Use technology with purpose. Protect every connection.

You may not use the services to commit, facilitate, promote, conceal, or materially support unlawful, fraudulent, deceptive, abusive, exploitative, or harmful activity.

• Fraud, false claims, financial deception, impersonation, identity misuse, forged records, or misleading representations.
• Unlawful surveillance, interception, tracking, recording, profiling, discrimination, retaliation, or collection of information.
• Unlicensed or unauthorized regulated activity.
• Activity that violates court orders, sanctions, export controls, consumer-protection rules, privacy rights, or contractual duties.
• Content or conduct that threatens safety, encourages violence, facilitates criminal activity, or exploits vulnerable persons.

Do not upload, store, generate, publish, transmit, display, distribute, or link to content that is illegal, malicious, fraudulent, defamatory, invasive of privacy, exploitative, or otherwise prohibited by an applicable platform or law.

Do not use Kool&Tech resources to distribute malware, stolen data, unauthorized confidential information, deceptive links, counterfeit materials, pirated content, or content that infringes another party's rights.

Kool&Tech may restrict content when reasonably necessary to protect users, systems, providers, or legal compliance.

You may not compromise or attempt to compromise any account, device, application, database, network, API, integration, cloud service, or other system.

• Unauthorized access, credential attacks, privilege escalation, session hijacking, or bypassing authentication.
• Scanning, probing, exploitation, penetration testing, red teaming, or vulnerability research without written authorization.
• Denial-of-service activity, resource exhaustion, destructive commands, or deliberate disruption.
• Malware, ransomware, spyware, keyloggers, backdoors, botnets, harmful scripts, or unauthorized persistence.
• Disabling logs, security controls, alerts, filtering, endpoint protection, or audit features.
• Evading suspensions, blocks, quotas, licensing, rate limits, or technical restrictions.

Accounts and credentials must be used only by authorized users and for their assigned purpose.

• Do not share passwords, MFA approvals, tokens, API keys, certificates, recovery codes, or administrator sessions.
• Do not sell, transfer, sublicense, rent, or lend accounts or access.
• Do not create false identities, misleading profiles, unauthorized service accounts, or accounts intended to evade controls.
• Protect devices and promptly report lost devices, suspected compromise, unauthorized access, or personnel changes.
• Use unique credentials and approved authentication methods where required.

Do not collect, access, use, disclose, combine, sell, share, monitor, record, or retain personal information without lawful authority and required notice or consent.

Do not submit highly sensitive or regulated information through channels that are not expressly approved for that data. Do not attempt to identify anonymous users, infer protected traits, or obtain information outside the authorized business purpose.

Customers remain responsible for notices, consents, retention, data-subject requests, user permissions, lawful basis, and compliance requirements for their data.

Do not infringe copyrights, trademarks, patents, trade secrets, database rights, licenses, publicity rights, or other proprietary rights.

• Do not copy, republish, resell, sublicense, remove notices from, or create unauthorized derivatives of protected materials.
• Do not extract proprietary workflows, source code, prompts, models, documentation, templates, interfaces, or data beyond permitted use.
• Do not use Kool&Tech branding, KoolArchitect, visual assets, documentation, or deliverables outside the license granted.

Communications must comply with consent, identification, opt-out, carrier, platform, and country-specific requirements.

• No unsolicited bulk email, SMS, voice, social, or other messaging.
• No purchased, scraped, harvested, or unlawfully obtained contact lists.
• No spoofed sender identity, falsified headers, misleading caller identity, deceptive links, or concealed message origin.
• Honor STOP, unsubscribe, suppression, do-not-contact, and consent-withdrawal requests promptly.
• Maintain evidence of consent where required and use messaging only for the disclosed purpose.

Do not use services for spam, black-hat search optimization, artificial engagement, link manipulation, fake traffic, review manipulation, reputation abuse, or coordinated inauthentic activity.

Customers must maintain accurate sender information, reasonable complaint rates, valid contact data, and responsible list hygiene. Kool&Tech may restrict campaigns or integrations that threaten domain, IP, carrier, platform, or vendor reputation.

APIs, webhooks, connectors, and integrations must be used within documented permissions, purposes, schemas, authentication, capacity, and rate limits.

