Acceptable Use Policy

Contents

1. Business-to-Business Use
2. Authorized Use
3. No Unlawful or Unauthorized Content
4. Restricted Personal or Sensitive Information
5. Malware and Malicious Content
6. Security Abuse
7. AI and Prompt Abuse
8. Reverse Engineering and Service Discovery
9. Automated Access and Scraping
10. Circumvention of Usage Limits
11. Trial Abuse
12. Account Integrity
13. Fraud and Financial Misconduct
14. Intellectual Property Violations
15. Privacy and Data Protection Violations
16. Interference With the Service
17. Unauthorized Resale or Service-Bureau Use
18. Competitive Misuse
19. Export Controls and Sanctions
20. Prohibited Assistance
21. Customer Responsibility for Uploaded Content
22. Enforcement
23. No Waiver of Enforcement
24. No Guarantee of Detection
25. Suspension and Customer Data
26. Reporting Violations
27. Relationship to Other Documents
28. Changes to This AUP
29. Severability
30. Governing Terms
Company Information

MERAKAN LITE — ACCEPTABLE USE POLICY

Effective Date: 15 October 2026

Version 2026-10-15

This Acceptable Use Policy (“AUP”) governs permitted and prohibited use of MERAKAN Lite (“Service”) provided by MERAKAN LLC, a Wyoming limited liability company (“MERAKAN,” “we,” “us,” or “our”).

This AUP is incorporated into the MERAKAN Lite Terms & Conditions. The Customer is responsible for compliance by its Owners, Editors, Viewers, and other authorized users.

1. Business-to-Business Use

MERAKAN Lite is intended for business-to-business (“B2B”) use.

The Service may be used only by:

businesses and organizations;
individuals acting on behalf of a business or organization; and
users who have authority to act for the applicable Customer.

The Customer is responsible for ensuring that its users have the necessary authority to access and use the Service.

2. Authorized Use

The Service may be used only for lawful business purposes consistent with its intended functionality, including processing and extracting information from supported invoice and receipt images.

Customers must use the Service in accordance with the Terms & Conditions, this AUP, the Billing & Refund Policy, the Privacy Policy, the DPA where applicable, the Service Availability & Support Policy where published, and all applicable laws and regulations.

3. No Unlawful or Unauthorized Content

Customers must not use the Service to upload, process, transmit, store, or otherwise handle content that:

violates applicable law;
facilitates unlawful conduct;
infringes or misappropriates intellectual property rights;
violates another person's privacy or other legal rights;
is knowingly fraudulent or deceptive;
is subject to a legal restriction that prohibits its processing through the Service; or
the Customer does not have the right or authorization to process.

The Customer is responsible for determining whether it has the legal rights and permissions necessary to submit Customer Data to MERAKAN.

4. Restricted Personal or Sensitive Information

Customers must not intentionally use MERAKAN Lite as a repository or processing system for highly sensitive personal information that is unrelated to the Service's intended invoice and receipt extraction functionality.

Customers should minimize unnecessary personal information contained in uploaded materials.

The Service is not designed or represented as a specialized system for processing medical records, biometric databases, government identification databases, authentication credentials, or similarly sensitive datasets. Point-of-sale receipts commonly show masked card digits; submitting such receipts is ordinary use. Full payment-card numbers, CVV codes, PINs, passwords and other authentication secrets must not be submitted (Terms Section 18).

5. Malware and Malicious Content

Customers must not upload or transmit malware or other malicious code through the Service.

Prohibited material includes, without limitation:

viruses;
worms;
ransomware;
trojans;
spyware;
destructive code;
malicious scripts;
intentionally corrupted files; and
other code designed to damage, disrupt, compromise, or gain unauthorized access to systems or data.

The Service accepts only JPEG, PNG and WebP image files, validates their type from the file content rather than its name, and never executes an uploaded file. It does not scan uploads for malware; the prohibition above applies regardless of detection (Section 24).

6. Security Abuse

Customers must not use the Service to:

gain unauthorized access to any system, account, network, or data;
test or exploit vulnerabilities without authorization;
bypass authentication or access controls;
interfere with security mechanisms;
conduct unauthorized penetration testing;
facilitate credential theft;
deploy or distribute malicious payloads; or
assist another person in carrying out unauthorized security activity.

The Service must not be used as infrastructure for attacking or compromising third-party systems.

Good-faith reporting of a security vulnerability to support@merakan.com, without exploiting it or disclosing it publicly before it is addressed, is not a violation of this AUP (Terms Section 50).

