rexa
EN
Sign in
Legal

Acceptable Use Policy

Last updated · 2026-05-03

Use of the Rexa service is subject to this Acceptable Use Policy ("AUP"). The AUP is incorporated into the Terms of Service.

1. Don't break the law

Don't use Rexa to violate applicable laws or regulations, including financial record-keeping rules, tax obligations, anti-money-laundering requirements, export controls, or sanctions.

2. Don't store cardholder data we don't accept

Rexa stores last-4 of card numbers only. Don't paste full PAN, CVV, magnetic stripe data, or chip data into any field — including notes, comments, or receipt bodies. We will reject and scrub anything we detect that looks like full card data.

3. Don't abuse the platform

  • No automated scraping beyond the rate limits documented in the API.
  • No reverse-engineering, decompiling, or attempting to extract source code.
  • No load-testing without prior written approval (it pages our oncall).
  • No bypassing authentication, tenant isolation, or rate limits. If you find a weakness, see security.txt.

4. Don't host abusive content

Receipts and notes must relate to legitimate business expenses. No malware, phishing kits, illegal content, intimate imagery, or content that infringes intellectual property rights.

5. Don't impersonate

Don't sign up under someone else's name, falsify your role, or claim a workspace you're not authorized to administer. Workspace admins can invite real teammates through the in-app invite flow.

6. AI features

Don't attempt to use the AI assistant to produce content that violates this AUP (illegal advice, malware generation, impersonation). The assistant has prompt-injection guards but isn't a content moderation system; you are responsible for the prompts you send.

7. Reporting violations

Report AUP violations to abuse@rexa.one. We triage within one business day.

8. Enforcement

We may suspend or terminate access for AUP violations. For severe or recurring violations we may notify relevant authorities. We aim to give 24 hours' notice before non-emergency suspension; for security or legal emergencies we may act immediately.