This Acceptable Use Policy ("AUP") describes activities that are prohibited on the Syncek customer relationship management platform and the syncek.com website (together, the "Service"). It supplements and is part of our Terms of Service. Violating this AUP is a material breach of the Terms and may result in suspension or termination of your Account without notice.

1. Lawful, respectful, and truthful use

You must not use the Service to:

Violate any applicable law, regulation, court order, or the rights of any third party, including intellectual property, privacy, publicity, and data protection rights.
Harass, threaten, defame, or impersonate any person; incite violence against individuals or groups; or publish content that sexually exploits or endangers minors.
Deceive or mislead, including misrepresenting your identity, your affiliation with any person or entity, or the origin of content sent through the Service.

2. Unsolicited communications (anti-spam)

Syncek is not a bulk email tool. You must not use the Service to send unsolicited commercial email, text messages, or any other electronic communications that violate anti-spam laws (including CAN-SPAM in the United States, CASL in Canada, and the GDPR together with Art. 13 of the ePrivacy Directive as implemented across the EU). Outbound communications sent through Syncek-hosted integrations must:

Have a lawful basis: consent or documented legitimate interest.
Accurately identify the sender and include a valid physical address.
Offer a clear, free, and immediate unsubscribe mechanism, honored on request.

We reserve the right to rate-limit or block traffic that exhibits spam characteristics, and to terminate Accounts whose outbound activity generates abuse reports, blocklistings, or carrier complaints.

3. Security, integrity, and availability

You must not, and must not permit any third party to:

Upload, store, or transmit malware, viruses, worms, ransomware, keyloggers, or any code designed to disrupt, disable, or damage the Service, other users' devices, or third-party systems.
Probe, scan, or test the vulnerability of the Service or any connected network without prior written authorization from Syncek; breach or circumvent any authentication, rate-limit, or security measure; or access accounts, data, or systems you are not authorized to access.
Interfere with or disrupt the integrity, performance, or availability of the Service, including through denial-of-service attacks, resource exhaustion, or attempts to overwhelm infrastructure.
Use automated means (scrapers, crawlers, bots) to access the Service in a way that imposes an unreasonable or disproportionately large load on our infrastructure, or that violates our rate limits.

Security research is authorized, and this section does not prohibit it. Testing carried out within the scope and rules of our vulnerability disclosure policy is authorized access and is not a violation of this section. Report what you find to security@syncek.com; we acknowledge valid reports within three business days.

The prohibition above exists to stop unauthorized probing, not to stop people telling us about our own bugs. It used to do both: it forbade testing without prior written authorization two paragraphs above inviting researchers to report what that testing found, which made every report an admission of breach. The carve-out is the fix.

4. Prohibited data categories

The Service is not certified for certain regulated data categories. Unless we have expressly authorized it in writing in a signed agreement, you must not upload, store, or process:

U.S. Protected Health Information (PHI) subject to HIPAA, or equivalent health-data categories under other jurisdictions.
Full payment card numbers (PAN), card verification values, or other data regulated by PCI-DSS, beyond what our payment processor handles for us during billing.
Children's personal information: subject to GDPR Art. 8 (sixteen by default, which a member state may lower to no less than thirteen), the U.S. Children's Online Privacy Protection Act (COPPA), or equivalent children's-data laws.
Government-classified information, export-controlled technical data, or biometric identifiers collected for identification purposes.
Special-category data under the GDPR (racial or ethnic origin, political opinions, religion, trade-union membership, genetic data, biometric data for identification, health data, sex life or sexual orientation) unless you have a lawful basis, have conducted a DPIA where required, and have notified us in writing.

5. Reverse engineering, scraping, and competitive use

You must not:

Reverse engineer, decompile, disassemble, or attempt to derive the source code, object code, or underlying structure of the Service, except to the extent applicable law expressly permits and cannot be waived by agreement.
Use the authenticated application or Syncek's Confidential Information to build, train, or improve a competing CRM product or service, or to copy features, UI, or workflows for reproduction in another product.
Scrape, index, or harvest data, screenshots, or UI output from the authenticated application by any means other than the documented APIs, and only on the API Terms.

Public pages are a separate matter, and they are open. The two restrictions above apply to the authenticated application and to Customer Data. The public pages on syncek.com may be crawled, indexed, and used as permitted by our robots.txt and the Content-Signal directive it carries, which currently declares ai-train=yes, search=yes, ai-input=yes. We publish llms.txt and a markdown version of every guide precisely so that machines can read them.

