Acceptable Use Policy

This Acceptable Use Policy (the "Policy") sets out what Zamilo may not be used for. It forms part of our Terms of Service (the "Terms") between BurTech Solution ("we", "us" and "our") and the Customer. Capitalised words that this Policy does not define have the meaning given in the Terms.

The Policy applies to the Customer and to every User. The Customer is responsible for making sure its Users follow it. If you are not sure whether something is allowed, ask us first at [email protected].

1. Illegal, infringing or harmful use

You must not use Zamilo to:

• break any law or regulation that applies to you, your Users or us, or to help anyone else do so;
• store, send or share content that infringes or misappropriates anyone's intellectual property, privacy, publicity or other rights;
• store, send or link to malware, viruses, ransomware or other harmful code;
• run phishing schemes, impersonate any person or organisation, or misrepresent who you are or where a message comes from;
• commit fraud or deceive people, for example with false invoices, fake orders or misleading claims about products;
• harass, threaten, intimidate, defame or abuse anyone, or send content that promotes hatred or incites violence; or
• store or share content that sexually exploits children, or any other content that is illegal to possess or distribute.

2. Email, texts and calls

Zamilo sends email and texts through the mailboxes and phone numbers you connect, such as Microsoft 365, IMAP and SMTP mail hosts, and RingCentral. You are the sender of those messages, and you must follow the anti-spam, electronic messaging and telemarketing laws that apply to them. Examples include:

• Canada's Anti-Spam Legislation (CASL);
• the United States CAN-SPAM Act and Telephone Consumer Protection Act (TCPA); and
• the European Union's ePrivacy rules (the ePrivacy Directive as each member state applies it) and similar laws elsewhere.

You must not use Zamilo, or the mailboxes and phone numbers connected to it, to:

• send unsolicited bulk email or texts, or commercial messages without the consent, sender identification and unsubscribe mechanism the law requires;
• send messages to purchased, rented or harvested lists of addresses or numbers;
• place calls or send texts in breach of telemarketing rules, consent requirements or do-not-call lists; or
• hide or falsify a message's sender, headers or origin.

Zamilo is built for correspondence with your own customers, dealers and suppliers, not for marketing campaigns. Your mail and phone providers also have their own sending rules and limits, and they may block an account that breaks them.

3. Sensitive information

Do not put the following into free-text fields (such as notes, comments, descriptions and custom fields), messages or attachments in Zamilo:

• full payment card numbers, card security codes, or other cardholder data that payment card industry rules protect; or
• passwords, PINs or other sign-in details for bank accounts or online banking.

Credentials for the services you connect belong only in the fields Zamilo provides for connecting them, where they are encrypted.

You must not process special categories of personal information unlawfully. These include information about health, racial or ethnic origin, religious or philosophical beliefs, political opinions, trade union membership, sex life or sexual orientation, and genetic or biometric data. Some records in Zamilo may need health information, for example a complaint that describes an injury involving a product. Record it only when you have a lawful ground to do so, and only as much as you need. You are responsible for any notice, consent or safeguard the law requires.

4. Security testing

You must not probe, scan or test the vulnerability of Zamilo or the systems it runs on, or try to break or get around its security or sign-in, without our written permission. This includes automated vulnerability scanners and penetration tests.

If you believe you have found a security problem, please tell us under our responsible disclosure policy, or write to [email protected]. Do not access, change or delete data that is not yours, and do not share the problem with others until we have had a reasonable chance to fix it.

5. Protecting Zamilo and other customers

You must not:

• interfere with or disrupt Zamilo, the servers and networks it runs on, or other customers' use of it, for example with a denial-of-service attack;
• send excessive automated requests or place an unreasonable load on Zamilo, or use bots, scripts or other automated means to use it, except through features we provide or approve for that purpose;
• scrape, crawl or harvest data from Zamilo, other than exporting your own Customer Data with the tools Zamilo provides;
• get around, or try to get around, usage limits, access controls, roles and permissions, two-step sign-in, or the separation between Workspaces;
• access, or try to access, another customer's data or any account you are not authorised to use;
• reverse engineer, decompile or disassemble Zamilo, or try to derive its source code, except to the extent the law allows this despite this restriction; or
• copy, change or create derivative works of Zamilo, or remove any notice of ownership from it.

6. Reselling and connected platforms

You must not:

• resell, rent, lease, sublicense or otherwise offer access to Zamilo to anyone other than your own Users, for example as a service bureau or under another brand, unless we have agreed to it in writing; or
• use Zamilo in breach of the terms and policies of a platform you connect it to, such as Shopify's terms for merchants and apps, Intuit's terms for QuickBooks Online, Microsoft's terms for Microsoft 365, Google's terms for Gmail and Google Workspace, or the terms of any other Third-Party Service.

7. High-risk uses

Zamilo is not designed, tested or certified for uses where its failure, delay or error could lead to death, personal injury, or serious damage to property or the environment. Do not use it to operate or control medical devices, life-support systems, vehicles or aircraft, industrial machinery, emergency services or similar systems.

8. Sanctions

You must not use Zamilo, or let it be used, by or for the benefit of a person or organisation that is subject to sanctions, that is named on a sanctions or restricted-party list, or that is located in, or ordinarily resident in, a country or region subject to comprehensive sanctions. Section 19 of the Terms sets out what each party confirms about export controls and sanctions.

9. How we enforce this Policy

If we reasonably believe this Policy has been breached, we may:

• investigate, including by looking at the records concerned, as the Terms allow;
• ask you to remove content or stop an activity, or remove or disable access to content ourselves;
• suspend a User's or the Customer's access, as Section 14 of the Terms describes, or end the Terms, as Section 15 describes; and
• report the matter to law enforcement or other authorities, and cooperate with them, where the law requires or allows it.

What we do depends on how serious the breach is. Where it is reasonable, we will tell you first and give you a chance to fix the problem. If we do not act on a breach straight away, we have not given up our right to act on it later.

10. Reporting abuse

If you believe someone is using Zamilo in breach of this Policy, please write to [email protected]. For a security vulnerability, write to [email protected] instead.

Tell us what happened, when, and how it involved Zamilo. If you received an unwanted message, include it with its full headers if you can. We review every report. To protect other people's privacy, we may not be able to tell you what action we took.

We may update this Policy as Section 20 of the Terms describes.