Paffle is for lawful business activity. This policy applies to our website, application, portals, APIs, integrations, messaging and payment features. It forms part of our Terms and Conditions. In this policy, “Paffle”, “we”, “us” and “our” mean Paffle Pay Inc., the company that operates Paffle.
Use Paffle honestly
You must have authority to act for the business, use the information you submit and give the instructions you provide.
Do not:
Create false invoices, receipts, tax documents, expenses, timesheets, approvals or payment records, or knowingly present incorrect information as genuine.
Impersonate another person or business, use stolen identity information, conceal relevant ownership information, or submit misleading verification documents.
Use another person’s account, signature, bank details, wallet or documents without authority.
Manipulate financial records, referrals, affiliate commissions, discounts or plan limits to obtain an improper benefit.
Misrepresent an estimate, AI draft, payment status or filing result as a confirmed fact when it is not.
Do not facilitate unlawful payments or trade
Do not use Paffle for fraud, money laundering, terrorist financing, sanctions evasion, tax evasion, corruption, trafficking or any other unlawful activity. Do not disguise the source, purpose or beneficiary of funds or use a tool or payment route to evade required checks.
Use only payment features, currencies, destinations and transaction types enabled for your business. Comply with applicable law and any disclosed partner restrictions. Do not bypass verification, geographic restrictions, screening, transaction limits or a refusal.
Sending to a legitimate third-party recipient is permitted where the service supports it. You must provide accurate recipient information and have authority for the payment. Nothing in this policy requires every recipient account to belong to your business.
Respect privacy and other people’s rights
Collect, upload, use and share personal information only when you have a lawful basis and any required notices or permissions. Do not access another business’s records, attempt to infer information withheld from you, or share documents with someone who is not entitled to receive them.
Do not upload or distribute material that is unlawful, infringes intellectual property or confidentiality, contains sexual exploitation or abuse material, or is used to threaten, harass or harm another person. A lawful complaint or criticism is not prohibited merely because it is negative.
Information shared through an API, webhook, connected spreadsheet or team channel can reach people outside Paffle. Choose destinations and access carefully. Investor portal documents and signed confidentiality agreements remain subject to their own restrictions.
Protect the service
Do not:
Attempt unauthorized access to accounts, infrastructure, private APIs, files or another user’s data.
Introduce malware, exploit a vulnerability to obtain data, bypass access controls, or interfere with the service’s security.
Overload the service, run disruptive automated traffic, evade rate limits, or deliberately make it unavailable to others.
Harvest credentials, scrape restricted information, or redistribute confidential service data.
Resell Paffle, provide unauthorized access to it as your own service, or copy its software or branding without permission, except where an activity is expressly permitted by applicable law.
Use documented APIs within their limits. Test only systems and data you are authorized to test. If you discover a security weakness, stop before accessing or changing other people’s information and report it to security@paffle.com. Do not conduct intrusive testing without written authorization. Good-faith reporting is encouraged.
Send appropriate communications
Do not use Paffle to send unsolicited bulk messages, phishing, misleading payment requests or messages that impersonate another sender. Follow applicable electronic marketing and communications laws, honour opt-outs and do not bypass delivery or suppression controls.
The invoice, reminder and statement features are for genuine business communications. A contact’s presence in your records does not by itself give you permission to send unrelated marketing.
Use AI and uploaded files responsibly
Do not send information to an AI feature that you are not authorised to share, or use it to generate fraudulent documents, impersonations or unlawful instructions. Review extracted information and generated drafts before relying on them or sending them onward.
Upload files relevant to the intended task and respect file limits. Do not disguise harmful content as a receipt, bill or other business attachment.
What happens if this policy is breached
We may investigate, request information, refuse a transaction, restrict a feature, remove harmful content where permitted, or suspend or close access. We use action appropriate to the breach or risk and give notice and an opportunity to resolve it where practical and lawful. Serious or urgent risks may require immediate action.
We may preserve relevant evidence and report conduct where the law permits or requires it. A restriction does not allow us to take ownership of customer funds or remove rights you have under applicable law. Financial and statutory records may need to be retained even if access is closed.
If you think a restriction is mistaken, contact support@paffle.com with the account or transaction reference and an explanation.
Report a problem and policy changes
Report suspected misuse or fraud to support@paffle.com, and security issues to security@paffle.com. Send privacy concerns to privacy@paffle.com. Include only what is needed to investigate. Do not send passwords, recovery codes or API secrets.
We may update this policy as the service or risks change. Material changes follow the notice provisions in our Terms and Conditions.