GitScrum Acceptable Use Policy (AUP)

1. Introduction and Purpose

This Acceptable Use Policy ("AUP," "Policy") defines the acceptable and prohibited uses of the GitScrum platform, services, and related resources (collectively, the "Services") provided by GitScrum ("we," "us," "our," "Company").

Purpose:

This AUP is designed to:

• Protect the security, integrity, and availability of the GitScrum platform and infrastructure
• Safeguard the rights, privacy, and safety of GitScrum users and third parties
• Ensure compliance with applicable laws, regulations, and industry standards
• Prevent abuse, fraud, and malicious activities
• Maintain a professional, respectful, and productive environment for all users
• Protect GitScrum's reputation and business interests

Who This Applies To:

This AUP applies to all individuals and entities that access or use the Services, including:

• Account holders (customers/subscribers)
• Authorized users (employees, contractors, team members added to accounts)
• Trial users and free account holders
• Any other person or entity accessing the Services with or without authorization

2. Incorporation into Terms and Conditions

This AUP is an integral part of and incorporated by reference into the GitScrum Terms and Conditions and End User License Agreement (EULA).

By accessing or using the Services, you agree to comply with this AUP. Violation of this AUP constitutes a material breach of your agreement with GitScrum and may result in immediate suspension or termination of your account and access to the Services, as well as potential legal action.

Relationship to Other Policies:

This AUP should be read in conjunction with:

• GitScrum Terms and Conditions
• GitScrum Privacy Policy
• GitScrum EULA
• GitScrum Security Policy
• Any other policies referenced in the Terms and Conditions

In the event of a conflict between this AUP and other policies, this AUP shall take precedence with respect to acceptable and prohibited uses of the Services.

3. Acceptable Use

GitScrum Services are intended for lawful business and professional purposes only, including but not limited to:

• Project management and task tracking
• Team collaboration and communication
• Workflow organization and productivity enhancement
• Document storage and file sharing related to projects
• Time tracking and resource management
• Client and stakeholder communication
• Agile software development and project methodologies
• Other legitimate business activities consistent with the Services' intended purpose

You may use the Services for these purposes provided you comply with this AUP, all applicable laws, and the rights of others.

4. Prohibited Activities

The following activities are strictly prohibited when using the Services. This list is not exhaustive, and GitScrum reserves the right to determine, in its sole discretion, whether conduct violates this AUP.

4.1 Illegal and Fraudulent Activities

You may not use the Services to engage in, facilitate, or promote any illegal, unlawful, fraudulent, or deceptive activities, including but not limited to:

Illegal Conduct:

• Violating any applicable local, state, national, or international law, regulation, or legal obligation
• Engaging in criminal activity or facilitating criminal activity by others
• Violating court orders, injunctions, or other legal directives

Fraud and Deception:

• Payment fraud, credit card fraud, or identity theft
• Providing falsified personal information for billing, account creation, or identification purposes
• Phishing, spoofing, or impersonating others to deceive or defraud
• Running Ponzi schemes, pyramid schemes, or other fraudulent business models
• "Pig butchering" scams, romance scams, or investment fraud
• False advertising or deceptive business practices

Intellectual Property Infringement:

• Uploading, storing, distributing, or sharing content that infringes or violates intellectual property rights (copyrights, trademarks, patents, trade secrets) of GitScrum or third parties
• Distributing pirated software, counterfeit goods, or stolen materials
• Unauthorized use of proprietary information or confidential business information

Regulatory Violations:

• Violating export control laws or sanctions (e.g., OFAC, EU sanctions)
• Violating data protection laws (GDPR, CCPA, etc.) in your use of the Services
• Violating financial regulations, anti-money laundering (AML) laws, or Know Your Customer (KYC) requirements

4.2 Harmful and Malicious Activities

You may not use the Services to engage in harmful, malicious, or disruptive activities, including but not limited to:

Malware and Viruses:

• Uploading, transmitting, or distributing viruses, worms, trojans, ransomware, spyware, or any other malicious code or software
• Introducing harmful scripts, bots, or automated tools designed to disrupt, damage, or gain unauthorized access to systems

Cyberattacks and Security Threats:

• Conducting denial-of-service (DoS) or distributed denial-of-service (DDoS) attacks against the Services or third-party systems
• Hacking, cracking, or attempting to gain unauthorized access to the Services, user accounts, or any systems or networks
• Port scanning, network scanning, vulnerability scanning, or penetration testing without GitScrum's prior written consent
• Launching or coordinating cyberattacks, including but not limited to credential stuffing, brute force attacks, SQL injection, or cross-site scripting (XSS) attacks
• Using the Services as infrastructure for command-and-control (C2) servers, botnets, or malware distribution

