Acceptable Use Policy

On this page

Version 1.4. Effective date: October 20, 2026. Prepared with AI assistance and not reviewed by a licensed lawyer. Not legal advice.

This Acceptable Use Policy ("AUP") governs use of Acquiror AI (the "Service"), operated by Umplify Technologies Inc. ("Umplify," "we," "us," or "our"). It is incorporated into, and forms part of, the Terms of Service between Umplify and each Customer. Capitalized terms not defined here (including "Service," "Customer," "Authorized User," "Customer Data," "AI Output," "Output," "Umplify Parties," and "Tenant AI Provider") have the meanings given in the Terms of Service. If this AUP conflicts with the Terms of Service, the Terms of Service control unless this AUP states otherwise.

Every Authorized User accessing the Service, whether through the web application or (on plans that include it) a connected external client via the MCP server, must comply with this AUP. Customer is responsible for ensuring its Authorized Users, and anyone accessing the Service through Customer's account, comply with it.

This policy applies to use of the authenticated Acquiror AI platform by Customers and Authorized Users. The public marketing website and unauthenticated tools made available there, such as the public valuation calculator, are outside the Service and outside this policy's scope; they are governed by the Website Terms of Use at https://acquiror.ai/legal/website-terms and by the Privacy Policy.

1. Lawful Use Only

In plain terms: do not use Acquiror AI to break the law, and do not use it to help hide financial crime.

Customer and its Authorized Users must not use the Service to engage in, facilitate, or conceal any unlawful activity, including:

Securities fraud or market manipulation, including using the Service to prepare, analyze, or distribute materials that misstate a target company's financial condition in connection with an offer or sale of securities.
Facilitating insider trading, including using deal data or any Output obtained through the Service to trade on, tip, or otherwise misuse material non-public information in violation of applicable securities law.
Money laundering or terrorist financing, including structuring a transaction, disguising the source or ownership of funds, or using the deal workflow to give a legitimate appearance to proceeds of unlawful activity.
Infringement of intellectual property or other proprietary rights, including uploading, generating, or distributing content that infringes a third party's copyright, trademark, trade secret, or patent rights.
Any other use that violates applicable law, including export control, sanctions, anti-bribery, and anti-corruption law.

This is illustrative, not exhaustive. Because Acquiror AI is a due-diligence and deal-management tool used in live M&A transactions, we treat the categories above as core, not edge-case, risks and will act on credible reports involving them.

2. Data You Upload and Data Rights

In plain terms: only upload data you actually have the right to put into the Service, be careful with seller confidentiality, hold seller-provided personal information under the agreement the law requires, do not upload sensitive personal data the platform is not built to hold unless the deal genuinely requires it and you are legally entitled to hold it, and you indemnify us for data you had no right to upload.

Customer represents that it has the right to upload, and to permit Umplify to process, all Customer Data it submits to the Service. This is especially important in the M&A diligence context Acquiror AI is built for:

Seller and target confidentiality. Deal documents (CIMs, financial statements, cap tables, customer contracts, and similar diligence materials) are frequently subject to a non-disclosure agreement or other confidentiality obligation owed to the seller, the target company, or a third party. Customer must not upload any document or data to the Service in a way that would breach such an obligation, and must have any consent or authorization the NDA or confidentiality agreement requires before uploading.
Personal information received from a seller. Where deal documents contain personal information about a target's owners, employees, customers, or suppliers that Customer received from the seller for a prospective business transaction, Customer warrants that it holds that information under an agreement with the seller of the kind section 7.2 of PIPEDA and section 18.4 of Quebec's Law 25 contemplate (use limited to the transaction, appropriate safeguards, and return or destruction if the transaction does not proceed), that uploading it to the Service is within that agreement, and that Customer will delete it from the Service when that agreement requires.
Personal information limited to deal purpose. Customer must not upload personal information about individuals (sellers, target-company employees, customers, or other third parties) beyond what is reasonably necessary for evaluating, structuring, or closing the deal in question. The Service is not a general-purpose contact database or CRM for unrelated personal data.
Sensitive data categories. The Service is not designed or certified to hold health records or other protected health information, payment card data (cardholder numbers, CVV, magnetic-stripe or chip data), or copies of government-issued identification (passports, driver's licenses, national ID numbers, Social Security or Social Insurance numbers). Do not upload these categories unless (a) the specific data is genuinely necessary to evaluate or document a specific deal (for example, a target's payment-processing due diligence extract), and (b) Customer already lawfully holds that data and has a lawful basis to share it through the Service. If in doubt, redact before uploading.

Umplify does not review the substance of Customer Data on an ongoing basis, does not scan uploaded files for malware or moderate their content, and is not in a position to independently verify Customer's right to upload any given document. Responsibility for the categories above rests with Customer. Customer defends, indemnifies, and holds Umplify and the other Umplify Parties harmless from claims and losses arising from Customer Data, including the personal information of third parties in uploaded documents and any lack of rights, consents, or notices needed to upload or process it, under Section 13.2 of the Terms of Service, and Customer's liability for a breach of this Section 2 is subject to the allocation in Section 14 of the Terms of Service.

