Acceptable use policy

This policy sets out what you may and may not do when using Report Kit 360, a trading name of [Digital Depth Studio Ltd]. It forms part of our terms of service at /legal/terms/ and applies to every member of every workspace, to anyone who uses the API or the WordPress plugin, and to anyone who opens a share link.

The aim is simple: the Service exists to help professionals produce honest reports, and we will act to keep it usable and lawful for everyone who does. This is a draft for legal review before publication.

1. Lawful use

You must use the Service only for lawful purposes and in compliance with the laws that apply to you, including data protection law, intellectual property law, consumer protection law and the professional rules of any body you belong to.

2. Content you may not upload or produce

You must not use the Service to store, produce or distribute content that:

  • is unlawful, defamatory, fraudulent or deceptive, including reports that misrepresent an inspection that did not take place or findings that were not made;
  • infringes anyone’s copyright, trade mark, database right or other intellectual property, including the reproduction of proprietary standards, proformas or guidance you do not have the right to copy;
  • contains personal data you have no lawful basis to process, or special category data (for example health data) beyond what the engagement genuinely requires;
  • contains malware, or files designed to exploit the Service, a viewer’s browser or a recipient’s system;
  • is pornographic, promotes violence or hatred, or harasses any person;
  • purports to be issued, approved, certified or endorsed by RICS, the IEC, ISO, BRE, the CAA, any other body or any person, when it is not.

You are responsible for the accuracy and professional content of your reports. The checks, calculations and AI features in the Service are aids and do not make a report correct.

3. Accounts, seats and quotas

  • Accounts are personal. Do not share sign-in details, and do not let more than one person use a single member account. On Pro each person needs a seat.
  • Do not create multiple workspaces, accounts or trial arrangements to avoid plan limits, including the Basic allowance of 10 new reports a month and the two top-ups a month.
  • Do not interfere with, bypass or attempt to bypass the quota, storage, upload, export, API rate or AI call limits, or the Report Kit 360 mark on Basic reports.
  • Do not resell, sublicense or provide the Service as a service to third parties without our written agreement. Producing reports for your own clients is of course fine; that is what it is for.

4. Share links and recipients

  • Share links are for sending your reports to people entitled to see them. Do not use them to distribute content unrelated to your reports, to host files for other purposes, or to deceive recipients about who the sender is.
  • Do not use share pages, viewer gates or emailed links for phishing, spam or collecting personal data under false pretences.
  • Respect the recipient’s choices: if a recipient asks you to stop sending links, stop.

5. AI features and keys

  • Use only API keys you are entitled to use, on accounts you control, and in accordance with the provider’s terms and usage policies.
  • Do not submit content to an AI provider that you have no right to share with them, including other people’s personal data beyond what the engagement requires.
  • Review AI output before relying on it. Do not present AI-generated text, ratings or analyses as independent professional findings without that review, and make any disclosure your profession or client requires.

6. API, webhooks and automation

  • Keep API keys and webhook secrets confidential. Rotate a key at once if it may have been exposed.
  • Stay within the published rate limits and do not run scripts that scrape, crawl or bulk-download the Service or other customers’ share pages.
  • Webhook endpoints you register must be yours or operated with the owner’s permission.

7. Security

  • Do not probe, scan or test the security of the Service without our prior written permission. If you want to carry out security testing, write to [[email protected]] first.
  • Do not attempt to access another workspace, another person’s account or any data you are not authorised to see, even if a misconfiguration makes it possible. If you find such a problem, tell us and do not exploit it.
  • Do not introduce malware, attempt denial of service, or interfere with the integrity or performance of the Service.
  • Report vulnerabilities responsibly to [[email protected]]. We will acknowledge reports and will not take action against good-faith researchers who follow this policy.

8. Our trade marks and the mark on reports

  • Do not use the Report Kit 360 name or marks in a way that suggests we produced, checked, approved or stand behind your report, or that you are affiliated with us beyond being a customer.
  • Do not remove, hide or alter the Report Kit 360 footer strip, cover badge or share-page badge on Basic reports other than by using the white-label feature on Pro.

9. Consequences

If we reasonably believe this policy has been breached we may, depending on the seriousness: remove or disable access to the content concerned; suspend a feature, a member or the workspace; terminate the account under the terms of service; and, where required, notify the authorities. Where practicable we will tell you what we have found and give you a chance to put it right. Fees for a suspended or terminated period are not refunded where the suspension results from your breach.

10. Reporting misuse

If you believe a report or share page on the Service infringes your rights, contains your personal data unlawfully, or otherwise breaches this policy, write to [[email protected]] with the share link or report reference and the grounds of your complaint. We will acknowledge within [5 working days] and act proportionately, which may include asking the report owner to respond.

11. Changes

We may update this policy. The current version is always at /legal/acceptable-use/ with its effective date.

Contact

[Digital Depth Studio Ltd], trading as Report Kit 360 [registered office address] [[email protected]] ยท [email protected]