Acceptable Use Policy

This policy applies to everyone who uses the UBB hosted service, the account portal, the compatibility report or our websites — customers, their users, and anyone they let in.

It forms part of the Terms of Service. Terms defined there have the same meaning here. Breaching this policy is a material breach of that agreement.

You are responsible for your users' conduct. If we send you a report about something coming from your environment, act on it.

Break the law. Any use that violates applicable law or regulation, including fraud, money laundering, sanctions evasion, export control violations, or trading in stolen goods or stolen data.

Infringe intellectual property. Store, run or distribute programs, data or content that infringe someone else's copyright, patent, trademark or trade secret — including running vendor programs you do not hold a licence for.

Cross a tenant boundary. Attempt to access, probe, enumerate or interfere with another customer's environment, data, sessions or credentials, or attempt to defeat the isolation between environments by any means. This is the one rule we treat as unforgivable, and it triggers immediate suspension without prior notice.

Attack the platform. Attempt to gain unauthorised access to any part of the Service, our infrastructure or our administrative systems; escalate privileges; bypass authentication, rate limits, quotas or billing; or interfere with any other user's use of the Service.

Reverse engineer our runtime. Decompile, disassemble, extract, instrument or otherwise attempt to derive the source code, internal design or implementation of the Runtime or any part of the Service, except to the extent that restriction is unenforceable by law. This includes using access to the Service to build or assist in building a competing runtime.

Resell or sublicense. Sell, resell, sublicense, rent, timeshare, franchise or provide the Service as a service bureau to third parties, or run another company's business operations inside your environment, unless we have agreed it in writing. Ask us — reseller and multi-entity arrangements are normal, and we will paper one. Doing it quietly is what is prohibited.

Send unsolicited bulk email. Use the Service to send spam, unsolicited commercial or bulk messages, phishing, or anything that violates the CAN-SPAM Act or equivalent law. Transactional email your ERP legitimately generates — order confirmations, invoices, statements to your own customers — is expected and fine.

Introduce malware. Upload, run or distribute viruses, worms, ransomware, cryptominers, botnet clients, keyloggers or any other code intended to damage, disrupt or gain unauthorised access to any system — ours, yours or anyone else's.

Consume resources unreasonably. Exceed the fair-use envelope of your plan, as described in section 3.

Test our security without authorisation. No penetration testing, vulnerability scanning, fuzzing, load testing or red-team exercise without our prior written authorisation. See section 4 — we usually say yes.

Misrepresent yourself. Impersonate another person or company, forge headers, or misrepresent your affiliation with us.

Store data you are not allowed to store. Do not put protected health information, unencrypted payment card numbers, or classified or controlled government information into an environment we host. We are not built or certified for any of those. See Security, section 2.

Your plan comes with a stated envelope — sessions, cores, memory, storage and outbound transfer. Ordinary ERP work never gets near it: nightly posting runs, a month-end that pins the CPU for an hour, a heavy report on a Friday afternoon. None of that is a problem, and none of it will get you a letter.

What is not fair use: sustained consumption far beyond your plan; using the environment for general-purpose compute unrelated to your ERP; crypto mining; bulk media hosting; distributed scraping; or anything that degrades the platform for other customers.

If you approach or exceed the envelope, we contact you first and offer the right plan. We do not meter you silently and we do not backdate overage charges. Throttling is a last resort, after a conversation, and never in the middle of your month-end.

If your business is genuinely growing into a bigger envelope, that is good news and we will price it like good news.

Active security testing of the Service requires our prior written authorisation. Testing without it is prohibited under section 2.10, whatever your intentions were.

Please ask. Email security@uniquebb.com with the scope, the source addresses, the window you want, and a contact who will answer their phone during it. We will normally respond within 5 business days, and we normally say yes. Customers testing their own environment are a routine request, not a suspicious one.

Authorisation will never extend to another customer's environment, to denial-of-service or volumetric testing, to social engineering of our staff or our customers, or to physical attacks. Those are out of scope, always.

Found something without looking for it? Report it to security@uniquebb.com. Good-faith reports are covered by the safe harbour in Security, section 15.3, and we will thank you rather than threaten you.

Our response is proportionate to what happened. In escalating order: a note asking you to stop; a formal written warning with a deadline; throttling or the disabling of a specific feature or user; suspension of the environment; and termination under Terms, section 14.

Ordinarily we talk to you first. Most breaches of this policy are a misconfigured script or a user doing something daft, and a phone call fixes them.

We act immediately, without prior notice, where the harm is live — an attempt to cross a tenant boundary, an active attack on the platform, malware spreading, an ongoing spam run, or a legal order requiring it. In those cases we will tell you what we did and why within 24 hours.

Suspension is scoped as narrowly as the cause allows, and we restore service as soon as the cause is resolved.

Your data is never the hostage. Whatever the breach, we do not delete your programs or data files as a penalty, and the export rights in Terms, section 15 and section 16.4 survive suspension and termination. You will always be able to get your content back, in its native format.

Where the law requires it, we report criminal conduct to the authorities and preserve evidence.

If you think we got it wrong, say so. Email hello@uniquebb.com within 30 days of the action, with the reference from our notice and your account of what happened.

A person who was not involved in the original decision reviews it, and we will respond with a reasoned answer within 5 business days. Not a form letter — an explanation you can argue with.

If we were wrong, we reverse the action, restore the service and credit any fees you lost to downtime we caused. If we were right, we will tell you exactly what we saw, to the extent we can do so without exposing another customer.

To report abuse originating from our service — spam, phishing, malware, scanning, infringement — email abuse@uniquebb.com.

Please include the date and time with a timezone, the IP addresses involved, full message headers where it is email, and any logs you can share. The more of that we get, the faster we can find it.

We acknowledge abuse reports within 2 business days and investigate every one. We will tell the reporter that the matter has been dealt with; we will not disclose our customer's identity or internal details.

Security vulnerabilities go to security@uniquebb.com instead — see the Security page.

Copyright complaints should identify the work, the material you believe infringes it, your contact details, and a statement that you have a good-faith belief the use is unauthorised. Send them to abuse@uniquebb.com.

We may update this policy. Material changes are announced to the administrative contact on each account at least 30 days before they take effect, in line with Terms, section 23.

Clarifications that do not add new restrictions take effect on posting. The effective date and version at the top of this page always tell you which version you are reading.