FINITY PLATFORM RULES OF USE

SOLUCIONES DE PAGOS Y RECAUDOS S.A.S. – “FINITY”

Version 1.0 · Effective November 5, 2026

‍

Clear rules so you can operate with peace of mind

‍

These rules govern the use of Finity’s business portal and API (the “Platform”). They apply to each client and to everyone who operates the Platform on its behalf.

‍

They form part of the services agreement and of the Terms and Conditions of Service. In case of any inconsistency, the agreement prevails, followed by the Terms and Conditions and, lastly, these rules.

‍

1. Access and users

‍

Only clients who have completed their onboarding and due diligence process (KYB) and have been approved by Finity may access the Platform.

‍

Each client decides who its authorized users are and what permissions each one has. Users are personal and non-transferable, so when someone is no longer authorized, the client must notify us immediately so we can deactivate their access.

‍

We may ask you to update your onboarding information at least once a year, or earlier if your risk profile changes.

‍

2. Credentials and security

‍

Security is a shared responsibility. As a client, you agree to:

‍

• Safeguard passwords, second authentication factors and API credentials (client_id and client_secret).
• Not share credentials or store them in source code, emails or shared documents.
• Keep test and production environments separate.
• Notify us at soporte@finity.com.co immediately, and in any case within 24 hours, if you suspect a credential has been compromised. We will revoke it and issue a new one.

‍

Any transaction carried out with a client’s credentials is deemed to have been carried out by that client.

‍

3. Payment instructions

‍

Only authorized users may give payment instructions, either through the portal or through the API. The client is responsible for ensuring that the details of each instruction (beneficiary, account, amount and currency) are correct.

‍

Once executed, an instruction cannot be reversed. If there was an error, we will help you request the return of the funds from the institution or the beneficiary, although we cannot guarantee the outcome.

‍

Instructions received outside the operating hours shown on the Platform, or on non-business days, will be processed on the next business day. Currency conversions are executed at the rate quoted on the Platform, while the quote is valid.

‍

4. Permitted use

‍

The Platform is designed to manage the payments and collections of the lawful business you described to us during onboarding. It is not permitted to:

‍

• Use it for illegal activities, to move funds of illegal origin or to deal with persons included in restrictive lists.
• Use it for activities or in jurisdictions that are prohibited or high-risk under Finity’s policies.
• Provide payment services to third parties through your account without Finity’s written authorization.
• Split transactions to avoid limits or controls.
• Interfere with the Platform, introduce malicious code, bypass controls or carry out security testing without written authorization.
• Reverse engineer, copy or resell the Platform or its API.

‍

5. Limits and controls

‍

Each client operates within the transaction limits assigned by Finity under the agreement. We may ask you for information or documents about the source of funds or the support for a transaction, and you must provide them within the agreed period. Until we receive them, we may refrain from processing that transaction.

‍

6. Service suspension

‍

We may suspend access immediately, informing you afterwards, when there are signs of fraud, money laundering or terrorism financing, risks to the security of the Platform, or orders from a competent authority.

‍

In cases of breach of these rules or of the agreement, non-payment or outdated onboarding information, we will notify you before suspending. In any case, the suspension will last only as long as necessary and we will lift it once the cause has been remedied.

‍

7. Availability and maintenance

‍

Service levels are those agreed in the contract. We will notify you in advance of scheduled maintenance and, whenever possible, carry it out outside business hours.

‍

8. Changes to these rules

‍

We will inform you of any change by email or through the Platform, with the advance notice provided for in the agreement. Urgent changes required for security reasons or by regulation may be applied immediately, and we will let you know as soon as possible.

‍

9. Contact channels

‍

For operational and technical support, write to soporte@finity.com.co. For personal data and compliance matters, write to cumplimiento@finity.com.co. Technical documentation is available at docs.finity.com.co.

‍

This English version is provided for convenience. In case of any discrepancy, the Spanish version shall prevail.