3. No Scraping, Resale, or Unauthorized Competitive Use

In plain terms: do not scrape the Service, do not export data in bulk to resell it, do not resell or white-label the Service itself, and do not run competitive benchmarks against us without asking first.

Customer and its Authorized Users must not:

Scrape, crawl, or use automated means to extract data from the Service outside of the MCP server (where included in Customer's plan) and the self-service data export feature made available to Customer's own account.
Export data from the Service in bulk for the purpose of reselling, redistributing, or otherwise making that data available to any third party, other than Customer's own advisors, financing sources, or transaction counterparties in the ordinary course of the deal the data relates to.
Resell, sublicense, rent, lease, or white-label the Service, or otherwise make the Service available to any third party as part of a competing or derivative product or service, without Umplify's prior written consent.
Use the Service to build, train, or benchmark a competing product, or publish benchmark or performance comparisons involving the Service, for competitive purposes, without Umplify's prior written consent.

4. AI Use and Misuse

In plain terms: nothing Acquiror AI produces, whether an AI feature wrote it or a formula calculated it, is investment, legal, tax, accounting, lending, or valuation advice; it is informational only, you must verify all of it before relying on it, and you take the risk of the decisions you make with it. Do not try to extract or jailbreak the underlying AI models, do not use AI Output to fabricate financials or forge documents, and do not use AI Output to mislead a counterparty or investor.

Nothing produced by the Service's AI features, and nothing else the Service produces (its calculated figures, thresholds, pegs, schedules, memos, and exports, which together with AI Output are "Output" as defined in Section 2 of the Terms of Service), is investment, legal, tax, accounting, lending, or valuation advice. All AI Output and all other Output is informational only and must be independently verified by a qualified person before Customer or any Authorized User relies on it or makes a decision based on it. Customer assumes the risk of every decision and transaction it makes with the Service. See Terms of Service Sections 5 (AI Features and Output), 12 (Warranties and Disclaimers), and 14 (Limitation of Liability and Release) for the operative verification covenant, the assumption of risk, and the release of deal outcomes.

The Service includes AI-assisted features (deal Q&A, document classification and extraction, valuation scenario analysis, risk summaries, go/no-go decision proposals, investment memo narrative sections, email and LOI drafting, playbook customization, and similar workflows). In connection with these features, Customer and its Authorized Users must not:

Attempt to extract, reconstruct, reverse engineer, or derive the underlying model weights, training data, or system prompts of any AI model made available through the Service, whether Umplify's platform-hosted models or a Tenant AI Provider's models.
Attempt to bypass, disable, or circumvent any safety control, content filter, or usage restriction built into the Service's AI features ("jailbreaking"), including through adversarial prompting.
Use the Service to generate deceptive content, including fabricated or altered financial statements, forged signatures or corporate documents, or any AI Output designed to misrepresent a fact material to a transaction.
Use AI Output to mislead a counterparty, investor, lender, or other transaction participant, including presenting AI-generated analysis as independently verified fact without disclosure that it is AI-generated, or without performing the verification the Terms of Service require.

AI Output may be inaccurate or incomplete. The Terms of Service's obligation to independently verify AI Output before relying on it in a transaction, financing decision, or investor communication applies to all AI Output produced through the Service, regardless of which feature or underlying model produced it.

5. No Consequential Decisions About Individuals

In plain terms: do not use Acquiror AI or its AI Output as the sole basis for a decision that has a serious real-world effect on a specific person, like whether they get credit, a job, housing, insurance, health coverage, or a government benefit.

The Service is designed to analyze businesses and transactions, not to evaluate natural persons. Customer must not use the Service or any AI Output as the sole or determinative basis for a consequential decision about a natural person, including a decision about:

Credit or lending eligibility;
Employment, including hiring, promotion, discipline, or termination;
Housing, including tenancy, mortgage, or similar housing decisions;
Insurance, including underwriting, pricing, or claims;
Health care, including diagnosis, treatment, or coverage; or
Eligibility for government benefits.

This restriction applies even where a natural person appears incidentally in Customer Data reviewed by the Service, for example as a target-company employee, guarantor, or reference, and even where the decision arises in the course of an otherwise legitimate deal-diligence use of the Service. See Terms of Service Section 5.8.

6. Bring-Your-Own-Key and Tenant AI Providers

In plain terms: if you connect your own AI provider account, you are still bound by that provider's rules, and you cannot use it to route around export control law.

Customers may configure the Service to use their own API key with a supported Tenant AI Provider instead of Umplify's platform-default AI provider. When Customer does so:

Customer remains responsible for complying with that Tenant AI Provider's own terms of service, acceptable use policy, and rate limits. Umplify is not a party to, and has no control over, the relationship between Customer and its chosen Tenant AI Provider.
Customer must not configure or route requests through a Tenant AI Provider in a manner that violates applicable export control or economic sanctions law, including sending restricted data to a provider or region subject to an applicable export restriction.
Umplify may suspend a Customer's use of a particular Tenant AI Provider configuration if it reasonably believes that configuration is being used in violation of this AUP or applicable law.

