Acceptable Use Policy

1. Introduction

This Acceptable Use Policy ("AUP") governs your use of the community forum at community.thewill.ai ("Forum") and of the product features on every site we run: TheWILL.ai (estate planning), Expat183 (tracking the days you spend in each country) and Orchard72 (portfolio tracking). The estate-planning features this AUP covers include the will generator, Letter of Wishes, Document Vault, Will Location Registry, and business succession plan. It applies in conjunction with our Terms of Service, Privacy Policy, and Cookie Policy.

By accessing the Forum or using any product feature, you agree to comply with this AUP. We may update this policy from time to time; material changes are notified in advance as described in section 10, and continued use of the affected features after a change takes effect constitutes acceptance of the updated terms.

2. Scope and Eligibility

This AUP applies to all content you create, share, or interact with on the Forum, including but not limited to: posts, replies, private messages, profile information, uploaded files, and reactions. It applies equally to individual consumers and verified professional users.

Forum access is restricted to users aged 18 or over. You must access the Forum through single sign-on from your Orchard72 account. Standalone Forum accounts are not permitted.

3. Prohibited Activities

You must not use the Forum to:

• Provide specific legal, tax, or financial advice: General discussions and sharing of experiences are encouraged, but directing specific advice at an individual's circumstances is prohibited. This applies to both consumer and professional users.
• Share personal data of third parties: Do not post names, addresses, financial details, or other personal information of individuals who have not consented to its publication.
• Engage in defamation or harassment: Posts that are abusive, threatening, discriminatory, or intended to harass or intimidate any individual or group are strictly prohibited.
• Name individuals in complaints: Do not identify specific professionals, firms, or users in complaints or negative reviews. Use our formal complaints process instead.
• Infringe intellectual property: Do not post content that infringes copyright, trademark, or other intellectual property rights of any third party.
• Distribute malware or spam: Do not post links to malicious software, phishing sites, or unsolicited commercial communications.
• Impersonate others: Do not create accounts or post content that falsely represents your identity, qualifications, or affiliation. This includes accepting a directory invitation, or an application we have prepared, that was intended for a different professional or practice.
• Claim a domain you do not control: Do not start or complete domain verification for a web domain you are not authorised to act for. That includes publishing a proof on a domain belonging to someone else, asking a third party to publish one on your behalf without their authority, using a role mailbox you are not entitled to read, and continuing to display a verified-domain badge for a domain you no longer control. Where a domain is used to enrol staff accounts automatically, only the organisation that genuinely operates it may claim it.
• Disclose confidential information: Professional users must not disclose client information, case details, or privileged communications, even in anonymised form where the individual could reasonably be identified.
• Circumvent moderation: Do not create multiple accounts to evade bans or restrictions, manipulate voting or reputation systems, or otherwise undermine Forum moderation.
• Manipulate karma: Coordinated voting, sock-puppet accounts, voting rings, paid-vote schemes, or any other artificial inflation of karma-earning activity are prohibited and will result in karma forfeiture and may result in account closure.

4. Product Use: Will Contents and Account Credentials

The Orchard72 platform helps you record your wishes. Some things you write are for your benefit and your executor's reference; others could create legal risk if recorded or used incorrectly. You must not use any Orchard72 feature (including the will generator, Letter of Wishes, Document Vault, Will Location Registry, or business succession plan) to:

• Record passwords, PINs, recovery phrases, or other access credentials for online accounts that belong to other people.
• Instruct your executors or anyone else to log in to a deceased person's email, social media, banking, or other online accounts using credentials stored with us.

Using another person's account credentials to access their online accounts (including a deceased person's) may be an offence under the Computer Misuse Act 1990 in the United Kingdom and similar laws in other jurisdictions, even where the account holder previously consented. Lawful routes (Google Inactive Account Manager, Apple Legacy Contact, bank bereavement teams) exist; we cover them in our digital legacy guide (opens in a new tab).

