Acceptable Use Policy

This Policy forms part of the Terms of Service and applies to every customer, administrator, manager, staff user and other person who accesses or interacts with ZeroLapse.

• Use ZeroLapse for unlawful, fraudulent, deceptive, abusive, harassing, defamatory or rights-infringing activity.
• Upload malware, stolen data, illegal material or information you do not have authority to process.
• Probe, scan, defeat, bypass or exploit authentication, permissions, rate limits, tenant isolation, storage controls or other security mechanisms without prior written authorisation.
• Attempt to access another organisation’s account, records, evidence, storage paths, audit information or identifiers.
• Interfere with availability, overload systems, automate excessive requests, scrape in a harmful manner or disrupt another user.
• Share credentials, impersonate another person or falsify records, approvals, evidence, expiry dates or audit information.
• Use ZeroLapse to send spam, phishing, malicious links or deceptive communications.
• Resell, sublicense or provide bureau access unless a written agreement allows it.
• Disclose non-public vulnerability information in a way that creates avoidable risk before ZeroLapse has had a reasonable opportunity to investigate and remediate.
• Use the service in a way that creates a material security, legal or operational risk to ZeroLapse, another customer or another person.

Customers must supervise authorised users, promptly revoke access that is no longer needed, investigate suspected misuse, preserve relevant evidence and cooperate with reasonable security enquiries. A ZeroLapse role does not replace the Customer’s own employment, delegation or approval controls.

ZeroLapse may investigate suspected violations and may remove content where lawful, rate-limit activity, restrict features, suspend users or organisations, preserve relevant evidence, notify affected parties or authorities, or terminate service. Immediate restriction may occur where reasonably necessary for illegal activity, an attack or exploit, material cross-tenant risk, serious abuse or another urgent threat. Where safe and practical, ZeroLapse will notify the Customer and allow a reasonable opportunity to remedy non-urgent breaches.

Report suspected vulnerabilities to hello@zerolapse.co.nz with “Security vulnerability” in the subject line. Do not include customer data in the initial report unless necessary. Good-faith testing does not authorise access to other customers’ data, credential attacks, social engineering, denial of service, destructive testing, persistence, or public disclosure that creates avoidable harm.

hello@zerolapse.co.nz
https://zerolapse.co.nz