• No bypassing quotas, throttling, authentication, authorization, billing, or usage restrictions.
• No token sharing, unauthorized data synchronization, hidden onward transfer, or connecting unapproved systems.
• No excessive polling, abusive retries, replay attacks, fabricated events, or activity designed to exhaust resources.
• No extraction or reconstruction of data beyond the approved integration purpose.
• Clients must protect secrets, approve data flows, and validate automated actions.

Automations must have an authorized business purpose, appropriate permissions, tested rules, exception handling, and reasonable human oversight.

Do not create automations intended to falsify records, evade approvals, conceal activity, manipulate accounting or inventory, send unauthorized communications, delete evidence, or take high-impact actions without appropriate review.

Customers are responsible for testing triggers, data, permissions, recipients, schedules, actions, rollback, and downstream consequences before production activation.

AI-enabled features must be used lawfully, transparently, and within their intended purpose.

• Do not attempt to extract system prompts, model weights, protected training data, credentials, secrets, or other restricted information.
• Do not use prompt injection, jailbreaks, adversarial inputs, or tool manipulation to bypass safety, access, or data boundaries.
• Do not represent AI-generated output as verified fact or a human decision when disclosure or review is appropriate.
• Do not use AI output as the sole basis for legal, financial, employment, medical, safety, or similarly significant decisions unless expressly authorized and supported by required safeguards.
• Do not submit third-party confidential or personal information to an AI feature without authority.

Users must review outputs for accuracy, appropriateness, bias, intellectual-property concerns, and unintended disclosure.

Assessments and scoring tools must not be manipulated, reverse engineered, automated, or used to misrepresent identity, eligibility, maturity, risk, performance, or business readiness.

• No automated or bulk submissions unless expressly authorized.
• No falsifying responses, creating deceptive comparison results, or circumventing scoring logic.
• No using general recommendations as a substitute for qualified professional judgment.
• No scraping, reproducing, republishing, selling, or training another system on assessment questions, logic, reports, or outputs without permission.

Users may access only the organizations, records, functions, and environments assigned to them.

Do not enumerate tenants, guess identifiers, manipulate URLs, alter hidden fields, reuse invitation links, bypass role controls, access another customer's records, or attempt privilege escalation.

Customers must maintain accurate user rosters and promptly disable access no longer required.

Use of Odoo Online, Odoo.sh, self-hosted Odoo, and Odoo applications must comply with the applicable Odoo agreement, hosting rules, licenses, and Acceptable Use Policy.

• No unauthorized modules, unlicensed code, malicious customizations, harmful automated actions, or prohibited hosting activity.
• No security research, scanning, or exploitation of Odoo Cloud without written authorization from the responsible provider.
• No use that threatens platform stability, mail reputation, database integrity, or other tenants.
• Custom code and third-party modules must be authorized and tested for the target environment.

Use of Microsoft 365, Azure, Entra, Intune, Teams, SharePoint, Exchange, Power Platform, and related services must comply with Microsoft's applicable agreements, licenses, product terms, acceptable-use rules, and service-specific policies.

Do not use Microsoft resources for unauthorized access, service disruption, account sharing, unlicensed use, automated abuse, harmful code, privacy violations, spoofing, or circumvention of technical controls.

SMS, MMS, RCS, voice, verification, email, and other communications must satisfy applicable telecommunications requirements, carrier rules, platform policies, consent standards, registration obligations, message-content restrictions, and opt-out requirements.

Do not engage in robocalling, illegal lead generation, traffic pumping, artificial traffic, number spoofing, fraudulent verification, evasion of carrier filtering, or use of numbers and sender identities without authority.

Country- and service-specific requirements may apply and may change.

Do not use services for fraudulent transactions, unauthorized payment processing, money laundering, evasion of controls, deceptive billing, pyramid-style schemes, unlicensed financial activity, or transactions prohibited by a payment provider.

Complete payment-card data must be handled through an approved payment provider and must not be entered into ordinary forms, tickets, email, chat, or SMS unless expressly authorized.

Customers are responsible for product legality, pricing, taxes, refunds, consumer notices, chargebacks, export restrictions, and merchant obligations.

Do not use bots, spiders, crawlers, browser automation, headless systems, scripts, agents, or bulk tools to access, copy, index, submit, test, monitor, or interact with services except through an authorized interface and within documented limits.