What you store in your Document Vault. The vault accepts almost any file type, so that you can keep whatever matters to you in one place. That breadth is not an invitation to use it as general file hosting, or as a way to move harmful material around. You must not:

• Upload programs, installers or scripts: Store executable software of any kind, including installers, packages, and shell or scripting files, or disguise one by renaming it or wrapping it in an archive. We refuse these files, and attempting to get one past that check is itself a breach of this policy.
• Store malicious files: Upload malware, ransomware, exploit code, phishing kits, or any file intended to damage, disable or gain unauthorised access to a device, an account or a system, whether ours, yours or anyone else's.
• Upload unlawful material: Store content that is unlawful to possess or to distribute, including indecent images of children, terrorist material, and stolen credentials, payment card data or personal data obtained through a breach.
• Store material you have no right to hold: Upload works you are not licensed to copy, or another person's confidential or personal documents where you have no lawful basis for keeping them.
• Use the vault as a distribution or backup service: Treat your storage allowance as general-purpose cloud storage, a file-sharing or content delivery service, or a place to stage bulk data unrelated to your estate planning and personal records.

We do not read your files to police this, and we do not want to. Every upload is scanned for malware and checked against the refused file types described on our Document Vault help page (opens in a new tab), and we act on what those checks find and on reports made as described in Section 8. Where a file is removed or an account is restricted, the consequences in Section 7 apply.

Will Location Registry claims. The Will Location Registry releases a sealed will location only after a verified claim. When using the registry or making a claim, you must not:

• Submit false death evidence: Provide a forged, altered, or fraudulent death certificate, or otherwise misrepresent that a registered person has died, in order to obtain the location of their will.
• Misrepresent your identity as a claimant: Use a false or another person's identity document or verification video, or impersonate a designated party, to pursue a claim.
• Circumvent the safeguards: Attempt to defeat or work around the testator's cooling-off veto, the staff review, or any other check that protects a sealed registration.

Submitting a false claim is a serious breach of these terms and may constitute fraud. When a claim is filed we notify the registered person and their designated parties so that a wrongful claim is visible, and a false or withdrawn claim may result in a cooldown on further claims, is recorded in a permanent audit log, and may be reported to law enforcement. The consequences in Section 7 apply, including suspension or termination of your account.

Missing will enquiries. The enquiry channel exists so that someone searching for the will of a person who has died can ask whether we hold anything that helps. When raising or handling an enquiry, you must not:

• Enquire about a living person: Raise an enquiry about someone you do not honestly believe has died, or use the channel to locate, trace, contact or gather information about a living person. This applies however the enquiry is worded, and it applies whether or not you obtain a reply.
• Enumerate the platform: Submit enquiries in bulk, in sequences, against generated or list-derived names, or by automated means, in order to work out who is or is not registered with us. Enquiries are for individually identified people you are genuinely trying to trace, one enquiry at a time.
• Probe the replies: Vary an enquiry and resubmit it, or compare the wording, timing or length of replies, in order to infer whether a record exists. A reply that no record was found is not a statement that no will exists and must not be represented to anyone as one.
• Declare an interest you do not have: Falsely declare a genuine interest in locating the will, misstate your relationship to the person named, or submit an enquiry on behalf of someone you have not been asked to act for.
• Misuse what you receive: Pass on, publish, sell or add to a database anything you learn through an enquiry, or use it for marketing, tracing services or any purpose other than locating the will you enquired about.

We rate-limit enquiries, we log enquiry activity against your account and address, and we may suspend an account or a firm that shows an enumeration pattern without notice. Enumeration is treated as an attack on the people whose records we hold, not as heavy usage, and the consequences in Section 7 apply in full.

Asking another firm for a will file. Where someone has died, you can ask the firm that may hold their will file for a copy of it, and we send that request from our own systems, under your name, to a firm that has no account with us and did not ask to hear from us. Our name is on the message, so the standard here is the standard that applies to a letter you would be content to have read back to you by a regulator. When raising or handling such a request, you must not:

• Work through a list of firms: Send the same request to firms in bulk, in sequences, by automated means, or to firms picked from a directory rather than from the facts, in order to find out which one holds a file. A request is for one named deceased person and the firm you have an actual reason to think holds their papers, one request at a time.
• Act for someone who has not asked you to: Raise a request in a matter you have not been instructed on, overstate the authority you hold, or use a past instruction for a different matter as cover for this one. If you would not put the same claim of authority in a letter on your own paper, do not put it here.
• Enquire about a living person: Raise a request about someone you do not honestly believe has died, or use the channel to trace, locate or gather information about a living person or their family.
• Probe the replies: Vary a request and resend it, or compare the wording, timing or length of replies, to infer what a firm holds. A firm that does not answer has told you nothing, and you must not represent silence to a client, a court or anyone else as a statement that no file exists.
• Pressure or mislead the firm you are writing to: Imply that we have reviewed, endorsed or compelled your request, threaten a firm with a complaint or a report for declining or delaying, or use the request to open an unrelated conversation with them, to market to them, or to recruit them.
• Misuse what comes back: Use a reply for anything other than the matter you raised the request on, or pass it on, publish it, sell it, add it to a database, or feed it into a tracing or marketing service. A will file names people who are not your client, and their details are not yours to reuse.

We cap how many requests you may raise and how many may be aimed at any one firm, we log every request against your account, and we tell a receiving firm who raised the request and why, so that a firm contacted wrongly can say so. A firm may ask us to stop sending it requests, and we honour that for every requester rather than only the one who prompted it. Misusing this channel is treated as misuse of our name as well as of the Platform, and the consequences in Section 7 apply in full.

Whereabouts and live location sharing. Where you share your whereabouts (your trip, your accommodation, your contact numbers, or your live location) with people you choose, that feature exists so that family can see you are all right. It is not a monitoring tool, and you must not:

• Use it to watch or control another person: Pressure, require or trick anyone into sharing their whereabouts with you, or use what a share tells you to follow, confront, intimidate or harass them. Sharing must be a free choice, and a person must be able to stop it without consequence.
• Add recipients who have not agreed: Invite anyone who has not consented to receive your whereabouts, or pass on a private viewing link to someone you did not name yourself. A link is meant for one person; forwarding it hands your location to someone you never chose.
• Share someone else's location: Enter, upload or relay another person's address, accommodation or position through the platform without their agreement, including that of anyone you are travelling or staying with.
• Treat it as an emergency service: Rely on whereabouts sharing or travel check-ins in place of the emergency services. We do not contact the emergency services, verify anyone's safety, or act on what a position or a missed check-in appears to show.

If you believe someone is being pressured into sharing their location through the platform, report it as described in Section 8. Misuse of these features is treated under Section 7 in the same way as any other breach of this policy, and may amount to harassment or stalking under the Protection from Harassment Act 1997 in the United Kingdom and similar laws elsewhere.

Professional introductions. Where we introduce you to an independent professional to prepare or review your will, you must use that introduction in good faith. You must not submit an engagement request you do not intend to pursue, provide false or misleading information about your identity, jurisdiction, or circumstances to a professional, or use the introduction service to harass a professional or to arrange work off the platform in order to avoid fees properly due. Professionals are independent practitioners responsible for their own advice and deliverables; concerns about a professional service should be raised as described in our Terms of Service.

Inviting a partner to a couple purchase. A couple purchase of a power of attorney or an advance decision carries one invitation, addressed to a partner who then holds their own account and prepares their own document. It is a way to bring one named person into a purchase you have made, not a mailing tool and not a second licence to pass on. When you send or accept one, you must not:

• Invite someone who has not agreed: Send an invitation to a person who has not agreed to receive one, or enter an address that is not theirs. The invitation names you and says which document it is for, so an unwanted one tells a stranger something about you that you did not mean to share.
• Use the invitation to reach an inbox repeatedly: Re-address an invitation, or ask us to resend it, in order to send repeated mail to an address, to work around a limit, or to reach someone who has declined.
• Sell, resell or share the second place: Offer the partner place to someone in exchange for payment, pool a purchase among people who are not partners, or use the separation route to free the place for another person. That route exists so two people who have separated can each keep their own document; each purchase carries one place whether or not it is broken.
• Accept on someone else's behalf: Accept an invitation addressed to another person, or set up an account in their name so that a document is prepared as though it were theirs. These documents record decisions about a person's own affairs and health, and only that person can make them.

If you receive an invitation you did not ask for, ignore it and it will expire; tell us as described in Section 8 if it keeps arriving.

