Acceptable Use Policy

Scope and relationship to the Terms

Ostro is operated by SP STUDIOZ (OPC) PRIVATE LIMITED, a company incorporated in India, with Corporate Identification Number (CIN) U72900PN2022OPC213485. References to “Ostro”, “we”, “us”, and “our” mean that company.

This Acceptable Use Policy sets out permitted conduct when using Ostro, including onboarding, receiving details, funding, payment requests, payouts, and communications with us. It supplements the Terms of Service when presented and agreed as part of your relationship with Ostro.

It applies to individuals, businesses, and people acting on their behalf. A business is responsible for ensuring that its representatives follow the requirements applicable to its approved activity. Mandatory law takes precedence, and applicable financial-partner restrictions also apply to the relevant service.

Use Ostro for genuine, approved activity

Use Ostro only for lawful activity consistent with your verified identity, declared business or profession, eligible location, and approved payment routes. Receiving details may be shared with legitimate clients, employers, marketplaces, customers, or business partners for permitted payments owed to you or your onboarded business.

Funding from your own account and receiving a payment from another person are different payment types. Use each only where supported and approved for you. A currency or country shown on the website does not authorise every payer relationship, purpose, receiving method, or payout destination.

Use the options and current instructions shown in your Ostro workspace. Ask support@tryostro.com before proceeding if you are uncertain about a proposed activity.

Provide accurate information

Provide complete and accurate information about your identity, residence, business, operating address, beneficial ownership, representatives, source of funds, payer relationships, and payment purpose. Supply supporting documents when reasonably required and promptly report relevant changes.

Do not use another person’s identity, fabricate a business, alter verification records, create false invoices, hide the true payer or beneficiary, or misdescribe goods or services. Do not claim authority to act for a business or another person without permission.

Do not open or use another workspace to evade a restriction, impersonate an existing customer, or resume activity that has been declined without approval.

Financial crime and unlawful activity

You must not use, attempt to use, or help another person use Ostro for:

• Money laundering, terrorist financing, sanctions evasion, bribery, corruption, tax evasion, or dealing with criminal proceeds.
• Fraud, identity theft, scams, extortion, ransomware demands, deceptive investment or employment schemes, or payment activity involving stolen credentials or funds.
• Payments connected with unlawful goods or services, trafficking, exploitation, abuse, counterfeit goods, or infringement of intellectual-property rights.
• Concealing the source, ownership, destination, or purpose of money or assets, including acting as a money mule.
• False refund claims, intentional payment reversals, fabricated disputes, or transactions designed to extract value from an error.

You must not use Ostro to pay for or facilitate any activity prohibited by the laws applicable to you, the transaction, or the relevant service provider.

Sanctions and location restrictions

Do not use Ostro where access or a payment is prohibited by applicable sanctions, country restrictions, regional restrictions, or partner requirements. Do not conceal your real location, use another person as a front, or misstate where your business primarily operates.

A privacy or network tool must not be used to bypass eligibility controls. Do not split, reroute, relabel, or arrange payments through intermediaries to evade sanctions screening, transaction limits, or compliance review.

Consult the supported-country guide, including state and territory notices. Its entries are informational and do not guarantee onboarding, eligibility, or access to a particular route.

Receiving details and permitted payers

Share only receiving details that are currently available to you, together with the exact currency, rail, beneficiary information, and reference instructions required. Stop using details that have been withdrawn, replaced, restricted, or closed.

Do not sell, rent, lend, or publicly offer your workspace or receiving details for strangers to route their money. Do not represent an Ostro receiving arrangement as a bank account held with Ostro or claim named details are available to everyone.

Third-party payments are permitted only for the payer categories, purposes, and locations approved for the relevant route. Do not assume that personal gifts, family transfers, person-to-person payments, or payments to an unrelated business are permitted merely because bank details can be shared.

Regulated and intermediary activity

Do not use your workspace to operate an unapproved remittance, money-transmission, currency-exchange, digital-asset exchange, custody, escrow, or payment-collection service for other people. Receiving legitimate payments owed to your own approved business remains subject to your agreed receiving arrangements.

