Acceptable Use Policy

Connie ApS – Company Registration No. DK-42768294

Version 1

1. Purpose and scope

1.1. This Acceptable Use Policy (“AUP”) sets out what is and is not permitted when using Connie, the cloud-based document management and e-signature platform provided by Connie ApS (the “Supplier”). It forms part of the Supplier’s Terms & Conditions by reference (clause 8.1(iii)) and applies to every Customer, every user acting under a Customer’s account, and every use of Connie’s API and integrations.

1.2. The Customer is responsible for ensuring that its users comply with this AUP and for any use of its account, whether or not authorised by the Customer.

1.3. Capitalised terms have the meaning given in the Terms & Conditions.

2. Prohibited content

The Customer may not upload, send, store or make available through Connie any content that:

(a) is unlawful under Danish law or the law of any country in which the Customer uses Connie;

(b) depicts or promotes child sexual abuse, in any form;

(d) infringes any third party’s intellectual property, privacy or other rights;

(e) contains malware, viruses or other malicious code, or links to such content; or

(f) is pornographic or otherwise sexually explicit.

3. Prohibited conduct

The Customer may not use Connie to:

(a) send unsolicited bulk communications (spam), or send signature requests, notifications or documents to people who have no reasonable expectation of receiving them;

(b) engage in phishing, impersonation or social engineering – including sending signature requests that misrepresent the sender’s identity, organisation or purpose, or that are designed to harvest credentials, payment details or personal data;

(d) defraud, deceive or mislead any person;

(e) collect or process personal data without a valid legal basis, or in breach of the Customer’s obligations under the GDPR and applicable data protection law;

(f) build or support a product or service that competes with Connie (see Terms & Conditions clauses 8.5 and 13.2(b)); or

(g) resell, sublicense or otherwise make Connie available to third parties, except as expressly permitted in writing by the Supplier.

4. Integrity of electronic signatures

Because Connie produces legally relevant evidence, the Customer must not:

(a) sign, or cause a document to be signed, in the name of another person without that person’s authority;

(b) alter, remove, obscure or misrepresent a signature, audit trail, timestamp or cryptographic hash generated by Connie;

(c) present a document as signed through Connie when it was not, or present a simple electronic signature as an advanced or qualified signature;

(d) use Connie for documents that are excluded from electronic signature under applicable law, or for which the Customer has not verified that electronic signature is legally sufficient (see Terms & Conditions clause 9.2); or

(e) pressure, deceive or otherwise improperly induce a signer to sign.

5. Personal data and sensitive data

5.1. The Customer determines what data it collects through Connie, including through custom form fields. The Customer must:

(a) collect only personal data for which it has a lawful basis and a documented purpose;

(b) avoid collecting special categories of personal data (GDPR Article 9), data on criminal convictions (Article 10) or national identification numbers (such as Danish CPR numbers) unless strictly necessary and lawful, and inform the Supplier where such processing is intended so that appropriate safeguards can be confirmed;

(c) never collect payment card numbers, passwords, PIN codes or similar credentials through form fields or free-text fields;

(d) provide signers and other data subjects with the privacy information required by law; and

(e) respond to data subject requests concerning data processed in Connie, with the Supplier’s assistance as set out in the Data Processing Agreement.

5.2. The Customer must not upload personal data to Connie that the Customer is not permitted to transfer to a processor in Denmark, or that is subject to confidentiality or export restrictions the Customer has not cleared.

6. Security

The Customer and its users must not:

(a) share account credentials, or allow more than one person to use a single named user login;

(b) attempt to access another Customer’s account, data or documents, or any part of Connie’s systems not made available to the Customer;

(c) probe, scan or test the vulnerability of Connie or its infrastructure, or breach or circumvent any security or authentication measure, without the Supplier’s prior written permission (suspected vulnerabilities should be reported as described in section 10);

(d) introduce malicious code, or overload, disrupt or interfere with Connie, its networks or its users;

(e) bypass, replace or automate parts of Connie in a way not permitted by the Terms & Conditions (clause 8.6), including scraping, bulk extraction or use of unofficial integrations; or

(f) reverse engineer, decompile or otherwise attempt to derive Connie’s source code (clause 13.2).

The Customer is encouraged to enable multi-factor authentication for all users where available.

7. Fair use and system resources

7.1. Connie is provided for the Customer’s own business use in the volumes reasonably anticipated by the Customer’s plan. The Supplier may apply rate limits to the API and to sending, and may throttle or temporarily restrict usage that materially exceeds normal patterns, degrades service for other Customers or indicates automated abuse.

7.2. Where a Customer’s legitimate usage regularly exceeds the limits of its plan, the Supplier will propose an appropriate plan or enterprise agreement before restricting service.

8. Enforcement

8.1. The Supplier does not monitor Customer content as a matter of course. It may review content and usage where it receives a complaint, abuse report, legal request or automated signal indicating a possible breach of this AUP, to the extent permitted by law and the Data Processing Agreement.

8.2. Where the Supplier reasonably believes this AUP has been breached, it may, depending on the severity:

(a) notify the Customer and require remediation within a stated period;

(b) remove or disable access to specific content or functionality;

(d) terminate the Agreement for material breach under the Terms & Conditions (clause 10.2).

8.3. For breaches involving phishing, fraud, unlawful content, or threats to the security of Connie or its users, the Supplier may suspend access immediately and without prior notice. The Supplier will inform the Customer as soon as reasonably possible.

8.4. The Supplier may report unlawful activity to law enforcement or supervisory authorities where it is legally required or entitled to do so, and may preserve relevant data for that purpose.

8.5. Suspension or termination for breach of this AUP does not entitle the Customer to any refund of prepaid fees.

9. Take-down requests

If the Supplier receives a take-down request or infringement notice concerning the Customer’s content, the Supplier will handle it in accordance with clause 8.2 of the Terms & Conditions and will notify and consult with the Customer on next steps, unless prohibited by law.

10. Reporting abuse or security issues

Suspected abuse of Connie: security@getconnie.com

Security vulnerabilities or incidents: security@getconnie.com

Privacy and data protection: privacy@getconnie.com

The Supplier asks security researchers to report vulnerabilities responsibly and to allow a reasonable period for remediation before any public disclosure. The Supplier will not pursue legal action against good-faith research that complies with this section and does not access, modify or exfiltrate Customer data.

11. Changes

The Supplier may update this AUP following the procedure for changes to the Terms & Conditions (clause 1.2). The current version is always available in the Trust Center at trust.getconnie.com.

Changelog

Version 1.0 – October 8th 2026: Initial publication.