Shared document spaces and inbound email. An organisation, such as a firm or a charity, has its own document space, and that space can be given an inbound email address that files whatever is sent to it. Everyone entitled to the space can read what arrives there. When using a document space or an inbound address, whether an organisation's or your own, you must not:

• File documents you have no right to share: Send or upload material belonging to a client, a colleague or anyone else into a space where people who are not entitled to see it can read it, or use a space to circulate confidential or privileged material beyond those who should have it.
• Use someone else's inbound address: Send to an address issued to another person or to an organisation you do not act for, or share an address you were given so that others can file into a space on your behalf.
• Flood or automate against an address: Send bulk, automated or repeated mail to an inbound address, set up a forwarding rule that loops mail back into it, or otherwise use it to consume another party's storage or attention.
• Send malicious or unsolicited content: Send malware, phishing attempts or unsolicited commercial messages to an inbound address, including to an organisation's address that is open to any sender.
• Retain access you are no longer entitled to: Continue to use access to an organisation's space after leaving it or after your role has ended, rather than telling that organisation to withdraw it.

An organisation that opens its inbound address to any sender takes on the risk of what arrives; if that becomes a route for abuse, tell us as described in Section 8 and close the address in the meantime. Misuse of a space or an inbound address is treated under Section 7 in the same way as any other breach of this policy.

5. Community Guidelines

We expect all Forum participants to:

• Treat other members with respect and courtesy
• Stay on topic and contribute constructively to discussions
• Use appropriate language suitable for a professional audience
• Search for existing discussions before creating new topics
• Report content that violates this policy rather than engaging with it
• Respect the distinction between general discussion and professional advice

6. Professional Code of Conduct

Verified professional users are identified by a badge on the Forum and are held to a higher standard of conduct. In addition to the general rules above, professionals must:

• Clearly distinguish between general commentary and professional opinion
• Include appropriate disclaimers when discussing legal or financial topics
• Not use the Forum as a channel for client solicitation or advertising
• Comply with the professional conduct obligations set out in our Terms of Service (Section 27)
• Not create the impression of a professional-client relationship through Forum interactions

A professional who serves their booking page on their own domain must only use a domain they own or are authorised to use. The domain must not infringe anyone else's trade mark, imitate another person, firm, regulator or our own sites, or mislead clients about who they are booking with. Breaches are handled under Section 7, and we may remove the domain. Custom domains are covered in Section 27.7 of our Terms of Service.

7. Consequences

Violations of this AUP may result in one or more of the following actions, at our sole discretion:

• Editing or removal of offending content
• A formal warning issued to your account
• Temporary suspension of Forum access (cooling-off period)
• Permanent ban from the Forum
• Suspension or termination of your Orchard72 account
• Referral to relevant professional regulatory bodies (for verified professionals)
• Reporting to law enforcement where required by law

We aim to apply consequences proportionally and will typically issue a warning before taking more severe action, except in cases of serious or illegal conduct.

Automated spam screening. Posts from newer members are checked automatically for spam by an AI model that runs on our own servers; post content is not sent to any third-party AI provider. If a post is judged likely to be spam, it is hidden and your ability to post may be paused until a Forum moderator has reviewed it. The moderator makes the decision and can restore both. Separately, the first posts from a new member may be held for a moderator's approval before they appear. The automated check never closes or restricts your Orchard72 account. How this information is handled is described in our Privacy Policy.

Appeals. You may appeal any Forum suspension, ban, or content-removal decision by contacting us through the built-in message function on community.thewill.ai (opens in a new tab) within 14 days of the decision. Appeals are reviewed by a moderator not involved in the original decision.

8. Reporting

If you encounter content that violates this AUP, please report it using the Forum's built-in reporting feature (the flag icon on any post). You may also contact us through the contact form in your account dashboard for urgent matters.

We review all reports and aim to respond within 48 hours. Reports are treated confidentially: the identity of the reporter is not disclosed to the person whose content was reported.

8A. Anti-Fraud and Safeguarding

This section is our anti-fraud and safeguarding policy. It applies wherever a request on the platform could be used to reach a person rather than a document: registry claims, missing will enquiries, custodian requests and professional introductions. It exists because the same request that helps a bereaved family can, in the wrong hands, be a way of finding someone who does not want to be found or of pressuring someone who cannot easily refuse.

