Platform Governance
& Integrity Framework

The objectives of the Aulax governance framework are to:

• maintain trust and transparency within the ecosystem
• protect users, merchants, and the Aulax infrastructure
• ensure compliance with applicable legal and regulatory obligations
• support safe and responsible participation
• maintain the operational integrity of the Aulax infrastructure.

Aulax is the digital infrastructure connecting users and independent merchants.

It provides the technological systems supporting:

• merchant discovery
• automated ordering and checkout
• digital interactions between participants
• analytics and infrastructure services.

Merchants operate as independent businesses and remain responsible for the goods and services they offer through Aulax.

Aulax does not manufacture, store, prepare, or fulfil merchant goods.

Aulax governance is based on the following core principles.

Transparency

Policies and operational standards are published to ensure that participants understand the rules governing participation.

Safety

Aulax maintains safeguards designed to protect users and merchants from fraud, abuse, and harmful behaviour.

Integrity

Aulax systems are designed to maintain fair participation and prevent manipulation of discovery, reputation, or transaction systems.

Compliance

Aulax seeks to operate in accordance with applicable laws and regulatory requirements in the jurisdictions where it operates.

Accountability

Participants are responsible for complying with Aulax policies and applicable laws when using the Service.

Aulax governance is implemented through a set of interconnected policies that define the rules, operational safeguards, and compliance practices.

These policies establish the standards for:

• user participation
• merchant operations
• safety and moderation
• data protection and security
• incident response and risk management.

The following documents form the foundation of the Aulax governance framework.

Terms of Use

Defines the contractual terms governing user access to Aulax.

Merchant Services Agreement

Establishes the contractual relationship between Aulax and merchants.

Privacy Policy

Explains how personal data is collected, processed, and protected.

Data Protection & Security Policy

Describes the technical and organisational safeguards used to protect data and systems.

Trust & Safety Policy

Defines behavioural standards and safety measures designed to protect users and merchants.

Acceptable Use Policy

Establishes prohibited activities and misuse rules.

Content Moderation & Platform Transparency Policy

Explains how user-generated content is moderated and how algorithmic systems operate.

Merchant Listing & Product Policy

Defines the standards governing merchant listings, product information, and permitted goods or services.

Merchant Verification & Onboarding Policy

Describes the processes used to verify merchant identity and establish merchant accounts.

Platform Incident Response Policy

Defines procedures for detecting and responding to operational or security incidents.

Aulax maintains operational safeguards designed to protect the ecosystem, including:

• fraud detection and behavioural monitoring systems
• automated infrastructure security controls
• user and merchant reporting mechanisms
• moderation and enforcement processes.

These safeguards help maintain fair and secure participation.

Aulax processes personal data in accordance with applicable data protection laws including:

• UK GDPR
• Data Protection Act 2018
• Privacy and Electronic Communications Regulations (PECR).

Data processing practices are described in the Aulax Privacy Policy and Data Protection & Security Policy.

Aulax aims to operate in accordance with applicable laws and regulatory requirements relevant to its operations.

Merchants remain responsible for ensuring their business operations comply with applicable laws governing their goods and services.

Aulax may monitor activity to detect violations of its policies.

Where violations are identified, enforcement actions may include:

• removal of content or listings
• account restrictions
• suspension or termination of accounts.

Enforcement actions are applied in accordance with applicable policies.

Aulax maintains procedures for identifying and responding to incidents affecting the infrastructure, including:

• cybersecurity incidents
• fraud or abuse incidents
• infrastructure disruptions
• safety risks.

Incident response procedures are described in the Platform Incident Response Policy.

Aulax continuously evaluates and improves its governance framework to address:

• evolving security threats
• regulatory developments
• technological changes
• operational improvements.

Policies may be updated periodically to maintain safety and reliability.