Acceptable Use Policy

1. Purpose

This Acceptable Use Policy ("AUP") describes activities that are prohibited when using the OrgAlyne platform (the "Service"). It applies to all users of the Service, including individual members and Organization Administrators, and is incorporated into our Terms of Service by reference.

2. Prohibited uses

You agree not to use the Service to:

• Violate any applicable law or regulation, including data protection, export control, or anti-discrimination laws.
• Upload, store, or transmit content that is unlawful, defamatory, harassing, hateful, or that infringes the intellectual property or privacy rights of others.
• Impersonate any person or organization, or misrepresent your affiliation with an organization.
• Attempt to gain unauthorized access to another organization's data, another user's account, or OrgAlyne systems, including by circumventing tenant isolation or authentication controls.
• Probe, scan, or test the vulnerability of the Service, or interfere with its normal operation, without OrgAlyne's prior written authorization (see our responsible disclosure guidance for legitimate security research).
• Introduce viruses, malware, or other harmful code.
• Use the Service to send unsolicited bulk communications ("spam") to individuals who have not consented to receive them.
• Scrape, harvest, or export data from the Service beyond your organization's authorized use, including member engagement data, for purposes such as public rankings or unsolicited outreach.
• Reverse-engineer, decompile, or attempt to derive the source code of the Service, except as permitted by law.
• Resell or white-label access to the Service without a separate written agreement with OrgAlyne.

3. Content standards

Because the Service is used by volunteer-led organizations including those working with or near minors (for example, some civic, service, and faith-based organizations), Organization Administrators are responsible for ensuring that content entered into the Service, including member records, meeting notes, and uploaded files, complies with applicable child-protection and privacy obligations relevant to their organization type.

4. Security obligations

You are responsible for maintaining the confidentiality of your login credentials and for all activity under your account. You must promptly notify OrgAlyne of any known or suspected unauthorized access to your account. Organization Administrators are responsible for promptly removing access for members who leave a leadership role, using the People & Permissions settings in the Service.

5. API and automated access

[Placeholder: this section anticipates a future public API; update once an API product actually exists.] Automated or programmatic access to the Service, where offered, is subject to rate limits and must comply with this AUP and any separate API terms.

6. Enforcement

Violations of this AUP may result in content removal, feature restrictions, account suspension, or termination, at OrgAlyne's discretion, with notice where reasonably practicable given the nature and severity of the violation. OrgAlyne may also take action to protect the security and integrity of the Service without prior notice where necessary.

7. Reporting violations

To report a suspected violation of this AUP, contact trust@orgalyne.com [Placeholder: confirm final contact address before publishing].