8A.1 Requests about living people

You must not use any part of the platform to establish whether a named person is alive, where they are, what they own or what they have signed, unless you are that person or they have asked you to act for them. Where a request names someone we have reason to believe is living, we release nothing, we do not confirm that they are living, and we may record and report the request. We would rather refuse a genuine request than expose a living person, and we accept that this makes some legitimate searches harder.

8A.2 Coercion, undue influence and elder abuse

Pressuring someone to register, to change, to reveal or to give up control of a will or a will location is prohibited. So is doing any of those things on their behalf using their credentials, whether or not you believe they would agree. This includes acting through an appointment or authority you hold, where the person themselves has not decided.

Older people and people who depend on others for care are the most exposed to this, and financial abuse of them is most often carried out by someone close to them. We design our safeguards on that basis: the person a record belongs to is told when something is asked about it, they can stop a disclosure themselves, and a right of access held by someone else never overrides their own choice while they are able to make it.

8A.3 What we do when we see it

We may refuse a request, suspend an account, a firm or an address, place a cooldown on further requests, and keep a permanent audit record, without notice and without explaining our reasoning where doing so would help someone work around the safeguard. Where we believe a person is at risk of harm, or that an offence may have been committed, we may report it to the police or to another appropriate authority, and we may do so without telling the person who made the request.

8A.4 Raising a concern

If you believe someone is being pressured over a will, that a request has been made about you or about a living person you know, or that an account is being used by someone other than its owner, tell us through the contact form in your account dashboard and mark it urgent. We treat safeguarding reports ahead of other reports, and we do not disclose the identity of the person who raised the concern to the person it concerns. If someone is in immediate danger, contact the emergency services first.

Nothing in this section is legal advice, and it does not tell you what your own duties are. If you are worried about the validity of a will or about someone's capacity to make one, consult a qualified professional.

9. Governing Law and Applicable Regulations

This AUP is governed by and construed in accordance with the laws of England and Wales, and any disputes arising from it are subject to the jurisdiction of the courts of England and Wales. Nothing in this AUP affects your statutory rights as a consumer under the Consumer Rights Act 2015. If you are a consumer, you retain the right to bring proceedings in the courts of the country in which you are habitually resident, and to rely on any mandatory consumer-protection laws of that country that cannot be derogated from by agreement.

Our operation and moderation of the Forum, and our handling of any content or personal data in connection with this AUP, are carried out in accordance with applicable United Kingdom law, including:

• UK GDPR and the Data Protection Act 2018: where we process personal data to operate, moderate, and enforce conduct on the Forum, we do so on the basis of our legitimate interests in maintaining a safe and lawful community. How we handle your personal data is set out in our Privacy Policy.
• Privacy and Electronic Communications Regulations 2003 (PECR): the prohibition on spam and unsolicited commercial communications in Section 3 reflects, among other things, the requirements of PECR.
• Computer Misuse Act 1990: as set out in Section 4, using another person's account credentials without authorisation may be an offence under this Act.
• Consumer Rights Act 2015: nothing in this AUP excludes or limits any rights you have as a consumer that cannot be excluded or limited by law.

This list is not exhaustive, and other laws may apply depending on your conduct and your location. Where this AUP and our Terms of Service address the same subject matter, the Terms of Service prevail.

9A. Programmatic Access (API and AI Agents)

In addition to the Forum and product use rules above, the following apply when you access the platform programmatically, whether via the Consumer API or by connecting an AI agent through our Model Context Protocol (MCP) server.

