Acceptable Use

This Acceptable Use Policy applies to all services provided by RevKeen Ltd, Jersey registered number 165039 (RevKeen), and all products or services sold by merchants using RevKeen. You are responsible for complying with all applicable laws in all your actions related to using RevKeen, regardless of the purpose of use.

Failure to comply with this Acceptable Use Policy may result in immediate suspension or termination of your RevKeen account and reporting to providers, card networks, or authorities where required. RevKeen does not hold merchant settlement funds; any provider hold, reserve, recovery, or settlement action is governed by the merchant's agreement with that provider.

Capitalised terms used but not defined here have the meanings given in the RevKeen Merchant Services Agreement.

Prohibited activities

You may not use RevKeen for activities that:

1. Violate any law, statute, ordinance, or regulation in any applicable jurisdiction.
2. Violate the rules or regulations of Visa, Mastercard, American Express, Discover, JCB, Diners Club, UnionPay, or any other card brand network.
3. Relate to transactions involving:
   • Items that encourage, promote, facilitate, or instruct others to engage in illegal activity.
   • Stolen goods including digital and virtual goods.
   • The promotion of hate, violence, racial or other forms of intolerance that is discriminatory, or the financial exploitation of a crime.
   • Items that infringe or violate any copyright, trademark, right of publicity or privacy, or any other proprietary right under the laws of any jurisdiction.
4. Involve transactions that display the personal information of third parties in violation of applicable law.
5. Involve any activity that requires pre-approval without having obtained that approval.

You may not:

1. Reverse engineer, disassemble, decompile, decode, adapt, or otherwise attempt to derive or gain access to the source code of RevKeen's services, other than open-source components released under their respective licences.
2. Bypass or breach any security device or protection used by RevKeen, or access or use the services other than by an authorised user through their own valid access credentials.
3. Input, upload, transmit, or otherwise provide to or through RevKeen any information or materials that are unlawful or injurious, including harmful code or malware.
4. Damage, destroy, disrupt, disable, impair, interfere with, or otherwise impede or harm RevKeen's services, systems, or provision of services to any third party.
5. Remove, delete, alter, or obscure any trademarks, warranties, disclaimers, or any copyright, trademark, patent, or intellectual property notices from RevKeen's services.
6. Access or use RevKeen in any manner or for any purpose that infringes, misappropriates, or otherwise violates any intellectual property right or other right of any third party, or that violates any applicable law.
7. Access or use RevKeen for purposes of competitive analysis, the development of a competing software service or product, or any other purpose that is to RevKeen's detriment or commercial disadvantage.
8. Access or use RevKeen in, or in association with, the design, construction, maintenance, or operation of any hazardous environments, systems, or applications, including safety-critical applications where service failure could lead to personal injury or severe property damage.
9. Use RevKeen for the benefit of any individual, organisation, or country identified on the UK HM Treasury consolidated sanctions list, the US OFAC Specially Designated Nationals list, the EU consolidated financial sanctions list, or for any third parties unaffiliated with your business.
10. Otherwise access or use RevKeen beyond the scope of the authorisation granted under the Master Services Agreement.

Acceptable products and services

RevKeen is designed to support a broad range of businesses, including both digital and physical goods, services, and hybrid models. Acceptable categories include but are not limited to:

Software and SaaS

• Subscription software and services (B2B and B2C)
• One-time software licences
• Usage-based software billing
• API access and developer tools

Digital products

• eBooks, templates, courses, design assets
• Fonts, icons, photographs, videos, and audio files
• Private content subscriptions (excluding adult content)
• License keys and digital downloads

Professional and personal services

• Healthcare practitioners (doctors, dentists, physiotherapists, psychologists, nutritionists)
• Wellness services (massage, acupuncture, osteopathy, sauna and wellness centres)
• Fitness services (gyms, personal trainers, group classes, specialised fitness)
• Coaching services (life, executive, career)
• Beauty and personal care (salons, spas)
• Coworking and shared workspace memberships
• Professional services (consulting, legal, accounting — in line with regulatory requirements of the respective jurisdiction)

