Acceptable Use Policy

# Acceptable Use Policy Last Updated: July 31, 2026 This Acceptable Use Policy (“Policy”) governs access to and use of the GoodKeeping website, platform, and related services operated by GOOD KEEPING SOLUTIONS LLC, a Florida limited liability company with a principal address at 1909 Thetford Cir, Orlando, Florida 32824, United States (“GoodKeeping,” “we,” “us,” or “our”). This Policy forms part of the GoodKeeping Terms of Service. Capitalized terms not defined in this Policy have the meanings given in the Terms of Service. Questions and reports concerning misuse may be sent to hello@goodkeeping.com. ## 1. General Standard You may use the Service only: - for lawful business and professional purposes; - for legitimate bookkeeping, accounting, financial-organization, reporting, and related workflows; - for your Organization or for another Organization that has authorized you to act on its behalf; - with information that you are authorized to submit, access, process, and disclose; and - in compliance with the Terms of Service, this Policy, and applicable law. You are responsible for the conduct of users whom your Organization authorizes to access the Service. ## 2. Unlawful, Fraudulent, or Deceptive Use You must not use the Service to: - engage in, facilitate, promote, or conceal unlawful activity; - create, alter, process, or present fraudulent financial records; - falsify transactions, reports, statements, invoices, supporting documents, or bookkeeping records; - impersonate another person or Organization; - misrepresent your identity, authority, ownership, role, or affiliation; - misrepresent automated or unreviewed output as verified professional work; - conceal the source, ownership, destination, or purpose of funds in connection with unlawful activity; - evade lawful restrictions, court orders, sanctions, reporting duties, or regulatory obligations; - facilitate tax fraud, theft, embezzlement, money laundering, or other financial crime; or - assist another person in committing any prohibited conduct. GoodKeeping is not responsible for determining whether a Customer’s financial activity is lawful. Customers remain responsible for their records, instructions, and compliance obligations. ## 3. Information You Are Not Authorized to Use You must not upload, submit, access, disclose, or process information through the Service unless you have the legal right and appropriate authority to do so. This includes information belonging to: - another Organization; - another business; - a customer or client who has not authorized the processing; - an employee or contractor where required authority or notice is absent; - a financial-account holder who has not authorized the use; - another user; or - any other person whose information you are not permitted to process. You must not use the Service to violate another person’s: - privacy rights; - confidentiality obligations; - contractual rights; - intellectual-property rights; - trade-secret rights; - financial-information rights; or - other legal rights. If you receive access to information belonging to another Organization by mistake, you must stop accessing it and promptly report the issue to hello@goodkeeping.com. ## 4. Prohibited Content and Files You must not upload, create, transmit, or store through the Service content that: - is unlawful; - contains malware, ransomware, spyware, malicious macros, destructive code, or another harmful component; - is designed to compromise a device, account, network, or service; - infringes copyright, trademark, trade-secret, privacy, or other rights; - contains information obtained through unauthorized access; - is deceptive or materially misleading; - is intended to harass, threaten, abuse, exploit, or harm another person; - is unrelated to a legitimate use of the Service and creates material security, operational, or legal risk; or - is otherwise prohibited under the Terms of Service. The Service is not intended to operate as general-purpose file storage. ## 5. Unauthorized Access You must not: - access or attempt to access an account, Organization, workspace, file, record, system, or feature without authorization; - use credentials that are not assigned to you; - share individual credentials in a manner not permitted by the Service; - obtain or attempt to obtain another user’s credentials; - bypass Organization membership or role requirements; - escalate privileges without an authorized role change; - impersonate an authorized user; - interfere with authentication or account-recovery processes; - access information after your authorization has ended; or - attempt to discover or exploit another Customer’s information. An Organization administrator’s ability to invite, remove, or assign roles to users does not authorize access outside that Organization’s workspace. ## 6. Security Testing and Service Interference You must not, without GoodKeeping’s prior written authorization: - probe, scan, or test the vulnerability of