Acceptable Use and Security Policy

1. Account security

Use only your own named account and authorised role. Keep credentials confidential, use a strong unique password, secure your device and browser, sign out of shared devices, and report suspected compromise or unauthorised disclosure immediately. Account sharing and attempts to access another role or tenant are prohibited.

2. Prohibited conduct

• Bypassing access controls, scraping, probing or security testing without written permission.
• Reverse engineering, copying, reselling, sublicensing or building a competing service from SpaGenix.
• Uploading malicious code or intentionally disrupting or overloading the service.
• Impersonation, fraud, unlawful surveillance, discrimination, harassment or infringement.
• Unauthorised exports, disclosure or use of customer, staff or business data.
• Spam, deceptive promotions or communications without required consent and opt-out handling.
• Entering medical records, allergies, biometrics, full payment credentials, Aadhaar numbers or third-party passwords.

3. Enforcement

Provider may log activity, rate-limit use, remove harmful content, preserve evidence and suspend affected access where reasonably necessary for security, law or enforcement of this policy. Where practicable, Provider will notify the Tenant and limit action to the affected account or feature.

4. Electronic notices and acceptance

Contractual, billing, service and security notices may be delivered to the registered email address or inside SpaGenix. Users must keep details current. An authenticated click, typed account name, timestamp, document version, content hash, IP address and browser identifier create an electronic acknowledgement record; this is not represented as an Aadhaar eSign or digital-signature certificate.