Acceptable Use Policy

Scope

This policy applies to the RupeeBiz website, the partner dashboard, the APIs, SDKs and embedded experiences, and to any service delivered by TRUEHOST IT SERVICES PVT LTD. under the RupeeBiz brand. It supplements the Website Terms, the Partner Terms and the Developer Terms.

Partners are responsible for the conduct of their authorised users, their developers and, so far as their own terms allow, their end customers.

General obligations

You shall use the platform lawfully, honestly and only for the purposes for which access was granted. In particular, you shall:

• comply with all applicable Indian law and with the terms of your agreement with us;
• present the services accurately to your end customers;
• keep your credentials secure and your access list current;
• co-operate with reasonable requests relating to security, fraud or compliance.

Prohibited activities

Unlawful and fraudulent use

• Any activity that is unlawful, or that facilitates an offence, including money laundering, terrorist financing, tax evasion or the handling of proceeds of crime.
• Transactions made with stolen, unauthorised or compromised instruments or identities.
• Structuring transactions to evade limits, controls, reporting requirements or commercial terms.
• Creating transactions that have no genuine underlying customer request, including transactions created solely to earn commission or incentives.
• Impersonating another person or entity, or misrepresenting an affiliation with RupeeBiz.

Misuse of the platform and APIs

• Attempting to gain unauthorised access to accounts, systems, networks or data.
• Probing, scanning or security testing without written authorisation.
• Circumventing authentication, rate limits, transaction limits or risk controls.
• Introducing malware, or interfering with the availability, integrity or performance of the platform.
• Scraping, bulk extraction or automated collection of data beyond documented API use.
• Reselling, sub-licensing or exposing platform access to third parties outside the approved integration.
• Reverse engineering the SDK or platform, except where that restriction cannot lawfully be imposed.

Misuse of data

• Sending personal data that is not required to complete a transaction.
• Transmitting card numbers, banking credentials, passwords or one-time passwords to our endpoints.
• Using transaction data for a purpose the end customer was not informed of, or for unsolicited marketing.
• Disclosing another party's confidential information obtained through the platform.

Harmful and abusive conduct

• Using the services to harass, threaten, defame or defraud any person.
• Publishing or transmitting content that is obscene, hateful, or unlawful, or that infringes another person's rights.
• Offering the services in connection with a business that is prohibited by law or that we have notified as out of scope.

Monitoring

We do not monitor the content of a Partner's platform. We do monitor platform and API activity for security, fraud prevention and stability, and we investigate patterns that suggest misuse. Where an operator, biller or authority raises a concern, we will investigate and may seek information from the Partner.

Consequences of breach

Depending on the seriousness of the breach, we may:

• issue a warning and require corrective action within a stated period;
• apply additional controls, reduce limits or require enhanced verification;
• suspend affected credentials, features or the account, with or without prior notice where the circumstances require;
• withhold amounts reasonably attributable to fraudulent or non-genuine transactions, pending investigation;
• terminate the agreement in accordance with its terms;
• report the matter to the relevant operator, biller, regulator or law-enforcement authority, and co-operate with any investigation.

These remedies are cumulative and are without prejudice to any other right or remedy available to us.

Reporting misuse

If you become aware of misuse of the RupeeBiz platform, a suspected security vulnerability, a compromised credential or suspicious transaction activity, report it to sales@rupeebiz.com without delay. Include the reference identifiers, timestamps and a description of what you observed.

Please do not test or exploit a suspected vulnerability. Report it and allow us a reasonable opportunity to investigate and remediate before disclosing it to anyone else.