Acceptable Use

Acceptable Use Policy

Effective date: July 2, 2026. This Acceptable Use Policy supplements the Terms of Service, the AI & Provider Processing disclosure, the Payment Rail Terms, the Connected Sources Policy, and the Support & Admin Access Policy. Trust Graph publication is also governed by the Trust Graph Publication Policy.

1. Lawful Business Use

Monocrat is for lawful business operations by approved owner-led businesses. You may not use Monocrat to violate law, evade sanctions or export controls, infringe intellectual property rights, defraud or deceive people, launder money, facilitate illegal goods or services, or support activity that our providers, payment processors, or connected services prohibit.

2. Restricted Business And Payment Activity

You may not use Monocrat, Monocrat Stripe Billing, connected payment sources, or payment rail workflows for prohibited or restricted business categories unless Monocrat and the relevant provider have expressly approved the use in writing. This includes illegal products or services, sanctions-restricted activity, unapproved financial services, gambling, deceptive debt collection, regulated money transmission, custody-taking flows, stored-value products, or other activity restricted by Stripe, Moov, Plaid, Shopify, Square, Google, or another provider.

3. No Professional Advice Or Regulated Decisions

Monocrat may help prepare source-backed summaries, drafts, review packages, checklists, estimates, and workflow recommendations. Monocrat is not a law firm, accounting firm, tax preparer, payroll bureau, investment adviser, insurance broker, medical provider, money transmitter, bank, or escrow agent. You may not use Monocrat to replace professional judgment, licensing, filing authority, payroll authority, tax authority, legal representation, medical judgment, credit decisions, insurance decisions, employment decisions, housing decisions, or other regulated human review.

4. High-Stakes Action Gates

Money movement, payment or refund execution, payroll, tax, legal, billing, source-system writes, customer-facing commitments, public Trust Graph publication, account deletion, security-sensitive actions, and similar high-stakes workflows require source refs, fresh owner authority, package hashes where applicable, action-gate review, and audit records. You may not bypass, disable, spoof, or pressure Monocrat to ignore these gates.

5. Privacy, Source Access, And Data Rights

You may connect only accounts, data, sources, and records that you have authority to provide. You may not use Monocrat to access, collect, export, monitor, profile, disclose, or process personal, private, confidential, regulated, or third-party information without appropriate rights, notice, consent, legal basis, and source-provider permission.

You may not submit protected health information, consumer credit reports, government identification numbers, payment card numbers, children's data, biometric data, special-category data, or other highly regulated data unless Monocrat has expressly agreed in writing and the product surface supports that use.

6. AI And Provider Misuse

You may not use Monocrat's AI or provider processing to create malware, compromise systems, bypass security controls, generate fraud, spam, scams, deceptive impersonation, harassment, hateful or violent content, child exploitation material, non-consensual intimate content, weapons instructions, unlawful surveillance, biometric identification, social scoring, political manipulation, academic dishonesty, or other use that violates approved AI provider policies or Monocrat safety controls.

7. Security And Platform Integrity

You may not attempt unauthorized access, probe or attack systems without authorization, interfere with service operation, abuse rate limits, scrape or exfiltrate data, reverse engineer non-public systems, submit malicious payloads, bypass authentication, bypass billing, evade suspension, create fake accounts, or interfere with another tenant, provider, user, or source system.

8. Support, Admin, And Recovery Boundaries

You may not ask support to impersonate the owner, bypass owner authority, disclose another tenant's data, complete high-stakes actions through unauthenticated links, mutate provider or billing records outside approved runbooks, or access private content without the required break-glass approval.

9. Enforcement

Monocrat may block, degrade, suspend, terminate, rate-limit, refuse, report, or route activity to support, legal, accounting, security, or provider review when we believe use violates this policy, the Terms, provider terms, law, source-policy requirements, action gates, or launch safety boundaries. We may preserve evidence needed for security, legal, billing, tax, dispute, fraud, abuse-prevention, or audit purposes.

10. Reporting

Security concerns can be sent to security@monocrat.ai. Abuse, privacy, or data-rights concerns can be sent to privacy@monocrat.ai.