Acceptable use policy

Draft: to be checked by Lingsaa's lawyer before the first client. Part of Lingsaa's Terms of Service. Points marked [lawyer to confirm] are to check.

1. Why this policy

1.1 Lingsaa CCC runs many organizations on shared systems, connects to real doors, cameras and alarms, and sends messages in its customers' names. These rules keep everyone safe. They apply to your organization and to everyone who uses the service through it.

2. You may not

• break any law, or help anyone else to, with the service;
• watch, record, track or identify people (cameras, face recognition, attendance, location, computer monitoring) without the notices and consents the law asks of you, or for any purpose your people were not told about (DPDP Act, s.5 and s.6) [lawyer to confirm];
• process a child's personal data without a parent's verifiable consent where the law requires it (DPDP Act, s.9);
• send spam, or messages people did not agree to: SMS only through templates registered on DLT, WhatsApp only to people who chose it and only within Meta's policy (TCCCPR; WhatsApp policy);
• upload anything unlawful, or that infringes someone else's rights, or malware;
• try to get into another organization's data, another person's account, or any part of the service you were not given (IT Act, s.43 and s.66);
• test the service's security without Lingsaa's written permission, except under the rules on the "Report a security issue" page;
• overload the service on purpose, scrape it, or get round its limits (rate limits, daily caps, plan limits);
• share sign-ins between people, or let people who left keep their access;
• resell or rent the service to others without a written agreement with Lingsaa;
• use the device controls (doors, alarms, cameras, power) in a way that puts people in danger, or switch off life-safety equipment through the CCC (the CCC refuses this by itself).

3. You should

• give each person their own account and the smallest rights they need;
• keep two-step sign-in on for admins;
• switch off people who leave on the day they leave;
• keep your devices, your network and the Lingsaa Edge box up to date and physically safe;
• tell Lingsaa at once through Help if you see misuse or a security problem.

4. What Lingsaa does if this policy is broken

4.1 Lingsaa may warn your admins, limit the feature being misused (for example stop messages), or suspend the account as the Terms of Service (section 10) say, and will tell you why unless the law forbids it. Where the law requires, Lingsaa reports unlawful use to the authorities (for example a reportable cyber incident to CERT-In).

4.2 Lingsaa never reads your records to look for breaches: it acts on what its systems measure (counts, rates, failures), on complaints, and on what the law requires. [lawyer to confirm]

5. Language

5.1 This policy is written in English. A translation is for help only; the English text applies.

Sources