LOCKTERA ACCEPTABLE USE POLICY

This Acceptable Use Policy (“AUP”) governs Customer’s and End Users’ access to and use of the Locktera services, including Locktera Share, the Locktera CORE API, encryption services, cryptographic container services, SDKs, authorization systems, applications, and related systems and infrastructure (collectively, the “Services”), provided by Locktera, Inc., a Texas corporation (“Locktera,” “Company,” “we,” “us,” or “our”), and is incorporated by reference into and forms an integral part of the Locktera Terms of Service and any applicable Subscription Agreement, Order Form, or other agreement governing Customer’s use of the Services.

This AUP applies to all use of the Services, including access via APIs, SDKs, integrations, applications, web interfaces, or any other means.

This AUP is incorporated by reference into the Locktera Terms of Service and forms an integral part thereof. Capitalized terms not defined herein shall have the meanings set forth in the Terms of Service.

Customer agrees to comply with this AUP and shall ensure that its End Users comply with this AUP.

Locktera reserves the right, in its reasonable discretion, to investigate any actual, suspected, or alleged violations of this AUP and to suspend, restrict, or terminate access to the Services without liability in accordance with the Terms of Service.

Locktera may update this AUP from time to time. Continued use of the Services after such update constitutes acceptance of the updated AUP.

1. PROHIBITED USES

Use the Services in violation of any applicable law or regulation, including but not limited to laws relating to:

• Data privacy or data protection
• Export control or sanctions
• Intellectual property
• Fraud
• Cybercrime
• Unauthorized access to systems or data
• Conduct penetration testing, vulnerability scanning, or security assessments without Locktera’s prior written authorization.
• Attempt to collect, extract, or harvest system, metadata, or infrastructure information not intended for Customer.
• Locktera reserves the right to implement technical protections including rate limiting, throttling, or blocking to protect the Services.
• Attempt to circumvent any enforcement action taken by Locktera.
• Use the Services in violation of export control or sanctions laws.

1.2 Unauthorized Access or Security Violations

Attempt to gain unauthorized access to:

• The Services
• Locktera systems or infrastructure
• Other Locktera customers’ systems or data
• Any networks, systems, or devices

Including:

• Circumventing authentication or authorization controls
• Attempting to defeat cryptographic protections
• Credential harvesting
• Unauthorized decryption attempts
• Reverse engineering, decompiling, or attempting to derive source code or cryptographic implementation

1.3 Service Interference or Disruption

Use the Services in a manner that interferes with or disrupts the integrity, availability, or performance of the Services, including:

• Distributed denial-of-service attacks
• Excessive or abusive API calls
• Traffic intended to degrade service performance
• Resource abuse
• Automated scraping, crawling, or data extraction

1.4 Malicious Code

Upload, transmit, store, or distribute:

• Malware
• Viruses
• Ransomware
• Trojan horses
• Worms
• Malicious scripts or executables

1.5 Fraudulent, Deceptive, or Illegal Activities

Use the Services for:

• Fraud
• Identity theft
• Deceptive practices
• Impersonation
• Unauthorized surveillance
• Distribution of illegal content

1.6 Circumvention of Service Controls

Attempt to:

• Circumvent access controls
• Circumvent usage limits
• Circumvent billing mechanisms
• Circumvent encryption or cryptographic enforcement mechanisms
• Misuse or share authentication credentials or API keys

1.7 Unauthorized Resale or Competitive Use

• Resell or redistribute the Services except as expressly permitted
• Use the Services to develop or operate a competing service

Publish benchmarks or performance analysis without authorization

2. SECURITY OBLIGATIONS

Customer shall implement and maintain appropriate administrative, technical, and organizational security measures to protect its Account, credentials, systems, and Customer Data.

Customer shall:

• Maintain the confidentiality and security of API Keys, authentication credentials, and access tokens;
• Not share API Keys, credentials, or authentication tokens with unauthorized parties;
• Implement appropriate access controls, authentication mechanisms, and security safeguards to prevent unauthorized access to Customer systems and applications;
• Ensure that only authorized users and systems access the Services and Customer Data;
• Properly configure access policies, authorization controls, and permissions governing Customer Data and encrypted containers;
• Promptly notify Locktera without undue delay upon becoming aware of any actual or suspected unauthorized access, credential compromise, or security incident involving the Services;
• Immediately revoke or rotate compromised credentials;
• Take reasonable steps to prevent unauthorized access to the Services, including protecting Customer infrastructure, networks, applications, and devices;
• Not attempt to bypass or undermine authentication, authorization, or cryptographic enforcement mechanisms.

