Acceptable Use Policy

The purpose of this AUP is to:

• Protect the security, integrity, availability, and performance of the Platform;
• Protect the rights, privacy, and safety of all users;
• Ensure compliance with applicable Indian laws and regulations;
• Define consequences for misuse and the enforcement process.

4.1 Core Platform Activities

• ✓ Creating and managing projects, tasks, subtasks, and project categories
• ✓ Assigning tasks to team members within a project
• ✓ Updating task statuses and tracking project progress
• ✓ Adding comments and feedback on tasks in a professional and constructive manner
• ✓ Using @mentions to draw a colleague's attention to a specific task or update
• ✓ Inviting team members, colleagues, clients, or collaborators to join a project workspace
• ✓ Viewing, editing, and completing assigned tasks within your role's permissions
• ✓ Organising and prioritising tasks using due dates, priorities, and labels
• ✓ Syncing project and task data across web and mobile devices for continuity of work
• ✓ Receiving and managing notifications about task updates and project changes

4.2 Organisational and Business Use

• ✓ Managing internal team projects and workflows
• ✓ Tracking client deliverables and project milestones
• ✓ Coordinating cross-functional or cross-departmental work
• ✓ Managing freelance or contract work assignments
• ✓ Onboarding new team members into project workspaces
• ✓ Archiving completed projects and tasks for record-keeping

4.3 Personal Productivity Use

• ✓ Managing personal projects, goals, and to-do lists
• ✓ Tracking personal task progress and deadlines
• ✓ Self-organising work using PulsePM's task and project structure

5.1 Illegal Activities

You must not use PulsePM to:

• Conduct, facilitate, promote, or plan any activity that is unlawful under Indian law or the law of any applicable jurisdiction;
• Engage in or facilitate fraud, forgery, cheating, financial crime, or money laundering;
• Plan or coordinate activities that violate the Indian Penal Code, 1860, including criminal conspiracy, extortion, or intimidation;
• Violate any court order, tribunal direction, or regulatory injunction;
• Store, transmit, or coordinate the distribution of contraband, drugs, weapons, or other illegal goods or services;
• Facilitate tax evasion or any violation of the Income Tax Act, 1961, GST laws, or other Indian fiscal regulations.

5.2 Cybersecurity and Technical Violations

You must not:

• Hack or crack: Attempt unauthorised access to the Platform, servers, databases, network infrastructure, or any user's account — violating Section 43 & Section 66 of the IT Act, 2000;
• Introduce malware: Upload, transmit, or distribute viruses, worms, ransomware, spyware, trojans, keyloggers, or malicious payloads;
• Denial of Service: Conduct DoS or DDoS attacks against the Platform or any of its users;
• Port scan or probe: Probe the Platform's infrastructure to discover vulnerabilities without prior written authorisation from the Company;
• Exploit bugs: Knowingly exploit any technical flaw in the Platform for personal gain or to harm others (see Section 12 for responsible disclosure);
• Intercept data: Use packet sniffing, man-in-the-middle attacks, or any other method to intercept communications or data;
• Bypass security controls: Circumvent authentication mechanisms, access controls, role permissions, session tokens, or rate limiters;
• Brute-force: Conduct brute-force attacks on user accounts or administrative panels;
• Inject malicious code: Execute SQL injection, cross-site scripting (XSS), cross-site request forgery (CSRF), or code injection attacks.

5.3 Unauthorised Data Access and Scraping

You must not:

• Scrape or harvest data from the Platform using automated scripts, bots, crawlers, or automated means;
• Access, copy, extract, or store any data from other users' projects, tasks, or profiles without explicit authorisation;
• Use the Platform's API (present or future) in violation of its documented rate limits or usage guidelines;
• Attempt to reconstruct, reverse-engineer, or clone the Platform's database schema, data structure, or logic;
• Use any third-party tool or service to extract bulk data from PulsePM for commercial or competitive purposes.

5.4 Account and Identity Violations

You must not:

• Create multiple accounts for the same individual to evade a ban, restriction, or usage limitation;
• Impersonate any person, company, government authority, or PulsePM staff member;
• Use false identity information to create or maintain a PulsePM account;
• Share your account credentials with another person or allow a third party to access PulsePM using your account;
• Sell, transfer, or lease your PulsePM account or login credentials to any third party;
• Use another user's credentials, whether obtained by hacking, phishing, or social engineering — violating Section 66C of the IT Act, 2000 (identity theft).

