1. Purpose

GaulBridge Ltd. ("GaulBridge", "we", "us") provides payment, foreign exchange, multi-currency, card, and digital asset services to personal and business clients. This Acceptable Use Policy ("AUP") sets out the rules for using those services — what is permitted, what is not, and what happens if these rules are breached.

These rules exist to protect our clients, our business, and the integrity of the financial system. They reflect our obligations under Canadian law, FINTRAC requirements, and the requirements of our payment infrastructure partners.

2. Who this applies to

This policy applies to all GaulBridge account holders — personal and business — and to any person or entity acting on behalf of an account holder. By using our services, you confirm that you have read this policy and agree to comply with it.

If you are a business client, you are responsible for ensuring that all employees, directors, agents, and authorised users who access your GaulBridge account also comply with this policy.

3. Permitted use

GaulBridge services may only be used for lawful purposes. Permitted uses include:

• Sending and receiving personal remittances and payments
• Making and receiving legitimate business payments, including supplier payments, payroll, and invoice settlement
• Foreign exchange conversion for personal or business purposes
• Holding multi-currency balances for legitimate personal or business use
• Using pre-paid cards for personal or business expenditure
• Processing batch payments for legitimate business operations
• Accessing digital asset services (where eligible) for payment settlement or treasury purposes in accordance with our Terms and Conditions

All use of GaulBridge services must be consistent with your stated account purpose and the information you provided during onboarding. If your business activities change materially, you must notify us.

4. Prohibited use

4.1 Financial crime

• Money laundering or any activity designed to conceal the origin or destination of funds
• Terrorist financing or providing funds or services to designated individuals or organisations
• Fraud, including identity fraud, account takeover fraud, push payment fraud, and invoice fraud
• Tax evasion or facilitating the tax evasion of any person or entity
• Bribery, corruption, or facilitation payments
• Processing proceeds of any criminal activity

4.2 Sanctions violations

• Transacting with any individual, entity, or organisation listed on Canadian, UN, EU, UK, or US sanctions lists
• Sending or receiving funds to or from a prohibited jurisdiction (see Section 6)
• Attempting to circumvent sanctions controls through third parties, shell companies, or indirect routing
• Providing financial services to sanctioned persons or entities, directly or indirectly

4.3 Deception and misuse

• Providing false, misleading, or incomplete information at onboarding or at any point during the relationship
• Using your account for purposes other than those stated during onboarding without prior notification
• Impersonating another person or entity
• Using another person's account or credentials without authorisation
• Structuring transactions to avoid reporting thresholds or detection
• Using our services in a way designed to circumvent our controls or those of any regulatory authority

4.4 Prohibited transactions

• Payments related to unlicensed gambling, illegal lotteries, or prohibited gaming activities
• Payments for illegal drugs, controlled substances, or related paraphernalia
• Payments for weapons, arms, or military equipment without appropriate licensing
• Transactions involving child exploitation material or any illegal content
• Payments for services that are illegal in the sender's or recipient's jurisdiction
• Payments to or from unregistered or unlicensed financial services providers
• High-yield investment programme (HYIP) transactions or Ponzi scheme-related payments

5. Prohibited business types

GaulBridge does not provide services to the following business types, regardless of jurisdiction:

• Unregistered or unlicensed money services businesses (MSBs), currency exchanges, or payment processors
• Shell banks — banks with no physical presence in any jurisdiction
• Businesses primarily engaged in cash-intensive activities where the source of funds cannot be verified
• Anonymous or bearer share companies where ultimate beneficial ownership cannot be established
• Businesses involved in the manufacture, sale, or distribution of illegal weapons or controlled substances
• Businesses providing services to sanctioned persons, entities, or jurisdictions
• Businesses whose primary activity is mixing, tumbling, or obfuscating the origin of digital assets
• Any business that is unlicensed for the regulated activity it is conducting

If you are uncertain whether your business type is eligible, please contact us at compliance@gaulbridge.com before applying.

6. Jurisdiction restrictions

GaulBridge applies jurisdiction-based restrictions to all accounts and transactions. These restrictions reflect our regulatory obligations, our payment infrastructure requirements, and our own risk framework.

Jurisdiction status is reviewed regularly and may change. The current status of all jurisdictions is set out below. If your jurisdiction is not listed as supported, please contact us before applying.

This list is subject to change without notice in response to changes in law, regulatory guidance, or sanctions designations. GaulBridge reserves the right to restrict or terminate services to any jurisdiction at any time.

7. Digital asset restrictions

In addition to the general restrictions above, the following specific rules apply to digital asset services:

• Canadian clients: digital asset services are not available to clients based in Canada under any circumstances
• Reverse solicitation only: GaulBridge does not market or promote digital asset services. They are available only to non-Canadian clients who independently approach us
• Permitted assets only: only USDT and USDC (for payment/settlement) and BTC and ETH (for institutional treasury, subject to eligibility) are available. No other tokens, coins, NFTs, or digital assets are supported
• No mixing or obfuscation: digital assets must not be routed through mixing services, tumblers, or privacy coins before or after transacting with GaulBridge
• Source of funds: you must be able to demonstrate the legitimate origin of any digital assets used in transactions with GaulBridge
• No self-hosted wallet restrictions: transactions from self-hosted or unhosted wallets may be subject to additional verification requirements

8. Monitoring and enforcement

GaulBridge continuously monitors transactions and account activity to detect suspicious behaviour, sanctions breaches, and violations of this policy. We use automated screening tools and manual review processes.

If we identify or suspect a breach of this policy, we may:

• Block or delay an individual transaction pending investigation
• Request additional information or documentation from you
• Suspend your account temporarily while we investigate
• Terminate your account with notice, or immediately where required by law
• Return funds to their source where legally permitted
• Report the matter to FINTRAC, law enforcement, or other relevant authorities as required by law

We may be prohibited by law from informing you that a report has been made to a regulatory authority or law enforcement agency.

9. Reporting concerns

If you become aware of any activity that may breach this policy — whether relating to your own account or another party — please report it to us immediately.

• Compliance concerns: compliance@gaulbridge.com
• Account security issues: support@gaulbridge.com
• Whistleblowing: see our Whistleblowing Policy for anonymous reporting options

10. Changes to this policy

GaulBridge may update this Acceptable Use Policy at any time to reflect changes in law, regulation, our payment infrastructure, or our risk framework. We will give you reasonable notice of material changes. Your continued use of our services after the effective date of any change constitutes acceptance of the revised policy.

Jurisdiction lists may be updated without notice in response to regulatory changes or sanctions designations.

11. Contact

For questions about this policy or to check whether a specific use case or jurisdiction is permitted: