Acceptable Use Policy

Acceptable Use Policy

Univia Tax — UAE Tax Compliance & Business Records

Effective date: 4 August 2026 · Last updated: 19 Jul 2026

This policy forms part of the Terms of Use and applies to everyone who uses Univia Tax. Breaching it is a breach of the Terms.

The principle is simple: use the Service for your own lawful business tax compliance, do not attack it, and do not try to reach anyone else's data.

1. Permitted use

You may use Univia Tax to maintain the tax-relevant business records of your own business, or of a client whose authority you hold, and to compute, review, and prepare UAE VAT and Corporate Tax filings that you or your client make.

2. Prohibited use — lawfulness

You must not use the Service:

1. To break any applicable law, including UAE tax, anti-money-laundering, sanctions, data protection, and consumer protection law.

2. To prepare, support, or conceal a false, fraudulent, or deliberately understated tax filing, or to construct records that misrepresent transactions that did not occur as recorded.

3. To launder money, finance terrorism, or process the proceeds of crime.

4. Where you, your business, your beneficial owners, or the transactions you record are subject to sanctions imposed by the UAE, the United Nations, or another applicable regime, or are located in a sanctioned jurisdiction.

5. To process records for a third party without that party's authority (see clause 2.3 of the Terms of Use).

6. To infringe anyone's intellectual property, confidentiality, or privacy rights.

7. To upload personal data you have no lawful basis to disclose to us, or to upload special-category personal data — health, biometric, genetic, religious, or political data. Emirates ID, passport, and visa copies are not required by the Service and must not be uploaded.

3. Prohibited use — security and tenant isolation

You must not:

1. Attempt to access another customer's data. Univia is a multi-tenant service and isolation between tenants is enforced technically. Any attempt to reach data belonging to another user, company, or firm — by manipulating identifiers, parameters, tokens, requests, or by any other means — is a serious breach and will result in immediate termination and, where appropriate, referral to the authorities.

2. Probe, scan, penetration-test, fuzz, or stress-test the Service or its infrastructure without our prior written permission. If you want to test our security, use the responsible disclosure route in docs/legal/security-and-incident-notice.md and ask first.

3. Circumvent or attempt to circumvent authentication, authorisation, rate limits, plan limits, quotas, upload validation, file-type checks, or any other control.

4. Upload malware, or any file whose contents do not match its declared type, or any file intended to exploit a parser, a viewer, or a downstream system.

5. Interfere with the Service's operation, degrade it for others, or place a deliberately excessive load on it.

6. Share, sell, or transfer account credentials, or allow anyone else to use your account. Create separate users instead.

7. Impersonate another person or business, or misrepresent your authority to act.

4. Prohibited use — the software itself

You must not:

1. Copy, modify, translate, decompile, disassemble, or reverse engineer the Service or any part of it, or attempt to derive its source code, engine rules, prompts, or law registry, except to the extent that such a restriction is unenforceable under applicable law.

2. Scrape, crawl, harvest, or systematically extract content, data, engine outputs, legal references, or prompts from the Service, whether manually or by automated means.

3. Access the Service by any automated means other than an interface we provide for that purpose.

4. Resell, sublicense, rent, lease, white-label, or provide the Service to a third party as your own product, or use it to build a competing product or service.

5. Use the Service, or any output of it, to train, fine-tune, evaluate, or benchmark any AI or machine-learning model.

6. Remove, obscure, alter, or suppress any disclaimer, legal citation, verification stamp, working, or attribution the Service attaches to an output — including the standing tax disclaimer. Outputs must be shared with their disclaimers intact.

7. Present any output of the Service as issued, approved, or verified by Univia Global Consultancy as a professional adviser, by a Tax Agent, or by any government authority.

5. Prohibited use — misrepresentation

You must not state or imply, to a client, an authority, or anyone else, that:

1. Univia Tax holds accreditation, approval, certification, registration, or endorsement from the Federal Tax Authority, the Ministry of Finance, or any other authority;

2. Univia Tax is a Tax Agent, an Accredited Service Provider for e-invoicing, or a Peppol Access Point;

3. a filing was prepared, reviewed, or approved by Univia Global Consultancy, unless you hold a signed engagement letter for that work; or

4. any output of the Service constitutes tax advice.

See docs/legal/regulatory-non-affiliation-notice.md.

6. Fair use

"Unlimited" allowances on the Pro and Agency plans mean unlimited for ordinary business use by a single business or firm. They do not permit resale, bulk automated processing on behalf of undisclosed third parties, or usage that materially degrades the Service for other customers. Where we believe usage exceeds fair use, we will contact you and discuss it before taking any action.

Manual record entry is never metered. We do not penalise a business for honestly recording its transactions.

7. Consequences of breach

Depending on the seriousness of the breach, Univia may:

1. Contact you to discuss it, and ask you to stop or remedy it;

2. Apply a technical limit — rate limiting, feature restriction, or throttling;

3. Suspend your account or specific functionality, with notice of the reason as soon as practicable;

4. Terminate your account and these Terms immediately, under clause 14.4 of the Terms of Use;

5. Preserve and disclose relevant records where required by law or where necessary to protect the Service, other customers, or a third party;

6. Report the matter to law enforcement, a regulator, or an affected third party.

Where a breach is capable of remedy and does not create a serious or immediate risk, we will normally give you a reasonable opportunity to remedy it before suspending or terminating. Where it does create such a risk — in particular an attempt to reach another tenant's data — we will act immediately.

Termination for breach does not entitle you to a refund, and does not limit any other remedy available to Univia.

8. Reporting misuse

If you become aware of misuse of the Service, tell us at support@univiaglobal.com . If you have found a security vulnerability, please follow the responsible disclosure process in docs/legal/security-and-incident-notice.md — we will not pursue a researcher who acts in good faith and within that process.

9. Changes

We may update this policy. Material changes take effect on 30 days' notice, as set out in clause 22.1 of the Terms of Use.