7. MCP Server Access (Firm and Enterprise)

In plain terms: if you connect an external AI assistant to your deal data through the MCP server, that connection is something you set up and you are responsible for what that assistant does with your data. This AUP applies to that access the same as it applies to the regular app.

On plans that include it (currently Firm and Enterprise), the Service can expose deal data to an external AI client (for example, a third-party AI assistant or developer tool) through an MCP (Model Context Protocol) server connection. This connection is customer-directed: Customer chooses which external client to connect and signs in to authorize that connection with the connecting individual's own identity.

Customer is responsible for the actions of any external AI client it connects to the Service through MCP, including how that client uses, stores, or further transmits any Customer Data or AI Output it retrieves. What a connected client can retrieve includes deal records, financial analyses, contact records (including the names, emails, phone numbers, and notes of third parties recorded by Customer), and time-limited links to download uploaded documents; the connected client's own handling of that data is outside the Service.
A connected client that asks a deal question through the MCP server uses Customer's AI analysis allowance and AI usage caps in the same way as a question asked in the web application, and the question and answer are stored in the deal's question-and-answer history. A connected client can ask deal questions regardless of the connecting individual's capability level in the web application, so Customer should connect clients only for individuals it would permit to use the AI features. The MCP server otherwise reads data; it does not create, change, or delete deals, documents, or contacts.
Content that the connected client itself generates from retrieved data is produced by that client and its AI provider, not by the Service; it is not AI Output of the Service, and Umplify has no responsibility for it.
This AUP applies in full to access obtained through an MCP connection. Conduct that would violate this AUP if performed directly in the Service (for example, bulk export for resale, or generating deceptive content) also violates this AUP when performed through a connected external client.
Customer must not configure an MCP connection to grant access broader than the connecting individual's own Authorized User permissions within the Service. The MCP server reads data for the connecting individual's whole tenant; Customer should connect clients only for individuals it would permit to read all of its deals.
Customer is responsible for the credentials and sessions its connected clients hold and must disconnect a client it no longer trusts; Umplify may suspend an MCP connection it reasonably believes is being misused.

8. Security

In plain terms: do not run security scans or penetration tests against us without asking first, do not share login credentials, and do not try to get around tenant isolation, seat limits, or AI usage limits.

No unauthorized security testing. Customer and its Authorized Users must not conduct vulnerability scanning, penetration testing, load testing, or similar security testing against the Service without Umplify's prior written authorization.
Responsible disclosure. If you believe you have found a security vulnerability in the Service, please report it to privacy@acquiror.ai (the security contact designated in our Data Processing Addendum) before taking any further action. We ask that you give us a reasonable opportunity to investigate and remediate before any public disclosure.
No credential sharing. Authorized Users must not share login credentials with one another or with anyone outside their own Authorized User account. Each individual accessing the Service must do so under their own Authorized User identity.
No circumvention of tenant isolation, seat limits, or AI usage limits. Customer and its Authorized Users must not attempt to access another Customer's tenant data, bypass seat or user limits associated with Customer's subscription plan, or circumvent AI usage limits, rate limits, or metering controls built into the Service.

9. Fair Use and Rate Limits

In plain terms: AI features and MCP access are subject to your plan's usage limits, and we throttle abusive traffic patterns to keep the Service reliable for everyone.

Use of the Service, including AI-assisted features and MCP access, is subject to the usage limits, seat counts, AI analysis limits, and AI usage caps (per-user request rate limits and per-tenant daily and monthly token and cost caps) associated with Customer's subscription plan, as described in the Terms of Service and Customer's order. The Service enforces these limits automatically on its AI features; there is no separate request limit on the MCP server beyond those limits and the Service's upload and request size limits. Umplify may apply additional throttling, rate limiting, or blocking to traffic patterns that appear abusive, unreasonably burdensome to shared infrastructure, or inconsistent with ordinary use of the Service, independent of whether a Customer's plan-level usage cap has been reached.

10. Enforcement

In plain terms: for most violations we will warn first, then suspend, then terminate, following the Terms of Service. For serious harm (security threats, active fraud, and similar) we can act immediately.

Under Section 10.3 of the Terms of Service, Umplify may terminate or suspend immediately for a violation of this AUP. In practice Umplify generally addresses violations through a graduated process: notice and an opportunity to cure, followed by suspension, followed by termination. Where a violation poses an immediate risk of harm to the Service, to other Customers, to Umplify, or to a third party (for example, an active security threat, ongoing fraud, or unlawful activity described in Section 1), Umplify may suspend or restrict access immediately, without prior notice, and will provide notice as soon as reasonably practicable afterward.

Umplify may preserve and disclose Customer Data, account information, and records of Service use as required by law, subpoena, or other valid legal process, or as reasonably necessary to investigate a suspected violation of this AUP.

11. Reporting Abuse

In plain terms: tell us if you see misuse of the Service.

If you become aware of a violation of this AUP, including by another Customer or Authorized User, please contact us at support@acquiror.ai. For suspected security vulnerabilities, use the responsible disclosure contact in Section 8 instead.

12. Changes to This Policy

We may update this AUP from time to time, consistent with the amendment terms in the Terms of Service. Material changes will be communicated as described there.