RENEWTRACK ACCEPTABLE USE POLICY

This Acceptable Use Policy (the "AUP") applies to all access to and use of the services provided by RenewTrack Solutions Inc. ("RenewTrack"), and is incorporated into the RenewTrack Enterprise Subscription Terms published at https://www.renewtrack.com/enterpriseterms (the "Agreement"). Capitalized terms used but not defined here have the meanings given in the Agreement.

Customer is responsible for its own compliance with this AUP and for the compliance of its Affiliates and Authorized Users. A breach of this AUP is a breach of the Agreement.

1. GENERAL PRINCIPLE

1.1 The Services are provided for Customer’s internal business use in tracking, managing and receiving alerts about its own contracts, warranties, licences, subscriptions and similar arrangements. Customer will use the Services for that purpose and in a manner that is lawful, secure and respectful of other users.

2. PROHIBITED CONTENT

2.1 Customer will not submit to the Services any content that: (a) is unlawful, or that Customer does not have the right to submit; (b) infringes or misappropriates the Intellectual Property Rights, privacy rights or other rights of any person; (c) contains malicious code, including viruses, worms, trojans, ransomware or logic bombs; or (d) is defamatory, harassing or otherwise abusive.

2.2 Customer will not submit to the Services any special categories of sensitive personal information — including health information, biometric information, government identification numbers, payment card numbers, or financial account credentials — unless RenewTrack has agreed in writing that the Services may be used for that purpose. The Services are not designed to receive this information, and submitting it may place Customer in breach of applicable law.

2.3 Customer will not submit credentials, keys or secrets belonging to third-party systems except where the Services provide a supported mechanism for storing them.

3. PROHIBITED ACTIVITIES

3.1 Security. Customer will not: (a) attempt to gain unauthorized access to the Services, to any account other than its own, or to any underlying system or network; (b) probe, scan or test the vulnerability of the Services, or conduct penetration, stress or load testing, without RenewTrack’s prior written consent; (c) circumvent or attempt to circumvent any authentication, rate limit, quota or other technical restriction; or (d) interfere with or disrupt the integrity or performance of the Services or the data of any other customer.

3.2 Automated Access. Customer will not scrape, crawl or harvest data from the Services except through an application programming interface that RenewTrack makes available for that purpose, and will observe any published rate limits. Customer will not use automated means to create accounts or generate load beyond what its Subscription permits.

3.3 Reverse Engineering and Competitive Use. Customer will not reverse engineer, decompile or disassemble the Services except to the extent that restriction is prohibited by applicable law, and will not access the Services in order to build a competing product or service.

3.4 Resale and Sharing. Customer will not resell, sublicense, rent, lease or otherwise make the Services available to any third party, or permit any person other than an Authorized User to access the Services using Customer’s credentials.

3.5 Misrepresentation. Customer will not misrepresent its identity or affiliation, impersonate any person, or falsify the origin of any data submitted to the Services.

4. NOTIFICATIONS AND COMMUNICATIONS

4.1 The Services generate alerts, reminders and notifications derived from dates recorded in Customer Data. Customer will configure recipients so that notifications are sent only to individuals within Customer’s organization, or to individuals who have consented to receive them or with whom Customer has a business relationship permitting the communication.

4.2 Customer will not use any notification, messaging or reporting feature of the Services to send unsolicited commercial messages, marketing communications, or bulk messages to persons outside its organization. Customer is responsible for its own compliance with Canada’s Anti-Spam Legislation, the U.S. CAN-SPAM Act and comparable laws in respect of any message the Services send at Customer’s direction.

5. ACCOUNT AND DATA RESPONSIBILITY

5.1 Customer will keep its access credentials secure, will not share credentials between individuals, and will promptly deactivate accounts of individuals who no longer require access.

5.2 Customer will review and maintain access permissions within its tenant, and will promptly notify RenewTrack at security@renewtrack.com of any suspected unauthorized access or security incident affecting its account.

5.3 Customer is responsible for the accuracy and completeness of the data it records in the Services. Alerts and insights are generated from that data, and RenewTrack does not verify it against any external source.

6. REPORTING AND ENFORCEMENT

6.1 Reporting. Suspected violations of this AUP, and suspected security vulnerabilities in the Services, may be reported to security@renewtrack.com. RenewTrack welcomes good-faith security research reported through that address, and will not pursue action against a researcher who reports a vulnerability responsibly, does not access or modify data belonging to others, and does not disclose the vulnerability publicly before RenewTrack has had a reasonable opportunity to remediate it.

6.2 Investigation. RenewTrack may investigate suspected violations of this AUP and may require Customer’s reasonable cooperation.

6.3 Enforcement. Where RenewTrack reasonably believes this AUP has been breached, it may suspend the affected access or the Services in accordance with Section 2.9 of the Agreement, remove or disable offending content, and, where the breach is material and uncured, terminate the affected Subscription in accordance with Section 12.3 of the Agreement. RenewTrack will act proportionately and, wherever practicable, will contact Customer before suspending access.

6.4 Legal Process. RenewTrack may disclose information relating to a suspected violation where required by law or valid legal process, and will notify Customer where it is permitted to do so.

7. CHANGES TO THIS POLICY

7.1 RenewTrack may update this AUP in accordance with Section 14.12 of the Agreement. The current version is always published at https://www.renewtrack.com/aup

Questions about this policy may be directed to legal@renewtrack.com. Security matters should be reported to security@renewtrack.com.