Acceptable Use Policy

CASE Budget is intended to help individuals, households, businesses, and organizations organize authorized financial information and make informed financial-planning decisions.

This policy is intended to protect:

• CASE Budget users and workspace members.
• Personal and financial information stored within the platform.
• XilAire Technologies systems, employees, contractors, and service providers.
• Financial institutions and connected-data providers.
• The availability, integrity, security, and reputation of CASE Budget.

You may use CASE Budget for lawful, authorized, and legitimate financial-management purposes supported by your subscription, workspace permissions, and account role.

• Create and manage personal or authorized shared budgets.
• Record income, expenses, transactions, bills, savings goals, debts, assets, investments, and net-worth information.
• Import supported financial information from accounts you are authorized to access.
• Invite authorized users to supported household, business, or organization workspaces.
• Generate reports, projections, summaries, and other permitted financial-planning materials.
• Use administrative tools only within the permissions assigned to your account.
• Contact customer support for legitimate account, subscription, security, and technical assistance.

You must protect your CASE Budget credentials and use account-access features responsibly.

• Use an individual account for each person accessing CASE Budget.
• Maintain a strong and unique password.
• Enable multi-factor authentication when available or required.
• Protect recovery links, authentication codes, session information, and security keys.
• Keep your email account and devices secure.
• Promptly revoke access for former household, business, or organization members.
• Notify XilAire Technologies if you suspect account compromise.

You must not attempt to access accounts, workspaces, systems, records, features, APIs, or infrastructure without authorization.

• Access or attempt to access another user's account without permission.
• View, modify, export, delete, or disclose records outside your authorized workspace access.
• Bypass authentication, MFA, role checks, Row Level Security, or workspace permissions.
• Use stolen, leaked, guessed, or otherwise unauthorized credentials.
• Intercept authentication cookies, tokens, recovery links, or session data.
• Escalate your privileges or assign yourself an unauthorized role.
• Attempt to gain support-admin, platform-admin, or master-admin access without authorization.
• Probe, scan, test, or exploit CASE Budget systems without written permission.
• Circumvent rate limits, subscription controls, feature restrictions, or usage limits.
• Interfere with logging, monitoring, audit records, or security controls.

CASE Budget must not be used to facilitate, conceal, promote, or support unlawful, fraudulent, or deceptive activity.

• Fraud, theft, identity theft, forgery, or false representation.
• Money laundering, sanctions evasion, terrorist financing, or unlawful movement of funds.
• Tax evasion, falsification of financial records, or concealment of legally required information.
• Creating fake financial institutions, lenders, investment services, charities, or payment services.
• Operating phishing, impersonation, credential-harvesting, or social-engineering schemes.
• Creating misleading financial statements, account histories, invoices, receipts, or reports for unlawful purposes.
• Using stolen bank, payment, identity, employment, tax, or credit information.
• Participating in unlawful gambling, illegal lending, or prohibited financial services.
• Misrepresenting ownership, authority, income, assets, liabilities, or credit information.

We may preserve and disclose information when legally required to investigate suspected unlawful activity or respond to valid legal process.

You may not use CASE Budget to create, support, operate, or promote fraudulent or abusive financial schemes.

• Investment scams, Ponzi schemes, pyramid schemes, or false profit guarantees.
• Fake loans, advance-fee schemes, predatory lending, or unauthorized debt collection.
• Cryptocurrency, token, foreign-exchange, or trading scams.
• False fundraising, donation, crowdfunding, or charity campaigns.
• Deceptive credit-repair, debt-relief, insurance, tax, or financial-advice services.
• Manipulation or fabrication of financial reports to mislead investors, lenders, employers, governments, or other parties.
• Unauthorized pooling, custody, transfer, or management of another person's funds.
• Use of CASE Budget to conceal stolen funds, criminal proceeds, or unauthorized transactions.

You must not upload, store, share, or transmit content that is unlawful, harmful, threatening, exploitative, or abusive.

• Content that threatens, harasses, intimidates, stalks, or targets another person.
• Content promoting hatred, violence, or discrimination against protected groups.
• Content supporting terrorism, violent extremism, or criminal organizations.
• Child sexual abuse material, child exploitation, or content that endangers minors.
• Non-consensual intimate content, sexual exploitation, trafficking, or coercion.
• Malware, ransomware, spyware, viruses, destructive code, or malicious attachments.
• Phishing pages, credential-harvesting forms, or deceptive account notices.
• Private or sensitive information disclosed without authorization.
• Content that infringes copyright, trademark, privacy, publicity, or other legal rights.

Financial notes, descriptions, attachments, workspace names, and support submissions are all subject to this policy.

You must not interfere with the availability, integrity, performance, or normal operation of CASE Budget.

• Overload, flood, disrupt, degrade, or disable the platform.
• Send excessive requests or intentionally trigger costly operations.
• Exploit bugs, race conditions, configuration errors, or unintended feature behavior.
• Upload files or data designed to exhaust storage, memory, processing, or bandwidth.
• Interfere with another user's access or workspace operations.
• Create excessive accounts, workspaces, records, or subscriptions to avoid limits.
• Use CASE Budget to distribute spam, bulk unsolicited messages, or abusive invitations.
• Attempt to remove, modify, obscure, or disable security, copyright, or attribution notices.
• Use the service in a way that creates unreasonable operational, legal, or security risk.

