Acceptable Use Policy

• Illegal goods, illegal services, or transactions that violate applicable laws, regulations, or provider rules.
• Fraudulent schemes, deceptive offers, phishing, impersonation, or any activity intended to mislead customers or counterparties.
• Sanctions evasion, money laundering, unauthorised remittance activity, or use of the platform to mask the true source or destination of funds.
• High-risk categories we do not support, including adult exploitation, counterfeit goods, stolen items, and transactions involving abuse or violence.
• Businesses that need a licence they do not hold, or that we do not support: gambling and betting, remittance and money transfer, foreign exchange, lending and investment schemes, virtual assets and crypto exchange, collecting donations or crowdfunding on behalf of others, weapons, controlled drugs, adult content and sexual services, multi-level marketing, and any activity restricted by sanctions.

• Using PayBridgeNP to process payments on behalf of another undisclosed business or to hide the true merchant of record.
• Attempting to test stolen or unauthorised payment credentials, probe provider behaviour, evade rate limits, or automate abusive transaction patterns.
• Interfering with the security or availability of the platform, including unauthorised access attempts, scraping that degrades service, or exploit activity.
• Providing false business details, fake websites, misleading product descriptions, or inaccurate fulfilment information.

Merchants must present customers with accurate order details, pricing, and business identity. You may not use misleading redirects, concealment, mismatched product descriptions, or fake support channels to influence payment completion.

API and webhook usage must stay within documented behaviour. Do not attempt to forge payment state, replay signed events, or misuse public tracking endpoints to enumerate transaction data.

PayBridgeNP sends transactional notifications on your behalf to people who have a real payment relationship with you. We do not allow:

• Marketing campaigns, promotional broadcasts, newsletters, or any non-transactional outreach via the SMS or email surface.
• Sending to recipients who have not transacted with you (e.g. importing third-party lists into checkout sessions purely to trigger reminder messages).
• Sending the same message to the same person again and again, or working around our sending limits.
• Using the SMS history or email log as a mailing list for outbound communication outside the platform.

PayBridgeNP limits how many messages can be sent in a short time. Messages held back by a limit still appear in your SMS history.

The Model Context Protocol surface lets AI assistants act on a merchant's behalf with a scoped token. Misuse can be costly to the merchant, the platform, and the customer. We do not allow:

• Using AI agents for bulk or unauthorised money-related actions, including refunds and changes to subscriptions or invoices, that no authorised person initiated.
• Embedding MCP tokens in shared or untrusted environments where third parties could trigger actions on the merchant's account.
• Using AI agents to enumerate other merchants' data, attempt prompt-injection attacks against the platform, or extract internal IDs.
• Bypassing the platform's confirmation prompts on money-moving actions through automated approval scripts.

The merchant remains responsible for every action taken by an authorised AI agent under their token. If you suspect misuse, revoke the token from your dashboard straight away.

The PayBridgeNP Buy Button (script-tag embed) and Payment Links surface let you accept payments from any website. The same surface can be misused; we do not allow:

• Embedding Buy Buttons or Payment Links on sites that do not match the business identity declared on the merchant account.
• Using Buy Buttons to circumvent platform terms (e.g. reselling another business's goods through your account).
• Modifying the embed script or hosted checkout markup to deceive customers about the destination, amount, or identity of the receiving merchant.
• Iframing or proxying the hosted checkout in a way that hides the PayBridgeNP origin.

We may ask for clarifying information, review account activity, disable features, or suspend an account where there is fraud, elevated operational risk, or a policy breach. A suspended account cannot use its API keys, hosted checkout, payment links, or dashboard. Contact support to find out why and to ask for a review.

In severe cases we may terminate access immediately and preserve records for investigation or compliance purposes. Provider restrictions may also affect platform access - a merchant that is removed or restricted by eSewa, Khalti, or Fonepay may lose access to related PayBridgeNP functionality.

Where the law and the situation allow, we tell you the reason for a restriction and how to ask for a review. Where fraud, security, or legal risk is involved, we may restrict first and explain afterwards.