If your business involves regulated financial activity or another activity with additional legal or partner restrictions, disclose it before requesting access or accepting payments. Any required approval must cover the actual business, location, transaction type, and route.

A permission from Ostro cannot replace a licence, legal obligation, or partner approval, or make a prohibited activity permissible. An activity being lawful in one country does not establish eligibility through Ostro. Absence from this policy is not an assurance that an activity is supported.

Payout destinations and stablecoins

Request payouts only to a verified bank account or wallet belonging to you or your onboarded business, as applicable. Use only the destination, asset, network, and corridor approved for that instruction. Do not substitute another person’s destination to avoid verification or a restriction.

Check all identifiers before confirming. Do not deliberately send unsupported assets, use an incompatible network, or add unnecessary personal information to public transaction fields. An asset’s appearance on the website does not mean every network is supported.

Do not use stablecoin routes to conceal transaction purpose or evade the laws governing your payment. Conversion, custody where applicable, and settlement are provided by licensed financial partners and remain subject to their applicable requirements.

Protect accounts, systems, and information

Keep access credentials private, use available security controls, and protect any information you are authorised to receive. Do not share, transfer, or sell workspace access. Give another person’s personal information to us only where you have a lawful basis and the information is necessary.

Do not gain unauthorised access, attempt to defeat authentication or security controls, introduce malware, interfere with another user, scrape personal information without authority, or overload or disrupt Ostro or partner systems. Do not reverse engineer protected systems except where a non-excludable legal right permits the specific activity.

Report suspected vulnerabilities to security@tryostro.com. This policy does not authorise intrusive testing: obtain permission before testing, and do not access other users’ records or exploit a finding beyond what is necessary to report it safely.

Payment requests and communications

Invoices and payment links must describe a genuine, permitted payment and identify the correct parties, amount, currency, and purpose. Do not use them for unsolicited spam, phishing, deceptive demands, false debts, or impersonation.

Do not use Ostro branding or references to financial partners to falsely imply approval, insurance, a banking relationship, or a regulatory licence. Do not promise your payer a route, price, or settlement time that has not been confirmed for the transaction.

Communications with support and other people must not involve threats, harassment, unlawful disclosure, or deliberately false reports. Raising a genuine complaint, exercising a legal right, or making a lawful report to an authority is not prohibited.

Cooperate with reviews and report problems

Respond to reasonable requests for information about an application or payment. Keep sufficient records to explain the underlying activity and do not destroy or conceal evidence relevant to an active review or lawful request.

Report suspicious activity, an unauthorised instruction, misuse of receiving details, or an incorrect payment promptly to support@tryostro.com. For a security incident, use security@tryostro.com. Include relevant references without sending passwords, wallet secrets, or sensitive identity documents through the public contact form.

Do not attempt to resolve a restriction by making repeat transactions, using another identity, or sending funds through a different unsupported route.

How restrictions are applied

Where reasonably necessary to investigate a suspected breach, protect users, satisfy a legal requirement, or comply with applicable partner restrictions, we may request information, decline an instruction, restrict a feature, suspend access, or close the relationship as described in the Terms of Service.

Action should be proportionate to the concern. Where lawful and practicable, we will explain the action and give you an opportunity to provide relevant information or correct a remediable issue. Immediate restrictions may be necessary for security, fraud prevention, or legal reasons. Certain investigation details cannot lawfully be disclosed.

Ostro does not hold customer funds. Any lawful hold, return, or settlement is handled through the relevant licensed financial partners. A breach does not create an automatic forfeiture of money or assets, an undisclosed penalty, or a general right for Ostro to seize property.

Review, complaints, and changes

If you believe a restriction is incorrect, contact support@tryostro.com with the relevant reference and supporting explanation. You may escalate an unresolved complaint to legal@tryostro.com or write to the company address in section 1. Requests will be considered subject to applicable legal and partner requirements.

This process does not remove statutory rights or access to a competent court, regulator, or consumer body. It does not promise that an unavailable or prohibited route can be approved on appeal.

We may update this policy as the Services, legal requirements, or partner restrictions change. Material updates will be notified and accepted as required under the Terms and applicable law. The date at the top identifies the current version.