7. AI and Prompt Abuse

Customers must not intentionally attempt to manipulate, bypass, or defeat AI-related safeguards or system instructions, including through prompt-injection content embedded in an uploaded document, for the purpose of obtaining unauthorized access, confidential instructions, credentials, prohibited functionality, or unlawful output.

Customers must not use the Service to interfere with AI infrastructure, to facilitate abuse of third-party AI systems, or to produce or process content for an unlawful purpose. Ordinary invoice and receipt extraction, including documents that incidentally contain unusual text, is not prohibited unless the Customer intentionally uses the content to abuse or circumvent the Service.

8. Reverse Engineering and Service Discovery

Except to the extent expressly permitted by applicable law, Customers must not:

reverse engineer the Service;
decompile or disassemble the Service;
attempt to derive source code;
circumvent technical restrictions;
discover or reconstruct undocumented internal APIs;
extract proprietary algorithms or models; or
attempt to reproduce material portions of the Service through unauthorized technical means.

9. Automated Access and Scraping

Customers must not use bots, crawlers, scrapers, scripts, automated systems, or other mechanisms to access or interact with the Service in a manner that:

exceeds permitted usage;
bypasses technical restrictions;
interferes with Service operation;
creates unreasonable load;
extracts data that the Customer is not authorized to obtain; or
circumvents normal access mechanisms.

Undocumented APIs or technical interfaces may not be used without MERAKAN's express authorization. The Service is provided through the MERAKAN Lite application; programmatic access to its application interface is not an intended interface and is not authorized (Terms Section 51).

10. Circumvention of Usage Limits

Customers must not attempt to circumvent Service limits, including limits relating to:

accounts;
users;
concurrent processing;
image uploads;
daily processing;
trial usage;
subscription units; or
other technical or commercial restrictions.

Circumvention includes creating or controlling multiple accounts for the purpose of avoiding applicable limits or restrictions.

Current limits are stated in the Terms (Sections 13, 31, 34–37): 20 uploaded files awaiting processing per account; 3 extractions per day and 42 in total during the free trial; 60 per day and 500 per billing period on the paid plan; and three extraction attempts per file. The daily limit is counted per calendar day in the time zone recorded for the account at sign-up, which cannot be changed by the Customer.

11. Trial Abuse

The free trial is intended to allow legitimate evaluation of MERAKAN Lite.

Customers must not create multiple accounts, identities, or organizations primarily to obtain repeated or extended free trial access beyond the permitted trial allocation.

MERAKAN may use reasonable account, usage, and abuse-prevention indicators to identify repeated or suspicious trial activity.

Where used, a trial-abuse marker is retained for up to 24 months, including after account deletion (Terms Section 32). MERAKAN may register an email address that has already had a free trial without a new trial and offer a subscription instead, and may refuse disposable email addresses.

12. Account Integrity

Customers must:

provide accurate account information;
maintain the confidentiality of authentication credentials;
use accounts only as authorized;
promptly address suspected unauthorized access; and
ensure that users accessing the account are authorized.

Customers must not sell, transfer, share, rent, or provide account credentials to unauthorized persons.

Each user must sign in with their own credentials: one email address corresponds to one user, the account owner invites users and assigns their roles, and passwords are never visible to the account owner or to MERAKAN. Sharing one login among several people is a violation of this section.

13. Fraud and Financial Misconduct

Customers must not use the Service to facilitate:

payment fraud;
identity fraud;
invoice fraud;
financial deception;
money laundering;
fraudulent business documentation;
unauthorized financial transactions; or
other unlawful financial misconduct.

The Service is an information-extraction tool and is not intended to validate the legality, authenticity, or financial legitimacy of submitted documents.

14. Intellectual Property Violations

Customers must not use the Service to knowingly:

infringe copyrights;
infringe trademarks;
misappropriate trade secrets;
violate publicity rights;
violate database rights; or
otherwise infringe third-party intellectual property rights.

Customers are responsible for ensuring that they have the necessary rights to submit and process Customer Data.

15. Privacy and Data Protection Violations

Customers must not use the Service to violate applicable privacy or data-protection laws.

Customers are responsible for:

determining what information they are authorized to submit;
obtaining required notices, permissions, or consents;
providing appropriate instructions to their personnel;
complying with applicable data-retention obligations; and
responding appropriately to requests from individuals whose information is contained in Customer Data.

Where the DPA applies, the Customer's obligations under the DPA also govern applicable processing activities.

16. Interference With the Service

Customers must not:

disrupt or degrade the Service;
interfere with another customer's use;
intentionally overload Service infrastructure;
introduce unreasonable processing volumes;
attempt denial-of-service activity;
interfere with Service availability or integrity; or
otherwise use the Service in a manner that creates unreasonable operational risk.

