This Acceptable Use Policy ("AUP") sets out the rules for using our website and the Hosted Services we operate for an Institution. It is part of our Terms of Service and applies to every Institution and User. The Institution owns its Delivered Software, so this AUP does not restrict how it uses software running on its own servers, except that it must not use that software, or anything we provide, for the unlawful purposes listed below. The aim is simple: keep our website and Hosted Services safe, lawful, and dependable for everyone — especially the children whose data it holds.
1. Scope
This AUP applies to all use of our website and Hosted Services by Institutions and their Users. Institutions are responsible for ensuring their Users follow it.
2. Acceptable use
Use the Hosted Services for legitimate educational and administrative purposes, in line with applicable law and your Institution’s own policies, and with respect for the privacy and dignity of the people whose data it holds.
3. Prohibited activities
You must not:
- Break the law, or use our website or Hosted Services to facilitate anything illegal.
- Upload content that is unlawful, harassing, defamatory, or harmful.
- Infringe anyone’s intellectual-property or privacy rights.
- Upload malware, or attempt to disrupt or overload the Hosted Services.
- Access data you are not authorised to access, including another Institution’s data.
- Resell, sublicense, or provide our Hosted Services to third parties without our written agreement.
4. Protecting children and vulnerable people
Institutions’ software holds data about children and other vulnerable people. Treat it with the highest care: access it only for legitimate educational and administrative reasons, share it only with those who are authorised and need it, and never use it to harm, profile, or exploit anyone.
5. Security and integrity
To keep our website and Hosted Services secure, you must not:
- Probe, scan, or test the vulnerability of the Hosted Services without our written permission.
- Circumvent authentication, rate limits, or other protections.
- Scrape or harvest data from the Hosted Services by automated means beyond normal, authorised use.
- Share or reuse credentials in ways that undermine account security.
6. Your responsibilities for data you upload
You are responsible for having a lawful basis and the necessary permissions to collect and process the data you put into the Delivered Software or Hosted Services, for keeping it accurate, and for honouring the rights of the people it describes. The software is a tool you control — it does not relieve you of your duties as the data controller.
7. Enforcement
If we reasonably believe this AUP has been breached, we may investigate and take proportionate action — from asking you to stop, to suspending access, to ending the Hosted Services for serious or repeated breaches. Where we can, we will give notice and a chance to fix the problem first, unless urgent action is needed to protect people or the Hosted Services.
8. Reporting abuse
To report misuse of our website or Hosted Services, contact [email protected]. A real person reads it.