Physical goods and retail

• Physical products sold online with standard shipping
• In-person retail via our PAX A920 Pro card-present terminal integration
• Hospitality (cafes, restaurants, hotels with appropriate terminal or online configuration)
• Event tickets (subject to chargeback monitoring, see Restricted Businesses below)

Nonprofits and charities

• Registered charities and nonprofit organisations
• Donation and fundraising activities (subject to regulatory compliance in the collecting jurisdiction)

If you are unsure whether your business is supported, contact support before signing up. We can confirm eligibility and, where needed, guide you through enhanced underwriting.

Prohibited products and services

You may not use RevKeen to sell any product or service that:

1. Violates any rules or regulations of the card brand networks (Visa, Mastercard, Amex, Discover, JCB, Diners Club, UnionPay).
2. Violates any law or government regulation in the merchant's or customer's jurisdiction.
3. Involves fraudulent, deceptive, unfair, abusive, or predatory practices.
4. Is marketed through outbound telemarketing or unsolicited bulk communications.
5. Threatens reputational damage to RevKeen, our acquiring partner, or any card brand network.
6. Results in or causes a significant risk of chargebacks, fines, damages, or harm and liability.
7. Engages in, encourages, promotes, or celebrates violence or physical harm to persons or property, or toward any group based on race, religion, disability, gender, sexual orientation, national origin, or any other immutable characteristic.

The following business categories are explicitly prohibited on RevKeen. This list is not exhaustive, and RevKeen reserves the right to add to it at any time at our sole discretion. Accounts accepting payments from prohibited categories may be suspended or terminated:

1. Adult content and services — Pornography, OnlyFans-related services, adult AI-generated content, adult chat services, adult dating services, escort services.
2. Gambling, betting, and gaming of chance — Casinos, sports betting, online poker, lottery services, loot boxes, mystery boxes, skill games with cash payouts.
3. Illegal or age-restricted products — Drugs, cannabis and cannabis-derivative products (other than where explicitly licensed), alcohol sold without age verification, tobacco products, vaping products, fireworks, weapons or ammunition.
4. Cryptocurrencies and blockchain financial products — Crypto-asset exchanges, trading platforms, NFT marketplaces, crypto wallet services, initial coin offerings.
5. Financial trading and advisory services — Trading bots, financial signals platforms, investment advisory services without FCA or equivalent regulatory authorisation, Forex platforms, binary options.
6. "Get rich" schemes and pyramid marketing — Multi-level marketing schemes, guaranteed-return investment programmes, matrix schemes.
7. Services intended for or advertised to minors — Services where the primary user is under 13 (or under 16 in jurisdictions with higher age limits under data protection law) without verified parental consent mechanisms.
8. Pseudo-scientific services — Clairvoyance, fortune-telling, horoscopes, psychic readings, tarot services (when primary offering).
9. Medical and health advice without licensed practitioners — Unlicensed health advice platforms, miracle cures, unverified medical claims.
10. Government services — Services purporting to be affiliated with any government body without authorisation.
11. Cheating products — Game cheats, exam cheats, certification fraud, macros and hacks for online services.
12. Circumvention services — Services designed to bypass paywalls, DRM, terms of service of other platforms, or IP restrictions.
13. IPTV services — Unlicensed streaming of television or film content; IPTV subscription services; IPTV hardware.
14. Malware, viruses, spyware — Any product that damages, surveils, or compromises user systems without consent.
15. API and IP cloaking services — Services that facilitate impersonation or misrepresentation.
16. Third-party trademark removal services — Products that remove or obscure legitimate trademarks.
17. eSIM and unauthorised telecommunications services — Services that resell or facilitate unauthorised SIM cards or telecommunications access.
18. Third-party content downloaders — YouTube, Instagram, TikTok, Snapchat, or similar content-downloader services that violate the source platform's terms of service.
19. Face swap, deep fake, and synthetic media tools — Tools that enable identity misrepresentation, including voice cloning services without consent mechanisms.
20. Fake reviews, testimonials, or social proof platforms — Services that generate or inflate fake reviews, followers, or social engagement.
21. Data broker and OSINT platforms — Services that aggregate, resell, or expose personal data about individuals from public or leaked sources.
22. Unauthorised software licence resale — Resale or redistribution of software licences without authorisation from the original publisher.
23. Counterfeit goods — Counterfeit physical goods, replica products sold as authentic, or goods that infringe on third-party intellectual property.
24. Standardised test preparation with real exam questions — Platforms reselling real or past exam questions for IELTS, SAT, GMAT, GRE, or similar due to copyright infringement and regulatory risk.
25. Direct marketing, lead generation, and unsolicited outreach services — Bulk SMS platforms, cold-email automation, automated outreach tools (though CRMs and marketing automation for your own business are permitted).