the Service; - perform penetration testing or automated security testing; - attempt to bypass, defeat, or disable security controls; - interfere with authentication, authorization, session, or request-protection mechanisms; - intercept or manipulate communications with the Service; - introduce malicious code; - perform denial-of-service or resource-exhaustion activity; - overwhelm the Service with excessive or artificial requests; - interfere with another Customer’s use; - attempt to gain access to non-public systems or administrative functions; or - exploit, retain, or disclose a suspected vulnerability. Good-faith security concerns should be reported to hello@goodkeeping.com before testing or public disclosure. GoodKeeping may provide separate written authorization, conditions, and scope for approved security research. ## 7. Circumvention of Plans and Controls You must not circumvent or attempt to circumvent: - plan entitlements; - usage allowances; - trial restrictions; - subscription requirements; - billing controls; - authentication requirements; - user or Organization limits; - feature restrictions; - technical safeguards; - rate limits; or - access controls. You must not create multiple accounts or Organizations for the primary purpose of: - obtaining repeated trials; - avoiding payment; - exceeding purchased allowances; - evading suspension or termination; or - bypassing another restriction. Exceeding a plan limit does not authorize unauthorized technical workarounds. ## 8. Automated and AI-Assisted Features You must not misuse automated or AI-assisted features by: - submitting content designed to manipulate or compromise system instructions; - attempting to extract non-public instructions, models, logic, prompts, or security controls; - generating artificial volume unrelated to legitimate business use; - using automated output to create deceptive or fraudulent financial records; - intentionally providing false information to influence output; - attempting to cause the Service to disclose another Customer’s information; - presenting output as professionally reviewed when it has not been reviewed; or - using output without appropriate review where an error could affect financial, legal, tax, or regulatory decisions. Automated output may be incomplete or inaccurate. You remain responsible for reviewing and approving records before relying on them. ## 9. Scraping, Reverse Engineering, and Competitive Misuse Except where a restriction is prohibited by applicable law, you must not: - scrape, crawl, harvest, or systematically extract information from the Service; - use automated means to access the Service outside interfaces expressly provided for that purpose; - copy or reconstruct substantial portions of the Service; - reverse engineer, decompile, disassemble, or attempt to derive source code; - bypass technical measures intended to restrict extraction or copying; - use non-public GoodKeeping information to develop or improve a competing service; - reproduce GoodKeeping workflows, documentation, interfaces, or proprietary materials without authorization; - conduct or publish non-public security or performance benchmarking without written authorization; or - use the Service to train or develop a competing system through unauthorized extraction. This Section does not prevent a Customer from exporting its own available Customer Data through functionality provided by GoodKeeping. ## 10. Resale and Unauthorized Third-Party Access You must not: - resell, sublicense, lease, or commercially redistribute access to the Service; - operate the Service as an unauthorized service bureau; - provide account access to persons who are not authorized users; - allow another business to use your Organization as a substitute for obtaining its own authorized access; or - transfer access in violation of the Terms of Service. This restriction does not prohibit an authorized accounting firm, accountant, bookkeeper, adviser, or contractor from using the Service for clients through GoodKeeping’s intended collaboration and Organization-access features. ## 11. Communications and User Conduct You must not use invitations, comments, tasks, notifications, support channels, feedback tools, or other communication features to: - send spam; - send unauthorized commercial messages; - distribute phishing links; - transmit malware; - harass, threaten, or abuse another person; - impersonate GoodKeeping or another user; - obtain credentials or confidential information deceptively; - interfere with an accounting or review workflow; or - submit false or abusive support reports. You must interact professionally with other users, assigned accounting personnel, support personnel, and GoodKeeping representatives. ## 12. Sensitive and Specially Regulated Information Financial and business information is central to the Service. You should nevertheless avoid submitting information that is not reasonably necessary for legitimate bookkeeping or financial