17. Unauthorized Resale or Service-Bureau Use

Unless expressly authorized by MERAKAN in writing, Customers must not resell, sublicense, rent, or provide independent third parties with access to MERAKAN Lite through the Customer’s account, or operate the account as an unauthorized service bureau.

Using one MERAKAN Lite account to process documents on behalf of multiple independent third-party businesses, such as an accounting or bookkeeping office processing unrelated clients, requires MERAKAN’s prior written authorization and any applicable commercial arrangement. No future plan, agency tier, or multi-tenant product is promised by this Section.

18. Competitive Misuse

Customers must not use the Service or unauthorized access to the Service to:

develop or operate a competing service through systematic copying or extraction;
benchmark the Service for public competitive purposes without authorization;
systematically reproduce Service functionality;
extract proprietary information for competitive use; or
otherwise misuse the Service to create an unauthorized competing product.

This section does not prohibit legitimate business evaluation or ordinary use of the Service.

19. Export Controls and Sanctions

Customers must not use the Service in violation of applicable export-control, sanctions, trade-restriction, or embargo laws.

MERAKAN may restrict access or transactions where reasonably necessary to comply with applicable sanctions or other legal restrictions.

20. Prohibited Assistance

Customers must not use the Service to request, generate, process, or facilitate information where doing so would materially assist unlawful activity or circumvent applicable legal or technical restrictions.

MERAKAN may restrict processing where it reasonably determines that the requested use presents a material legal, security, or abuse risk.

21. Customer Responsibility for Uploaded Content

The Customer remains responsible for:

the legality of Customer Data;
the accuracy and appropriateness of submitted materials;
having the necessary rights and permissions;
reviewing AI-generated or extracted results;
maintaining appropriate copies of important business records; and
ensuring that its use of the Service is appropriate for its business needs.

MERAKAN does not guarantee that AI-assisted extraction will be accurate, complete, or suitable for a particular business decision.

22. Enforcement

If MERAKAN reasonably believes that a Customer or user has violated this AUP, MERAKAN may request corrective action, restrict functionality, limit processing, suspend a user or account, disable access to prohibited material, or terminate the Service relationship in accordance with the Terms.

MERAKAN may take immediate action where reasonably necessary to protect the Service, Customer Data, other customers, third parties, or to comply with law. Where a restriction can safely be applied without blocking data portability, MERAKAN may preserve read-only access and export functionality.

23. No Waiver of Enforcement

MERAKAN's failure to immediately enforce a provision of this AUP does not constitute a waiver of its right to enforce that provision later.

A prior exception or failure to enforce does not create a continuing right to violate this AUP.

24. No Guarantee of Detection

MERAKAN does not guarantee that it will detect every violation of this AUP.

The absence of detection, investigation, warning, suspension, or enforcement does not mean that conduct is authorized or permitted.

MERAKAN does not review or scan uploaded content; it acts on reports and on signals from its technical controls (such as usage limits and abuse-prevention indicators).

25. Suspension and Customer Data

Where access is suspended or restricted because of suspected abuse, security concerns, legal requirements, or an AUP violation, MERAKAN may restrict access to the affected account or Service.

Customer Data will remain subject to the applicable Terms, Privacy Policy, and DPA, including applicable retention and deletion provisions.

Nothing in this AUP creates an obligation for MERAKAN to retain Customer Data beyond the periods stated in the applicable documents.

Unless access must be withheld to address a security risk, a restricted account keeps read-only access with export available, and data is deleted only under the retention and deletion provisions of the Terms (Sections 33 and 53–58).

26. Reporting Violations

Customers may report suspected violations, security abuse, or misuse of the Service to:

MERAKAN LLC

Email: support@merakan.com

Security vulnerabilities: support@merakan.com

27. Relationship to Other Documents

This AUP is part of the contractual framework governing MERAKAN Lite. In the event of conflict, the order of precedence in Terms Section 72 applies.

28. Changes to This AUP

MERAKAN may update this AUP from time to time.

Material changes will be handled in accordance with the change and notice procedures stated in the Terms.

The version applicable to a Customer will be identified by its effective date or version information.

29. Severability

If any provision of this AUP is determined to be invalid or unenforceable, the remaining provisions will remain in effect to the fullest extent permitted by law.

30. Governing Terms

This AUP is governed by the same governing-law, dispute-resolution, arbitration, class-action waiver, and related provisions stated in the MERAKAN Lite Terms & Conditions, subject to rights and remedies that cannot lawfully be waived.