RevKeen reserves the right to refuse service to any business at our sole discretion, including for categories not explicitly listed above.

Restricted businesses (enhanced review)

The following categories are supported but require enhanced underwriting review before approval. We may request additional business documentation, proof of licensure, or ongoing monitoring:

• Travel services — Flight bookings, hotel bookings, travel agencies (subject to IATA or equivalent industry licensing where applicable)
• Event ticket sales — Concerts, sports, theatre (subject to chargeback rate monitoring)
• Pre-orders and crowdfunding — Businesses that collect payment before fulfilment must demonstrate a credible fulfilment plan
• Subscription boxes — Physical goods delivered on a subscription cadence
• High-ticket coaching programmes — Coaching services sold at over £5,000 per contract
• Directories and job boards — Platforms that charge for listings or applications
• Paid waitlists and access programmes — Services charging before delivering primary value
• VPN services — Legitimate privacy tools subject to enhanced review
• eBook and digital course platforms — Subject to review for content and IP compliance
• Marketing and advertising services — Digital marketing agencies (excluded if primary offering is unsolicited outreach)
• Pre-licensed industries — Regulated industries such as legal services, medical services, financial advice (where FCA-authorised), insurance brokerage, and accountancy — subject to proof of active licensure in the operating jurisdiction

Categories requiring close review

The following categories require close review during onboarding and ongoing monitoring. Approval is subject to the specific nature of the offering and your business history:

• AI content generation tools (text, image, video, voice) — Subject to review for IP, adult content, deepfake, and misinformation risk
• Marketing and outreach tools — Subject to review that outreach is consent-based, not unsolicited
• Resume, hiring, and exam preparation tools — Subject to review of testimonials, claims, and source material
• Spiritual and astrology services — Supported if not presented as scientific fact or used to make investment or health claims
• Audio, music, and chatbot generators — Supported without voice cloning, NSFW content, IP infringement, or fake claims
• VPS, VDS, and hosting services — Supported for legitimate hosting; excluded for hosting of prohibited content
• Cryptocurrency-adjacent services — Tax tools for crypto holders, educational content, analytics platforms (but not exchanges, custody, or trading services)

Direct Debit restrictions (London & Zurich)

Direct Debit collection is provided through London & Zurich, and their restrictions apply in addition to everything above. A business that is acceptable for card may still be refused for Direct Debit.

The governing list is the London & Zurich restrictions page at londonandzurich.co.uk/guides/london-zurich-restrictions, as updated or replaced from time to time. That live list governs; the summary below is for readability and is not a substitute for it.

Categories London & Zurich prohibit that are not otherwise excluded by this policy:

• Chemicals
• Prescription medicines, medical services, and pharmaceuticals
• Alcoholic beverages
• Dietary supplements
• Seeds and plants
• Tobacco and nicotine products
• Jewellery, precious metals, and precious stones
• Online dating and marriage services
• Outbound telemarketing
• Escort services
• Payments between accounts owned or controlled by the same beneficial owner
• Direct Debit mandates created or completed on behalf of another party without appropriate authority
• Acting as an unauthorised payment institution or private bank

Wholesale and business-to-business carve-out. The restrictions on chemicals, prescription medicines, alcohol, dietary supplements, and seeds and plants do not apply where the merchant operates solely on a wholesale or business-to-business basis.

