Acceptable Use Policy

1. Purpose and scope

KapuLetu is a treasury platform product of KapuLetu Systems. This Acceptable Use Policy applies to all users of the website, application, workspaces, reports, APIs and supported messaging integrations. It supplements the Terms of Service and applies to use by customers, administrators, treasurers, assistant treasurers and other authorized users.

• Terms of Service
• Privacy Policy

2. Account and authorization

• Use only an account and workspace you are authorized to access, and provide accurate information when registering or using the Service.
• Keep credentials, verification codes, tokens and authentication devices confidential. Do not impersonate another person or share access with someone who is not authorized.
• Workspace administrators must assign permissions according to each person's responsibilities and promptly remove access when authority ends.
• Report suspected account compromise or unauthorized access to KapuLetu promptly.

3. Prohibited conduct

• Use the Service for fraud, theft, money laundering, unlawful fundraising, deceptive transaction records or any other unlawful purpose.
• Submit transaction, contributor or financial information that you know is false, misleading, unauthorized or unlawfully obtained.
• Access, collect, disclose or use another person's personal or confidential information without authority or a lawful basis.
• Upload malware, malicious code or content intended to disrupt, damage or gain unauthorized access to the Service or any device, account, network or data.
• Probe, scan, test, bypass or interfere with authentication, rate limits, access controls or security measures without KapuLetu's written authorization.
• Reverse engineer, decompile, scrape or copy the Service, except to the extent applicable law expressly permits it.
• Use automated systems in a way that materially degrades the Service, circumvents technical limits or accesses data beyond your permissions.
• Send unlawful, abusive, threatening, deceptive, defamatory, discriminatory or unsolicited communications through the Service.
• Misuse public or shared reports by exposing personal, confidential or financial information to people who should not receive it.

4. Messages, uploads and automated transaction processing

Submit or forward messages, receipts, screenshots and documents only when you have authority to do so. Do not include unnecessary sensitive personal data or children's data.

Automated processing may misread transaction details. Users must review parsed information and remain responsible for confirming records before approval, reconciliation or sharing.

5. Compliance and enforcement

KapuLetu may investigate suspected violations, preserve relevant information where lawful, restrict features, suspend access or terminate an account when reasonably necessary to protect users, the Service or comply with law. Where practicable and lawful, we will provide notice and an opportunity to address the issue before taking action.

Nothing in this policy requires KapuLetu to monitor every user activity or guarantees that all violations will be detected.

6. Reporting a concern

Report suspected abuse, unauthorized access or harmful content to support@kapuletu.co.ke or through our Contact Support page. Include relevant details and avoid sending passwords, PINs or unnecessary sensitive information.