Acceptable Use Policy

This Acceptable Use Policy ("AUP") governs the use of Nathan Digital's products, services, and platform (collectively, the "Services"). By accessing or using the Services, you agree to comply with this policy.

This policy exists to protect the integrity of our platform, the security of all users, and compliance with applicable laws.

You may use the Services for lawful internal business purposes in accordance with your service agreement and these Terms. Permitted uses include:

• Managing your organization's HR, payroll, and CRM data
• Communicating with your clients, employees, and partners through platform tools
• Generating, storing, and processing documents and reports for legitimate business purposes
• Integrating with authorized third-party applications via our supported APIs

You must not use the Services to:

3.aIllegal activities

• Violate any applicable local, national, or international law or regulation
• Process or store data without a lawful legal basis under applicable privacy laws
• Engage in any form of fraud, deception, or misrepresentation

3.bHarmful or disruptive conduct

• Introduce malware, viruses, ransomware, or other malicious code
• Attempt unauthorized access to our systems or any third-party systems
• Conduct denial-of-service attacks, port scans, or other disruptive activities
• Reverse engineer, decompile, or attempt to extract the source code of the Services

3.cSpam and unsolicited communications

• Send unsolicited bulk messages (spam) or engage in phishing
• Harvest or collect email addresses or other contact information without consent
• Impersonate another person, organization, or Nathan Digital

3.dHarmful content

• Upload, store, or transmit content that is defamatory, harassing, discriminatory, or threatening
• Distribute content that infringes intellectual property rights
• Process or transmit content that exploits or harms minors in any way

3.eProhibited data

• Process special categories of sensitive data (health, biometric, genetic, financial) without explicit consent and a lawful basis
• Store payment card data in violation of PCI-DSS requirements

If you use our APIs or build integrations:

• You must not use API access to scrape, mine, or bulk-export data beyond your authorized scope
• You must secure your API keys and credentials — do not embed them in publicly accessible code
• Rate limits and quotas are enforced; circumventing them is prohibited
• We may suspend API access without notice if we detect abuse

If you become aware of any misuse of our Services, including spam, fraud, illegal content, or security vulnerabilities, please report it immediately:

• General abuse: abuse@nathandigital.com
• Security vulnerabilities: security@nathandigital.com

We take all reports seriously and will investigate promptly. Do not publicly disclose security vulnerabilities before we have had a reasonable opportunity to address them.

We reserve the right to investigate suspected violations of this policy. If we determine that a violation has occurred, we may:

• Issue a warning to the responsible user or organization
• Suspend or terminate access to the Services, with or without notice
• Remove or disable access to content that violates this policy
• Report illegal activity to law enforcement or regulatory authorities
• Pursue legal remedies

We will restore access if we determine the suspension was made in error.

We may update this Acceptable Use Policy from time to time. We will notify you of material changes via email or through the Services. Continued use of the Services after changes constitutes acceptance of the revised policy.

For questions about this policy:

Email: legal@nathandigital.com Nathan Digital — Dubai, United Arab Emirates