Acceptable Use Policy
Summary
This Acceptable Use Policy (AUP) identifies activities that you (the Customer) are prohibited from engaging in when using the Services of Vestra Corporate Pty Ltd (Vestra), including any online services that expressly refer to this policy.
Any capitalised term in this AUP that is undefined, has the same meaning given to it in the Software-as-a-Service Terms and Conditions agreement between Vestra and a Customer.
This document is current as at July 2025. Vestra may vary this AUP from time to time but will not do so in a capricious or unreasonable manner.
1. Registration Details and access credentials
- 1.1 The Customer is responsible for maintaining the accuracy of its registration details with Vestra. The Customer must not impersonate any person or entity.
- 1.2 The Customer is responsible for protecting the access credentials used to access Vestra’s services, and the Customer must not share its access credentials with any person other than authorised users.
- 1.3 The Customer acknowledges and agrees that all communications and stored information transmitted, received, or stored in Vestra’s network, through its Services and on any of its websites, are the property of Vestra.
2. Permitted Uses
- 2.1 The Customer may use Vestra’s Services only specifically for commercial, lawful, ethical, and productive purposes.
3. AI-Specific Responsibilities
- 3.1 If the Customer’s AI generates content or decisions impacting others, the Customer is responsible for ensuring appropriate disclosure is made (e.g., labelling AI-generated content).
- 3.2 The Customer must take reasonable steps to mitigate harmful biases in its AI models that could lead to unfair or discriminatory outcomes.
- 3.3 The Customer is responsible for the outputs of its AI systems hosted on Vestra’s Services, including any unintended consequences from their use.
4. Prohibited use of the services
- 4.1 When using Vestra’s Services, the Customer must not:
- use the services in any way that is unlawful, including for illegal activity such as child pornography, piracy, prohibited gambling, intellectual property infringement or circumventing sanctions laws;
- develop or deploy AI systems intended to deceive, manipulate, or harm individuals or groups (e.g., deepfakes for malicious purposes, automated scams, or discriminatory profiling).
- overload, disrupt, or attempt to bypass usage limits, including denial-of-service attacks or crypto-mining without explicit permission;
- upload or distribute viruses, ransomware, or any code designed to harm systems, networks, or users;
- send unsolicited bulk messages or using AI to generate spam content;
- collect, process, or store personal data without proper consent or legal basis, or in violation of privacy regulations (e.g., GDPR, CCPA);
- impersonate others or falsifying data inputs to manipulate AI outputs for deceptive purposes;
- use the Services for the purposes of threatening, stalking, defaming, defrauding, degrading, victimising or intimidating anyone for any reason;
- represent itself as being someone that the Customer is not;
- impersonate or misrepresent its affiliation with any person or entity;
- promote or advertise products or services other than its own without appropriate authorization;
- mislead or deceive;
- use the Services to invade any individual’s privacy or to monitor or carry out surveillance of any individual or object without the individual’s consent; or
- use the Services to harm others or to impair any systems or networks.
- 4.2 The Customer must not attempt to gain unauthorized access to any part of Vestra’s Services, systems or networks, other users’ account or data, whether through hacking, exploiting security vulnerability, password mining or any other means. The Customer must not attempt to circumvent Vestra’s website security for any reason, or allow or facilitate others to do so.
5. Prohibited content
- 5.1 The Customer is prohibited from transmitting, storing or processing any of the following content or data using Vestra’s Services:
- content that infringes any Intellectual Property Rights, privacy rights, or any other legal or moral rights of any person under applicable laws;
- content that is reasonably considered to be defamatory, libelous, hateful, racially, ethnically, religiously or otherwise biased or offensive, unlawfully threatening or unlawfully harassing to any person, or vulgar, pornographic, obscene or invasive of another’s privacy;
- content that is reasonably considered to be advocating or advancing computer hacking or cracking or to probe, scan or test the vulnerability of a system or network, breach any security or authentication measures for a system or network or attempt to gain access to the account of any other user;
- content associated with gambling, drugs and other controlled substances, drug paraphernalia, phishing or illegal activity;
- content that violates or encourages conduct that would violate any applicable laws or any third-party rights;
- content that the Customer knows is false, inaccurate or misleading;
- content that interferes with Vestra’s systems, networks, services or Vestra’s other customers including malicious content (such as any code or data whose purpose is to damage, interfere or disable the services, systems or software and including any virus, worm, logic bomb, malware, adware, trojan horses, ransomware and spyware); and
- content that could result in material adverse impact to Vestra or Vestra’s services, including a significant risk of liability (civil or criminal) or harm of Vestra’s reputation.
6. Security and Compliance
- 6.1 The Customer must protect sensitive data according to Vestra’s data security protocols.
- 6.2 The Customer must ensure that all devices are protected by up-to-date antivirus software and must not disable such protection.
- 6.3 The Customer must use strong passwords which must be changed regularly.
- 6.4 The Customer must keep its registration details and account credentials secure and report any unauthorized access immediately.
- 6.5 The Customer must comply with all applicable export control laws and regulations (e.g., U.S. export restrictions on AI tech).
- 6.6 If the Customer’s use involves sensitive data (e.g., health or financial information), it is the Customer’s responsibility to meet industry-specific standards (e.g., HIPAA, PCI-DSS).
7. Monitoring and Enforcement
- 7.1 Vestra reserves the right to monitor all use of its technology resources to ensure compliance with this AUP. This monitoring may be conducted without notice and may include logging internet usage, auditing files, and reviewing email communications.
- 7.2 Violations of this AUP will result in disciplinary action, which may include termination of the Agreement (including any Service Order), removal of any offending content, legal action, and compensation for damages caused to Vestra.
- 7.3 Vestra is not liable whatsoever for any losses the Customer incurs as a result of Vestra monitoring or enforcing this AUP.