Acceptable Use Policy

Last updated: April 20, 2026 Effective date: April 20, 2026 Version: 2.0.0

1. Purpose

This Acceptable Use Policy (the "AUP") sets out the rules that apply when you use Prosperify and related services (the "Service") provided by Xiom OÜ ("Xiom," "we," "our," or "us").

This AUP forms part of, and should be read together with, our Terms of Service and EULA and supplements its conduct rules. In the event of a conflict between this AUP and the Terms of Service, the Terms of Service prevail.

By using the Service, you agree to comply with this AUP.

2. General Principles

The Service is designed for personal, non-commercial use to help individuals track and understand their own financial information. Use of the Service must be:

  • Lawful — consistent with applicable laws and regulations in your jurisdiction
  • Honest — based on your own real financial information and intended for your own use
  • Respectful — not harmful, abusive, or disruptive to other users, third parties, or our infrastructure
  • Within scope — limited to the personal, informational purposes for which the Service is provided

We reserve the right to take action under Section 8 if your use of the Service violates this AUP.

3. Prohibited Conduct — General

You must not use the Service to:

  • Violate any applicable law, regulation, court order, or third-party right
  • Engage in fraud, deception, money laundering, sanctions evasion, tax evasion, or any other illegal financial activity
  • Impersonate any person, entity, or affiliation
  • Misrepresent your identity, age, location, or other relevant information at registration or thereafter
  • Create more than one account, except with our prior written consent
  • Sell, lease, transfer, or share your account credentials with any third party
  • Use the Service on behalf of someone else without authorization
  • Use the Service for any purpose other than personal financial tracking and education
  • Use the Service in any way that could expose Xiom or other users to legal, regulatory, security, or reputational risk

4. Prohibited Conduct — Technical and Security

You must not:

  • Attempt to gain unauthorized access to the Service, other users' accounts, our systems, or our infrastructure
  • Probe, scan, or test the vulnerability of the Service except as permitted under our responsible disclosure practices (Section 9)
  • Bypass, disable, or interfere with security or authentication mechanisms
  • Introduce viruses, malware, ransomware, worms, trojans, or any other malicious code
  • Conduct denial-of-service or distributed-denial-of-service attacks against the Service
  • Send spam, phishing messages, or other unsolicited communications through the Service
  • Use the Service in any way that could damage, disable, overburden, or impair the Service or its underlying infrastructure
  • Collect or harvest information about other users
  • Reverse engineer, decompile, disassemble, or attempt to extract the source code of the Service, except to the extent that such restriction is prohibited by mandatory applicable law
  • Modify, adapt, translate, or create derivative works of the Service or any part of it
  • Use automated systems (bots, scrapers, crawlers, headless browsers) to access the Service, except for accessibility tools and search-engine indexing of public pages, or as we expressly permit
  • Bypass technical limits, rate limits, or other restrictions in the Service

5. Prohibited Conduct — Commercial and Competitive

You must not:

  • Use the Service to develop, train, or improve a competing product or service
  • Use the Service for the benefit of any third party, except household members in your immediate household to the extent permitted under app store rules
  • Resell, rebrand, white-label, or commercially redistribute the Service or any part of it
  • Use the Service to provide financial, investment, tax, or legal advice to others
  • Use the Service to operate any kind of regulated financial activity (such as advisory, brokerage, payment, or custody services) on behalf of yourself or others
  • Use Xiom's trademarks, logos, or branding in a way that suggests endorsement, partnership, or affiliation that does not exist
  • Engage in any activity that could reasonably be expected to result in regulatory action against Xiom

6. Prohibited Conduct — AI Features

This section applies specifically to AI Features in the Service. It supplements the rules in our AI Use Notice.

You must not:

  • Use AI Features to extract, generate, or simulate personalized investment advice, recommendations to buy/sell/hold specific assets, or any output that purports to be regulated financial advice
  • Attempt to manipulate, jailbreak, or circumvent the safety systems, content filters, or instruction-following behavior of AI Features (whether by prompt injection, role-play prompts, social engineering, or other means)
  • Submit prompts or content designed to cause the AI to produce illegal, harmful, deceptive, defamatory, or otherwise prohibited outputs
  • Use AI Features to generate content that infringes intellectual property or other rights of third parties
  • Use AI Features to process other people's personal data without authority to do so
  • Use AI outputs as a basis for advising others in any professional or quasi-professional capacity
  • Submit prompts that contain special category data under GDPR Article 9 (e.g., health, racial or ethnic origin, political opinions, religious beliefs) or sensitive personal information about third parties
  • Use AI Features for research, benchmarking, model evaluation, or red-teaming without our prior written consent, including for the purpose of comparing AI Features to other AI systems
  • Scrape, log, or otherwise systematically collect AI outputs for use outside your personal use of the Service
  • Attempt to identify, reverse-engineer, or extract the underlying AI models, prompts, system instructions, or weights through any means
  • Generate deceptive, deepfake, or impersonating content, including content that misrepresents real persons or organizations
  • Use AI Features in any way that violates applicable AI regulation, including the EU AI Act

We may automatically detect and block prompts that appear designed to violate these rules. Patterns of attempted manipulation may result in account action under Section 8, even where the attempts are unsuccessful.

