AssociationOps360

Trust and responsible use

Acceptable Use Policy

H4 Legacy Holdings, LLC, doing business as AssociationOps360

Version 2026-10-09 — effective when made applicable under the Agreement

This Policy defines permitted and prohibited use of the AssociationOps360 public website, secured application, records, communications, exports, integrations, and related services.

1. Scope and responsibility

This Acceptable Use Policy applies to every customer, authorized user, requester, resident, vendor, contractor, integration, device, and other person or system that accesses the public website or secured service. The customer is responsible for activity under its accounts and for communicating these rules to its users.

Use must comply with the Customer Subscription Agreement, Order Record, documentation, applicable law, and the customer’s own authority over the relevant property and records.

2. Lawful and authorized use

Users may use the service only for legitimate association, property, maintenance, asset, vendor, project, lifestyle, governance, reporting, and related business operations authorized by the customer. Users must not submit records, photographs, personal information, communications, or instructions they lack authority to collect, use, disclose, or direct.

The service must not be used for unlawful discrimination, harassment, threats, fraud, deceptive conduct, defamation, stalking, exploitation, or violation of privacy, publicity, intellectual-property, contractual, or other rights.

3. Security and system integrity

Users must not introduce malware; probe, scan, or test vulnerabilities without written authorization; bypass authentication or role controls; access another organization or property without authorization; disrupt availability; overload the service; interfere with logs or security controls; automate abusive traffic; or help another person do any of these things.

Credentials must not be shared between individuals. Customers must promptly disable unnecessary access, maintain accurate roles, protect devices and exported files, and report suspected compromise to support@associationops360.com.

4. Service, license, and usage restrictions

Users must not resell, sublicense, rent, timeshare, frame, mirror, copy, or commercially exploit the service except as expressly permitted by the Agreement. Users must not remove proprietary notices or circumvent plan, seat, property, storage, upload, export, or other limits except to the extent a restriction is prohibited by law.

Protection against reverse engineering and competitive use.

For these restrictions, Service Materials means AssociationOps360's platform, software, source and object code, user interface, APIs, designs, workflows, documentation, and any data, records, datasets, reports, outputs, or other materials accessed, obtained, observed, or generated through the service. Service access includes trial, demonstration, paid, requester, resident, vendor, administrative, support, integration, and other account or API access.

Customers, users, and third parties accessing the service must not reverse engineer, decompile, disassemble, attempt to discover source code or underlying algorithms, scrape, crawl, harvest, or otherwise extract or copy Service Materials, except for uses expressly authorized by the Agreement or documented service functions. Authorized APIs, reports, exports, and integrations may be used for the customer's permitted operations, not to evade these restrictions.

Customers, users, and third parties accessing the service must not use Service Materials or any service or account access, directly or indirectly, to design, develop, build, inform, train, fine-tune, test, evaluate, benchmark, or improve any competing or substantially similar product, service, software, artificial-intelligence system, or machine-learning model. This includes supplying Service Materials as training data, prompts, reference material, specifications, or evaluation datasets for that purpose, whether for their own benefit or another person's benefit.

Customers and users must not permit, enable, assist, or provide access or Service Materials to any third party for those prohibited purposes. Customers must ensure that their authorized users and third parties whom they permit to access the service or Service Materials are bound by and comply with these restrictions. Access does not grant a license for competitive development or training. The restrictions on retained Service Materials and prohibited competitive use survive termination or expiration of access or the Agreement.

These restrictions do not transfer ownership of Customer Data or prevent lawful use, export, retrieval, or migration of Customer Data for the customer's own operations. Those rights do not authorize use of Service Materials, account access, or AssociationOps360's intellectual property for prohibited competitive purposes. A restriction applies only to the extent permitted by applicable law and does not limit rights that applicable law prohibits the parties from restricting, including legally protected interoperability activities. Applicable third-party and open-source license rights remain governed by their own licenses.

Accounts and paid active-user access may not be pooled to avoid fees. Requester and view-only access may be used only within the permissions assigned to those roles. Integrations and API access, when offered, must follow their documented limits and may not be used to create uncontrolled copies or unauthorized access paths.

5. Content and sensitive information

Users must not upload malicious code, illegal content, content that infringes third-party rights, or material designed to mislead users about the source or condition of a record. Photographs and documents must relate to an authorized operational purpose and remain associated with the correct property and record.

Do not submit Social Security numbers, full payment-card data, medical records, biometric identifiers, government identification numbers, credentials, or similarly sensitive information through ordinary workflows. Payment-card details must be submitted only through the configured payment provider. The customer remains responsible for lawful notices, consents, retention, and disclosure.

6. Communications and messaging

Users must not use the service to send spam, unsolicited bulk messages, phishing, credential requests, abusive content, or communications that violate law or customer policy. Notification recipients and contact details must be authorized and accurate. Users must respect opt-outs and communication preferences where applicable.

7. Maintenance records, approvals, and safety

The service organizes operational information and workflows. Users must not treat a generated schedule, reminder, report, translation, status, checklist, approval, or signature as a substitute for qualified inspection, professional judgment, legal compliance, emergency response, equipment instructions, or required human authorization.

Users must not falsify completion, inspection, approval, cost, time, safety, vendor, or incident records. Emergencies must be handled through appropriate emergency services and the customer’s established procedures; the service is not an emergency dispatch system.

8. Automated and optional translation features

Automated features may be used only within documented functions and limits. At launch, any AI-assisted capability is limited to optional translation when enabled. Original text remains visible and authoritative unless the customer decides otherwise. Users must not present automated output as professional advice, a certified inspection, a legal conclusion, or an AssociationOps360 guarantee.

9. Investigation, enforcement, and suspension

AssociationOps360 may investigate suspected violations and may preserve relevant evidence, restrict content or functionality, throttle activity, disable credentials, or suspend access when reasonably necessary to protect customers, users, systems, legal rights, or service integrity. When practical and safe, AssociationOps360 will provide notice and an opportunity to cure.

Immediate action may be taken for credible security threats, unlawful activity, fraud, unauthorized access, material disruption, government demands, or conduct likely to harm a person, property, customer, or the service. Enforcement does not limit other contractual or legal remedies.

10. Reporting and policy changes

Suspected misuse or security concerns may be reported to support@associationops360.com with the affected organization, property, user, record, date, and available evidence. Do not include passwords or unrelated sensitive data.

AssociationOps360 may update this Policy to address legal, security, or service changes. Material changes will be communicated through an appropriate website, account, or direct notice and will not materially reduce a customer’s contractual rights during a paid term without the process required by the Agreement.