Acceptable Use Policy

HPLY ACCEPTABLE USE POLICY

HPLY Inc.

This Acceptable Use Policy (“Policy”) establishes rules for access to and use of HPLY’s Services. It is designed to protect donors, nonprofit organizations, beneficiaries, users, HPLY personnel, service providers, and HPLY’s technology from fraud, abuse, unlawful activity, security threats, and other conduct that undermines trust in the platform.

1.Purpose and Scope

2.Relationship to Other HPLY Policies

3.Who Must Comply

4.Permitted Use

5.Account and Credential Security

6.Fraud, Misrepresentation, and Deceptive Activity

7.Payment Abuse and Financial Misconduct

8.Sanctions, Money Laundering, and Other Financial Crime

9.Unauthorized Fundraising and Misuse of Charitable Status

10.Security Testing, Exploitation, and Technical Interference

11.Automated Access, Scraping, and Data Harvesting

12.Privacy and Misuse of Personal Information

13.Donor Information Restrictions

14.Prohibited Content and Community Harm

15.Child Safety and Exploitation

16.Hate, Harassment, Threats, and Violence

17.Misinformation, Impersonation, and Manipulated Media

18.Intellectual Property and Confidential Information

19.Artificial Intelligence and Automated Systems

20.High-Risk Goods, Services, and Activities

21.Evasion, Circumvention, and Repeat Violations

22.Reporting Violations

23.Investigation, Enforcement, and Protective Action

24.Policy Updates and Contact Information

1. Purpose and Scope

This Policy applies to HPLY’s Services, nonprofit portals, APIs, administrative tools, and related services. References to the “Services” have the same general meaning as in HPLY’s Terms of Service.

The Policy governs use of the Services for nonprofit discovery, donations, nonprofit profile administration, approved integrations, APIs, communications, content submission, and other functionality HPLY makes available.

2. Relationship to Other HPLY Policies

This Policy supplements HPLY’s Terms of Service, Privacy Policy, Cookie Policy, Donation & Refund Policy, Nonprofit Organization Participation Agreement, Community Guidelines, DMCA & Copyright Policy, and any feature-specific or supplemental terms that apply to a particular user or service.

If this Policy conflicts with a more specific HPLY agreement governing the same subject, the more specific agreement controls for that subject unless the applicable document expressly provides otherwise.

3. Who Must Comply

This Policy applies to every person or entity that accesses or interacts with the Services, including donors, nonprofit organizations, authorized representatives, developers, API users, contractors, vendors, volunteers, and visitors.

Organizations are responsible for ensuring that personnel and representatives using HPLY on their behalf comply with this Policy.

4. Permitted Use

Users may use HPLY only for lawful purposes and only through functionality HPLY makes available or expressly authorizes.

Permitted uses include discovering nonprofit organizations, making charitable donations, administering an authorized nonprofit profile, using approved APIs or integrations, and accessing other Services as intended by HPLY.

5. Account and Credential Security

Users must safeguard passwords, session tokens, invitation links, multifactor authentication codes, API credentials, administrative keys, password-reset links, and other authentication information.

Users may not access or attempt to access an account, organization, administrative area, API, database, payment account, storage location, or other resource without authorization. Users may not share, sell, transfer, publish, solicit, or improperly obtain credentials or use another person’s identity or contact information without authority.

Users must promptly report suspected account compromise or unauthorized access and cooperate with reasonable account-recovery or reverification procedures.

6. Fraud, Misrepresentation, and Deceptive Activity

Users may not use the Services to commit, facilitate, conceal, or attempt fraud, deception, false pretenses, misappropriation, embezzlement, identity theft, phishing, social engineering, forged documentation, fabricated beneficiaries, sham organizations, false matching claims, misleading urgency claims, or similar misconduct.

Users may not knowingly submit materially inaccurate or incomplete information concerning an account, nonprofit organization, fundraising purpose, beneficiary, donation, transaction, payment method, tax status, legal authority, or use of funds.

Users may not manipulate rankings, profile views, favorites, donation counts, engagement metrics, reviews, referrals, or other platform signals through bots, coordinated activity, false accounts, purchased engagement, or deceptive means.

