Acceptable Use Policy

1. Purpose and Application

ServiceRunner exists to help field-service, maintenance and construction teams run their work. This policy protects the Service, its users, the people whose data is recorded in it and Isles Mechanical LLC. Customer is responsible for ensuring that its Authorized Users and anyone it invites comply with it.

2. Prohibited Uses

You must not use, or allow anyone to use, the Service to:

2.1 Illegal or harmful activity

• Violate any law, regulation or court order, including employment, wage-and-hour, privacy, surveillance, wiretapping, telemarketing, anti-spam, export-control or sanctions laws;
• Store or transmit content that is defamatory, threatening, harassing, discriminatory, obscene or that promotes violence or illegal activity;
• Record, track or photograph people without a lawful basis and any notice or consent the law requires, including tracking a technician's location outside the scope your policies and the law permit;
• Facilitate fraud, including falsifying inspection records, time entries, photos or maintenance logs, or presenting Service-generated reports as certifications by a licensed inspector when they are not.

2.2 Infringement

• Upload plans, drawings, photos, documents or other content that you do not have the right to use, or that infringe copyright, trademark, trade secret, privacy or publicity rights;
• Remove or alter proprietary notices on the Service or on content obtained through it.

2.3 Security and integrity

• Probe, scan or test the vulnerability of the Service, or breach or circumvent any security or authentication measure, other than under a written security-testing agreement with us;
• Upload malware, or content designed to exploit the Service, other users or their devices;
• Access another organization's data, or an account you are not authorized to use, or share credentials so that more than one person uses a single seat;
• Interfere with the Service or its infrastructure, including through denial-of-service, excessive API calls beyond documented rate limits, or scraping;
• Send messages, invitations, quotes or notifications through the Service to people who have not consented to receive them or where the law requires consent you do not have, or use SMS or email features for bulk or marketing messaging.

2.4 Misuse of the platform

• Resell, sublicense, time-share or provide the Service to third parties as a service bureau or white-label offering without our written agreement (inviting your own clients as collaborators on your sites is permitted);
• Circumvent plan limits, storage quotas, seat counts or trial periods, including by creating multiple free organizations for a single business;
• Reverse engineer, decompile or attempt to derive the source code of the Service or Mobile Apps except as permitted by non-excludable law;
• Use the Service to build, train or benchmark a competing product;
• Use automated means to create accounts, or register with false identity information;
• Store data that is not related to your field operations, or use the Service as a general file-hosting or backup service.

2.5 Sensitive and regulated data

• Do not upload government identification numbers, payment card numbers, bank credentials, health records or other data whose storage requires certifications (such as HIPAA or PCI DSS) that we have not agreed in writing to maintain;
• Do not upload export-controlled technical data, classified information or data subject to ITAR.

3. Your Responsibilities

• Keep credentials confidential, enable two-factor authentication, and remove users who leave your organization promptly;
• Inform your technicians and staff about location tracking, photo capture and activity logging before enabling those features, and obtain consent where the law requires;
• Give your clients and site contacts any privacy notice the law requires before recording their details or sending them messages;
• Verify all safety-critical, code-compliance and inspection matters independently; the Service is a record-keeping tool, not an inspection or safety system;
• Report security vulnerabilities to security@app.servicerunner.app rather than exploiting or publicizing them.

4. API and Integration Use

Access to the API is limited to documented endpoints, using credentials issued to your organization, within published rate limits. You must not share API tokens across organizations, use the API to bulk-export data belonging to other organizations, or build integrations that send unsolicited messages. We may throttle or revoke API access that degrades the Service for others.

5. Enforcement

We may investigate suspected violations and, depending on severity, warn you, remove or disable access to content, throttle features, suspend an Authorized User or an Organization, or terminate the agreement as described in Section 14 of the Terms. We will give notice and an opportunity to cure where practicable, but may act immediately where a violation threatens the security of the Service, other users or third parties, or creates legal exposure for us. We may also report activity to law enforcement or rights holders where we consider that appropriate. We have no obligation to monitor content, but we may do so to enforce this policy.

6. Reporting Abuse

To report a violation of this policy, content that infringes your rights, or a security concern, email legal@app.servicerunner.app (legal and infringement notices) or security@app.servicerunner.app (security). Copyright infringement notices should include the information required by the applicable notice-and-takedown law, including identification of the work, the location of the infringing material within the Service, your contact details and a statement of good-faith belief and accuracy.

7. Changes

We may update this policy as described in Section 23 of the Terms. The "Last updated" date identifies the current version.