Acceptable Use Policy

1. Scope and Acceptance

This Acceptable Use Policy (“AUP”) applies to all access to and use of the Storefront platform, Storefront Business Manager and Places applications, websites, connected signs and devices, messaging tools, cameras, audio features, sensors, analytics, artificial intelligence features, automations, integrations, and related services (collectively, the “Services”).

This AUP forms part of the applicable agreement between Storefront Labs, LLC (“Storefront”) and the customer, user, business, organization, or other person accessing the Services (“Customer” or “you”).

2. Lawful and Authorized Use

You may use the Services only for lawful business purposes, within the scope of your subscription, and in accordance with all applicable laws, regulations, platform rules, contractual obligations, and Storefront documentation.

You must have all rights, permissions, licenses, notices, consents, and lawful bases necessary for the data, content, communications, recordings, devices, locations, and integrations involved in your use of the Services.

3. Prohibited Conduct

You may not use the Services to:

• violate any applicable law, regulation, court order, or third-party right;
• commit, facilitate, conceal, or promote fraud, deception, theft, harassment, abuse, discrimination, or unlawful surveillance;
• send spam, phishing messages, malicious communications, or unsolicited commercial messages;
• upload, transmit, execute, or distribute malware, ransomware, spyware, destructive code, or harmful payloads;
• impersonate another person or misrepresent identity, authority, affiliation, location, hours, availability, or business status;
• publish or distribute unlawful, defamatory, infringing, deceptive, or materially misleading content;
• access, collect, or disclose personal data without authorization;
• circumvent access controls, usage limits, payment obligations, technical restrictions, security controls, or licensing terms;
• interfere with the operation, availability, integrity, or performance of the Services or third-party systems;
• use the Services in a manner creating an unreasonable risk of physical, financial, legal, or reputational harm; or
• assist another person in engaging in prohibited activity.

4. Security Restrictions

You may not:

• attempt unauthorized access to any account, system, network, device, database, API, credential, or data;
• probe, scan, test, benchmark, or exploit vulnerabilities without Storefront’s prior written authorization;
• conduct penetration testing, load testing, denial-of-service testing, or automated security testing without written approval;
• reverse engineer, decompile, disassemble, or attempt to derive source code except where applicable law expressly prohibits such restriction;
• share credentials improperly or permit unauthorized users to access the Services;
• disable, remove, alter, or evade logging, authentication, monitoring, access-control, anti-abuse, or security features;
• use compromised devices, credentials, accounts, or integrations; or
• fail to notify Storefront promptly after discovering suspected unauthorized access, credential theft, or security compromise.

5. Communications and Messaging

When using email, SMS, push, in-app, or other messaging features, you must:

• obtain legally required consent before sending messages;
• honor opt-outs, unsubscribe requests, suppression lists, and do-not-contact requirements;
• comply with applicable telemarketing, advertising, consumer-protection, anti-spam, and carrier rules;
• avoid deceptive sender information, misleading subject lines, and spoofed identities;
• protect recipient lists and message content from unauthorized access; and
• maintain records of consent where legally required.

6. Cameras, Audio, and Sensors

You are solely responsible for lawful placement, configuration, and use of cameras, microphones, audio recording, occupancy detection, headcount, motion sensing, geolocation, and related features.

• Provide required notices, signs, disclosures, and policies.
• Obtain consent where required by law.
• Avoid recording in areas where individuals reasonably expect privacy.
• Comply with wiretap, eavesdropping, biometric, surveillance, labor, workplace-monitoring, and consumer-protection laws.
• Limit collection and retention to what is reasonably necessary.
• Protect recordings and sensor data from unauthorized access.
• Disable or restrict features where lawful use cannot be assured.

7. Children, Schools, and Childcare

You may use the Services in schools, childcare facilities, camps, youth programs, family venues, and similar environments only when legally authorized.

You are responsible for obtaining all required parental, guardian, school, childcare-provider, institutional, or other legal authorization and for complying with laws governing children’s privacy, education records, recordings, communications, and online services.

