Acceptable Use Policy

This Acceptable Use Policy explains the rules that apply to access to and use of the EmissionsTracker platform and its modules. It is intended to protect STA, Customers, users, platform integrity and other lawful users of the service.

1. Scope

This policy applies to subscription Owners, administrators, authorised users, invited users and any person accessing the platform through a Customer’s account.

2. Permitted use

• The platform may only be used for the Customer’s own internal business, operational, reporting, educational or assessment purposes, as permitted by the Customer Agreement, Product Terms and the Customer’s purchased modules and licence scope.
• Each user must use the platform only through authorised accounts and only to the extent permitted by the subscription Owner or administrator.
• Customers remain responsible for the conduct of their users and for all activity that occurs under their account, except to the extent caused by STA.

3. Prohibited conduct

A Customer or user must not, and must not permit any other person to:

• use the platform in breach of any law, regulation, court order or binding regulatory requirement;
• upload, transmit, store or process content that is unlawful, fraudulent, defamatory, obscene, abusive, misleading, deceptive, discriminatory, threatening or otherwise objectionable;
• upload malware, ransomware, spyware, malicious code or any material designed to disable, disrupt or compromise systems, networks or data;
• interfere with, probe, scan, overload, disrupt or test the vulnerability of the platform or any related system without STA’s written approval;
• circumvent authentication, access controls, account limits, licence limits, monitoring controls or other platform protections;
• access or attempt to access another customer’s account, data, environment or information without clear authorisation;
• use the platform to transmit spam, bulk unsolicited messages, phishing communications or other abusive or deceptive communications;
• reverse engineer, decompile, disassemble, copy, modify, create derivative works of, frame, mirror, scrape or otherwise attempt to extract source code, underlying ideas, algorithms or non-public functionality of the platform, except to the extent that a non-excludable law permits it;
• resell, sublicense, lease, bureau, timeshare or provide the platform to third parties as a standalone service unless STA expressly agrees in writing;
• misrepresent the source, accuracy or status of data, reports, credentials, surveys, assessments or outputs generated through the platform;
• use the platform in a way that infringes another person’s intellectual property, privacy, confidentiality or other rights; or
• use the platform in any way that, in STA’s reasonable opinion, threatens the security, stability, performance, integrity or lawful operation of the service.

4. Customer content and responsibility

• The Customer is responsible for ensuring it has all rights, notices and consents needed for content and personal information uploaded into the platform.
• The Customer must ensure its data is accurate, lawful and appropriate for the intended module and purpose.
• The platform is not intended to be used for emergency response systems, life-critical control systems or any unlawful surveillance or offensive security activity.

5. Credentials and account security

• Users must keep passwords and authentication credentials secure and confidential.
• Shared logins should be avoided unless expressly permitted by STA in writing.
• The Customer must promptly disable access for users who are no longer authorised.
• Suspected unauthorised access, credential compromise or misuse must be reported to STA immediately.

6. Fair use and service protection

To preserve platform performance and availability, STA may apply reasonable technical protections, monitoring, rate limits, file size limits, storage limits, session controls or other controls consistent with the Customer Agreement and Product Terms.

7. Monitoring, investigation and enforcement

• STA is not required to actively monitor all content or usage, but may investigate suspected misuse, security events or violations of this policy.
• STA may remove content, restrict access, suspend users, suspend modules or terminate access where reasonably necessary to manage breach, misuse, legal risk, security risk or service integrity.
• Where practicable, STA will ordinarily give the Customer an opportunity to remedy a breach before taking permanent action, but STA may act immediately where urgent action is reasonably required.

8. Reporting violations

Suspected breaches of this policy should be reported to STA at [email protected]. The report should include enough detail to allow STA to investigate.

9. Relationship with other documents

This Acceptable Use Policy forms part of the contractual framework for the platform and should be read together with the Customer Agreement, Privacy Policy, Support Policy, Service Level Commitments and Product Terms. If there is an inconsistency, the Customer Agreement prevails to the extent of the inconsistency unless a later document expressly states otherwise.

10. Changes to this policy

STA may update this Acceptable Use Policy from time to time. Material changes should take effect on publication or on a later date stated in the updated policy, subject to any rights preserved under the Customer Agreement or applicable law.