Unauthorized Access and Account Takeover:

• Attempting to gain unauthorized access to other users' accounts or data
• Password mining, credential harvesting, or account takeover attempts
• Unauthorized access to systems, networks, or data belonging to GitScrum, users, or third parties
• Exploiting security vulnerabilities in the Services to gain unauthorized privileges or access

Data Interception and Eavesdropping:

• Intercepting, monitoring, or accessing communications or data of other users without authorization
• Eavesdropping on network traffic, man-in-the-middle (MITM) attacks, or packet sniffing

4.3 Abusive and Harassing Conduct

You may not use the Services to engage in abusive, harassing, threatening, or harmful conduct toward others, including but not limited to:

Harassment and Threats:

• Harassing, threatening, intimidating, stalking, or bullying other users or third parties
• Sending unwanted, unsolicited, or repeated communications that constitute harassment
• Making threats of violence, harm, or illegal activity against individuals or groups
• Doxing (publishing private or identifying information about individuals without consent)

Hate Speech and Discrimination:

• Posting, uploading, or transmitting content that promotes, incites, or glorifies hatred, violence, or discrimination based on race, ethnicity, national origin, religion, gender, sexual orientation, disability, age, or other protected characteristics
• Engaging in hate speech, racist content, or content that demeans or marginalizes individuals or groups

Exploitation and Abuse:

• Exploiting, endangering, or harming minors in any way, including child sexual exploitation or abuse material (CSAM)
• Promoting or facilitating human trafficking, slavery, or forced labor
• Non-consensual sharing of intimate images or content ("revenge porn")
• Sexual harassment or unwanted sexual advances

4.4 Spam, Unsolicited Communications, and Mass Messaging

You may not use the Services to send or facilitate spam, unsolicited communications, or mass messaging, including but not limited to:

Spam and Unsolicited Messages:

• Sending unsolicited commercial emails, marketing messages, or advertisements (spam)
• Using the Services to operate email marketing campaigns without recipients' consent
• Sending mass emails or bulk messages that violate anti-spam laws (e.g., CAN-SPAM Act, GDPR)

Phishing and Social Engineering:

• Sending phishing emails, deceptive messages, or fraudulent communications designed to steal credentials, personal information, or financial information
• Engaging in social engineering attacks or pretexting

Abuse of Communication Features:

• Abusing messaging, notification, or communication features to flood, overwhelm, or disrupt other users
• Creating or distributing chain letters, pyramid schemes, or multi-level marketing (MLM) solicitations

4.5 Resource Abuse and Excessive Consumption

You may not engage in activities that abuse, overload, or excessively consume GitScrum's resources, infrastructure, or services, including but not limited to:

Excessive Resource Consumption:

• Using the Services in a manner that consumes excessive bandwidth, storage, compute resources, or API calls beyond what is reasonable for normal use
• Running resource-intensive processes, scripts, or applications that degrade performance for other users
• "Cryptojacking" or using the Services for cryptocurrency mining

API Abuse:

• Exceeding API rate limits or usage quotas without authorization
• Abusing API endpoints through excessive requests, scraping, or automated bot activity
• Using APIs for purposes other than their intended use

Account Abuse:

• Creating multiple user accounts for fraudulent or abusive purposes (bulk account creation, sockpuppeting)
• Creating accounts using automated techniques, bots, or scripts without authorization
• Bypassing account limitations, restrictions, or trial periods through deceptive means
• Sharing account credentials with unauthorized individuals or allowing account access by third parties

Continued Use After Suspension:

• Continuing to use the Services or creating new accounts after account suspension or termination
• Attempting to circumvent suspension or termination through technical means or by creating new accounts

4.6 Prohibited Content

You may not upload, store, transmit, post, or distribute through the Services any content that:

Illegal Content:

• Is illegal, unlawful, or violates applicable laws or regulations
• Promotes or facilitates illegal activities (e.g., drug trafficking, weapons sales, illegal gambling)
• Contains child sexual exploitation or abuse material (CSAM) or content sexualizing minors
• Violates export control laws or economic sanctions

Harmful Content:

• Is obscene, pornographic, or sexually explicit (unless authorized for specific legitimate business purposes and compliant with applicable laws)
• Glorifies or promotes violence, self-harm, suicide, or dangerous activities
• Contains graphic violence, gore, or disturbing content intended to shock or harm

Infringing Content:

• Infringes or violates intellectual property rights, privacy rights, publicity rights, or other legal rights of others
• Contains stolen data, confidential information, or trade secrets unlawfully obtained

Misleading Content:

• Is false, misleading, or deceptive, including misinformation or disinformation campaigns
• Impersonates others (individuals, companies, or entities) without authorization

Malicious Content:

• Contains malware, viruses, or malicious code
• Is designed to disrupt, damage, or compromise systems or data

4.7 Circumvention and Evasion

You may not:

Bypass Security and Restrictions:

• Circumvent, disable, or interfere with security features, access controls, authentication mechanisms, or technical restrictions of the Services
• Attempt to bypass rate limits, usage caps, licensing restrictions, or subscription tiers
• Reverse engineer, decompile, disassemble, or attempt to derive source code from the Services (except as permitted by applicable law)

Network Obfuscation:

• Use network obfuscation techniques (e.g., Tor, VPNs, proxies) to mask your identity or location for purposes of evading detection, violating this AUP, or engaging in prohibited activities

Pricing and Licensing Circumvention:

• Attempt to bypass or circumvent the pricing structure, subscription plans, or licensing terms
• Use the Services in a manner inconsistent with the purchased subscription level or license

4.8 Interference and Disruption

You may not engage in activities that interfere with, disrupt, or impair the Services or other users' enjoyment of the Services, including but not limited to:

Service Disruption:

• Disrupting, degrading, or impairing the functionality, performance, availability, or security of the Services
• Overloading servers, networks, or infrastructure supporting the Services
• Interfering with backups, disaster recovery, or business continuity operations

User Interference:

• Interfering with other users' ability to access or use the Services
• Engaging in activities that negatively impact other users' experience, performance, or data
• Monopolizing shared resources in a manner that prevents others from using the Services

Hosting and Infrastructure Disruption:

• Conducting attacks or disruptive activities directed toward GitScrum's hosting providers or infrastructure partners

4.9 Unauthorized Commercial Use

You may not use the Services for unauthorized commercial purposes, including but not limited to:

Resale and Redistribution:

• Reselling, sublicensing, or redistributing access to the Services without GitScrum's prior written consent
• Operating a service bureau or providing services to third parties using the Services without authorization

Competitive Use:

• Using the Services to develop, build, train, or improve competing products or services
• Conducting competitive analysis, benchmarking, or research without GitScrum's written consent

Unauthorized Scraping and Data Mining:

• Web scraping, crawling, or extracting data from the Services using automated tools (bots, spiders, scrapers) without authorization
• Data mining or harvesting user data, contact information, or content for commercial purposes

4.10 Misuse of Data and Privacy Violations

You may not:

Violate Privacy Rights:

• Use the Services to violate the privacy, personal data rights, or confidentiality of other individuals or entities
• Collect, store, process, or disclose personal data in violation of applicable data protection laws (GDPR, CCPA, etc.)
• Access, use, or disclose other users' Personal Data without authorization

Data Breaches and Leaks:

• Intentionally cause or facilitate data breaches, unauthorized disclosures, or data leaks
• Exfiltrate or extract data from the Services for unauthorized purposes

Surveillance and Monitoring:

• Use the Services for unauthorized surveillance, monitoring, or tracking of individuals without their knowledge or consent

4.11 Prohibited Network and System Activities

You may not:

Peer-to-Peer (P2P) and File Sharing:

• Use the Services for content distribution through peer-to-peer (P2P) networks, torrent distribution, or unauthorized file sharing

Proxy and Anonymization Services:

• Operating open proxies, anonymization services, or relay servers without authorization

Botnet and C2 Infrastructure:

• Using the Services to host or operate botnet infrastructure, command-and-control (C2) servers, or malware distribution networks

5. Account Security Responsibilities

You are responsible for maintaining the security of your account and complying with security best practices:

Password Security:

• Create strong, unique passwords and change them regularly
• Do not share passwords with unauthorized individuals
• Enable multi-factor authentication (MFA) where available

Account Monitoring:

• Monitor your account for unauthorized access or suspicious activity
• Immediately notify GitScrum of any suspected security breach or unauthorized access at security[at]gitscrum.com

User Management:

• Ensure that only authorized individuals have access to your account
• Promptly remove access for individuals who no longer require it (e.g., former employees, terminated contractors)
• Assign appropriate permission levels to users based on their roles (principle of least privilege)

Compliance with Security Policy:

• Comply with GitScrum's Security Policy and follow security best practices
• Do not disable, circumvent, or interfere with security features

6. Reporting Violations

GitScrum encourages users to report suspected violations of this AUP.