8. Artificial Intelligence and Automation

You are responsible for all AI prompts, inputs, outputs, automations, rules, decisions, publications, and actions initiated through your account.

• Review AI outputs before relying on or publishing them.
• Maintain human oversight for consequential decisions.
• Test automations before production use.
• Implement safeguards, thresholds, approval steps, and fallback procedures appropriate to the risk.
• Do not represent AI-generated content as verified, complete, or error-free.
• Do not use the Services as the sole basis for emergency, medical, legal, employment, credit, housing, insurance, education, law-enforcement, or similarly high-stakes decisions.

9. Privacy and Personal Data

You may process personal data through the Services only when you have a valid lawful basis and all required notices and consents.

You may not collect more personal data than reasonably necessary, use personal data for undisclosed or incompatible purposes, sell or share personal data unlawfully, or submit highly regulated data unless Storefront expressly authorizes such use in writing.

10. Third-Party Services and Integrations

When connecting Google, Apple, Stripe, email providers, mapping services, websites, or other third-party platforms, you must comply with their terms, permissions, policies, and technical restrictions.

You are responsible for revoking unused credentials, protecting tokens and other credentials, and reviewing permissions granted to connected services.

11. Devices and Physical Installations

You must install, maintain, secure, and operate connected signs, sensors, cameras, and other hardware safely and in accordance with applicable electrical, building, accessibility, fire, workplace, and property rules.

You may not tamper with hardware, install unauthorized firmware, defeat security controls, or use devices in a manner likely to cause injury, damage, interference, or unlawful monitoring.

12. Customer Content

You are responsible for all content submitted, published, transmitted, recorded, displayed, or generated through the Services.

You may not distribute content that infringes intellectual-property, privacy, publicity, confidentiality, or contractual rights; is unlawful, defamatory, threatening, harassing, fraudulent, or deceptive; promotes violence, abuse, exploitation, or illegal activity; contains malicious code; or materially misrepresents business operations.

13. High-Risk and Restricted Uses

Unless Storefront expressly authorizes the use in writing, you may not use the Services for:

• life-support, emergency dispatch, critical infrastructure control, or safety-critical systems;
• medical diagnosis or treatment decisions;
• autonomous employment, credit, housing, insurance, education, or legal eligibility decisions;
• facial recognition or biometric identity verification;
• law-enforcement surveillance or intelligence operations;
• weapons, military targeting, or autonomous harm;
• unlawful location tracking or stalking;
• processing data subject to unsupported sector-specific regulatory requirements; or
• any use where failure could reasonably result in death, serious bodily injury, or substantial property damage.

14. Resource and Platform Abuse

You may not use the Services in a manner that imposes excessive, unreasonable, or disproportionate load on Storefront or third-party systems.

• No unauthorized automated scraping or bulk extraction.
• No excessive automated requests, polling, retries, or message volume.
• No evasion of rate limits or usage controls.
• No cryptocurrency mining or unrelated compute workloads.
• No reselling or sublicensing access without authorization.
• No account creation to bypass suspension, pricing, or usage restrictions.
• No use of the Services to benchmark or train competing systems without written permission.

15. Investigation and Enforcement

Storefront may investigate suspected violations and may review relevant account, device, integration, usage, message, and system information as reasonably necessary to protect the Services, users, third parties, and Storefront.

Storefront may request corrective action, remove or disable content or features, limit or suspend access, preserve records, notify affected parties or providers, report conduct where permitted or required by law, and seek reimbursement for losses caused by violations.

Storefront may act immediately without prior notice where reasonably necessary to address an urgent security, legal, safety, fraud, abuse, or operational risk.

16. Reporting Violations

Suspected abuse, security vulnerabilities, unlawful content, or violations of this AUP may be reported to hello@storefrontworks.com.

17. Changes to This Policy

Storefront may update this AUP as the Services, laws, risks, and business practices evolve. Updated versions will be posted through the Services or Storefront’s website with a revised effective date.

18. Contact Information

Storefront Labs, LLC
1642 Burgos Dr
Sarasota, FL 34238
United States

Email: hello@storefrontworks.com
Website: www.storefrontworks.com