Acceptable Use Policy

Pinecrest Solutions Ltd · Version 2026-10-20 · Effective October 20, 2026

This policy forms part of our Terms of Service. It applies to you, the users you invite, and any applications or AI agents that use your credentials.

1. Unlawful and harmful activity

You must not use the Service to:

  • commit or facilitate fraud, money laundering, terrorist financing, bribery, tax evasion, or the falsification of financial records or statements;
  • deal with, or on behalf of, people or countries subject to sanctions by Kenya, the United Nations, the United States, the United Kingdom or the European Union;
  • process personal data without a lawful basis, or record special category or sensitive personal data (such as health, biometric or children's data);
  • infringe anyone's intellectual property, privacy or other rights;
  • store or transmit malware, or content that is illegal where you or we operate.

2. Security and integrity of the Service

You must not:

  • probe, scan or test the vulnerability of the Service, except under our responsible disclosure policy on the Security page;
  • access, or try to access, another customer's data, accounts or entities, or get around authentication, scopes or tenant isolation;
  • get around rate limits, quotas or usage metering, including by creating multiple accounts or rotating tokens;
  • overload or disrupt the Service, including through denial-of-service traffic or deliberately expensive requests;
  • share credentials or tokens publicly, or embed secrets in client-side or public code.

3. Automated access and AI agents

  • Agents and scripts must respect rate limits and Retry-After responses, and must use idempotency keys for retried writes as described in our documentation.
  • You must not let an Agent run unattended loops that create transactions at volume without safeguards, or expose your Microbooks tokens to an Agent that untrusted third parties can instruct.
  • Give Agents the narrowest scopes they need, and revoke tokens you no longer use.

4. Commercial restrictions

You must not:

  • resell, sublicense or offer the Service as a standalone API or white-label product without a written agreement with us. Building your own product on top of Microbooks is fine.
  • scrape the documentation or Service to build a competing product;
  • misrepresent your identity or your relationship with Microbooks.

5. Enforcement

If we reasonably believe this policy has been breached, we may investigate, remove or restrict access to content, throttle requests, revoke tokens, or suspend or terminate accounts, as described in the Terms. Where possible, we will contact you first and give you a chance to fix the problem. We may report unlawful activity to the authorities.

6. Reporting abuse

To report a breach of this policy, email abuse@microbooks.io. To report a security vulnerability, see our Security page.