How to Report Violations:

If you become aware of any conduct or content that violates this AUP, please report it immediately to GitScrum:

• Email: abuse[at]gitscrum.com or legal[at]gitscrum.com
• Subject Line: "AUP Violation Report"
• Include:
• Description of the violation
• URL, account information, or other identifying details (if available)
• Date and time of the violation (if known)
• Any supporting evidence (screenshots, logs, etc.)

Response Time:

GitScrum will acknowledge receipt of reports within 5 business days and will investigate all reported violations.

Confidentiality:

Reports will be treated confidentially to the extent permitted by law. However, GitScrum may disclose information to law enforcement, regulators, or other authorities as required by law or to protect the safety and security of our users and the public.

No Retaliation:

GitScrum prohibits retaliation against users who report violations of this AUP in good faith.

7. Monitoring and Enforcement

7.1 Right to Monitor

GitScrum reserves the right, but has no obligation, to monitor, review, investigate, and take action regarding:

• User conduct and content uploaded, stored, or transmitted through the Services
• Compliance with this AUP, Terms and Conditions, and applicable laws
• Suspected violations, security threats, or illegal activities
• Abuse reports and complaints from users or third parties

Monitoring Methods:

Monitoring may include automated systems, manual review, analysis of usage patterns, and investigation of reported violations.

No Obligation:

GitScrum is not obligated to monitor all content or conduct and does not assume liability for user conduct or content. However, we reserve the right to take action when violations are identified.

7.2 Investigation

Upon receiving a report or identifying a potential violation, GitScrum may:

• Investigate the alleged violation by reviewing account activity, content, logs, and other relevant information
• Contact the account holder or user to request information or clarification
• Temporarily suspend access to the Services during the investigation if necessary to protect the platform, users, or third parties
• Preserve evidence and documentation related to the violation

7.3 Enforcement Actions

If GitScrum determines that a user has violated this AUP, we may take any or all of the following actions, at our sole discretion:

Content Actions:

• Remove, disable, or restrict access to content that violates this AUP
• Delete or quarantine files, projects, or data associated with the violation

Account Actions:

• Issue a warning to the account holder, outlining the violation and required corrective action
• Suspend the account temporarily (e.g., 7 days, 30 days) pending investigation or corrective action
• Terminate the account permanently and revoke all access to the Services
• Refuse to restore terminated accounts or allow creation of new accounts

Financial Actions:

• Withhold refunds for prepaid subscriptions (consistent with our no-refund policy)
• Charge fees for costs incurred due to the violation (e.g., abuse response, legal fees, infrastructure costs)

Legal Actions:

• Report violations to law enforcement, regulatory authorities, or other government agencies
• Cooperate with investigations by providing user information, logs, and evidence as required by law
• Pursue civil or criminal legal action against violators, including claims for damages, injunctive relief, and attorney's fees
• Seek restitution for damages caused by the violation

Third-Party Notification:

• Notify affected third parties, users, or organizations of violations that impact them
• Provide information to intellectual property owners, abuse reporting organizations (e.g., CERT, abuse.net), or industry coalitions

7.4 Progressive Discipline

GitScrum generally applies a progressive discipline approach for first-time or minor violations, which may include:

• First Offense: Written warning with explanation of violation and corrective action required
• Second Offense: Temporary suspension (7-30 days) and mandatory corrective action
• Third Offense: Permanent account termination

Exceptions:

GitScrum reserves the right to immediately terminate accounts without warning for severe violations, including but not limited to:

• Illegal activities (CSAM, fraud, hacking, etc.)
• Security threats (DDoS attacks, malware distribution, unauthorized access)
• Egregious content (hate speech, violent threats, harassment)
• Repeat violations after previous warnings or suspensions
• Violations that cause significant harm to GitScrum, users, or third parties

7.5 Appeal Process

If your account is suspended or terminated for an alleged AUP violation, you may submit an appeal:

How to Appeal:

• Email: appeals[at]gitscrum.com or legal[at]gitscrum.com
• Subject Line: "AUP Violation Appeal - [Account Email]"
• Include:
• Account information (email, account name)
• Explanation of why you believe the enforcement action was incorrect or disproportionate
• Any supporting evidence or documentation
• Corrective actions you have taken or will take

Review Process:

• GitScrum will review appeals within 10 business days of receipt
• GitScrum may request additional information during the review
• GitScrum's decision on appeals is final and binding

No Guarantee of Reinstatement:

Submitting an appeal does not guarantee that your account will be reinstated or that enforcement actions will be reversed.

