So just to look at this from another perspective.

If I created a chase-bank.com website, and allowed users to interact with their actual Chase account through it, but I took a percentage of all transactions, it would be fine?