Benchmarking is allowed. If you publish a comparison involving Syncek, we ask only that it be accurate, current, and that it identify the plan and the date measured. We hold ourselves to the same standard on our own comparison pages, and we publish the underlying pricing dataset under CC BY 4.0 so anyone can check our figures.

6. Account sharing and resale

Credentials are personal. Each individual who accesses the Service must have their own Account: credential sharing is prohibited. You must not resell, sublicense, or otherwise make the Service available to any third party except as part of normal team collaboration within your workspace, with a Seat for each person who uses it.

7. Content that violates third-party rights

You are solely responsible for Customer Data you upload. You must not use the Service to store or distribute content that infringes copyright, trademark, patent, trade secret, or other intellectual-property rights; content you have no right to disclose (including confidential information received under a non-disclosure agreement); or content that violates the privacy or publicity rights of any individual.

If you believe content on the Service infringes your rights or is unlawful, send a notice to legal@syncek.com. We operate a notice-and-action process for everyone, wherever they are, and we act on valid notices promptly.

A copyright notice under the DMCA should be sent to our designated agent below and must include all of the following: your physical or electronic signature; identification of the copyrighted work you say is infringed, or a representative list where one notice covers several works at one site; identification of the material you want removed and enough information for us to find it on the Service; your address, telephone number and email so we can contact you; a statement that you have a good faith belief that the use is not authorized by the copyright owner, its agent, or the law; and a statement that the notice is accurate and, under penalty of perjury, that you are the owner or authorized to act for them.

A notice that does not substantially contain those elements may not be effective. Under 17 U.S.C. §512(f), anyone who knowingly and materially misrepresents that material is infringing may be liable for damages, including costs and legal fees. We may pass your notice on, including your contact details, to the person who provided the material.

Designated agent: Copyright Agent, Syncek LLC
30 N Gould St # 67131, Sheridan, WY 82801, USA
legal@syncek.com

What we do when a valid notice arrives. We remove or disable access to the material, and we take reasonable steps to notify you promptly that we have done so.

Counter-notice. If your material was removed and you believe that was a mistake or a misidentification, you may send our designated agent a counter-notice containing all of the following: your physical or electronic signature; identification of the material that was removed and the location where it appeared before removal; a statement under penalty of perjury that you have a good faith belief it was removed as a result of mistake or misidentification; and your name, address and telephone number, a statement that you consent to the jurisdiction of the federal district court for the district where you live, or, if you live outside the United States, for any district in which we may be found, and a statement that you will accept service of process from the person who sent the original notice or their agent. A counter-notice missing any of these is not effective.

What we do when a valid counter-notice arrives. We promptly send a copy to the person who sent the original notice and tell them we will restore the material in ten business days. We then will replace the material, or stop disabling access to it, between ten and fourteen business days after receiving your counter-notice, unless our designated agent first receives notice from that person that they have filed a court action seeking to restrain you from infringing activity relating to the material on the Service.

Repeat infringers. We maintain and enforce a policy of terminating, in appropriate circumstances, the Accounts of subscribers who are repeat infringers. We keep a record of notices we act on, and an Account that accumulates repeated valid notices is terminated. We may also terminate an Account at any time for a single blatant infringement.

8. Enforcement

We may investigate suspected violations of this AUP through reasonable means, including reviewing logs, request metadata, and (with appropriate legal basis) Customer Data. We may respond by:

Warning the Account owner and requesting prompt remediation.
Removing offending content or disabling offending features.
Rate-limiting, throttling, or suspending the Account.
Terminating the Account and preserving records for legal process.
Notifying law-enforcement, regulators, or third parties when we reasonably believe it is required by law or necessary to protect the rights, property, or safety of Syncek, users, or the public.

We will use reasonable efforts to notify the Account owner before suspension unless immediate action is necessary to protect the Service or other users, or prior notice is prohibited by law.

8.1 Appeals

If we suspend your Account or remove your content, you may appeal by emailing legal@syncek.com within six (6) months of the decision. We review appeals with human oversight, never a solely automated review, and respond with a reasoned decision, free of charge. This applies to everyone, not only to users in one region.

9. Reporting abuse

To report content or activity that violates this AUP, email legal@syncek.com with as much detail as you can provide (URLs, timestamps, affected accounts). We treat abuse reports as a priority and aim to acknowledge receipt within one business day.

10. Changes to this policy

We may update this AUP from time to time to reflect new threats, legal requirements, or Service capabilities. The "Last updated" date at the top of this page indicates the latest revision. Material changes will be notified through the Service or by email to the Account owner.

11. Contact

Everything except vulnerability reports goes to a single mailbox: questions about this AUP, abuse reports, infringement notices and DMCA notices. legal@syncek.com.