Acceptable Use Policy

This Acceptable Use Policy (“Policy”) is issued by Tax Wallet Inc., a Florida corporation (Florida Document No. P23000077808), doing business as TaxWallet (“TaxWallet”, “we”, “our”). It applies to everyone who uses the TaxWallet websites, dashboard, mobile apps, APIs, sandbox, the AI assistant Justin, Talks, messaging tools and related services (the “Services”), including taxpayers, tax offices, preparers, staff, service bureaus, partners and developers.

This Policy forms part of the Terms of Service. Words defined in the Terms of Service have the same meaning here. If this Policy and the Terms of Service conflict, the Terms of Service control.

You may not use the Services to:

• prepare, submit or transmit a fraudulent, false or identity-theft return, or any return without the taxpayer’s authorization;

• upload, create or alter fake or falsified identity documents, W-2s, 1099s or other government or financial records;

• manipulate refund amounts, government forms, bank-product selections or bank-partner compliance steps;

• use more than one account to get around billing, offers, referral credits or limits;

• break any IRS, state, bank-partner or other legal requirement that applies to you, including Circular 230 and IRS Publications 1345 and 3112 for preparers and EROs.

• Access only the accounts, returns, documents and data you are authorized to access.

• Do not capture, upload or use another person’s documents, identity, photos or tax information without their permission.

• Do not impersonate a taxpayer, preparer, office or representative, or get around face verification, ID capture or selfie checks.

• Offices and partners must obtain every consent the law requires (including 26 U.S.C. §7216 consents, E-SIGN consents and communications consents) before submitting a taxpayer’s data or acting for them.

You may not:

• try to get around security controls, multi-factor authentication, rate limits, IP restrictions, device verification or access controls;

• probe, scan, load test or penetration test the Services without our written permission (good-faith security research is covered by our Responsible Disclosure Policy);

• access internal or undocumented APIs, hidden endpoints or administrative tools, or any other customer’s data;

• upload malware, ransomware, web shells or code designed to interfere with the Services;

• spoof, tamper with or reset device identifiers to get around access rules;

• share accounts, passwords, API keys or authenticator devices, or let anyone else use them.

You may not copy, scrape, crawl, harvest or bulk-extract data or content from the Services, or reverse engineer, decompile or disassemble them (including obfuscated or compiled builds). You may not try to extract API keys, signing keys, models, prompts, training data or source code, or use the Services or their output to build a competing product.

• Do not use the Services, Talks or the API to send spam or unsolicited texts, calls, emails or messages, or to contact anyone without the consent the law requires (including the Telephone Consumer Protection Act and the Florida Telephone Solicitation Act).

• Do not harass, threaten or abuse taxpayers, staff or anyone else.

• Do not spoof phone numbers, email addresses, sender names or identities.

• Do not use our tools for automated likes, follows, comments, messages or other engagement on third-party platforms in ways those platforms’ rules forbid.

Our own messaging rules are in the Communications, Text Message & Call Recording Policy. We may suspend messaging features immediately when we detect misuse.

Use of Justin and other AI features must also follow Section 8 of the AI Terms. You may not use AI features to create false documents, returns or identity records, to deceive or impersonate anyone, or to try to get around their safeguards, instructions or limits.

The sandbox is for development and testing with test data only. Real taxpayer data may not be used in the sandbox. API and production access are also governed by the Service Access Agreement.

Office owners, administrators and managers are responsible for what their staff and users do under their account. That includes giving the right permissions, removing access promptly when someone leaves, watching for suspicious activity and keeping their own security controls in place.

Everything you upload must be lawful, accurate and authorized. You may not upload obscene or illegal material, sexual images of minors, or content that infringes someone else’s rights. We review uploads with automated and human tools to prevent fraud. Copyright complaints are handled under our Copyright & DMCA Policy.

If we believe this Policy has been broken, or to protect taxpayers, the Services or other users, or when the IRS, a bank partner or the law requires, we may, with or without notice:

• remove content or block traffic;

• throttle, suspend or end access to some or all of the Services;

• revoke credentials and API keys;

• report suspected fraud or unlawful activity to the IRS, state agencies, law enforcement or bank partners.

Fees already paid are not refunded when access ends because of a violation, except where the law requires otherwise. We may also seek damages and other remedies, and attorneys’ fees only where the Terms of Service allow it (Section 16 of the Terms of Service limits attorneys’ fees in disputes with Consumers).

Report suspected misuse, fraud or a security problem to support@taxwallet.ai. Legal matters go to legal@taxwallet.ai. We review reports promptly and keep the reporter’s identity confidential where we can.

We may update this Policy. We post the new version here with its date and version number and keep earlier versions readable. Material changes are announced in the Services or by email as described in Section 1.2 of the Terms of Service.