Acceptable Use Policy (AUP)

1. Purpose and Scope

This Policy establishes the rules and standards governing all use of the Nvestiv Platform. Its purpose is to:

1. Protect the security, availability, and integrity of the Platform and its systems.

2. Ensure lawful and compliant use of data, communications, and AI features.

3. Prevent harm, misuse, or disruption to Nvestiv, its customers, partners, and infrastructure.

4. Define prohibited activities and responsibilities for all Users.

This Policy applies to all access to and use of:

• Nvestiv’s cloud-based CRM and investment data systems.

• AI-driven analysis and deal evaluation features.

• Data ingestion and file-processing tools.

• Email and communication integrations.

• APIs, web interfaces, mobile applications, and third-party integrations.

2. Customer Responsibilities

Customers must:

1. Use the Platform only for lawful purposes and in accordance with all contractual agreements.

2. Ensure that all Users authorized under their account comply with this Policy.

3. Maintain the confidentiality and security of account credentials and authentication methods.

4. Ensure that content submitted to the Platform is accurate, lawful, and properly authorized.

5. Implement reasonable and appropriate security controls to protect their own systems and data.

6. Promptly report suspected security incidents, unauthorized access, or Policy violations to Nvestiv.

3. Prohibited Conduct

Customers shall not, and shall not permit any User to, engage in any of the prohibited conduct set forth below. The following activities are strictly forbidden.

4. Security Violations and System Interference

Users may not:

1. Breach, bypass, disable, or circumvent any security or authentication mechanisms.

2. Conduct vulnerability scanning, penetration testing, or security research without express written authorization from Nvestiv.

3. Probe, scan, or test the vulnerability of any Nvestiv system, environment, network, or API.

4. Interfere with or disrupt the availability, performance, or integrity of the Platform, including by performing denial-of-service attacks or flooding traffic.

5. Introduce or transmit viruses, malware, trojans, corrupted files, or any harmful code.

6. Access or attempt to access data, systems, or accounts not expressly authorized to the User.

7. Circumvent usage limits, rate limits, metering controls, or billing measurements.

8. Utilize automated tools such as bots, scrapers, spiders, or crawlers without Nvestiv’s written permission.

5. Misuse of Artificial Intelligence and Automated Systems

Nvestiv provides AI-enabled features for data processing, deal analysis, personalization, and automated communication. Users are prohibited from:

1. Attempting to reverse-engineer, extract, or derive the underlying models, training data, system prompts, or algorithms.

2. Manipulating or attempting to manipulate model outputs through prompt injection, adversarial prompts, or other unauthorized methods.

3. Generating or disseminating harmful, deceptive, fraudulent, or unlawful content.

4. Using AI outputs to conduct or facilitate regulated financial advisory services unless the User holds the required licenses under applicable law.

5. Using the Platform to create misleading investor materials, fraudulent representations of deals, or deceptive fundraising information.

6. Submitting unauthorized or infringing content to train, prompt, or process through the AI features.

7. Attempting to identify, re-identify, or extract personal data from anonymized or aggregated data.

6. Data, File, and Content Restrictions

Users may not upload, process, store, or transmit:

1. Content or files they do not have lawful authority to use, including materials protected by copyright, confidentiality obligations, NDAs, or privacy rights.

2. Sensitive personal information unless expressly permitted under the applicable agreement.

3. Malicious or corrupted files, including files intended to disrupt or degrade system performance.

4. Falsified or fraudulent documents, including falsified investor lists, financial statements, term sheets, or compliance documents.

5. Content that violates any applicable privacy, securities, or financial laws.

The Platform may not be used to store, process, or transmit regulated categories of information (such as PHI under HIPAA) unless expressly permitted in a written agreement.

7. Intellectual Property and Proprietary Rights

Users shall not:

1. Infringe upon any third-party intellectual property rights.

2. Upload or distribute content they do not own or have authorization to use.

3. Attempt to copy, modify, distribute, translate, or create derivative works of any Nvestiv property.

4. Remove, obscure, or alter any proprietary notices or branding on the Platform.

8. Harassment, Abuse, and Improper Conduct

Users may not:

1. Harass, threaten, or abuse Nvestiv personnel, support staff, partners, or other Users.

2. Use the Platform to engage in stalking, intimidation, or abusive communication.

3. Impersonate Nvestiv staff, customers, investors, or other persons.

4. Conduct social engineering, phishing, credential harvesting, or impersonation activities.

9. Fraudulent, Illegal, or Deceptive Activities

The following is strictly prohibited:

1. Money laundering, terrorist financing, sanctions evasion, or other unlawful financial activities.

2. Fraudulent investment solicitation or misrepresentation of investment opportunities.

3. Insider trading, market manipulation, or other unlawful securities-related activities.

4. Unauthorized financial promotions or advisory activities requiring registration or licensing.

5. Creating or distributing false identities, false investor profiles, or fabricated fundraising documents.

6. Violating applicable privacy, data protection, financial, export control, or sanctions laws.

10. Communications and Outreach Restrictions

Users may not use Nvestiv’s email or communication systems to:

1. Send unsolicited communications in violation of applicable anti-spam laws, including CAN-SPAM, CASL, GDPR ePrivacy, and similar legislation.

2. Deliver abusive, deceptive, or harmful messages.

3. Engage in bulk messaging or automated outreach beyond the limits of the applicable subscription plan.

4. Send communications that impersonate others or misrepresent identity.

5. Circumvent email-sending limits, authentication requirements, or third-party provider restrictions.

11. Resource Misuse and Platform Abuse

Users may not:

1. Generate excessive network, compute, or storage usage that may degrade service for other customers.

2. Attempt to avoid, obscure, or falsify usage attributable to billing or metering systems.

3. Use the Platform in a manner that risks disrupting or interfering with normal operations.

4. Automate interactions with the Platform without authorization.

12. Prohibited High-Risk Use Cases

Unless expressly permitted in a mutually executed written agreement, the Platform may not be used for:

1. Military or defense applications.

2. Nuclear operations or critical infrastructure systems.

3. Medical diagnosis, clinical decision-making, or any use related to health care delivery.

4. Real-time trading, automated trade execution, or high-frequency trading systems.

5. Safety-critical or life-support functions.

13. Enforcement and Remedies

Nvestiv may take any action it deems appropriate in response to a violation of this Policy, including:

1. Issuing a warning to the Customer or User.

2. Suspending or limiting access for one or more Users.

3. Temporarily restricting or disabling certain Platform features or integrations.

4. Suspending the Customer’s entire account.

5. Terminating the Customer’s agreement in accordance with applicable contractual terms.

6. Reporting conduct to law enforcement or regulatory authorities.

7. Pursuing legal remedies or recovery of damages.

Nvestiv shall determine, in its sole discretion, whether any conduct constitutes a violation of this Policy.

14. Reporting Violations

Suspected violations of this Policy must be promptly reported to:

policy@nvestiv.com

Nvestiv may request additional information to investigate the matter.