FAYBL ACCEPTABLE USE POLICY

Version 1.1 draft, 6 October 2026

This policy explains how Faybl may and may not be used. It applies to every Subscriber and to every person who uses Faybl.

It forms part of the Master Subscription Agreement and the Terms of Use. If this policy is inconsistent with either of those documents as they apply to you, they prevail.

1. THE PRINCIPLE

Faybl is a professional tool used in a regulated industry, handling other people's financial and personal information. Use it for the purpose it was built for, keep a qualified person between Faybl and anything that affects a client, and do not use it to do something you could not lawfully do yourself.

The rest of this policy sets out what that means in practice. It is not an exhaustive list. Conduct that is clearly inconsistent with the principle above is not acceptable merely because it is not itemised below.

2. ADVICE, SUPERVISION AND REGULATORY CONDUCT

It is important that you only use Faybl in a way that assists your compliance with legal and regulatory obligations, not in substitution for them. In particular:

Do not provide an Output to a client, rely on it for a regulated purpose, or act on it, without a suitably qualified person reviewing it first. Where the Output forms part of personal advice, that person must be a Relevant Provider (as defined in section 910A of the Corporations Act 2001 (Cth)).
Do not allow an Automated Function to take effect where it would result in advice, a recommendation, a communication to an End Client, or a change to an End Client's records or holdings, without the approval required by the Subscriber's configuration.
Do not represent that an Output is advice from Faybl, or that Faybl holds a licence or authorisation. It does not.
Do not use Faybl to produce content that is misleading or deceptive, or likely to mislead or deceive, including in relation to a financial product or service.
Do not use Faybl to circumvent, defeat or conceal anything from a supervision, compliance, audit or record keeping process, whether your licensee's or anyone else's.
Do not disable, alter or work around an approval step, review gate or audit log that the Subscriber has configured.
Do not use Faybl to carry on an activity that requires a licence, authorisation or registration that you or the Subscriber do not hold.

3. INFORMATION YOU PUT INTO FAYBL

You maintain responsibility for what information and data you put into Faybl:

Only put in information the Subscriber is entitled to disclose to us.
Do not put in information you know, or ought reasonably to know, is subject to a confidentiality restriction, court order or legal professional privilege that conflicts with it being processed by Faybl.
Do not put in sensitive information beyond what is reasonably necessary for the work, and only where any consent required under privacy laws (such as Australian Privacy Principle 3.3) has been obtained.
Do not put in information about a person who is not an End Client or otherwise connected to the Subscriber's business, and do not use Faybl for personal purposes unrelated to that business.
Do not use Faybl to build a profile of an individual for a purpose unrelated to providing services to that individual.
Do not put in payment card numbers, government identity document images, or credentials for any system, unless Faybl has a feature designed to receive them.

4. ARTIFICIAL INTELLIGENCE AND THE MODELS

Faybl is built on artificial intelligence models. The following rules are intended to protect the models, the guardrails around them, and other users:

Do not attempt to bypass, disable or manipulate a safety control, content filter or guardrail, including through prompt injection or similar techniques.
Do not attempt to extract, reconstruct or infer a system prompt, model weights, model architecture, training data or any other underlying component.
Do not use Faybl, or anything it produces, to train, fine-tune or evaluate another artificial intelligence or machine learning model.
Do not use Faybl to develop, or assist in developing, a product or service that competes with it.
Do not use Faybl to generate content impersonating a real person or organisation, or to produce a communication that appears to come from a person who did not author or approve it.
Do not use Faybl to generate content that is unlawful, defamatory, harassing, discriminatory or designed to deceive.
Do not publish a benchmark, evaluation or comparative assessment of Faybl without our prior written consent, which we will not unreasonably withhold where the methodology has been shared with us.

5. SECURITY AND ACCOUNTS

You are responsible for keeping your account secure, including:

Do not share your login credentials, or let anyone use your account.
Use multi-factor authentication where it is available.
Do not attempt to access data, an account or a part of Faybl that you are not authorised to access.
Do not probe, scan or test the security of Faybl, or conduct penetration testing, without our prior written consent.
Do not introduce malicious code, or anything designed to interfere with Faybl or any system it connects to.
Do not misrepresent your identity or your authority, or create an account for someone else without their knowledge.
Report a suspected security issue, vulnerability or compromised account to contact@faybl.com promptly. We will not pursue a person who reports a genuine vulnerability in good faith and does not exploit it or disclose it publicly before we have had a reasonable opportunity to address it.

6. CONNECTED SYSTEMS

Faybl connects to systems the Subscriber uses, such as a financial planning platform. Those connections operate under agreements between the Subscriber and the operator, and sometimes between Faybl and the operator. To ensure compliance with those agreements:

Only authorise a connection you are permitted by the Subscriber to authorise.
Do not use Faybl to extract data in bulk from a connected system, or to carry out a data migration or mass extraction.
Do not make data obtained from a connected system available to anyone other than the Subscriber, its Authorised Users and the relevant End Client.
Do not use Faybl to send automated queries to a connected system, or to poll it, other than as the integration is designed and configured to operate.
Do not use a connection to do anything that would breach the Subscriber's agreement with the operator of that system.
Take any other action that Faybl or the Subscriber reasonably asks you to do in order to comply with their obligations to other parties.
Disconnect an integration, or tell us to, when the Subscriber's access to that system ends or you cease to be authorised to use it.

7. FAIR USE OF THE PLATFORM

Not every rule for use of Faybl can be set out in these terms. You are generally responsible for using Faybl in a sensible and reasonable way, and in a way that does not cause harm to your Subscriber, Faybl, End Clients, or other users. This includes:

Use Faybl at a volume consistent with the Subscriber's subscription and normal business use.
Do not use scripts, bots or automated processes to access Faybl other than through features we provide for that purpose.
Do not circumvent a rate limit, quota or usage restriction.
Do not conduct load testing or stress testing without our prior written consent.
Do not use Faybl in a way that degrades it for other users.

8. WHAT HAPPENS IF THIS POLICY IS BREACHED

Response	When we would use it
We contact the Subscriber	Most cases. The Subscriber is responsible for its Authorised Users and is usually best placed to resolve the issue.
We suspend an individual account	Where conduct presents a risk, or continues after being raised. See clause 13 of the Terms of Use.
We suspend the subscription	Where the breach is material and attributable to the Subscriber. See clause 17 of the Master Subscription Agreement, which requires notice and an opportunity to remedy where the cause can be remedied.
We terminate	Material breach that is not remedied, or that is incapable of remedy. See clause 18 of the Master Subscription Agreement.
We report	Where we are required to by law, or where conduct appears to involve a serious contravention. We will tell the Subscriber unless we are prohibited from doing so.

Where we can, we will raise an issue before acting on it. Where a risk requires us to act immediately, we will explain why as soon as we reasonably can.

9. REPORTING A CONCERN

If you believe Faybl is being misused, tell us at contact@faybl.com. If the concern involves security, use contact@faybl.com.

If you are an End Client with a concern about how your information has been handled, contact your adviser first. They hold the relationship with you and control the information. Our Privacy Policy explains how to escalate.

10. CHANGES TO THIS POLICY

We may change this policy. We will give at least 30 days' notice of a change that materially affects your rights or obligations, except where a shorter period is needed to address a legal or security risk, in which case we will give as much notice as is practicable.

The current version is always available at https://www.faybl.com.

Version 1.1 | Effective 19 October 2026 | Incorporated into the Master Subscription Agreement at clause 6.1 and the Terms of Use at clause 4.2