Acceptable Use Policy

Effective date: 29 June 2026

This Acceptable Use Policy forms an integral part of the Company's B2B Terms of Service.

Preamble

This Acceptable Use Policy (the "Policy" or "AUP") specifies and expands on Article 9 ("Acceptable Use") of the B2B Terms of Service (the "Terms") of "Tabb Pay Private Company" (trade name "TabbPay", hereinafter the "Company" or the "Provider"), with its seat in the Municipality of Galatsi, Attica (39 Farron Street, P.C. 11147).

The Policy is binding on every Business Customer (hereinafter the "Customer") and on each of its authorised users (in particular owners, managers and staff members) who accesses or uses the Platform. Capitalised terms not defined in this Policy have the meaning ascribed to them in the Terms.

Article 1 — Scope and Relationship to the Terms

1.1 This Policy governs the use of all of the Company's services and interfaces (the "Platform"), namely the dashboard (dashboard.tabbpay.com), the application programming interfaces (api.tabbpay.com), the guest experience (app.tabbpay.com) and the TabbPay Staff application.

1.2 The Policy forms an integral part of the Terms and is read together with them, the Privacy Policy, the Cookie Policy and the Data Processing Agreement (DPA). In the event of conflict on matters of acceptable use, this Policy prevails.

1.3 The Customer is responsible for all activity that takes place under its organisation and ensures that each of its authorised users complies with this Policy. An act or omission of an authorised user is deemed to be an act or omission of the Customer.

1.4 Breach of this Policy constitutes a material breach of the Terms and entitles the Company to suspend or terminate in accordance with Article 16 of the Terms, without prejudice to any other right available to it under the law.

Article 2 — General Principle of Lawful Use

2.1 The Customer uses the Platform lawfully, in good faith and exclusively to operate a lawful food-service or hospitality business.

2.2 The Customer does not use the Platform in a manner that breaches applicable law, infringes third-party rights, jeopardises the security or integrity of the Platform, or harms the Company's reputation.

Article 3 — Prohibited Uses

The Customer and each of its authorised users are expressly prohibited from performing, attempting or permitting a third party to perform the following:

3.1 Unlawful or objectionable content. Posting, storing or distributing through the Platform content that is unlawful, defamatory, threatening, abusive, obscene, racist or otherwise objectionable, or that incites criminal acts.

3.2 Infringement of intellectual property rights. Posting or using content (text, images, logos, marks, menus) that infringes copyright, industrial-property rights or other rights of third parties.

3.3 Misleading menu and allergen labelling. Entering inaccurate, misleading or incomplete information in the menu, in particular as to ingredients, allergens, origin, prices or availability of items. The Customer bears sole responsibility for the accuracy and completeness of the menu content and the related labelling, in accordance with applicable food-safety and food-labelling law.

3.4 Fraud, money laundering, tax evasion. Using the Platform to commit fraud, money laundering, terrorist financing, or tax evasion/avoidance. The Customer acknowledges that the licensed payment institution is subject to due-diligence and reporting obligations under Law 4557/2018 (on the prevention and suppression of money laundering) and undertakes not to obstruct that compliance. The Customer independently complies with its own obligations under Law 4557/2018, under tax law (in particular the issuance of lawful records) and under any other relevant provision.

3.5 Circumventing the Platform fee. Circumventing, concealing or artificially reducing the per-transaction fee or any other charge, in particular by routing transactions off the Platform, by misstating the value of transactions, or by any other device intended to avoid payment of amounts due.

3.6 Reverse engineering. Reverse engineering, decompiling, disassembling or otherwise attempting to extract the source code, architecture or algorithms of the Platform, except to the extent mandatorily permitted by law.

3.7 Automated or abusive traffic. Using robots, crawlers, scrapers or other automated means to extract data, generating excessive or abusive load, sending traffic that disrupts operation, and evading rate limits or access-control measures.