7. Payment Abuse and Financial Misconduct

Users may not use HPLY to process stolen or unauthorized payment credentials, test payment-card numbers, conduct carding, manufacture disputes, evade disclosed fees, conceal the true nature of a transaction, create artificial transaction volume, cycle funds, or obtain cash or value through deceptive transactions.

Users may not intentionally submit duplicate chargebacks, falsely claim that an authorized transaction was unauthorized, abuse refund procedures, or structure transactions to evade limits, screening, reporting, verification, sanctions, taxes, payment-network rules, or payment-provider requirements.

Donation functionality may not be used for retail sales, event tickets, raffles, memberships, political contributions, personal transfers, loans, investments, or other non-donation transactions unless HPLY expressly authorizes the use and all required disclosures and legal conditions are satisfied.

8. Sanctions, Money Laundering, and Other Financial Crime

The Services may not be used for money laundering, terrorist financing, sanctions evasion, proliferation financing, bribery, corruption, trafficking, tax evasion, concealment of unlawful proceeds, or other unlawful financial activity.

Users may not transact for or conceal the involvement of a person, entity, country, territory, vessel, organization, or beneficiary subject to applicable sanctions or legal restrictions, except where expressly authorized by law and permitted by HPLY and the applicable payment provider.

Users may not use false identities, altered documents, nominees, intermediaries, shell entities, misleading transaction descriptions, or technical means to evade screening or geographic restrictions.

9. Unauthorized Fundraising and Misuse of Charitable Status

No person may claim, administer, solicit for, or otherwise act through a nonprofit profile without sufficient authority.

Users may not falsely represent that an organization is tax exempt, registered, verified, endorsed, sponsored, approved, or authorized by HPLY, a regulator, a government agency, or another third party.

A participating nonprofit may not solicit or accept donations for a purpose outside its lawful authority, governing documents, disclosed charitable mission, applicable registrations, or accepted donor restrictions. Donations may not be diverted for private benefit, personal expenses, unlawful activity, prohibited political activity, or uses materially inconsistent with donor-facing representations.

Eligibility, participation, suspension, restriction, deactivation, and termination of participating nonprofit organizations are governed by the HPLY Nonprofit Organization Participation Agreement.

10. Security Testing, Exploitation, and Technical Interference

Users may not scan, probe, test, exploit, reverse engineer, decompile, disassemble, or otherwise investigate HPLY systems without prior written authorization, except to the limited extent non-waivable law expressly permits.

Prohibited conduct includes credential stuffing, password spraying, vulnerability scanning, port scanning, session attacks, injection attacks, cross-site scripting, cross-site request forgery, privilege escalation, enumeration, denial-of-service testing, exploitation of configuration errors, or other unauthorized security testing.

Good-faith security research must comply with any vulnerability disclosure or security-research process HPLY expressly publishes or authorizes.

11. Automated Access, Scraping, and Data Harvesting

Users may not use bots, crawlers, scrapers, headless browsers, scripts, data-mining tools, bulk-download tools, artificial agents, or other automated means to access, copy, or extract information from HPLY unless expressly authorized.

Public availability of information does not authorize systematic collection, copying, republication, enrichment, resale, surveillance, or creation of a competing database.

Authorized API users must comply with applicable credentials, documentation, scopes, quotas, retention limits, security requirements, and supplemental terms. HPLY may block automated traffic, rate limit requests, revoke API access, restrict caching, or impose other technical controls.

12. Privacy and Misuse of Personal Information

Users may not collect, disclose, expose, publish, infer, sell, combine, or use Personal Information obtained through HPLY except for an authorized and lawful purpose consistent with HPLY’s Privacy Policy and applicable agreements.

Users may not dox, stalk, harass, identify an anonymous donor, reveal confidential beneficiary information, publish private contact information, or expose sensitive financial, identity, health, location, security, or authentication information.

Users may not deceive individuals about the purpose of information collection, ignore legally required privacy choices, use Personal Information for unlawful discrimination, or upload Personal Information obtained through HPLY to unapproved data brokers, advertising platforms, public AI systems, or unrelated databases.

13. Donor Information Restrictions

To the extent a user or nonprofit receives donor information through HPLY, that information may be used only for the purpose expressly authorized by HPLY, the donor’s choices, applicable law, and the relevant agreement.

