Home/Acceptable Use Policy

Acceptable Use Policy

Last Updated: October 2026

1. Scope

This Acceptable Use Policy applies to your use of every part of Capmatter - the marketing website, the Capmatter app, and its employee and investor portal - and supplements our Terms and Conditions. Where the two differ on the same topic, the Terms and Conditions govern.

2. Prohibited conduct - platform-wide

You must not:

Attempt to gain unauthorized access to any account, company, or data that isn't yours
Reverse engineer, decompile, or attempt to extract the source code of the platform
Interfere with, disrupt, or degrade the platform's operation, including circumventing rate limits or other abuse-prevention controls
Upload malicious code, malware, or content designed to exploit a vulnerability
Use automated means (scraping, bots, bulk requests) to access the platform outside of a documented integration
Misrepresent your identity, your company, or your authority over any data you submit
Use the platform for any unlawful purpose, or to facilitate fraud, money laundering, or securities violations
Circumvent subscription plan limits or restrictions

3. Equity record integrity

Cap tables, grants, registers, and approvals are records other people rely on. You must not:

Enter shareholder, cap table, ESOP, valuation, or tax data you know to be false with intent to mislead an investor, employee, auditor, or regulator
Deliberately misstate when a transaction happened in order to mislead a tax authority or regulator
Record a company, or people, you are not authorised to act for
Circumvent two-person (maker-checker) approval - for example by sharing accounts or credentials so one person can both submit and approve
Impersonate another founder, company, employee, or investor

4. Stakeholder data and the portal

Companies hold personal data about their employees and investors on Capmatter. You must not:

Use stakeholder data (names, emails, tax identifiers, holdings) for any purpose other than administering the company's equity and obligations
Sign in to the portal with, or attach a grant to, an email address that does not belong to the intended holder
Accept a grant, request an exercise, or tender shares on someone else's behalf without their authority
Share data-room links or exported reports with anyone the company has not authorised to receive them

5. Documents and content you upload

You are solely responsible for documents, notes, and other content you upload or enter. You confirm you have the right to store and share it, that it does not infringe anyone else's intellectual property, and that it complies with this policy. See our Copyright Policy for how we handle infringement reports.

6. AI assistant and automated insights

The AI assistant and insights answer from your company's own records. You must not use them to produce deliberately false statements about a company or individual, and you remain responsible for reviewing any output before acting on it or sharing it - see our Terms and Conditions for the full output disclaimer.

7. Abuse prevention and enforcement

We use automated rate limiting on high-volume actions (registration, form submissions, payments, imports, exports) and independent server-side authorization checks on every write, to limit the impact of a compromised account or automated abuse. Reported violations are reviewed by administrators, and enforcement is proportionate to severity - ranging from removal of the offending records or content to suspension or permanent termination for serious or repeated violations.

8. Reporting a violation

Return Home