Acceptable Use Policy

1. Introduction

This Acceptable Use Policy (the “AUP”) governs your use of the BayBoard platform, websites, applications, APIs, and related services (collectively, the “Service”) provided by BayBoard LLC, a Colorado limited liability company (“BayBoard,” “we,” “us,” or “our”).

This AUP is incorporated by reference into the BayBoard Terms of Service. Capitalized terms not defined here have the meanings given in the Terms of Service. If there is a conflict between this AUP and the Terms of Service, the Terms of Service control unless this AUP explicitly states otherwise.

The Service is built for independent auto repair shops and similar businesses (each, a “Customer”). This AUP applies to every Customer, every individual user authorized by a Customer to access the Service (each, an “Authorized User”), and every other person or system that accesses the Service through a Customer account.

Each Customer is responsible for ensuring that its Authorized Users comply with this AUP. A violation by an Authorized User is treated as a violation by the Customer.

2. Customer Obligations

As a Customer, you agree that you and your Authorized Users will:

• Use the Service only for lawful business purposes.
• Comply with all applicable laws and regulations, including those governing data privacy, employment, wage and hour rules, consumer protection, advertising, and the operation of an automotive repair business.
• Provide accurate account information and keep it current.
• Maintain the security of your account credentials and immediately notify us of any unauthorized access or suspected breach.
• Ensure that all data you upload or transmit through the Service is accurate, lawfully obtained, and that you have the right to upload, store, and process it through the Service.
• Promptly correct or remove data that is inaccurate, no longer authorized, or in violation of this AUP.

3. Prohibited Uses

You may not, and may not permit any Authorized User or third party to, do any of the following in connection with the Service.

3.1 Illegal and Harmful Activity

• Use the Service to engage in, facilitate, or promote any illegal activity.
• Violate any applicable law or regulation, including data privacy, employment, wage and hour, consumer protection, advertising, anti-discrimination, or environmental laws.
• Infringe, misappropriate, or violate any intellectual property right, right of publicity, or right of privacy of any third party.
• Use the Service to harass, threaten, defame, intimidate, stalk, or otherwise harm any person.
• Upload or transmit content that is unlawful, defamatory, obscene, hateful, or that violates the privacy or publicity rights of any person.
• Misrepresent your identity, your affiliation, or the source or accuracy of any content you submit to the Service.
• Collect, harvest, or compile personal information about other users without their explicit authorization or a lawful basis.

3.2 Security and Integrity of the Service

• Upload, transmit, distribute, or knowingly introduce any malware, viruses, worms, ransomware, trojans, or other harmful code.
• Interfere with, disrupt, degrade, or attempt to gain unauthorized access to the Service, other Customers’ accounts, other tenants’ data, or any underlying infrastructure, systems, or networks.
• Bypass, disable, or attempt to circumvent any authentication, authorization, security control, rate limit, throttling mechanism, or usage restriction.
• Conduct, or permit any third party to conduct, penetration testing, vulnerability scanning, fuzzing, denial of service testing, or other security testing of the Service without our prior written authorization.
• Reverse engineer, decompile, disassemble, or otherwise attempt to derive source code, underlying ideas, algorithms, models, or architecture of the Service, except to the limited extent applicable law expressly permits this notwithstanding a contractual restriction.
• Probe, scan, or test the vulnerability of the Service or breach any security or authentication measure.

Authorized security research is permitted only under a separate written agreement with BayBoard. Submissions made through any future coordinated disclosure or bug bounty program will be governed by that program’s published terms.

3.3 Automated Access and Data Extraction

• Scrape, crawl, spider, or use any automated means to extract, copy, or index data from the Service, except through APIs we expressly make available to you and in compliance with their documented terms and rate limits.
• Use the Service to build, train, fine-tune, or improve any machine learning model, large language model, or other artificial intelligence system, except for AI features we provide as part of the Service and in accordance with this AUP.
• Frame, mirror, or aggregate any portion of the Service, or use the Service in a way that creates derivative offerings.

3.4 Account, Tenancy, and Resale

• Resell, sublicense, lease, rent, or otherwise commercialize access to the Service to third parties, including by providing the Service “as a service” to other businesses.
• Use the Service to develop, support, or enhance any product or service that competes with the Service. This does not prohibit Customer’s internal benchmarking of its own operations.
• Share account credentials, login tokens, or session access with any individual who is not an Authorized User of your Customer account.
• Permit a single Authorized User credential to be used by multiple individuals.
• Create accounts by automated means or under false pretenses, or create more accounts than the number we authorize for your Customer.
• Access, attempt to access, or interfere with data, accounts, or workspaces belonging to any other Customer or tenant.

3.5 Usage Limits and Fair Use

• Exceed the usage limits, capacity allocations, or fair use thresholds applicable to your subscription plan, as we may publish or communicate from time to time.
• Generate excessive load, traffic, or API calls that materially degrade the Service for other Customers.
• Use the Service in a manner inconsistent with the per-shop pricing and licensing model, including by routing data from non-licensed locations through a single licensed account.

