Acceptable Use Policy

This Acceptable Use Policy ("AUP") describes activities that are prohibited on the Syncek customer relationship management platform and the syncek.com website (together, the "Service"). It supplements and is part of our Terms of Service. Violating this AUP is a material breach of the Terms and may result in suspension or termination of your Account without notice.

1. Lawful, respectful, and truthful use

You must not use the Service to:

• Violate any applicable law, regulation, court order, or the rights of any third party — including intellectual property, privacy, publicity, and data protection rights.
• Harass, threaten, defame, or impersonate any person; incite violence against individuals or groups; or publish content that sexually exploits or endangers minors.
• Deceive or mislead — including misrepresenting your identity, your affiliation with any person or entity, or the origin of content sent through the Service.

2. Unsolicited communications (anti-spam)

Syncek is not a bulk email tool. You must not use the Service to send unsolicited commercial email, text messages, or any other electronic communications that violate anti-spam laws (including CAN-SPAM, CASL, the GDPR / ePrivacy Directive, and Art. 21 of Spanish Law 34/2002 (LSSI-CE)). Outbound communications sent through Syncek-hosted integrations must:

• Have a lawful basis — consent or documented legitimate interest.
• Accurately identify the sender and include a valid physical address.
• Offer a clear, free, and immediate unsubscribe mechanism, honored on request.

We reserve the right to rate-limit or block traffic that exhibits spam characteristics, and to terminate Accounts whose outbound activity generates abuse reports, blocklistings, or carrier complaints.

3. Security, integrity, and availability

You must not, and must not permit any third party to:

• Upload, store, or transmit malware, viruses, worms, ransomware, keyloggers, or any code designed to disrupt, disable, or damage the Service, other users' devices, or third-party systems.
• Probe, scan, or test the vulnerability of the Service or any connected network without prior written authorization from Syncek; breach or circumvent any authentication, rate-limit, or security measure; or access accounts, data, or systems you are not authorized to access.
• Interfere with or disrupt the integrity, performance, or availability of the Service — including through denial-of-service attacks, resource exhaustion, or attempts to overwhelm infrastructure.
• Use automated means (scrapers, crawlers, bots) to access the Service in a way that imposes an unreasonable or disproportionately large load on our infrastructure, or that violates our rate limits.

Security researchers acting in good faith may report vulnerabilities to legal@syncek.com. We will not pursue legal action against research conducted in accordance with responsible-disclosure norms.

4. Prohibited data categories

The Service is not certified for certain regulated data categories. Unless we have expressly authorized it in writing in a signed agreement, you must not upload, store, or process:

• U.S. Protected Health Information (PHI) subject to HIPAA, or equivalent health-data categories under other jurisdictions.
• Full payment card numbers (PAN), card verification values, or other data regulated by PCI-DSS, beyond what our payment processor handles for us during billing.
• Children's personal information — subject to GDPR Art. 8 and LOPDGDD Art. 7 (EU: minimum age 13–16 depending on the Member State; Spain: 14), the U.S. Children's Online Privacy Protection Act (COPPA), or equivalent children's-data laws.
• Government-classified information, export-controlled technical data, or biometric identifiers collected for identification purposes.
• Special-category data under the GDPR (racial or ethnic origin, political opinions, religion, trade-union membership, genetic data, biometric data for identification, health data, sex life or sexual orientation) unless you have a lawful basis, have conducted a DPIA where required, and have notified us in writing.

5. Reverse engineering, scraping, and competitive use

You must not:

• Reverse engineer, decompile, disassemble, or attempt to derive the source code, object code, or underlying structure of the Service, except to the extent applicable law expressly permits and cannot be waived by agreement.
• Use the Service to build, train, or improve a competing CRM product or service; to benchmark the Service for public comparison without our prior written consent; or to copy features, UI, or workflows for reproduction in another product.
• Scrape, index, or harvest data, screenshots, or UI output from the Service by any means other than the documented APIs, and only within their published rate limits and usage terms.

6. Account sharing and resale

Credentials are personal. Each individual who accesses the Service must have their own Account — credential sharing is prohibited. You must not resell, sublicense, or otherwise make the Service available to any third party except as part of normal team collaboration within your workspace under the plan's user allowance.

7. Content that violates third-party rights

You are solely responsible for Customer Data you upload. You must not use the Service to store or distribute content that infringes copyright, trademark, patent, trade secret, or other intellectual-property rights; content you have no right to disclose (including confidential information received under a non-disclosure agreement); or content that violates the privacy or publicity rights of any individual.

If you believe content on the Service infringes your intellectual-property rights or constitutes illegal content under EU law, send a notice to legal@syncek.com. For EU residents, our notice-and- action process complies with Art. 16 of the EU Digital Services Act (Regulation (EU) 2022/2065). For U.S. DMCA notices, you may also email legal@syncek.com. We respond to valid notices and counter-notices in accordance with applicable law.

8. Enforcement

We may investigate suspected violations of this AUP through reasonable means, including reviewing logs, request metadata, and — with appropriate legal basis — Customer Data. We may respond by:

• Warning the Account owner and requesting prompt remediation.
• Removing offending content or disabling offending features.
• Rate-limiting, throttling, or suspending the Account.
• Terminating the Account and preserving records for legal process.
• Notifying law-enforcement, regulators, or third parties when we reasonably believe it is required by law or necessary to protect the rights, property, or safety of Syncek, users, or the public.

We will use reasonable efforts to notify the Account owner before suspension unless immediate action is necessary to protect the Service or other users, or prior notice is prohibited by law.

8.1 Appeals (EU DSA Art. 20)

If your Account is suspended or your content is removed and you are established in the EU, you may submit an appeal under Art. 20 of the EU Digital Services Act by emailing legal@syncek.com within six (6) months of the decision. We will review your appeal with human oversight (no solely automated review) and respond with a reasoned decision free of charge. If you disagree with the outcome, you may refer the dispute to a certified out-of-court dispute-settlement body or to the competent national authority.

9. Reporting abuse

To report content or activity that violates this AUP, email legal@syncek.com with as much detail as you can provide (URLs, timestamps, affected accounts). We treat abuse reports as a priority and aim to acknowledge receipt within one business day.

10. Changes to this policy

We may update this AUP from time to time to reflect new threats, legal requirements, or Service capabilities. The "Last updated" date at the top of this page indicates the latest revision. Material changes will be notified through the Service or by email to the Account owner.

11. Contact

All matters — questions about this AUP, abuse reports, security/vulnerability reports, EU DSA / IP infringement notices, and U.S. DMCA notices — go to a single mailbox: legal@syncek.com.