• Treat personal API keys as credentials: do not share, publish, or embed them in client-side code or public repositories. Use a separate, named key per integration so you can revoke it without disrupting others.
• Use the least privilege your integration needs: grant only the read scopes your integration uses (for example portfolio:read or pro:read) unless it genuinely needs to write on your behalf, and prefer keys with an expiry date.
• Estate-plan data is sensitive: a key with the estate:read scope reads your beneficiaries, gifts, trusts, guardians, funeral and organ-donation wishes, document vault details, appointments and residency history (Section 20.6 of our Privacy Policy lists everything it covers). Grant it only to an integration or AI agent you trust with that information. Use it to read your own estate plan only. Do not use it to collect, profile or pass on other people's details, such as the beneficiaries and guardians named in your plan.
• Document downloads are the most sensitive scope: a key with the documents:read scope downloads the original files in your document vault and your will PDF (Section 20.7 of our Privacy Policy). Grant it only to an integration you trust with those files, keep its expiry as short as the integration allows (it cannot exceed 90 days), and use it for your own documents and those shared with you only. Do not use it to bulk-export or pass on documents that others have shared with you. Downloads are limited per hour, and the first download by each key triggers an email to you: if you do not recognise it, revoke the key at once.
• Corporate reporting keys are for programme administration only: a key beginning twcorp_, created by an employer's programme owner, may be used only to report on and administer that employer's own benefit programme. Do not use the roster it reads to profile, monitor, market to or make employment decisions about individual employees. Do not try to re-identify anyone from aggregate figures, including by combining small groups that we suppress. Keep such keys on the employer's own servers, never in client-side code, and revoke a key as soon as it may have been exposed.
• Never publish a key: keys beginning twai_ are recognised by public secret-scanning services. A key reported as found in public, for example in a public code repository, is revoked automatically and must be replaced.
• Will creation is for your own clients only: a key with the pro:wills:write scope may create wills only for clients the professional actually acts for, on their instructions. Bulk or speculative generation, generating wills for resale or for people who are not your clients, reselling or sublicensing will creation to third parties, and using the endpoint to probe, benchmark or scrape our templates are prohibited. Breaches may lead to the key being revoked and the entitlement being withdrawn under section 7.
• Do not redistribute market data or build competing services: the same restriction set out in our Terms of Service applies to traffic that reaches us through the MCP server or any other automated client.
• You are responsible for the agents you connect: AI agents act under your authority once you supply your key. Actions taken by an agent with a portfolio:write key are your actions for the purposes of this Policy.
• Excessive load may result in throttling or key revocation: automated clients (including agents) that consistently breach rate limits, ignore Retry-After headers, or cause operational disruption may have their keys revoked.

9B. Fair Usage Allowances on Free Accounts

Some features on a free account are metered so that the service stays fast and available for everyone. These are fair usage allowances, not a paywall: they are set well above what ordinary personal use needs, and they exist to stop automated or bulk use from crowding out everybody else. The allowances below are the ones our systems actually apply: every figure is read from the same source that enforces it, so nothing published here can drift out of date.

Each periodic allowance resets on the date shown, in your own timezone. Reaching one pauses only the metered activity itself. Logging your days, editing what you have already recorded, your alerts and your check-ins all carry on unaffected, and nothing you have stored is ever deleted because an allowance was reached.

Travel-email attachment storage is a standing total rather than a periodic allowance, so it does not reset: space frees up when you delete attachments from forwarded travel emails. An attachment that would take you past it is not stored, the rest of the email (including its travel details) is still processed, and we tell you that an attachment was not saved.

If you reach an allowance and believe your genuine personal use needs a higher one, tell us as described in Section 8 and we will look at it with you. Deliberately working around these allowances, for example by spreading automated activity across several accounts, is treated under Section 7 in the same way as any other breach of this policy.

9C. Using AI Output

Our AI features help you draft documents and give general information. What they produce is a drafting and information tool, not legal advice, and it can be wrong (see Section 5 of our Terms of Service). When you use it, you must not:

• Present AI output as professional advice: do not present, describe or sell anything our AI features produced as having been prepared, reviewed or approved by a solicitor or other legal professional, unless a professional actually did that work for you, and then only for the work they did.
• Prepare documents for someone without their authority: do not use the platform to prepare a will, power of attorney or other legal document for another person unless that person has asked you to, or you are otherwise legally entitled to act for them.

10. Changes to This Policy

We may update this AUP from time to time. Material changes will be communicated via the Forum and/or email notification at least 30 days before they take effect. If a material change detrimentally affects you, you may stop using the affected Forum or product feature before the change takes effect, without penalty, rather than accept it. Continued use of the affected feature after the change takes effect constitutes acceptance of the revised policy.