Acceptable Use Policy

2. Permitted Use

• Use Services only for lawful internal business purposes and within agreed subscription, user, storage, API and feature limits.
• Maintain credential confidentiality, use individual user accounts and promptly report suspected unauthorised access.
• Submit only data Customer has the right and lawful authority to provide.
• Maintain reasonable Customer-controlled endpoint, identity, access and integration security.
• Obtain Megamax’s written authorisation and agreed rules of engagement before security assessments, scanning, penetration testing, benchmarking, load testing or stress testing.

3. Prohibited Activities

• Access or attempt to access systems, accounts, data, APIs, networks or Services without authorisation.
• Bypass, defeat, probe or interfere with authentication, security controls, licence limits, rate limits or access controls.
• Introduce malware, ransomware, viruses, worms, trojans, spyware, cryptominers, destructive code or harmful content.
• Conduct denial-of-service activity, credential stuffing, phishing, spoofing, impersonation, password attacks, traffic interception or social engineering.
• Reverse engineer, decompile, disassemble, copy, mirror, scrape, data-mine, benchmark or derive source code, model weights or Platform logic except where written authorisation or mandatory law allows it.
• Share credentials, circumvent user or licence limits, resell, sublicense, timeshare, bureau-process or provide unauthorised third-party access.
• Send spam, unlawful bulk communications, fraudulent messages, malicious advertising or prohibited solicitations.
• Create, upload, store, transmit or facilitate unlawful, fraudulent, infringing, defamatory, abusive, threatening, harassing, obscene, discriminatory, hateful, exploitative or harmful content.
• Process personal data, children’s data, biometric data, health data, payment-card data or other regulated data without valid lawful basis, necessary notices, required consent or other authority.
• Use AI or automation to make high-impact or consequential decisions without meaningful human oversight and compliance with applicable law.
• Use Services in breach of applicable DPDP, GDPR, UK GDPR, sanctions, export control, anti-bribery, cybersecurity, employment, consumer-protection or other laws.
• Use Services to conceal unlawful conduct, harm another person, violate confidentiality or infringe intellectual-property rights.

4. Privacy and AI Requirements

Customer must comply with its responsibilities as Data Fiduciary or controller, including lawful basis, transparency notices, consent management where required, data-subject rights and security. Customer must independently review AI outputs for accuracy, appropriateness, bias and legal compliance. Customer must not rely on AI outputs without legally required human review or use AI functionality for prohibited purposes.

5. Enforcement and Reporting

Megamax may investigate suspected violations and may warn, restrict, throttle, suspend, remove content, terminate access, preserve evidence, notify affected parties or authorities, or take other reasonable action. Emergency action may be taken without prior notice. Reports of abuse or security issues should be sent to legal@megamaxservices.com.