Sectors requiring London & Zurich director approval

The following sectors require the written approval of a London & Zurich director before Direct Debit onboarding can complete. Applications in these sectors are accepted conditionally: you can apply and be onboarded to the RevKeen platform, but the Direct Debit facility is not activated and no mandate journey is made available until that approval is given.

• Adult entertainment
• Cryptocurrency and virtual assets
• Direct marketing
• Drugs and pharmaceuticals
• Outbound telemarketing
• Unregulated financial services, including debt management and credit repair
• Weapons, firearms, and arms dealers
• White goods insurance and repair, and second-hand appliance resellers

If your business falls in one of these sectors, tell us at application. Approval is requested by RevKeen on your behalf, and we will confirm the outcome before your Direct Debit facility goes live.

Direct Debit mandate and notification conduct

Direct Debit carries obligations that have no card equivalent. You must:

• hold a valid, current mandate for every payer you collect from, and never create or complete a mandate on behalf of another party without proper authority;
• use the current London & Zurich template documents without amendment — mandate forms, confirmation letters, advance notices, telephone scripts, and on-screen sign-up wording — and never alter the wording of the Direct Debit Guarantee;
• use only paperless and telephone sign-up wording approved by London & Zurich and their sponsoring bank, and keep a record capable of evidencing the payer's instruction;
• ensure every payer receives advance notice of the amount and date before each collection, and never collect an amount or on a date other than the one notified; and
• honour payer cancellations promptly.

Amending a template document is itself a suspension trigger: London & Zurich may suspend the Direct Debit service if they become aware that a merchant is not using the current form. Where RevKeen generates these documents for you, you comply by not overriding or altering the platform's output.

Chargebacks and monitoring

Card networks impose monitoring programmes for merchants with elevated chargeback rates:

Direct Debit monitoring

Direct Debit has no card-network monitoring programme, so RevKeen publishes its own thresholds. Both are measured monthly, as a percentage of the collections submitted in that month by count:

These thresholds sit well above normal operating rates, so a healthy book will not approach them. They exist to identify collection practice that is going wrong, not to penalise ordinary payment failure.

A high unpaid rate is usually a collection-practice problem rather than a payer problem: collecting on a date the payer did not expect, collecting an amount that differs from the advance notice, or collecting against a stale mandate. An elevated indemnity claim rate is more serious, because each claim means a payer told their bank the collection should not have happened at all.

RevKeen will raise either with you before it reaches a level at which London & Zurich act, but London & Zurich may act independently under your agreements with them.

Because your merchant account is held directly in your name with Elavon, these monitoring programmes apply directly to your business. Sustained chargeback rates above scheme thresholds may result in your acquirer suspending or terminating your merchant account, independent of other AUP compliance. See Disputes for operational guidance on managing chargeback exposure.

MATCH and Terminated Merchant File

If your acquirer terminates your merchant account for cause — including but not limited to fraud, excessive chargebacks, or AUP violations — you may be reported to the Mastercard Alert to Control High-Risk Merchants (MATCH) file and the Visa Terminated Merchant File (TMF). Being listed on MATCH or TMF typically results in an inability to open a merchant account with any processor for five years.

RevKeen may suspend or terminate your access to the RevKeen platform for AUP violations, chargeback monitoring programme breaches, fraud indicators, or failure to respond to compliance requests. Termination of the underlying merchant account is a decision for your acquirer, not RevKeen.

Changes to this policy

This Acceptable Use Policy may be updated as card network rules, regulations, or RevKeen's risk policies evolve. Material changes are announced by email to all merchants at least 30 days before the effective date, unless a shorter notice period is required by card network rules or regulatory obligations.

Questions and clarifications

If you are unsure whether your business is acceptable under this policy, contact support before signing up. We can confirm eligibility and, where needed, guide you through enhanced underwriting. Ambiguity is safer to resolve before processing begins than after.

For technical guidance on dispute and chargeback handling, see Disputes.