workflows. Unless GoodKeeping has expressly agreed in writing and any required contractual safeguards are in place, you must not intentionally use the Service to process: - protected health information; - biometric identifiers; - government identity documents submitted for identity-verification purposes; - classified government information; - information subject to specialized security requirements that the Service does not support; or - other specially regulated information unrelated to the intended purpose of the Service. A financial document may incidentally contain sensitive information. You remain responsible for determining whether submission is appropriate and authorized. ## 13. Excessive or Harmful Use You must not use the Service in a manner that: - materially degrades Service performance; - imposes an unreasonable or disproportionate burden on infrastructure; - disrupts another Customer; - creates abnormal resource consumption unrelated to legitimate use; - repeatedly triggers preventable processing failures; - threatens Service availability or integrity; or - creates material legal, security, or operational risk. GoodKeeping may apply reasonable technical limits, throttling, or protective controls to prevent harmful or excessive activity. ## 14. Reporting Security Issues and Misuse You should promptly report: - suspected unauthorized account access; - accidental access to another Organization’s information; - suspected credential compromise; - security vulnerabilities; - fraudulent or unlawful use; - malicious files; - misuse of automated features; and - other material violations of this Policy. Reports should be sent to hello@goodkeeping.com and should include enough information for GoodKeeping to investigate. Do not include passwords, payment-card numbers, or unrelated sensitive information in an abuse report. ## 15. Investigations and Cooperation GoodKeeping may investigate suspected violations of this Policy. You agree to provide reasonable cooperation where an investigation concerns: - your account; - your Organization; - users authorized by your Organization; - Customer Data submitted through your Organization; - a security incident; or - a suspected violation connected to your use. GoodKeeping may preserve relevant records where reasonably necessary to investigate an incident, comply with law, enforce agreements, or protect legal rights. GoodKeeping is not required to disclose confidential security methods, another Customer’s information, or legally protected investigative information. ## 16. Enforcement Where GoodKeeping reasonably believes that this Policy has been violated, GoodKeeping may take actions including: - warning the affected user or Organization; - requesting corrective action; - restricting access to particular content or features; - removing or quarantining harmful content; - revoking a user’s access; - limiting or throttling activity; - suspending processing; - suspending an account or Organization; - terminating access; - preserving relevant evidence; - notifying an affected Organization; or - reporting suspected unlawful activity to an appropriate authority. GoodKeeping may consider: - the seriousness of the conduct; - whether the conduct was intentional; - the risk to Customers or the Service; - whether the violation is repeated; - whether corrective action is possible; and - applicable legal obligations. Where practicable and lawful, GoodKeeping may provide notice and an opportunity to correct a violation. GoodKeeping may act immediately and without prior notice where the conduct involves: - unauthorized access; - fraud; - malicious code; - material security threats; - unlawful activity; - risk to another Customer’s data; - interference with Service availability; or - another urgent threat. Enforcement under this Policy is in addition to rights available under the Terms of Service and applicable law. ## 17. No Obligation to Monitor Every Activity GoodKeeping may use technical controls, reports, audits, and investigations to identify violations, but does not undertake to monitor or independently verify every file, transaction, communication, or user action. A failure to detect or enforce a violation in one instance does not waive GoodKeeping’s right to act in another instance. ## 18. Changes to This Policy GoodKeeping may update this Policy to reflect changes in: - the Service; - security practices; - misuse patterns; - legal requirements; or - business operations. The “Last Updated” date identifies the current version. Where reasonably practicable, GoodKeeping will provide notice of a material change through the Service, by email, or through another appropriate method. Continued use of the Service after an updated Policy takes effect constitutes acceptance to the extent permitted by law. ## 19. Contact Questions, security reports, and reports of suspected misuse may be sent to: GOOD KEEPING SOLUTIONS LLC 1909 Thetford Cir Orlando, Florida 32824 United States Email: hello@goodkeeping.com