5.5 Harmful and Offensive Content

You must not create, upload, transmit, or share any content that:

• Is obscene, pornographic, sexually explicit, or harmful to minors — violating Section 67/67A of the IT Act, 2000 and the POCSO Act, 2012;
• Is defamatory, libellous, or maliciously false — violating Section 499/500 of the IPC;
• Constitutes harassment, stalking, or cyberbullying — violating Section 354D of the IPC and Section 67 of the IT Act;
• Contains threats of violence or incites violence — violating Section 506 of the IPC;
• Promotes, glorifies, or facilitates terrorism or extremism — violating the UAPA, 1967;
• Promotes hatred on grounds of religion, race, caste, sex, nationality, language, or region — violating Section 153A of the IPC;
• Spreads disinformation or deliberate misinformation that could cause public harm;
• Violates the dignity or modesty of women — violating Section 354 of the IPC and Section 67A of the IT Act.

5.6 Privacy Violations

You must not:

• Collect or store personal data of other users accessed through the Platform for any purpose beyond legitimate project collaboration;
• Publish or expose another user's private information (contact details, address, ID documents, financial details) without explicit consent ("doxxing");
• Photograph, screenshot, or record another user's private activity and share it publicly without consent;
• Process Sensitive Personal Data or Information (SPDI) of other users without explicit, informed consent;
• Violate any applicable provision of the Digital Personal Data Protection Act, 2023 (DPDPA).

5.7 Intellectual Property Violations

You must not:

• Infringe the copyright, trademark, patent, or trade secret of any third party through uploaded content;
• Upload or share pirated software, cracked applications, or unlicensed digital content;
• Use the Platform to distribute unauthorised copies of copyrighted material;
• Copy, reproduce, or reverse-engineer the Platform's source code, design, algorithms, or business logic — violating the Copyright Act, 1957;
• Use PulsePM's name, logo, or brand in any way that creates a false impression of endorsement, partnership, or affiliation.

5.8 Spam and Unsolicited Communications

You must not:

• Send bulk, unsolicited, or repetitive messages, notifications, or emails to other users;
• Use the project invitation system to spam individuals who are not intended collaborators;
• Use automated tools to mass-create projects, tasks, comments, or invitations;
• Use PulsePM as a vehicle to market products or services to other users without their consent.

5.9 System Integrity and Performance

You must not:

• Take any action that overloads, disrupts, damages, or degrades the performance of servers or network infrastructure;
• Use the Platform in any way that causes a disproportionate burden on our systems;
• Interfere with security systems, firewalls, or intrusion detection mechanisms;
• Access the Platform through unauthorised automated bots or scripts that simulate human usage without prior written consent.

5.10 Misuse of Platform Features

You must not:

• Create fictitious projects, tasks, or activity logs to deceive stakeholders, management, or clients;
• Manipulate task statuses or completion records to create a misleading picture of project progress;
• Use the @mention system to repeatedly tag, harass, or spam a specific user;
• Exploit role-based permission gaps or configuration errors to gain unauthorised access to project data;
• Store sensitive government identification numbers, financial credentials, or regulated data (such as Aadhaar, PAN details, or banking credentials) in violation of applicable law.

8.1 Right to Monitor

Synerbit (OPC) Private Limited reserves the right to monitor usage of the Platform for security and fraud detection, investigation of reported violations, compliance with this AUP and applicable laws, and platform performance optimisation.

8.2 Log Retention

We maintain server access logs, authentication logs, and usage logs in accordance with our Privacy Policy and applicable Indian law. These logs may be used as evidence in enforcement actions or legal proceedings.

8.3 No Expectation of Privacy for Violating Activity

While we respect user privacy as described in our Privacy Policy, users have no expectation of privacy with respect to activities that violate this AUP, applicable law, or the rights of others. Such activities and logs may be disclosed to law enforcement authorities or in legal proceedings.

12.2 Our Commitment

• Acknowledge receipt within 48 hours;
• Investigate and validate the reported vulnerability;
• Work to remediate the issue in a reasonable timeframe;
• Maintain confidentiality about the vulnerability until it is patched.