Acceptable Use Policy

Commtrac provides financial technology infrastructure intended for lawful commercial use.

To maintain the security, integrity, reliability, and reputation of the Services, users must comply with this Policy at all times.

You agree to use the Services:

• lawfully;
• responsibly;
• securely;
• in accordance with applicable laws;
• without interfering with other users or the operation of the Services.

You may not use the Services to facilitate, promote, support, or conceal:

• fraud;
• theft;
• embezzlement;
• identity theft;
• payment fraud;
• account takeover;
• business email compromise;
• synthetic identity fraud;
• phishing;
• social engineering attacks;
• unauthorized financial transactions;
• deceptive or misleading commercial practices.

You may not use the Services to:

• launder money;
• finance terrorism;
• evade sanctions;
• conceal the origin or destination of funds;
• structure transactions to evade reporting requirements;
• facilitate transactions prohibited by applicable sanctions laws;
• violate anti-money laundering (AML), counter-terrorist financing (CTF), or sanctions regulations.

Users remain solely responsible for complying with all applicable financial crime laws.

You may not:

• access systems without authorization;
• bypass authentication mechanisms;
• attempt privilege escalation;
• circumvent security controls;
• exploit vulnerabilities;
• interfere with another user's account;
• access data that you are not authorized to access.

Security research is prohibited unless expressly authorized in writing by Commtrac.

You may not under any circumstances:

• reverse engineer;
• decompile;
• disassemble;
• decode;
• derive source code from;
• create derivative works of;

any portion of the Services.

You may not attempt to discover confidential implementation details, security mechanisms, internal APIs, or proprietary protocols.

Unless expressly authorized in writing, you may not:

• scrape the website;
• harvest data;
• crawl protected resources;
• mirror the Services;
• bulk download Documentation;
• use automated tools to extract information beyond permitted API functionality.

Public search engine indexing performed in accordance with industry standards is permitted.

You may not:

• exceed published rate limits;
• intentionally overload the Services;
• abuse API endpoints;
• generate excessive automated traffic;
• bypass usage restrictions;
• interfere with service availability;
• attempt denial-of-service attacks;
• misuse authentication tokens;
• create excessive or fraudulent accounts.

API credentials must be used only for their intended purpose.

Users are responsible for maintaining the confidentiality of their credentials.

You may not:

• share login credentials with unauthorized individuals;
• sell access to your account;
• transfer API keys without authorization;
• publicly expose authentication credentials;
• knowingly permit unauthorized access to your account.

If credentials are compromised, you must notify Commtrac promptly.

You may not use the Services to distribute or facilitate:

• malware;
• ransomware;
• spyware;
• viruses;
• worms;
• trojans;
• botnets;
• malicious scripts;
• credential-stealing software;
• exploits;
• malicious payloads.

You may not use the Services to launch or coordinate cyberattacks against any third party.

You may not use the Services for any unlawful purpose, including activities that violate:

• criminal laws;
• financial regulations;
• export control laws;
• sanctions laws;
• intellectual property laws;
• privacy laws;
• consumer protection laws;
• anti-corruption laws.

Users are solely responsible for ensuring that their activities comply with applicable laws in every jurisdiction in which they operate.

You may not use the Services to:

• infringe copyrights;
• infringe trademarks;
• misappropriate trade secrets;
• distribute pirated software;
• violate licensing agreements;
• misuse proprietary information belonging to others.

You may not:

• interfere with the stability of the Services;
• disrupt infrastructure;
• attempt to disable security controls;
• interfere with monitoring systems;
• intentionally degrade platform performance;
• attempt to evade logging or audit mechanisms.

You may not:

• impersonate another individual or organization;
• falsely represent your affiliation with Commtrac;
• provide false registration information;
• misrepresent the origin of communications or transactions.

Commtrac reserves the right, where permitted by law, to:

• investigate suspected violations;
• suspend or terminate accounts;
• remove or restrict access to Services;
• limit API usage;
• preserve relevant records;
• cooperate with law enforcement or regulatory authorities;
• take any action reasonably necessary to protect the Services, users, or third parties.

Nothing in this Policy obligates Commtrac to monitor all user activity.

Suspected violations of this Policy may be reported to:

Please include sufficient information to allow investigation.

Commtrac may update this Policy from time to time.

Material changes become effective upon publication on the Commtrac website unless otherwise stated.

Continued use of the Services constitutes acceptance of the updated Policy.

Scope: Users are responsible for ensuring that their use of the Services complies with any agreements governing their own financial institution accounts, payment services, or third-party platforms. Commtrac does not represent or warrant that use of the Services satisfies the contractual requirements imposed by any financial institution or third-party provider. Users are solely responsible for obtaining any required permissions or authorizations before using the Services in connection with third-party systems.