Acceptable Use Policy

01Purpose and Scope

Why this Policy exists and who it applies to.

1.1 The Service is designed to help startup founders build and grow their businesses responsibly. This Policy exists to protect the integrity of the Service, to ensure it is used lawfully and for its intended purposes, and to safeguard Bluto, our Subscribers, and third parties from harm.

1.2 This Policy applies to all use of the Service, including access via the web platform, any APIs, and any integrations. It applies equally to the Subscriber and to every Authorised User the Subscriber has invited to access the Service.

1.3 The Subscriber is responsible for ensuring that all Authorised Users are aware of this Policy and comply with it. Any breach of this Policy by an Authorised User shall be treated as a breach by the Subscriber.

1.4 This Policy should be read alongside our Terms of Service, Privacy Policy, and AI Terms. In the event of any conflict between this Policy and the Terms of Service, the Terms of Service shall prevail.

02Prohibited Content

The categories of content that may not be uploaded, created, or stored using the Service.

2.1 The Subscriber shall not upload, create, input, or store any content through the Service that:

• is intentionally false, fraudulent, or designed to misrepresent the financial position, trading history, or prospects of any business
• contains personal data of third parties that the Subscriber is not authorised to process, or for which no lawful basis for processing exists under applicable data protection law
• includes special category personal data as defined under UK GDPR -- including data revealing racial or ethnic origin, health conditions, biometric data, or sexual orientation -- unless the Subscriber has an explicit lawful basis and has notified Bluto accordingly
• infringes the intellectual property rights, confidentiality obligations, or other legal rights of any third party
• is subject to a non-disclosure agreement or other confidentiality restriction that prohibits its disclosure to a third-party platform without authorisation
• contains malware, viruses, ransomware, or any other malicious or harmful code

2.2 The Subscriber is responsible for ensuring that all content it uploads or creates using the Service complies with this clause 2 and with all applicable laws and regulations. Bluto reserves the right to remove content that it reasonably believes violates this Policy, without prior notice.

03Prohibited Conduct

The ways in which the Service may not be used.

3.1 The Subscriber shall not use the Service to:

• produce financial models, projections, or documents that the Subscriber knows or intends to be false, misleading, or fraudulent, for the purpose of deceiving investors, lenders, regulators, or any other third party
• carry out or facilitate any activity that constitutes a criminal offence under applicable law, including fraud, money laundering, tax evasion, or market manipulation
• infringe the intellectual property rights of Bluto or any third party, including by copying, reproducing, or reverse engineering any part of the Service or its underlying calculation methodologies and algorithms
• gain or attempt to gain unauthorised access to any part of the Service, to any other Subscriber's account, or to Bluto's systems or infrastructure
• introduce malware, viruses, or malicious code into the Service or its supporting infrastructure
• use automated means to scrape, crawl, harvest, or extract data or outputs from the Service, except via APIs expressly authorised by Bluto
• degrade, overload, or interfere with the availability or performance of the Service for other users
• circumvent or attempt to circumvent any access controls, Credit limits, seat restrictions, feature flags, or other technical limitations implemented within the Service

3.2 The Subscriber shall not share its account credentials with any individual who has not been properly invited as an Authorised User under the Subscriber's Subscription Plan. Each individual accessing the Service must use their own account credentials.

3.3 The Subscriber shall not use the Service to provide regulated financial, tax, legal, or accounting services to third parties unless it holds all necessary authorisations, licences, and registrations required by applicable law and regulatory authorities, including the Financial Conduct Authority where relevant.

04AI Feature Obligations

Additional obligations that apply specifically to the use of AI-powered features within the Service.

4.1 The Subscriber acknowledges that AI-powered features generate outputs that are probabilistic in nature and may contain errors, omissions, or information that is inaccurate or out of date. The Subscriber is solely responsible for verifying the accuracy and suitability of all AI outputs before using, distributing, or relying on them.

4.2 The Subscriber shall not use AI-powered features to:

• generate financial outputs, projections, or documents that the Subscriber intends to use to deceive, defraud, or mislead investors, lenders, or regulatory authorities
• represent AI-generated outputs as having been independently prepared or verified by a qualified professional unless they have been reviewed and endorsed by one
• circumvent, replace, or substitute for professional advice in relation to matters requiring regulatory authorisation, including financial advice, tax advice, and legal advice
• submit inputs designed to probe, extract, or replicate the behaviour, structure, or outputs of Bluto's underlying AI models or calculation methodologies
• submit inputs that include sensitive personal data unless the Subscriber has a lawful basis for processing that data and has notified Bluto accordingly

4.3 The Subscriber acknowledges that outputs generated by AI features in relation to regulatory matters -- including HMRC requirements, Companies House obligations, and other tax or compliance matters -- reflect the AI model's understanding as at the date of the interaction and may not reflect subsequent changes in law, guidance, or practice. The Subscriber is responsible for verifying such outputs against current official sources and, where appropriate, obtaining independent professional advice.

4.4 Nothing in clause 4.3 limits the generality of Bluto's disclaimer in clause 10 of the Terms of Service.

05Enforcement

The actions Bluto may take in response to a breach of this Policy.

5.1 If Bluto reasonably believes that the Subscriber or any Authorised User has breached this Policy, Bluto may take one or more of the following actions depending on the nature, severity, and history of the breach:

• issue a formal warning and require the Subscriber to remedy the breach within a specified period
• remove or restrict access to content that violates this Policy
• temporarily suspend the Subscriber's access to all or part of the Service pending investigation
• terminate the Subscriber's account and access to the Service in accordance with clause 13.5 of the Terms of Service

Where Bluto suspends access, it will notify the Subscriber of the reason and, where appropriate, the steps required to restore access. Where the breach is capable of remedy and is not of a serious nature, Bluto will endeavour to give the Subscriber a reasonable opportunity to remedy it before taking further action.

5.2 Where a breach of this Policy involves or may involve criminal activity, Bluto reserves the right to report the matter to the appropriate authorities, including law enforcement agencies and regulatory bodies, without prior notice to the Subscriber.

5.3 Where Bluto terminates the Subscriber's account for breach of this Policy, the Subscriber shall not be entitled to any refund of Subscription Fees paid in advance.

5.4 To report a suspected violation of this Policy by another user, or to raise a concern about content on the Service, please contact us at [email protected].