Acceptable Use Policy
Rules for lawful, secure and responsible business use of Bulk workspaces, integrations and AI features.
Effective
Purpose and application
This policy applies to Customer and its authorised users when incorporated into their agreement with ManagementSupport LLC, trading as Bulk. It protects the availability, integrity and appropriate use of the Services. The Terms of Service govern enforcement and the contractual relationship; the DPA governs processing on Customer’s behalf.
Lawful records and access
Use Bulk only for authorised business purposes. Supply information you are entitled to process and share. Respect the privacy, employment, intellectual-property and confidentiality rights of others. Customer is responsible for its notices and lawful bases, including those for attendance, employee monitoring, health-related records, photographs and signatures.
Do not access another user’s account or another organisation’s information without authority; share credentials in a way that defeats accountability; evade permissions, MFA or access restrictions; impersonate a person; or falsify approvals, signatures, attendance or audit evidence. Shared-device functionality must be used through its intended identification and access controls.
Security and service integrity
Do not upload malicious code, exfiltrate data, probe or exploit vulnerabilities without express written authorisation, interfere with service availability, bypass rate limits or usage controls, or use Bulk to conduct fraud or unlawful surveillance. Do not attempt to conceal an unauthorised action by altering or destroying evidence.
Report a suspected vulnerability privately to support@trybulk.app, including only the information necessary to reproduce it. Do not include passwords, access tokens or unnecessary personal information. This reporting channel does not grant permission for intrusive testing or create a bug-bounty or legal safe-harbour programme.
Content and communications
Do not use the Services to distribute illegal content, infringement, threats, harassment, phishing, spam or deceptive communications. Use notification and email features only for authorised recipients and purposes, with legally required notices and opt-outs. Transactional access or receipt of a template is not permission for unrelated marketing.
Limit sensitive information to what is necessary and authorised. Do not submit classified information, export-controlled technical data or other data requiring special processing arrangements unless those arrangements have been expressly agreed and can be met. Do not store payment-card security codes or unrelated account secrets in free-text fields or attachments.
Integrations, automation and AI
Review the permissions and destinations of integrations and automation before enabling them. Do not connect accounts or credentials you are not authorised to use. Customer-selected integrations can move information outside the workspace’s hosting country and can make changes under the permissions granted to them.
Check AI outputs and automated actions before consequential reliance. Do not use Bulk AI to unlawfully discriminate, make prohibited decisions or bypass required human oversight. Do not assume that an AI response is a verified factual record or that all AI activity stays within the primary hosting region. The AI & Data Handling Notice describes the processing boundaries.
Operational and regulatory use
Bulk supports operational workflows; it does not replace Customer’s safety engineering, professional judgement or validation obligations. Do not use it as the sole safeguard in an activity where a software failure could directly cause serious injury or death. Customer must maintain the independent controls and contingency procedures appropriate to its operation. Support for a regulated industry does not certify Customer’s process or establish that Bulk meets an unagreed regulatory requirement.
Response to misuse
Bulk may investigate credible misuse and request reasonable information or corrective action. It may restrict the affected use where reasonably necessary to address harm, a legal requirement or a security threat, following the notice and restoration principles in the Terms. Bulk will limit intervention where reasonably possible and will not use an investigation as permission for unrelated processing of Customer Data.
Customer must cooperate in resolving misuse within its control and promptly remove access that is no longer authorised. Contact support@trybulk.app to report misuse or contest a restriction. Material or repeated violations may lead to termination in accordance with the Agreement. Changes to this policy apply to an existing agreement only through its amendment procedure.