ACCEPTABLE USE POLICY (AUP) NEXAXT WECO

Version: 1.0 Effective date: 11 May 2026 Canonical URL: https://weco.nexaxt.com/pages/aup-en.html

1. GENERAL

1.1. This Acceptable Use Policy ("AUP") is a binding part of the Agreement Documents and applies to every Client and Service user.

1.2. AUP breach is grounds for immediate suspension of Service and/or termination of the Agreement without prior notice, depending on severity.

2. PROHIBITED USE

2.1. The Client / user shall not:

2.1.1. Illegal content and activity

(a) publish on SPV sites built with the Software materials known to be false; (b) use the Software to mislead investors or breach issuer disclosure obligations; (c) publish pornography, sexual-violence material (including CSAM — child sexual abuse material); (d) publish incitement to violence, extremism, terrorism; (e) propagate discrimination on any ground; (f) use the Software for activity violating applicable law (money laundering, fraud, tax crimes, etc.).

2.1.2. Infringement of third-party rights

(a) publish materials infringing third-party IP without licence; (b) use materials protected by image / personality rights without consent; (c) use third-party trademarks without permission.

2.1.3. Technical abuse

(a) reverse-engineer the Software beyond what RK Civil Code and FSL 1.1 permit; (b) disable, circumvent, modify or remove the License JWT verifier, the bcrypt admin-password gate, AES-256-GCM, audit logging, or any other protective mechanism; (c) use the Software to attack third-party infrastructure (DDoS, brute-force, injection, etc.); (d) distribute malware, viruses, trojans, ransomware, spyware via the Software; (e) send spam, phishing, scams via the Software; (f) use the Software to scrape sites in violation of their robots.txt or ToS; (g) grant access to the Software to persons not licensed.

2.1.4. Sanctions and AML

(a) provide the Service to sanctioned persons (Public Offer §15); (b) use the Software in violation of AML/CFT (Public Offer §16); (c) circumvent sanctions through shell entities.

2.1.5. Support abuse

(a) use support channels to insult, threaten or harass Licensor staff; (b) submit repetitive deliberately-false tickets; (c) attempt to extract confidential information about other Clients via support; (d) use support for purposes unrelated to operating the Software.

3. CLIENT DUTIES

3.1. The Client: (a) informs its admin users and authorized persons of this AUP; (b) ensures all persons acting through the account comply; (c) notifies the Licensor of any AUP breach it discovers.

4. LICENSOR RESPONSE

4.1. Immediate suspension without notice for: (a) detection of CSAM or other particularly serious illegal content; (b) active attack from the Software on third parties; (c) confirmed sanctions or AML red flag; (d) attempt to disable protective mechanisms.

4.2. Notice with cure demand for: (a) suspected breach not in §4.1; (b) the Client has 5 business days to cure or explain.

4.3. Termination for: (a) non-cure after notice; (b) repeat breaches; (c) §4.1-category breaches.

4.4. No refund. On termination for AUP breach, the Licensor does not refund (Refund Policy §4.3).

4.5. Reporting to authorities. On detection of CSAM, extremist material, money-laundering signs, or other serious crime indicators, the Licensor may (and in some cases must) notify the competent law-enforcement authorities of the Republic of Kazakhstan.

5. CONFIDENTIALITY OF BREACH INFORMATION

5.1. Detected-breach information is treated confidentially, except: (a) mandatory reporting to authorities; (b) disclosure in litigation; (c) anonymized disclosure to protect other Clients.

6. THIRD-PARTY ABUSE REPORTS

6.1. Third parties believing the WECO Service is being used in violation of this AUP or of their rights may complain to anton.orlov@nexaxt.com, subject "[WECO Abuse Report]".

6.2. The complaint must include: (a) reporter contact; (b) description of the breach; (c) URL of the affected resource (if any); (d) evidence (screenshots, links); (e) for IP claims — declaration on good faith that the reporter is the rights-holder or authorized agent.

6.3. The Licensor reviews within 10 business days.

7. CONTACTS

NEXA IKS TI LLP Email: anton.orlov@nexaxt.com Subject for abuse: "[WECO Abuse Report]" / "[WECO AUP Issue]"

End of AUP v1.0.