apply to your Firm and its activities;
• keep your account credentials secure, use strong authentication, and remain responsible for all activity carried out under your account;
• ensure that anyone you permit to use the Services is bound by terms at least as protective as this Policy;
• provide accurate information to izzytap and keep it up to date; and
• use the Services within the plan limits, fair-use thresholds and technical constraints we make available from time to time.

You must not, and must not permit any user to, do any of the following when using the Services:

• break any law, sanctions regime or regulation, or use the Services to facilitate fraud, money laundering, terrorist financing, bribery or any other financial crime;
• upload, store or transmit material that is unlawful, defamatory, infringing, malicious or that you have no right to share;
• introduce viruses, malware or any harmful code, or attempt to gain unauthorised access to the Services, other accounts, or the underlying systems and infrastructure;
• probe, scan, penetration-test, overload, disrupt or circumvent any security, rate-limiting or access-control measure without our prior written consent;
• reverse-engineer, decompile, copy, resell, sub-license or create a competing product from the Services, except to the limited extent such restriction is prohibited by law;
• use automated means to scrape or extract data beyond documented interfaces, or use the Services to build bulk marketing, spam or unsolicited communications; or
• impersonate any person, misrepresent your affiliation, or use the Services to harass, threaten or harm others.

Your compliance obligations when handling End-Client data are addressed in more detail in our AML & Compliance Notice.

You are fully responsible for everyone who accesses the Services through your account and for all content and personal data you or they put into the platform, including the personal data of your End Clients. When you upload End-Client data, izzytap acts as a processor and you act as the controller, as described in our Data Processing Addendum and Privacy Policy.

If we reasonably believe that you or any user has breached this Policy, we may take action proportionate to the breach, including issuing a warning, removing or disabling offending content, or suspending or restricting access to all or part of the Services. Where a breach is serious, unlawful, or exposes izzytap, other users or the platform to material risk, we may suspend or terminate your account immediately and without prior notice.

We will, where practicable and lawful, give you notice and an opportunity to remedy a breach before taking irreversible action. Suspension or termination for breach does not entitle you to a refund, and any fees already due remain payable in accordance with our Subscription & Billing Terms and Refund & Cancellation Policy.

If you become aware of any actual or suspected breach of this Policy, security vulnerability, unauthorised access, or misuse of the Services, please tell us promptly at hello@izzytap.com with enough detail for us to investigate. We ask that you do not publicly disclose a suspected vulnerability until we have had a reasonable opportunity to address it.

We take reports seriously and will investigate and respond as appropriate. We are not obliged to disclose the outcome of any investigation, but we appreciate good-faith reports that help us keep the Services safe for everyone.

We may update this Policy from time to time to reflect changes in the Services, our practices, or applicable law. Where a change is material, we will take reasonable steps to notify you, for example by email or through the platform. Your continued use of the Services after an update takes effect constitutes acceptance of the revised Policy.

This Policy is governed by the laws of the United Arab Emirates, and any dispute relating to it is subject to the exclusive jurisdiction of the competent courts of the United Arab Emirates. Last updated: 25 July 2026.