Acceptable use

Use Institution only for lawful, authorized purposes. Provide truthful identity, ownership, business, transaction and filing information. Do not impersonate another person, misrepresent your authority, falsify a receipt or ledger, conceal a material fact from a professional, or request a filing you know is false.

Do not use the service to support fraud, money laundering, tax evasion, sanctions evasion, theft, deceptive payment activity or other unlawful conduct. You are responsible for determining whether your business requires licenses and approvals. We may request information reasonably necessary to verify authority, meet applicable law or investigate a concrete misuse concern.

Access only workspaces, records, tools and provider permissions you are authorized to use. Do not bypass authentication or authorization, probe another customer's records, share stolen credentials, disable security safeguards, distribute malware or exploit a vulnerability. Do not use an integration to obtain data or perform actions beyond the permissions granted by its owner.

Do not overload the service, evade reasonable rate or usage limits, create deceptive accounts to bypass restrictions, or interfere with another user's work. Do not reverse engineer protected software except where a law gives a right that cannot be excluded. Ordinary use of permitted export features, interoperability rights and legitimate security reporting remain subject to applicable law.

Upload or connect information only when you have the necessary authority, legal basis and permissions. Respect third-party intellectual property, privacy and confidentiality. Do not expose personal information to an unauthorized team member, publish confidential client documents or use someone else's logo to imply an endorsement.

Minimize sensitive data in messages and attachments. Do not paste passwords, recovery codes, payment credentials or private keys into Max AI, support chat or legal email. Use the approved provider authorization or secure document workflow for records needed to deliver the service.

Do not submit an unauthorized payment, change bank details deceptively, divert funds, fabricate an approval or instruct another person to do so. Verify payee details and use the applicable approval workflow. A connection to an account is not permission to move its money.

Do not use another person's taxpayer signature, professional credential, electronic filing authorization or government account without authority. Do not request unsupported deductions, fabricated expenses, false employment records or misleading entity documents. We may pause the affected work while a material discrepancy is investigated.

Use Max AI and automation within the same permissions and legal limits as other features. Do not attempt to extract hidden instructions, secrets, other customers' data or restricted tools, or manipulate an AI workflow into bypassing required approval. Review generated work before consequential use and do not present unreviewed output as a signed professional opinion.

Respect licenses and reasonable access limits for market data, reference content and third-party material. Do not redistribute a restricted data feed, remove attribution or use automated collection to bypass a provider's contractual or technical restrictions. These rules do not prevent lawful search indexing or use expressly permitted by the site or applicable law.

Do not use the service for spam, phishing, threats, unlawful harassment or deceptive communications. Keep requests and instructions relevant to the engagement. Cooperate with a reasonable investigation of suspected unauthorized activity, while retaining your right to challenge a decision and protect legally privileged information.

A good-faith complaint, privacy request, payment dispute, regulatory report or criticism is not prohibited misuse. We do not use this policy to prevent lawful reporting or to require favorable reviews.

We may investigate suspected violations and restrict the affected feature or access when reasonably necessary to protect customers, systems or legal compliance. Where safe and practical, we will explain the issue, provide notice and allow a reasonable opportunity to correct it. A serious security threat, unlawful demand or continuing abuse may require immediate action.

Enforcement follows the suspension and termination provisions in the Terms. We will not knowingly delete another customer's records or withhold records that must legally be returned as a punishment. Preserved evidence, legal holds, professional duties and privacy obligations continue to apply. Contact us if you believe a restriction was applied in error.

Send an initial report to institution.legal@premiergm.com describing the affected page or feature, approximate time and non-sensitive steps to reproduce the issue. Do not access, copy or expose another person's records to demonstrate a problem, and do not send live credentials or client documents in the initial message. We can arrange a secure channel for necessary evidence.

Reports are received by Premier Global Management, LLC, owner and operator of Institution and institutionhq.com, 16192 Coastal Highway, Lewes, DE 19958, United States. This reporting channel does not grant permission for intrusive security testing or promise a vulnerability reward.