Acceptable Use Policy
Rules for using the AI TaxPilot service
Aicountant Ltd (trading as AI TaxPilot) Version 1.0 — Effective 01 May 2026
1. About this policy
This Acceptable Use Policy ("AUP") sets out the rules you must follow when using the AI TaxPilot service (the "Service") provided by Aicountant Ltd, trading as AI TaxPilot. The AUP is part of, and must be read together with, our Terms and Conditions and our Privacy Policy. By using the Service you agree to comply with this AUP. We can update this AUP from time to time and will publish the latest version at https://www.aitaxpilot.com.
2. Who this applies to
- Account holders and any Authorised Users who access the Service through their account.
- Visitors to our website.
- Anyone we permit to integrate with the Service through our APIs.
3. General rules
- Use the Service only for lawful purposes and only in accordance with these rules and the Terms and Conditions.
- Comply with all applicable laws and regulations, including UK tax law, the UK GDPR, the Data Protection Act 2018, and any laws of any other country from which you access the Service.
- Provide accurate, current and complete information to us and to HMRC.
- Keep your login credentials secret. You are responsible for everything that happens under your account.
- Notify us immediately at support@aicountant.co.uk if you suspect unauthorised access to your account.
4. Prohibited use
You must not, and you must not permit any Authorised User or third party to:
- Use the Service for any fraudulent, deceptive, or unlawful purpose, or to facilitate a criminal offence.
- Submit a tax return, update or declaration to HMRC on behalf of any person without their express authority.
- Provide false information to us or to HMRC, or use the Service to conceal income or evade tax.
- Impersonate any person or misrepresent your relationship with any person or organisation.
- Upload or transmit content that infringes the intellectual property rights, privacy rights, or other rights of any person.
- Upload or transmit content that is unlawful, defamatory, obscene, abusive, hateful, or otherwise objectionable.
- Upload special category personal data (for example, data concerning health, race, religion, or political opinions) unless strictly necessary and you have a lawful basis under Article 9 UK GDPR.
- Introduce any virus, worm, ransomware, time-bomb, keystroke logger, spyware, or other malicious code into the Service.
- Attempt to gain unauthorised access to the Service, our infrastructure, or any account, system, or data that does not belong to you.
- Probe, scan, penetration-test, load-test, scrape, or otherwise stress-test the Service without our prior written consent.
- Interfere with or disrupt the Service, the servers or networks on which it is hosted, or HMRC's systems.
- Reverse-engineer, decompile, disassemble, or attempt to extract the source code or models underlying the Service, except to the extent permitted by law.
- Use the Service or any of our content to train, fine-tune, or evaluate any third-party machine-learning model.
- Resell, sub-license, white-label, or otherwise commercialise the Service without our prior written agreement.
- Use automated means (bots, crawlers, scripts) to access the Service except through our published APIs and within their rate limits.
- Send unsolicited or bulk communications through, or using contact details obtained from, the Service.
- Bypass, disable, or interfere with any authentication, encryption, rate-limiting, or audit-logging feature of the Service.
5. HMRC-specific obligations
Because the Service connects to HMRC's Making Tax Digital APIs, additional rules apply that are not negotiable:
- You must not bypass, falsify, suppress, or otherwise interfere with the fraud prevention header data we are legally required to send to HMRC under Schedule 24 to the Finance Act 2021.
- You must not use VPNs, proxies, header-modification tools, browser plug-ins, virtual machines, or any other technique that misrepresents your device, location, or identity to HMRC.
- You must not attempt to file submissions on behalf of HMRC-registered persons without their authority through HMRC's standard agent or OAuth grant mechanisms.
- You must keep digital records in line with the Income Tax (Digital Requirements) Regulations 2021 and VAT Notice 700/22 — the Service helps you do this, but the obligation rests with you.
- If HMRC asks us to disclose information about your use of the Service in connection with a fraud, sanctions, or compliance investigation, we may be required to do so.
6. AI features
- Treat AI-generated outputs (categorisations, extractions, drafts, assistant answers) as suggestions, not as professional advice.
- Review every AI output before relying on it or submitting it to HMRC.
- Do not paste another person's confidential information, special category data, or material you do not have the right to share into AI features.
- Do not attempt to extract our system prompts, manipulate the AI to behave outside its intended purpose, or use the AI to generate harmful, illegal, or misleading content.
7. API and integrations
- Use only API keys issued to you and keep them secret.
- Stay within the published rate limits and respect any documented quotas.
- Do not republish, redistribute, or resell data obtained through the API in a way that competes with the Service.
- Tell us at support@aicountant.co.uk if your API key is exposed.
8. Reporting violations and security issues
- To report a breach of this AUP, email support@aicountant.co.uk.
- To report a suspected security vulnerability, email security@aicountant.co.uk. Please give us a reasonable time to investigate and remediate before any public disclosure.
- Do not test for vulnerabilities against accounts that are not your own.
9. Enforcement
- We may investigate suspected breaches of this AUP and may temporarily suspend access while we do so.
- We may remove content, terminate accounts, revoke HMRC OAuth grants, and pursue legal remedies for serious or repeated breaches.
- We will report unlawful activity to the relevant authorities, including HMRC, the National Crime Agency, the police and the ICO, where appropriate.
- Termination for breach does not entitle you to a refund.
10. Changes to this AUP
We may update this AUP from time to time. The current version is always available at https://www.aitaxpilot.com. Where changes are material we will give reasonable notice by email or in-app message.
11. Contact
Questions about this AUP should be sent to support@aicountant.co.uk. Aicountant Ltd 61 Bridge Street, Kington, United Kingdom, HR5 3DJ Companies House number: 17193613 Website: https://www.aitaxpilot.com
Questions? Contact our Data Protection Officer at dpo@aitaxpilot.com or write to Aicountant Ltd, England & Wales.