Automation that interferes with availability, bypasses access controls, harvests information, reproduces protected content, generates artificial traffic, or evades enforcement is prohibited.

Do not use resources in a manner that unreasonably consumes capacity, degrades service, creates abnormal load, threatens stability, or interferes with another user.

Kool&Tech may apply quotas, throttling, rate limits, file limits, execution limits, concurrency controls, storage limits, or other safeguards. Do not evade or defeat those safeguards.

Security testing requires prior written authorization defining systems, dates, methods, contacts, data-handling, and stop conditions.

Without authorization, do not scan, fuzz, probe, exploit, social engineer, access data, test denial-of-service, install tools, persist access, publish findings, or contact vendors on Kool&Tech's behalf.

A responsible report should minimize access and impact, preserve confidentiality, and use the Security & Trust Center reporting channel.

Do not use services in violation of U.S. or applicable international sanctions, export controls, anti-boycott rules, or restrictions on destinations, users, entities, technology, data, or end uses.

You must not provide access to a prohibited party, conceal ownership or destination, or use services for restricted military, weapons, surveillance, or other controlled applications without all required authorization.

Kool&Tech may conduct screening, request information, block access, reject transactions, or suspend services to address compliance risk.

You must comply with the terms, licenses, acceptable-use rules, data policies, and technical limitations of every connected platform, vendor, library, module, API, carrier, hosting provider, marketplace, or payment service.

Kool&Tech may disable an integration or activity that violates a third-party requirement or threatens an account, subscription, reputation, license, or service relationship.

To protect services and enforce this AUP, Kool&Tech may review relevant account, configuration, usage, security, support, integration, and log information within legal and contractual limits.

Kool&Tech may preserve evidence, request information, require remediation, restrict functionality, cooperate with providers, and disclose information when legally required or reasonably necessary to protect rights, users, systems, or safety.

Monitoring is not a guarantee that every violation will be detected or prevented.

Report suspected violations, compromised accounts, abusive communications, security issues, or unlawful use to info@koolandtech.com.

Include the affected account or service, date and time, description, relevant identifiers, evidence, and safe contact details. Do not include unnecessary sensitive information.

Customers must cooperate with reasonable investigation and remediation requests.

Kool&Tech may take proportionate action based on severity, urgency, recurrence, legal requirements, vendor restrictions, and risk.

• Issue a warning or require corrective action.
• Remove, quarantine, block, or disable content, accounts, integrations, automations, messages, tokens, or functionality.
• Apply rate limits or restrict access.
• Suspend services immediately when necessary to protect systems, users, providers, evidence, or legal compliance.
• Terminate the affected service or agreement.
• Preserve records, notify a provider, pursue available remedies, or cooperate with authorities where required.

Emergency action may occur without advance notice. Fees already incurred remain payable, and suspension does not excuse other obligations.

A customer may request review of an enforcement action by providing relevant facts, authorization, remediation evidence, and a plan to prevent recurrence.

Kool&Tech may restore access, maintain restrictions, require additional controls, or deny restoration based on risk, provider requirements, law, contractual rights, and available evidence.

Restoration is not guaranteed and may require payment of overdue amounts, new credentials, configuration changes, validation, or additional service fees.

Customers are responsible for their users, end users, administrators, data, content, accounts, devices, integrations, messaging programs, automation, and use of services.

Customers must maintain reasonable policies, training, permissions, oversight, consent records, security measures, and incident contacts. An action performed through a customer account may be treated as authorized until Kool&Tech receives and processes notice of compromise.

This AUP supplements the Terms & Conditions, Privacy Policy, Security & Trust Center, Data Processing Addendum, applicable SOW, order form, support agreement, and third-party terms.

If documents conflict, mandatory law and binding provider requirements control for their subject, followed by the more specific signed agreement. This AUP controls acceptable-use and abuse-prevention matters unless a signed agreement expressly states otherwise.

Kool&Tech may update this AUP as services, threats, laws, providers, and business practices change. The effective date identifies the current version.

Material changes may be communicated through the website, account, email, agreement, or another reasonable channel. Continued use after the effective date constitutes acceptance to the extent permitted by law.