3.6 Customer and Employee Data

Customers use the Service to manage shop operations, including data about their own customers (vehicle owners) and their employees (technicians, service advisors, foremen, and other staff). You are solely responsible for the lawfulness of the data you upload, generate, store, or process through the Service. Without limiting the foregoing, you must:

• Have a lawful basis to upload, store, and process personal data of your customers, employees, contractors, and any other individuals whose data you put into the Service.
• Provide any privacy notices and obtain any consents required by applicable law before uploading or transmitting personal data through the Service.
• Comply with applicable employment laws when using technician scheduling, time-off, capacity, productivity, and similar features, including wage and hour laws, meal and rest break rules, overtime rules, recordkeeping rules, and anti-discrimination laws.
• Honor data requests (such as access, correction, or deletion requests) that you receive from individuals whose data you have uploaded to the Service, and use the tools we provide to fulfill those requests.
• Promptly remove or correct data that is no longer authorized, accurate, or lawful to retain.

3.7 AI Features

The Service includes or may include features that use artificial intelligence, including natural language assistants, AI-assisted scheduling suggestions, and similar functionality (collectively, “AI Features”). AI Features are tools, not decision-makers. Their outputs may contain errors, omissions, or assumptions that are wrong for your shop.

• Customers and Authorized Users must review AI Feature outputs and apply their own professional judgment before relying on or acting on those outputs, particularly for scheduling, dispatch, employment-related, financial, customer-facing, or safety-related decisions.
• You may not use AI Features to generate content that is misleading, fraudulent, defamatory, harassing, discriminatory, deceptive about a product or service, or otherwise unlawful.
• You may not use AI Features to impersonate another person or to create content presented as authored by a person who did not in fact author it.
• You may not use AI Features to circumvent any restriction in this AUP or in the Terms of Service, or to extract, reproduce, or reverse engineer underlying models or system instructions.
• You remain fully responsible for any action taken or communication sent based on AI Feature output, whether or not the output was edited.

BayBoard makes no warranty that AI Feature outputs are accurate, complete, current, or fit for any particular purpose.

3.8 Communications and Outreach

• Send unsolicited commercial communications, bulk messages, or other content commonly considered spam through the Service or to any user of the Service.
• Use the Service to send communications that violate applicable anti-spam, telemarketing, or consumer protection laws (including the CAN-SPAM Act, TCPA, and equivalent state and foreign laws).
• Use any contact information obtained through the Service for any purpose other than the legitimate business purpose for which it was provided.

4. Reporting Suspected Violations

If you become aware of a suspected violation of this AUP, including unauthorized access to a Customer account, abuse of another user, suspected security vulnerabilities, or content that violates this AUP, please report it to hello@bayboard.io with as much detail as you can reasonably provide. We treat reports confidentially to the extent practical and consistent with our investigation and applicable law.

5. Investigation, Suspension, and Termination

5.1 Right to Investigate

We reserve the right, but have no obligation, to investigate any suspected violation of this AUP. We may review account activity, content, logs, and metadata as reasonably necessary for that investigation, subject to the Terms of Service, our Privacy Policy, and applicable law. We are not obligated to monitor use of the Service.

5.2 Notice and Cure for Non-Egregious Violations

For violations that we, in our reasonable judgment, determine are non-egregious and do not pose a material risk to the Service, other Customers, or any individual, we will generally provide written notice to the Customer describing the violation and a reasonable opportunity (typically not less than five business days) to cure before suspending or terminating the account.

Failure to cure within the notice period, or repeated violations of the same type, may result in suspension or termination.

5.3 Immediate Suspension or Termination

We may suspend or terminate access to the Service, in whole or in part, immediately and without prior notice if we reasonably believe that:

• Continued use of the Service poses a security, legal, financial, or operational risk to BayBoard, other Customers, or any individual.
• The Customer or an Authorized User has engaged in illegal activity, fraud, or willful misconduct.
• There has been unauthorized access to, or compromise of, the Customer’s account or our systems.
• The Customer is using the Service to harm or threaten any person.
• The Customer has materially breached this AUP or the Terms of Service and the violation is not capable of cure or has not been cured after notice.
• Suspension or termination is required by law, court order, or governmental authority.

Where we suspend access without prior notice, we will provide notice to the Customer as soon as reasonably practical and explain, to the extent we are permitted, the reason for the action and any steps required to restore access.

5.4 Effect of Suspension or Termination

Suspension restricts access while the underlying issue is investigated or resolved. Termination ends the Customer’s right to access the Service. Termination of a Customer account also terminates access for all of that Customer’s Authorized Users. Data export, retention, and deletion after termination are governed by the Terms of Service.

Termination by BayBoard for cause does not entitle the Customer to a refund of fees previously paid, except as expressly required by the Terms of Service or applicable law.

5.5 Cooperation with Law Enforcement

We will cooperate with law enforcement and other governmental authorities to the extent required by law, valid legal process, or our reasonable assessment that disclosure is necessary to prevent imminent harm. Where consistent with law and our obligations, we will use reasonable efforts to notify the affected Customer.

6. Reservation of Rights

Nothing in this AUP limits any other rights or remedies available to BayBoard at law, in equity, or under the Terms of Service. The list of prohibited uses in Section 3 is illustrative, not exhaustive. Conduct that is not specifically listed but that presents a material security, legal, or tenancy risk to the Service or other customers, or that violates the Terms of Service or applicable law, may also result in suspension or termination.

BayBoard may update this AUP from time to time. Material changes will be communicated as set forth in the Terms of Service.

7. Contact

Questions about this AUP, and abuse or policy violation reports, go to:
BayBoard LLC
Email: hello@bayboard.io