Automated use is permitted only through approved features, documented APIs, authorized integrations, or written permission from XilAire Technologies.

• Do not scrape pages, records, reports, or user information without authorization.
• Do not use bots, crawlers, scripts, or browser automation to bypass normal controls.
• Do not reverse engineer private APIs or undocumented application behavior.
• Do not collect user information for advertising, profiling, resale, or unauthorized analytics.
• Do not automate account creation, invitations, support requests, or subscription actions for abusive purposes.
• Do not use multiple accounts, IP addresses, devices, or identities to evade limits.
• Do not interfere with API authentication, signatures, request validation, or rate limits.

You may connect only accounts, institutions, and services that you are legally authorized to access.

• Do not connect another person's financial account without authorization.
• Do not use stolen or improperly obtained bank credentials.
• Do not impersonate an account holder or institution representative.
• Do not interfere with a financial institution's authentication or security controls.
• Do not repeatedly reconnect accounts to evade provider limits or access restrictions.
• Do not use imported information for identity theft, fraud, harassment, or unauthorized surveillance.
• Comply with the terms and policies of connected financial institutions and service providers.
• Disconnect integrations when your authorization ends.

Information entered, imported, or shared through CASE Budget must be lawfully obtained and used.

• Enter information accurately when it may affect other users or business records.
• Do not knowingly fabricate balances, transactions, income, expenses, debts, assets, invoices, or reports for deceptive purposes.
• Do not upload stolen financial records or identity information.
• Do not disclose account numbers, tax records, payroll information, or sensitive documents without authorization.
• Do not use financial information to harass, discriminate against, exploit, or harm another person.
• Apply appropriate workspace permissions before sharing sensitive records.
• Remove or correct information when you no longer have authority to store or share it.

CASE Budget may introduce AI-assisted categorization, summaries, recommendations, explanations, forecasts, or other automated features.

• Use AI features only for lawful and authorized purposes.
• Review AI-generated outputs before relying on them.
• Do not submit passwords, MFA codes, secret keys, or unnecessary sensitive information to AI features.
• Do not attempt to use prompt injection or other techniques to access system instructions, private data, or restricted tools.
• Do not use AI features to generate fraud, phishing, malware, scams, harassment, or prohibited content.
• Do not attempt to bypass safety controls, rate limits, permissions, or subscription restrictions.
• Do not represent AI-generated financial information as guaranteed, verified, or professional advice.
• Do not use AI outputs to make decisions about another person without appropriate authority and human review.

You must respect the intellectual property and proprietary rights of XilAire Technologies, CASE Budget users, licensors, and third parties.

• Do not copy, distribute, resell, sublicense, or commercially exploit CASE Budget without authorization.
• Do not remove copyright, trademark, branding, license, or attribution notices.
• Do not create confusingly similar CASE Budget websites, applications, or services.
• Do not use XilAire Technologies trademarks without permission.
• Do not upload content that infringes copyright, trademark, patent, trade-secret, privacy, or publicity rights.
• Do not reverse engineer, decompile, or attempt to extract protected source code except where such restrictions are prohibited by law.
• Open-source components remain governed by their applicable licenses.

Workspace owners and administrators have additional responsibilities because they may control access to sensitive financial information.

• Invite only authorized users.
• Assign the minimum permissions needed.
• Review members and roles regularly.
• Remove access promptly when employment, household membership, or authorization ends.
• Protect information belonging to other workspace members.
• Do not use administrative access for personal gain, harassment, retaliation, or unauthorized surveillance.
• Do not conceal administrative actions or manipulate audit information.
• Comply with applicable business, employment, privacy, and record-retention requirements.
• Respond appropriately to suspected compromise or misuse.

Report suspected violations, fraud, unauthorized access, harmful content, or abuse to XilAire Technologies.

XilAire Technologies may investigate suspected violations and take reasonable action to protect users, service providers, financial institutions, and the platform.

• Request additional information or identity verification.
• Remove or restrict prohibited content.
• Revoke sessions, integrations, API access, or workspace permissions.
• Limit features, connected accounts, invitations, or administrative actions.
• Suspend or terminate accounts and workspaces.
• Preserve evidence and audit records.
• Notify affected users, organizations, service providers, or financial institutions.
• Refer suspected unlawful activity to authorities when required or appropriate.
• Seek reimbursement or legal remedies for losses caused by prohibited conduct.

Enforcement decisions may consider the severity, frequency, intent, impact, history, and legal risk of the conduct.

XilAire Technologies may update this Acceptable Use Policy as CASE Budget features, integrations, security risks, business operations, or legal requirements change.

Updated versions will display a new last-updated date. Material changes may also be communicated through CASE Budget, email, or another appropriate method.

Questions about this policy or reports of suspected misuse may be directed to XilAire Technologies.