Customer is solely responsible for all activities conducted under its Account, including all acts and omissions of End Users and any person or system accessing the Services using Customer credentials.

Locktera shall not be responsible for unauthorized access resulting from Customer’s failure to secure its credentials, systems, or access controls.

3. CUSTOMER DATA RESPONSIBILITY

Customer is solely responsible for Customer Data and all use of Customer Data in connection with the Services.

Customer represents and warrants that:

• Customer has all necessary rights, permissions, and lawful authority to upload, encrypt, store, process, and share Customer Data using the Services;
• Customer has obtained all required permissions, consents, and authorizations from End Users and any other applicable third parties;
• Customer Data and Customer’s use of the Services comply with all applicable laws, regulations, and data protection requirements;
• Customer is solely responsible for determining who is authorized to access Customer Data and for configuring access policies, permissions, and authorization controls governing encrypted containers;
• Customer is solely responsible for granting, managing, and revoking access to Customer Data;
• Customer shall not use the Services to store, transmit, or process data in violation of applicable law.

Customer acknowledges that Locktera does not control Customer Data content, does not determine authorization policies, and does not determine who may access Customer Data.

Locktera shall have no liability arising from Customer Data, Customer’s use of Customer Data, or Customer’s authorization decisions.

4. SERVICE PROTECTION

Customer shall not use the Services in any manner that harms, disrupts, or interferes with the integrity, security, availability, or performance of the Services or Locktera infrastructure.

Customer shall not, and shall not permit any third party or End User to:

• Damage, disable, disrupt, overburden, or impair the Services or Locktera infrastructure;
• Interfere with or disrupt other customers’ use of the Services;
• Generate excessive or abusive API requests or traffic that exceeds reasonable usage levels;
• Attempt to probe, scan, test, or assess the vulnerability of the Services or Locktera infrastructure without authorization;
• Attempt to gain unauthorized access to Locktera systems, infrastructure, networks, or environments;
• Attempt to bypass, undermine, or interfere with authentication, authorization, or cryptographic enforcement mechanisms;
• Access or use the Services in a manner intended to discover, extract, or exploit system architecture, cryptographic implementation, or infrastructure details;
• Use automated tools, bots, scripts, or other mechanisms to access the Services in a manner that disrupts or degrades Service performance;
• Use the Services in any manner that compromises or threatens the security, integrity, or availability of the Services.

Locktera reserves the right to limit, suspend, or terminate access to the Services for any use that threatens Service stability, security, or integrity.

5. INVESTIGATION AND ENFORCEMENT

Locktera reserves the right, in its reasonable discretion, to investigate any actual, suspected, or alleged violation of this Acceptable Use Policy or any activity that threatens the security, integrity, or availability of the Services.

Locktera may, without prior notice and without liability, take any action it deems necessary to protect the Services, Locktera infrastructure, or other customers, including but not limited to:

• Investigating suspected violations of this AUP;
• Suspending, restricting, or terminating Customer or End User access to the Services;
• Removing, disabling, restricting, or quarantining Customer Data or access to Customer Data;
• Blocking or restricting access from specific IP addresses, systems, or accounts;
• Terminating Customer Accounts;
• Preserving and reviewing information related to suspected violations;
• Cooperating with law enforcement, regulators, or government authorities;
• Reporting unlawful or prohibited activity to appropriate authorities.

Locktera may take such actions immediately where necessary to protect the Services, Locktera infrastructure, or other customers.

Locktera shall have no liability to Customer or any third party for any action taken in good faith to enforce this AUP or protect the Services.

Violations of this AUP shall constitute a material breach of the Locktera Terms of Service.

6. COOPERATION

Customer agrees to cooperate fully and promptly with Locktera in connection with any investigation of actual, suspected, or alleged violations of this Acceptable Use Policy or any activity that threatens the security, integrity, or availability of the Services.

Such cooperation shall include, without limitation:

• Providing relevant information, records, logs, or technical data relating to Customer’s use of the Services;
• Providing information relating to End Users, systems, or applications accessing the Services through Customer’s Account;
• Taking prompt corrective action to mitigate and prevent further violations;
• Assisting Locktera in investigating security incidents, unauthorized access, or misuse of the Services;
• Complying with reasonable requests from Locktera necessary to protect the Services or Locktera infrastructure.

Customer acknowledges that Locktera may take immediate action to protect the Services while any investigation is ongoing.

Failure to cooperate with Locktera in connection with an investigation shall constitute a violation of this Acceptable Use Policy and a material breach of the Locktera Terms of Service.

