DRAFT — NOT IN FORCE. This document is an unreviewed placeholder. It has not been reviewed by counsel and does not bind anyone.

Acceptable Use Policy

Effective date: [EFFECTIVE DATE] Last updated: [EFFECTIVE DATE]

This policy says what you may not do with [PRODUCT NAME], the ordering service provided by [LEGAL ENTITY NAME], [ENTITY TYPE] ("we", "us"). It is part of our Terms of Service. Words defined there have the same meaning here.

1. Who this policy binds

[PRODUCT NAME] is licensed to distributors. If you are a distributor, this policy binds you.

Your own customers — the café, restaurant, hotel and office staff who sign in on your subdomain and place orders — are your End Users. We have no contract with them. You are responsible for their conduct on the service, and this policy binds them through you. Pass these rules on in your own customer terms.

2. Content you may not put in the service

Do not upload, store, send or submit anything that:

  • breaks the law, or helps someone else break it;
  • infringes anyone's copyright, trademark, or other rights;
  • is malicious code — a virus, a worm, a trojan, or anything designed to damage or take control of a system;
  • harasses, threatens, defames or abuses a person;
  • is sexual content involving minors, or content that promotes violence or hatred against people;
  • you do not have the right to put there.

This applies to every field you can type into: product names and notes, company records, user records, order notes, contact-form messages, and your tenant settings.

3. Conduct we do not allow

Do not use the service to:

  • impersonate another person, business or distributor;
  • send unsolicited bulk messages of any kind;
  • deceive people about who you are or who is billing them;
  • sublicense or resell the service, or run it for another distributor. To be clear about the line: our Terms of Service license you to run the service under your own brand for your own customers — that is the product. What you may not do is provide it to another distributor, or to anyone else, as if it were their platform;
  • do anything that exposes us or another customer to legal liability.

4. Technical rules specific to this service

These are the ones people break without meaning to. Do not:

  • Probe or scan. No port scanning, vulnerability scanning, fuzzing or penetration testing of the service, on any host, without our written permission. [FACT NEEDED: whether a security research / responsible disclosure exception exists, and the contact address for it]
  • Try to reach another tenant's data. Each distributor's data is kept separate. Do not attempt to read, write, or infer the contents of any tenant but your own, whether by guessing identifiers, manipulating requests, or any other means. Report it to us instead if you find a way in.
  • Scrape the supplier finder. The search on the home page exists so a person can find their distributor. Do not run automated queries against it to enumerate, harvest or copy the list of distributors on the service.
  • Share credentials. Each person gets their own account. Do not share a password, a session, or a sign-in link between people, and do not create shared "team" logins. If someone leaves, disable their account.
  • Overload the service. Do not generate load that degrades performance for other customers — automated request floods, runaway scripts, or bulk operations run in a loop. If you need to do something at volume, ask us first. [FACT NEEDED: published rate limits or usage thresholds that define excessive load]
  • Reverse engineer. Do not decompile, disassemble or otherwise try to derive the source code of the service, or copy how it works in order to build a competing product, except where the law says you may despite this clause.
  • Circumvent controls. Do not bypass authentication, rate limits, role checks or any other restriction, and do not use the service through anything but its normal interfaces.

5. You are responsible for your End Users

You decide who gets an account on your subdomain. That means:

  • you must remove access for people who should no longer have it;
  • you must tell your End Users what they may and may not do, consistent with this policy;
  • conduct by your End Users is treated as conduct by you for the purposes of this policy.

We will normally come to you first about something one of your End Users did.

6. Brand assets you upload

You can upload a logo and a favicon for your subdomain. You must own them, or have permission to use them. By uploading them you tell us you have that right, and you allow us to store and display them for the purpose of running your tenant.

Do not upload someone else's logo, or a mark you are not licensed to use.

7. Email sent by the service

[PRODUCT NAME] sends transactional email only — messages triggered by something a person did in the service, such as an order being placed or approved, an invitation, a password reset, or a contact-form message. The full list is on our Subprocessors page.

It is not a marketing tool. Do not use it, or try to make it, send newsletters, promotions, announcements or any other bulk message. Do not add addresses to the service in order to mail them. Use a real email service for that.

8. Reporting a violation

If you see something on the service that breaks this policy — including a security problem — tell us at [SUPPORT EMAIL]. Include the subdomain, what you saw, and when.

Please report security problems to us privately before disclosing them anywhere else. [FACT NEEDED: target response time for abuse and security reports]

9. What we do about violations

If we believe this policy has been broken, we may:

  1. Investigate. We may look at the affected tenant's data as far as needed to understand what happened. Our access to tenant data is otherwise governed by our Privacy Policy and our Terms of Service.
  2. Ask you to fix it. For most problems this is the first step, and usually the last. You get the cure period in section 14 of our Terms of Service (currently 30 days from written notice).
  3. Suspend. We can suspend an individual account, or a distributor's whole tenant. While a tenant is suspended, nobody can sign in to it and its sign-in page says so. We record every suspension and restoration of a tenant, and who did it.
  4. Terminate. Serious or repeated violations can end the agreement, under the termination terms in our Terms of Service.

We can act immediately, without warning, where there is an urgent risk to the service, to other customers, or to someone's safety. Otherwise we will try to reach you first.

Suspension does not refund fees, and it does not by itself delete your data. What happens to your data after termination is covered by our Terms of Service.

10. Changes to this policy

We may update this policy as the service changes. If a change materially restricts what you are allowed to do, we will tell you before it takes effect, with the notice period that section 20 of our Terms of Service sets for a material change.

11. How to contact us

Questions about this policy, or notices under it:

  • Abuse and security reports: [SUPPORT EMAIL]
  • Legal notices: [NOTICE EMAIL]
  • By post: [LEGAL ENTITY NAME], [PRINCIPAL ADDRESS]