Acceptable Use Policy

Acceptable Use Policy
Version 1.0

1. Purpose
This Acceptable Use Policy governs use of AMSync.ai and supplements the Terms of Service and applicable customer agreements. It protects AMSync, subscribing Organizations, Authorized Users, consumers, systems, and service providers from misuse.

2. Authorized Business Use
Users may use AMSync only for lawful business purposes within the authority granted by their Organization and assigned role. Users must comply with applicable insurance, privacy, communications, employment, payment, and records requirements.

3. Prohibited Conduct
Users must not use AMSync to violate law; access another Organization's data without authorization; bypass RBAC, RLS, authentication, tenant isolation, rate limits, or security controls; probe or exploit vulnerabilities without written authorization; introduce malware; interfere with availability; scrape or bulk-export data without authorization; impersonate another person; share credentials; submit false or fraudulent insurance or transaction information; infringe intellectual-property rights; harass or threaten individuals; or use AMSync for unlawful spam or communications.

4. Sensitive Data
Users must use designated fields and workflows for sensitive information. Complete payment-card numbers, CVVs, PINs, passwords, private keys, authentication secrets, or other prohibited credentials must not be entered into unrestricted notes, attachments, messages, or free-form fields.

5. Communications
Organizations and users are responsible for lawful messaging consent, opt-out handling, sender identification, content, and campaign practices. AMSync communication tools may not be used for unlawful or deceptive messaging.

6. Files and Mobile Uploads
Uploaded files must relate to authorized business activity. Users must not upload malware, unlawful content, or data they lack authority to process. Secure mobile-upload links and QR sessions must not be intentionally shared beyond the intended recipient or purpose.

7. Security
Users must protect credentials and devices, promptly report suspected compromise, and cooperate with reasonable security controls. Attempts to defeat logging, auditing, access restrictions, or session controls are prohibited.

8. Automated and AI Use
Users must not use automated tools, bots, or AI integrations to access AMSync except through features or APIs authorized by AMSync. Customer Data may not be exported to unapproved external AI services.

9. Enforcement
AMSync may investigate suspected violations and may restrict, suspend, or terminate access where reasonably necessary to protect the Service, comply with law, or enforce applicable agreements.

10. Reporting
Suspected misuse or security issues should be reported to Support@amsync.ai or Legal@amsync.ai.

11. Changes
AMSync may update this Policy. Material changes may be communicated or made subject to acceptance where AMSync determines acceptance is appropriate.