Acceptable Use Policy

Preamble

This Acceptable Use Policy ("AUP") defines permitted and prohibited behavior when using services offered by Vertus Stanley, a sole proprietor doing business under the trade name Hypora (NEQ 2275462044). It forms an integral part of the Terms of Service.

By using our services, you agree to comply with this AUP. Non-compliance may result in suspension or termination of your account without notice or refund, in addition to any claim for damages.

1.Scope

This AUP applies to:

• any subscribing mortgage broker ("Customer");
• any person acting on behalf of or under the authority of a Customer (employees, partners, collaborators);
• any end-user (borrower) invited to upload documents via the Hypora portal;
• any person accessing Hypora services by any means.

2.Prohibited uses

2.1 Illegal or non-compliant use

• commit or facilitate a criminal, civil or regulatory offense;
• circumvent or violate applicable law, notably the PCMLTFA, Quebec's LDPSF, or equivalent law;
• launder funds, finance terrorism or circumvent Canadian economic sanctions;
• participate in mortgage fraud, identity theft, document falsification or production of misleading documents;
• transmit to a lender information you know or should reasonably know is inaccurate, incomplete or misleading.

2.2 Impersonation and unauthorized access

• upload, in a person's name, documents or information without their free and informed consent;
• create an account providing false information or impersonating another person;
• access, attempt to access or allow an unauthorized third party to access another Customer's account;
• share your credentials with unauthorized persons;
• reuse identity documents, verification records or personal information from one client for another client without explicit consent, including government-issued IDs, passports, driver's licenses, permanent resident cards and SIN-related documents.

2.3 Security and technical integrity

• attempt to circumvent, disable or interfere with security, authentication or access controls;
• upload malicious code, viruses, ransomware, spyware or any file designed to disrupt the services or a third-party system;
• reverse-engineer, decompile, disassemble or attempt to extract the source code, except as strictly permitted by law;
• use scripts, robots, crawlers, scrapers or any automated means to access the services, extract content or create accounts;
• submit a volume of requests exceeding published API limits or likely to degrade service quality;
• conduct penetration tests or vulnerability scans without prior written authorization from contact@hypora.ca.

2.4 Inappropriate content

• defamatory, hateful, discriminatory, obscene or violence-inciting content;
• content infringing third-party intellectual property;
• personal information of third parties obtained without consent;
• content unrelated to the legitimate purpose of a mortgage file.

2.5 Resale and sublicensing

• resell, lease, lend or sublicense access to the services without prior written agreement;
• use the services to offer a competing service, or to train a competing AI model.

2.6 Prohibited interaction with Filogix

• use Hypora to attempt automated data entry into Filogix Expert;
• use Hypora-exported data to feed a robot, script or extension that interacts with filogix.com;
• call the private Filogix Link API without a signed partnership with Finastra.

The broker user is solely responsible for complying with their contractual obligations to Finastra.

2.7 Misuse of communications

• send spam, unsolicited commercial messages or phishing via messaging features;
• circumvent Canadian anti-spam protections (CASL).

3.Customer obligations

As a licensed professional, the Customer agrees to:

• obtain free and informed consent from each End-user before uploading their information;
• inform the End-user of Hypora's role as a service provider, per section 8 of Quebec's privacy act;
• maintain current professional licenses throughout the subscription;
• manage employee or collaborator access and revoke access when they leave;
• report to Hypora any security or privacy incident they become aware of.

4.Consequences of a violation

Hypora may, at its sole discretion, take one or more of the following actions:

• issue a written warning;
• temporarily suspend account access;
• restrict certain features;
• terminate the account without refund;
• retain audit logs relating to the violation as needed under applicable law;
• report the violation to the relevant authorities (FINTRAC, RCMP, AMF, FSRA, police) where Hypora has reasonable grounds to suspect a criminal or regulatory offense;
• initiate appropriate civil or criminal proceedings to recover damages.

The severity of measures depends on the nature, severity, repetition and harm caused.

5.Reporting abuse

If you observe behavior that violates this AUP, report it immediately to:

• Security: contact@hypora.ca (technical incidents, vulnerabilities, suspected intrusion)
• Legal: contact@hypora.ca (fraud, impersonation, contractual breach)
• Support: contact@hypora.ca (usage abuse, inappropriate content)

Hypora reviews reports promptly and protects the identity of good-faith reporters.

6.Changes

Hypora may amend this AUP to adapt to evolving threats, abusive practices or legal frameworks. Material changes will be communicated by email and take effect within a reasonable period.

7.Contact us