Acceptable Use Policy

1. Your responsibilities

You must:

• use the Platform only for your own internal restaurant business, for lawful purposes, and in accordance with the Agreement and applicable food-safety, allergen, employment and data-protection laws;
• keep account credentials confidential, use individual accounts (no account sharing), and promptly deactivate access for anyone who is no longer an Authorised User;
• ensure that allergen, dietary and food-safety information you record is accurate, and maintain your own food-safety procedures — the Platform supports your compliance but does not replace it;
• have a lawful basis and any necessary notices or consents before entering any person's Personal Data (including Guest and staff data) into the Platform; and
• promptly report to us any suspected unauthorised access, security incident or vulnerability affecting the Platform.

2. Prohibited uses

You must not, and must not permit any Authorised User or third party to:

• Break the law or infringe rights — use the Platform for any unlawful, fraudulent or harmful purpose, or to store or transmit material that infringes another person's intellectual property, privacy or other rights, or that is defamatory, obscene or unlawful.
• Compromise security — introduce malware or malicious code; probe, scan or test the vulnerability of the Platform; attempt to gain unauthorised access to the Platform, other customers' data, or the underlying infrastructure; or defeat, disable or circumvent authentication, rate limits, usage limits or the multi-tenant isolation controls.
• Misappropriate the Platform — resell, sublicense, rent or make the Platform available to third parties (except your Authorised Users as permitted); reverse engineer, decompile or disassemble the Platform or attempt to derive its source code, models or algorithms, except to the extent this restriction is prohibited by law; or use the Platform to build or benchmark a competing product or service.
• Scrape or overload — scrape, harvest or extract data except through functionality provided for that purpose; or impose an unreasonable or disproportionately large load on the Platform, or otherwise interfere with its integrity, performance or availability, or with any other customer's use of it.
• Misuse data and AI features — upload another party's Personal Data without a lawful basis; input Special Category Data other than as intended by the Platform's features (e.g. Guest allergen and dietary information); or rely on the Platform's AI-assisted suggestions where the Platform requires a human to review and sign off (for example, allergen data must be verified by a person before a dish can be sold — you must not attempt to bypass that control).

3. Fair use and availability

The Platform is provided on a shared, multi-tenant basis. We may apply reasonable technical limits (including rate limits and usage limits) to protect security, integrity and availability for all customers. We may investigate suspected breaches of this AUP and cooperate with law enforcement where required.

4. Consequences of breach

If you breach this AUP, we may suspend or restrict access under the Agreement, and — for material, repeated or serious breaches, or where your use exposes Cortable to liability or regulatory action — terminate the Agreement, in each case as set out in the Agreement. Where practicable we will give notice and limit any suspension to what is reasonably necessary.

5. Reporting abuse

To report a security issue, suspected abuse, or a breach of this AUP, contact us at hello@cortable.ai.