Donor information may not be sold, rented, licensed, traded, monetized, used for unrelated solicitation or political campaigning, used for targeted advertising or data enrichment, transferred to another organization without authorization, or used to reverse a donor’s anonymity.

HPLY does not provide donor names, email addresses, telephone numbers, mailing addresses, or other donor contact information to participating nonprofit organizations for their independent fundraising, marketing, advertising, donor acquisition, or unrelated solicitation. A participating nonprofit organization receives only information reasonably necessary for payment processing, reconciliation, legal compliance, Donation administration, or another expressly authorized purpose.

14. Prohibited Content and Community Harm

Users may not submit, publish, transmit, or promote content that is unlawful, fraudulent, materially deceptive, defamatory, threatening, harassing, exploitative, obscene, malicious, privacy-invasive, infringing, or intended to facilitate wrongdoing.

Users may not fabricate testimonials, beneficiary stories, impact data, donor statements, reviews, endorsements, emergencies, photographs, documents, or other evidence.

Content may not promote financial scams, unlawful violence, trafficking, sexual exploitation, dangerous illegal activity, unlawful discrimination, or instructions intended to facilitate criminal or seriously harmful conduct.

Additional community-facing content standards may be described in HPLY’s Community Guidelines.

15. Child Safety and Exploitation

The Services may not be used to exploit, endanger, groom, traffic, sexualize, identify, harass, or otherwise harm a child.

Users may not upload child sexual abuse material, sexualized content involving minors, exploitative imagery, or content that exposes a child’s sensitive location, school, medical information, identity, or circumstances without an appropriate lawful and protective basis.

Organizations using images or stories involving minors must maintain appropriate permissions, protect dignity and privacy, and comply with applicable safeguarding, consent, and reporting obligations.

HPLY may preserve and report suspected child exploitation, abuse, trafficking, or imminent danger to appropriate authorities and may restrict access without prior notice where appropriate. HPLY will preserve information and make reports where required by applicable law.

16. Hate, Harassment, Threats, and Violence

Users may not threaten, harass, bully, stalk, intimidate, blackmail, extort, dox, or otherwise abuse another person or organization through the Services.

Users may not promote, praise, threaten, organize, or facilitate unlawful violence against a person or group.

Users may not engage in hateful or dehumanizing conduct based on race, color, ethnicity, national origin, religion, sex, gender, gender identity, sexual orientation, disability, age, veteran status, or another protected or sensitive characteristic.

Educational, documentary, counterspeech, advocacy, newsworthy, or public-interest content may be treated differently from content that promotes hatred, unlawful discrimination, or violence, subject to HPLY’s Community Guidelines and applicable law.

17. Misinformation, Impersonation, and Manipulated Media

Users may not knowingly publish materially false or deceptive information concerning an organization, beneficiary, transaction, emergency, legal status, payment status, endorsement, impact claim, or other matter where the falsehood could cause harm or improperly influence charitable giving.

Users may not impersonate another person, nonprofit representative, donor, payment provider, regulator, HPLY representative, or organization, or falsely claim authority.

Manipulated, synthetic, altered, or AI-generated media may not be used to deceive users concerning identity, authority, beneficiaries, events, impact, endorsements, or use of funds. Material alteration or synthetic origin should be disclosed where omission would mislead a reasonable person.

Satire, parody, advocacy, commentary, and opinion may be permitted when lawful and not used to commit fraud, harassment, impersonation, or donor deception.

18. Intellectual Property and Confidential Information

Users may not upload, copy, display, distribute, modify, sell, license, or otherwise use content, software, logos, trademarks, photographs, documents, databases, confidential information, or other protected materials without sufficient legal rights.

Users may not remove copyright, trademark, attribution, confidentiality, rights-management, or provenance notices.

Users may not disclose HPLY source code, nonpublic product information, security information, investigation materials, donor information, credentials, or other HPLY Confidential Information without authorization.

Nothing in this Policy prohibits a person from reporting possible violations of law to, communicating with, cooperating with, or providing information to a governmental, regulatory, or law-enforcement authority, or from engaging in whistleblowing or other activity protected by applicable law. No prior notice to or authorization from HPLY is required for legally protected reporting.

