Acceptable Use Policy

1. Purpose

This Acceptable Use Policy defines prohibited actions when using Kestro, our API endpoints, and our web services operated by Craftylane Studios. We maintain zero tolerance for malicious activities that threaten user privacy, system stability, or the lawful operation of financial recordkeeping.

2. Prohibited Uses

You agree not to use Kestro for any of the following:

• Illegal Financial Transactions: Recordkeeping or tracking funds associated with narcotics trafficking, illicit gambling, money laundering, terrorism financing, or tax evasion under Indian law.
• Harassment & Defamation: Entering threatening, abusive, racially derogatory, or sexually explicit remarks inside household transaction notes, category names, or member chat descriptions.
• System Tampering: Attempting to reverse engineer, decompile, extract source code, probe vulnerabilities, or bypass Row Level Security policies or authentication tokens.
• Automated Abuse: Running automated scrapers, denial-of-service scripts, or bot accounts against our backend APIs or web forms.
• Impersonation: Misrepresenting your identity, forging email domains, or posing as another individual to gain unauthorized access to a household ledger.

3. Investigation & Account Suspension

Craftylane Studios reserves the right to investigate reported violations of this policy. Where verified violations occur, we may issue formal warnings, suspend household access, or permanently terminate accounts. In instances involving unlawful activities, we cooperate fully with Indian law enforcement agencies and CERT-In.

4. Reporting Abuse

To report abusive behavior or policy violations, please email our security and compliance team at [email protected] with relevant context.