Acceptable Use Policy

INTERNAL STAGING TEST DOCUMENT — NOT FOR PRODUCTION USE ACCEPTABLE USE POLICY This Acceptable Use Policy ("AUP") protects BusinessManager, BusinessManager Staging Sandbox - Internal Evaluation Only, customers, users, infrastructure, service providers, and third parties from misuse. It applies to all users and business workspaces. 1. LEGAL AND AUTHORIZED USE Users must use BusinessManager only for lawful purposes and only within the authority granted by the business that controls the workspace. Users must comply with applicable law, regulations, court orders, contractual obligations, and third-party rights. 2. SECURITY ABUSE Users must not probe, scan, test, bypass, defeat, or interfere with authentication, authorization, tenant isolation, rate limits, anti-forgery controls, access controls, monitoring, or other security mechanisms without express authorization. Credential theft, session hijacking, unauthorized account access, and attempts to obtain another tenant's data are prohibited. 3. MALICIOUS CODE AND DISRUPTION Users must not introduce malware, ransomware, destructive payloads, credential-harvesting tools, malicious scripts, denial-of-service activity, or other content or conduct intended to disrupt, damage, overload, or impair the service or another system. 4. FRAUD, DECEPTION, AND IMPERSONATION Users must not use BusinessManager to facilitate fraud, theft, phishing, identity misuse, false authorization, deceptive billing, fabricated transactions, unlawful financial activity, or impersonation of another person or business. 5. UNLAWFUL OR ABUSIVE CONTENT Users must not knowingly use the service to create, store, transmit, or facilitate content or conduct that is unlawful, threatening, exploitative, harassing, defamatory, or that violates intellectual-property, privacy, publicity, or other legal rights. 6. CUSTOMER AND PERSONAL DATA Users must not upload or process information they are not authorized to collect, use, disclose, or store. This includes photos or images containing customer, employee, property, location, health, financial, identification, or other sensitive information. Users must not enable customer visibility or include an image in a customer-facing document unless they are authorized to share that media with the intended recipient. Businesses are responsible for notices, permissions, and legal bases applicable to the Customer Data they place in BusinessManager. 7. COMMUNICATIONS AND SPAM Users must not use the service for unlawful, deceptive, abusive, or unauthorized bulk communications. Where communications functionality is enabled, users are responsible for consent, opt-out, sender-identification, and other requirements that apply to their messages. 8. AUTOMATION AND RESOURCE ABUSE Automated activity must not materially degrade service performance, circumvent product limitations, create unreasonable load, scrape protected information, or interfere with other customers. Authorized APIs and integrations must be used within documented limits and permissions. 9. REVERSE ENGINEERING AND CIRCUMVENTION Users must not reverse engineer, decompile, disassemble, or attempt to derive protected source code or security-sensitive implementation details except to the extent such restriction is prohibited by law. Users must not circumvent subscription, licensing, or feature controls. 10. HIGH-RISK OR REGULATED USE A business is responsible for determining whether its intended use is subject to specialized regulatory, licensing, recordkeeping, professional, safety, or industry requirements. Use of BusinessManager does not by itself establish compliance with those requirements. 11. ENFORCEMENT We may investigate suspected violations and may restrict features, suspend access, preserve relevant security evidence, or terminate access when reasonably necessary to protect the service, users, or third parties or to comply with law. Enforcement should be proportionate to the circumstances where practicable. 12. REPORTING Suspected abuse or security concerns involving BusinessManager may be reported to legal-evaluation@businessmanager.com. Do not include passwords, full payment credentials, or other unnecessary sensitive information in a report. 13. POLICY CHANGES Published revisions identify their version and effective date. Material changes may require renewed acceptance where configured or legally appropriate.