7. THIRD-PARTY USE

Customer is responsible for all access to and use of the Services under its Account, including all acts and omissions of:

• End Users;
• Contractors;
• Affiliates;
• Agents or representatives;
• Any individual or entity accessing the Services through Customer credentials, API Keys, or authorization grants;
• Any party to whom Customer provides access to Customer Data or encrypted containers.

Customer shall ensure that all such parties comply with this Acceptable Use Policy and the Locktera Terms of Service.

Customer is responsible for:

• All activities conducted using Customer’s Account or credentials, whether authorized or unauthorized, unless caused solely by Locktera’s breach of this Agreement;
• Any misuse of the Services resulting from Customer’s failure to secure credentials, configure access controls properly, or manage authorization permissions;
• Any sharing, delegation, or distribution of access rights to Customer Data or encrypted containers.

Any violation of this AUP by such parties shall be deemed a violation by Customer and may result in suspension or termination of the Services.

8. UPDATES TO THIS POLICY

Locktera may update or modify this Acceptable Use Policy from time to time in its reasonable discretion.

Updated versions will be posted on Locktera’s website or otherwise communicated to Customer. The updated AUP shall become effective upon posting or on the effective date specified in the update.

Customer’s continued access to or use of the Services after the effective date of any updated AUP constitutes acceptance of the updated AUP.

If Customer does not agree to an updated AUP, Customer must cease use of the Services.

This Acceptable Use Policy, as updated from time to time, remains incorporated into and governed by the Locktera Terms of Service.

9. REPORTING VIOLATIONS

Locktera encourages Customers, End Users, and third parties to report any suspected violations of this Acceptable Use Policy or any activity that may compromise the security, integrity, or availability of the Services.

Suspected violations, security concerns, or vulnerabilities may be reported to:

legal@locktera.com

Locktera reserves the right to investigate any reported violations and to take appropriate action in accordance with the Locktera Terms of Service and this Acceptable Use Policy.

Locktera shall have no liability arising from good-faith investigation or enforcement actions taken in response to reported violations.

Locktera encourages responsible disclosure of security vulnerabilities and will investigate reported security issues in good faith.

10. EFFECT OF VIOLATION

Any violation of this Acceptable Use Policy shall constitute a material breach of the Locktera Terms of Service.

Locktera may, in its reasonable discretion and without prior notice where necessary to protect the Services, take any action it deems appropriate, including but not limited to:

• Immediate suspension or restriction of access to the Services;
• Termination of Customer’s Account;
• Removal, restriction, or disabling of access to Customer Data;
• Blocking access from specific users, IP addresses, systems, or applications;
• Legal action, including seeking injunctive relief, damages, or other remedies available under applicable law.

Locktera may take such actions immediately where necessary to protect the security, integrity, or availability of the Services or other customers.

Locktera shall have no liability to Customer or any third party for actions taken in good faith to enforce this Acceptable Use Policy.

Locktera reserves the right to recover costs, damages, and reasonable attorneys’ fees arising from Customer’s violation of this AUP.

Customer acknowledges that violations of this Acceptable Use Policy may cause irreparable harm to Locktera for which monetary damages may be insufficient, and Locktera shall be entitled to seek injunctive or equitable relief.

11. CONTACT INFORMATION

If you have any questions regarding this Acceptable Use Policy or wish to report violations, you may contact Locktera at:

Locktera, Inc.
Dallas, Texas, United States
legal@locktera.com
https://locktera.com

Locktera will review and investigate reported violations in accordance with its security and enforcement procedures.

12. INCORPORATION INTO TERMS OF SERVICE

This Acceptable Use Policy is incorporated into and forms an integral part of the Locktera Terms of Service.

Any violation of this Acceptable Use Policy shall constitute a material breach of the Terms of Service and may result in suspension or termination of access to the Services, as described therein.

13. RESERVATION OF RIGHTS

Locktera reserves all rights and remedies available under the Locktera Terms of Service and applicable law with respect to violations of this Acceptable Use Policy.

Nothing in this Acceptable Use Policy limits Locktera’s ability to protect the security, integrity, and availability of the Services.

14. EFFECTIVE DATE AND ACCEPTANCE

This Acceptable Use Policy is effective as of the “Last Updated” date set forth above.

By accessing or using the Services, Customer agrees to comply with this Acceptable Use Policy.

Locktera’s rights under this Acceptable Use Policy shall survive termination or suspension of the Services to the extent necessary to enforce this Policy.