This Acceptable Use Policy ("AUP") governs your use of Coinfig (the "Service"), including the website, application, APIs if exposed, and any related features. It forms part of the Coinfig Terms of Use. Capitalised terms not defined here have the meaning given in the Terms of Use.
1) Purpose of this policy
Coinfig is designed to help users calculate crypto tax outcomes using the cost-basis method selected in their settings or applied by default for their tax jurisdiction (for South Africa, FIFO unless the user chooses otherwise) and generate supporting reports. This AUP exists to:
- Protect users and client data.
- Maintain platform security and availability.
- Prevent misuse that could expose Sixpence or users to legal, security, or operational risk.
2) General rules
You may use Coinfig only for lawful purposes and only in ways that comply with:
- South African law, including POPIA and any applicable tax laws.
- Any other laws that apply to you.
- The Coinfig Terms of Use and this AUP.
3) Prohibited activities
You must not do any of the following:
3.1 Unlawful, harmful, or deceptive use
- Use the Service to break any law or regulation.
- Use the Service to facilitate fraud, identity theft, money laundering, or any other unlawful activity.
- Use Coinfig outputs to fabricate records or mislead SARS, any other tax authority, or any third party.
- Use the Service to evade tax or to conceal assets or income from SARS or any other tax authority.
- Use the Service if you are, or are acting for, a person named on a sanctions list of the United Nations, South Africa, the United States (OFAC), the European Union or the United Kingdom, or if you are located in a country or region subject to comprehensive sanctions.
- Impersonate another person or misrepresent your authority to act for a taxpayer or client.
3.2 Unauthorised data submission
- Upload, sync, or process personal information, including ID numbers, tax numbers, transaction histories, and wallet addresses, unless you have lawful authority, mandate, or consent to do so.
- Upload confidential or regulated information you are not permitted to process or disclose.
3.3 Security violations
- Attempt to gain unauthorised access to any account, data, or system.
- Probe, scan, test, or exploit vulnerabilities, including penetration testing, without Sixpence's prior written permission, except for good-faith research reported to us under section 7.
- Circumvent authentication controls or session security.
- Introduce malware, spyware, ransomware, or any harmful code.
- Attempt to obtain API keys, credentials, or tokens belonging to others.
- Connect API keys or credentials with trading or withdrawal permissions, or with any other permission to move funds beyond what Coinfig asks for. Coinfig asks for read-only access wherever the exchange offers it (see section 5.4 of the Terms of Use).
3.4 Abuse of the platform or service disruption
- Interfere with, overload, or disrupt the Service, for example denial-of-service behaviour.
- Use automation that generates excessive requests, uploads, or syncs beyond reasonable use.
- Attempt to bypass rate limits, quotas, or technical controls.
- Use robots, spiders, scrapers or other automated means to access the Service, except through an API we provide for that purpose, or access it other than through the interfaces we provide.
3.5 Misuse of intellectual property and content
- Copy, modify, reverse engineer, decompile, or attempt to extract source code or proprietary logic, except to the extent permitted by law.
- Remove or obscure any proprietary notices, branding, or legal notices.
- Resell, sublicense, rent, or white-label Coinfig without a written agreement with Sixpence.
- Use Coinfig or its outputs to build, benchmark or train a competing product, or access the Service on behalf of a competitor.
- Use reports or calculation outputs to train an artificial intelligence or machine-learning model.
3.6 Sharing access and account misuse
- Share login credentials or allow unauthorised users to access your account.
- Sell or transfer your account to another person or entity without our approval.
- Use the Service in a way that violates your organisation's security policies if applicable.
4) Data integrity and user responsibilities
Because Coinfig produces outputs based on the data, classifications, and assumptions available to the Service:
- You must make reasonable efforts to upload, connect, and maintain complete and accurate data.
- You must not intentionally omit data or manipulate inputs to create misleading outputs.
- You must not deliberately misclassify transactions, alter base costs, change tax-year settings, or assign capital or revenue treatment in a way intended to mislead SARS, any other tax authority, or any third party.
- You remain responsible for reviewing automatically assigned classifications and correcting any errors.
- You remain responsible for verifying reports before filing, submitting, sharing, or relying on them.
5) Enterprise use (accountants, businesses, auditors)
If you use Coinfig on behalf of others, you must:
- Have a valid mandate or authority to process each client's data.
- Comply with POPIA and relevant professional obligations.
- Ensure only authorised staff can access client workspaces and data.
- Avoid commingling client data in ways that violate confidentiality or your client agreements.
6) Enforcement
We may take one or more of the following actions if we reasonably believe you have breached this AUP or pose a security or legal risk:
- Warn you and request corrective action.
- Suspend or restrict access to the Service.
- Terminate your account or contract.
- Remove or disable access to content or data where necessary.
- Report unlawful activity to relevant authorities where required or appropriate.
We may also cooperate with law enforcement or regulators where legally required.
We may monitor use of the Service to enforce this AUP, as described in our Privacy Notice. To the extent permitted by law, we are not liable for enforcement action taken in good faith under this AUP.
7) Reporting suspected misuse
If you believe:
- Your account has been compromised.
- Someone is misusing Coinfig.
- There is a security vulnerability.
Contact support@coinfig.tax as soon as possible. Do not publicly disclose vulnerabilities without written permission.
If you report a vulnerability to us in good faith, do not access or change other users' data, and give us a reasonable time to fix it before any disclosure we agree to, we will not take action against you under this AUP for your research.
8) Changes to this policy
We may update this AUP from time to time. We will notify you of material changes in the same way as changes to our Terms of Use (section 20). Continued use of the Service after the effective date means you accept the updated AUP.