8. No Liability for Enforcement Actions

GitScrum shall not be liable to you or any third party for any damages, losses, or consequences arising from enforcement actions taken pursuant to this AUP, including but not limited to:

• Account suspension or termination
• Content removal or deletion
• Loss of data or access to the Services
• Reporting violations to law enforcement or third parties

You agree that GitScrum's enforcement actions are taken in good faith to protect the platform, users, and compliance with applicable laws, and you waive any claims against GitScrum arising from such actions.

9. User Responsibility and Indemnification

9.1 User Responsibility

You are solely responsible for:

• Your use of the Services and compliance with this AUP
• All content you upload, store, transmit, or share through the Services
• All activities conducted under your account, whether authorized by you or not
• Ensuring that your Authorized Users comply with this AUP
• Compliance with all applicable laws, regulations, and third-party rights

9.2 Indemnification

You agree to indemnify, defend, and hold harmless GitScrum, its affiliates, officers, directors, employees, agents, and service providers from and against any and all claims, liabilities, damages, losses, costs, and expenses (including reasonable attorneys' fees) arising out of or relating to:

• Your violation of this AUP
• Your use or misuse of the Services
• Content you upload, store, or transmit through the Services
• Your violation of any applicable laws, regulations, or third-party rights
• Any harm caused to other users or third parties by your conduct

This indemnification obligation survives termination of your account and the Terms and Conditions.

10. Changes to This AUP

GitScrum reserves the right to modify, update, or revise this AUP at any time to reflect changes in our policies, legal requirements, or operational needs.

Notification of Changes:

• Material changes will be communicated via email to the address associated with your account at least 30 days prior to the effective date
• The "Last Updated" date at the top of this AUP will be updated to reflect the date of changes
• Continued use of the Services after the effective date constitutes acceptance of the updated AUP

Your Options:

• If you do not agree to updated terms, you may terminate your account before the changes take effect by following the procedures in the Terms and Conditions

11. Cooperation with Law Enforcement

GitScrum cooperates with law enforcement agencies, regulatory authorities, and government entities in investigating and prosecuting illegal activities.

We may disclose user information, account data, content, and other information to law enforcement or government authorities:

• In response to valid legal process (subpoenas, court orders, search warrants)
• When required by applicable law or regulation
• To protect the safety, security, and rights of GitScrum, our users, or the public
• To prevent or investigate suspected illegal activities, fraud, or security threats

No Advance Notice: GitScrum may disclose information without providing advance notice to the account holder if prohibited by law or if providing notice would compromise an investigation or pose a safety risk.

12. Third-Party Services and Content

This AUP applies solely to your use of GitScrum Services. GitScrum is not responsible for:

• The conduct, content, or practices of third-party services, websites, or platforms that integrate with or link to GitScrum
• Content or conduct of other users that you interact with through the Services
• Your use of third-party services accessed through the Services (e.g., integrations with Slack, Google Workspace, GitHub)

Third-party services are governed by their own acceptable use policies and terms of service. You are responsible for complying with those policies when using third-party services.

13. Severability

If any provision of this AUP is found to be invalid, illegal, or unenforceable by a court of competent jurisdiction, the remaining provisions shall continue in full force and effect, and the invalid provision shall be modified to the minimum extent necessary to make it valid and enforceable.

14. Governing Law

This AUP is governed by and construed in accordance with the laws of <strong>Portugal</strong>, without regard to its conflict of law principles, and is subject to the dispute resolution provisions in the GitScrum Terms and Conditions.

15. Contact Information

For questions, concerns, or reports regarding this Acceptable Use Policy, please contact:

Abuse Reports:

• Email: abuse[at]gitscrum.com
• Subject: "AUP Violation Report"

Legal and Policy Inquiries:

• Email: legal[at]gitscrum.com

Customer Support:

• Email: customer.service[at]gitscrum.com

Security Incidents:

• Email: security[at]gitscrum.com

Response Time:

We aim to respond to all inquiries within 5 business days and abuse reports within 2 business days.

16. Acknowledgment

By using GitScrum's Services, you acknowledge that:

• You have read and understood this Acceptable Use Policy
• You agree to comply with all provisions of this AUP
• You understand that violation of this AUP may result in account suspension, termination, and legal action
• You acknowledge GitScrum's right to monitor, investigate, and enforce compliance with this AUP
• You accept responsibility for your use of the Services and the conduct of your Authorized Users

Thank you for helping us maintain a safe, secure, and productive environment for all GitScrum users.