19. Artificial Intelligence and Automated Systems

Users may not use artificial intelligence, machine learning, automation, synthetic media, or similar systems to commit fraud, impersonate individuals, fabricate nonprofit evidence, manipulate donations, evade safeguards, generate prohibited content, or misuse HPLY information.

Users may not use content owned or licensed by HPLY, or Personal Information obtained through the Services, to train, fine-tune, test, benchmark, or enrich an artificial-intelligence or machine-learning system without HPLY’s prior written authorization and any lawful basis, consent, or other authorization required by applicable law.

Automated tools interacting with HPLY must comply with applicable API terms, rate limits, security requirements, data-use restrictions, and disclosure obligations. Users remain responsible for automated output and its use.

Where HPLY makes AI-assisted or automated features available, those features may be subject to additional terms and disclosures.

20. High-Risk Goods, Services, and Activities

HPLY may not be used to promote or fund illegal weapons, explosives, controlled substances, counterfeit goods, stolen property, unlawful gambling, trafficking, sexual exploitation, bribery, cybercrime, or other prohibited goods or services.

HPLY may restrict fundraising connected to political campaigns, commercial ventures, investment opportunities, lending, litigation funding, debt relief, regulated products, medical claims, or other high-risk activities unless HPLY expressly authorizes the activity and all applicable legal and disclosure requirements are satisfied.

Users may not disguise a commercial sale, investment, loan, raffle, prize, membership, or purchase as a charitable donation.

21. Evasion, Circumvention, and Repeat Violations

Users may not evade a suspension, termination, block, geographic restriction, sanctions control, payment restriction, verification requirement, or other enforcement measure.

Prohibited evasion includes creating replacement accounts, using another person’s account, changing identifiers, rotating devices or networks, using intermediaries, or altering information to conceal a prior violation.

HPLY may consider related accounts, organizations, representatives, payment methods, devices, domains, or transactions when investigating evasion, coordinated abuse, or repeat violations.

Suspension, restriction, deactivation, and termination of a participating nonprofit organization remain governed by the HPLY Nonprofit Organization Participation Agreement.

22. Reporting Violations

Users are encouraged to report suspected violations of this Policy to HPLY at support@hply.org or through another reporting method HPLY makes available.

Reports should be made in good faith and should include information reasonably necessary to understand the concern. Reporters should not obtain evidence through unauthorized access, impersonation, unlawful surveillance, or other prohibited conduct.

Submitting a report does not guarantee a particular outcome, response time, disclosure of investigative details, or availability of an appeal.

23. Investigation, Enforcement, and Protective Action

HPLY may investigate suspected violations using account records, transaction data, content, logs, public records, payment-provider information, user or nonprofit submissions, and other lawful sources.

HPLY may require additional verification or supporting information and may preserve relevant evidence. Users must not destroy, alter, fabricate, conceal, or retaliate concerning evidence relevant to an investigation.

Depending on the conduct and risk, HPLY may warn a user, request correction, remove or restrict content, limit communications, rate limit traffic, revoke credentials, require reverification, suspend a feature, disable donation functionality, restrict payment activity, suspend or terminate an account, preserve records, notify affected parties, or refer a matter to a payment provider, regulator, law-enforcement authority, or other appropriate party.

For a participating nonprofit organization, any suspension, restriction, deactivation, or termination of participation is governed by the HPLY Nonprofit Organization Participation Agreement.

HPLY may act without prior notice when reasonably necessary to address imminent harm, fraud, payment risk, child safety, security compromise, sanctions concerns, unlawful activity, preservation obligations, or material risk to users, nonprofit assets, HPLY systems, or the public.

HPLY is not obligated to monitor every user, nonprofit, transaction, message, profile, external service, or item of content. Failure to take action in one instance does not waive HPLY’s right to act in another.

24. Policy Updates and Contact Information

HPLY may update this Policy prospectively to reflect changes in law, technology, security practices, payment requirements, nonprofit programs, operational experience, or platform functionality. HPLY may provide notice of material changes where required by law or HPLY’s Terms of Service.

Questions or reports concerning this Policy may be sent to support@hply.org or mailed to:

HPLY Inc. 3517 Camino del Río South, Suite 215 Mailbox #83 San Diego, CA 92108 United States

Last Updated: August 10, 2026