7. Prohibited Conduct — Content and Data

You are responsible for the content and data you enter into the Service. You must not enter:

  • Content that is illegal in your jurisdiction or in Estonia
  • Content that infringes the intellectual property rights of others
  • Content that is defamatory, harassing, threatening, or hateful
  • Content that contains other people's personal data without authority to do so (the Service is for personal use; do not enter information about identifiable third parties beyond what is necessary for your own financial tracking, e.g., a spouse's joint account in a household context)
  • Content that contains special category data under GDPR Article 9 about yourself or others where this is not necessary for the Service's intended use
  • Content that is knowingly false or fraudulent
  • Content that circumvents or appears intended to circumvent sanctions, anti-money-laundering rules, or tax reporting obligations

We do not routinely monitor the content you enter, but we may review specific content where there is a credible report of misuse, a legal obligation to do so, or a security investigation, in line with our Privacy Policy.

8. Enforcement

8.1 Investigation

Where we receive a report or detect signals of conduct that may violate this AUP, we may investigate. Investigations may include reviewing relevant logs, system events, and (where strictly necessary) specific account activity, in accordance with our Privacy Policy.

8.2 Actions We May Take

Depending on the seriousness of the violation, we may take one or more of the following actions:

  • Issue a warning, where the violation is minor or appears unintentional
  • Restrict specific features (for example, disabling AI Features for an account that misused them)
  • Suspend the account temporarily while we investigate or pending the user's response
  • Terminate the account permanently, with deletion of associated data in accordance with our Privacy Policy
  • Refuse re-registration by the same person where appropriate
  • Report to law enforcement or regulators where there is a legal obligation or sufficient evidence of unlawful conduct
  • Pursue legal remedies where there is material harm to Xiom, other users, or third parties

For account suspensions and terminations, the reasoned-notice and complaint process described in Section 12 of our Terms of Service applies, except where immediate action is necessary to prevent ongoing harm, illegal activity, or security risk.

8.3 Proportionality

We aim to apply the minimum action necessary to resolve a violation. First-time, minor, or apparently unintentional violations are usually addressed by a warning or feature restriction rather than account termination.

8.4 Repeat or Severe Violations

For repeat violations, deliberate violations, or single severe violations (such as fraud, attempted attacks against the Service, or use of the Service in connection with illegal activity), termination is the default action, and refunds are handled under our Refund Policy and applicable consumer law.

9. Responsible Disclosure of Security Issues

If you discover a security vulnerability in the Service, we welcome a responsible disclosure. To report a vulnerability:

  • Email support@prosperify.ai with a description of the issue and steps to reproduce
  • Do not exploit the vulnerability beyond what is necessary to demonstrate it
  • Do not access, modify, or delete data belonging to other users
  • Do not publicly disclose the vulnerability before we have had a reasonable opportunity to address it

We will acknowledge reports promptly and work in good faith with researchers acting under this responsible-disclosure principle. Researchers who follow these rules will not face legal action from us for the act of researching the vulnerability.

10. Reporting Violations

If you become aware of activity that violates this AUP — for example, suspected fraud, attempted attacks, or misuse of AI Features — you can report it to:

  • support@prosperify.ai with the subject line "AUP Report"

Reports should include as much detail as possible. We treat reports confidentially and use them only to investigate and respond to the issue.

11. Relationship to Other Documents

This AUP supplements:

  • The conduct rules in Section 8 of our Terms of Service
  • The license restrictions in Section 14 (EULA) of our Terms of Service
  • The AI-specific rules in our AI Use Notice
  • The data-handling rules in our Privacy Policy

Where any of these documents is more specific or stricter than this AUP, the more specific or stricter rule applies.

12. Changes to This AUP

We may update this AUP to reflect new features, new misuse patterns, changes in law, or operational lessons learned. For material changes:

  • We will update the "Last updated" date at the top of this AUP
  • We will provide notice in the Service or by email where the change materially expands prohibited conduct
  • Continued use of the Service after the effective date constitutes acceptance

Non-material changes (e.g., clarifications, formatting, contact details) take effect immediately upon posting.

13. Contact

For questions about this AUP:

Xiom OÜ Sepapaja tn 6, 15551 Tallinn, Harju maakond, Estonia Email: support@prosperify.ai Security reports: support@prosperify.ai Legal inquiries: legal@prosperify.ai

This AUP is provided in English. If translations are made available, the English version prevails in the event of any conflict, except where mandatory local law requires otherwise.

gt; start free