3.8 Security violations and unauthorised access. Gaining or attempting to gain unauthorised access to parts of the Platform, to accounts, systems or data of third parties, probing or testing for vulnerabilities without prior written authorisation, bypassing authentication or authorisation mechanisms, and any action that endangers the confidentiality, integrity or availability of the Platform.

3.9 Spam and unlawful marketing. Sending unsolicited or bulk messages or carrying out unlawful commercial marketing. Any commercial-marketing communication to Guests is carried out only where a valid legal basis exists and the requirements of Article 11 of Law 3471/2006 (on the protection of personal data in the electronic-communications sector) and of the GDPR are met, including prior consent where required and an opt-out option in every message.

3.10 Malware. Uploading, transmitting or distributing viruses, trojans, worms or other malicious or harmful code.

3.11 Impersonation. Impersonating any natural or legal person, falsely stating a relationship or capacity, or using false identity details.

3.12 Reselling and sublicensing. Reselling, leasing, sublicensing, distributing or otherwise making available the Platform or access to it to a third party, without the Company's prior written consent.

3.13 Use for another purpose. Using the Platform for any purpose other than operating a lawful food-service or hospitality business.

Article 4 — Menu and Venue Content Standards

4.1 The Customer retains ownership of the content it uploads (menus, prices, descriptions, images, venue details) and grants the Company a non-exclusive, royalty-free licence to host and display it to provide the service, in accordance with Article 10 of the Terms.

4.2 Menu and venue content must be accurate, up to date and lawful. In particular, prices correspond to those actually in force, ingredient and allergen information is complete and accurate, and visual material truthfully depicts the items offered.

4.3 The Customer does not post content that infringes third-party rights or breaches Articles 2 and 3.

Article 5 — Fair Use and Rate Limits (API)

5.1 Access to the application programming interfaces (api.tabbpay.com) is subject to reasonable rate limits and fair-use policies intended to ensure the stability and availability of the Platform for all customers.

5.2 The Customer does not attempt to circumvent, systematically exceed or bypass the rate limits, nor generate disproportionate load. The Company may apply throttling, temporary blocking or other technical protective measures against traffic that breaches this Article.

Article 6 — Consequences and Enforcement

6.1 In the event of a breach of this Policy, the Company may, in its reasonable judgement and according to the gravity of the breach, take one or more of the following measures:

(a) a warning and a request for immediate cure of the breach;

(b) throttling or technical restriction of access;

(c) suspension of access to the Platform, in whole or in part;

(d) termination of the Terms and of the account, in accordance with Article 16 of the Terms;

(e) reporting the breach to the competent authorities, where required or justified by law.

6.2 In the event of a serious breach — in particular a security violation, the commission of fraud, money laundering, or an action that poses an immediate threat to the Platform or to third parties — the Company may proceed to immediate suspension or termination without prior warning.

6.3 The exercise or non-exercise of any measure by the Company does not constitute a waiver of any other of its rights, including the right to compensation. The Customer is obliged to indemnify the Company in accordance with Article 15A of the Terms.

Article 7 — Reporting Abuse

7.1 Any suspected abuse, security violation, unlawful content or other breach of this Policy may be reported to the Company at abuse@tabbpay.com or, alternatively, at support@tabbpay.com.

7.2 The Company reviews reports with reasonable diligence and takes appropriate measures in accordance with Article 6.

Article 8 — Changes

8.1 The Company may amend this Policy. For a material change, the Customer is notified by email at least fourteen (14) days before it takes effect, in accordance with Article 17 of the Terms.

8.2 Continued use of the Platform after the change takes effect constitutes acceptance of it; otherwise the Customer may cancel in accordance with Article 7 of the Terms.

Article 9 — Governing Law and Jurisdiction

9.1 This Policy is governed by Greek law. The Courts of Athens are designated as exclusively competent to resolve any dispute arising from it, without prejudice to any dispute-resolution clause of the Terms.

Article 10 — Language

10.1 In the event of conflict between the Greek and the English version of this Policy, the Greek version prevails. The English version is provided solely for convenience.

Contact

The Greek language version of this Policy is the legally binding one; this English version is provided solely for convenience.