Acceptable Use of Products & Services
Contents
ESDS SOFTWARE SOLUTION LTD
Acceptable Use of Products & Services
1. Introduction
This Acceptable Use of Products & Services Policy (the “Policy”) governs your use of the services offered by ESDS Software Solution Ltd and its affiliates (“ESDS,” “we,” “us”) (the “Services”) and of our websites and portals. We may modify this Policy by posting a revised version; by using the Services or accessing our websites, you agree to the latest version. This Policy exists for a practical reason: on shared infrastructure, one user’s misuse can degrade security and availability for everyone, so its terms are enforceable, not aspirational, and form part of the agreement under which we provide the Services.
2. Who and What This Covers
This Policy binds everyone who uses an ESDS website or Service: customers, the users a customer authorises, and visitors. If you are a customer, you are responsible for the conduct of your authorised users and of any third party you permit to access the Services through your account; their breach is treated as yours for the purposes of this Policy.
3. The Standard We Expect
You must use the Services lawfully and in good faith, and not in a way that breaks the law, infringes the rights of others, or harms the security, integrity, or availability of any user, network, system, or the platform itself. Indian law governs this expectation, including the Information Technology Act and rules made under it, the DPDP Act, and applicable intellectual-property and cyber-security law.
4. Prohibited Uses
You may not use, or facilitate or allow others to use, the Services or our websites for any of the following. The list is illustrative of the conduct we act on, not an exhaustive catalogue; conduct of a similar character is equally prohibited.
4.1 Unlawful, Harmful, or Infringing Content
- Storing, transmitting, or distributing content that is unlawful, defamatory, obscene, or that infringes intellectual-property or privacy rights.
- Any material that sexualises or endangers children, including child sexual abuse material, which we report to the competent authorities without exception.
- Content that incites violence, terrorism, or unlawful discrimination, or is otherwise prohibited under Indian law.
4.2 Security and Integrity Violations
- Accessing, or attempting to access, any system, network, account, or data without the authorisation of its owner.
- Testing, probing, or scanning the vulnerability of any system or network without the owner’s express authorisation.
- Monitoring traffic or data on any network or system without authorisation; or defeating, or attempting to defeat, authentication or access controls.
- Introducing or distributing malware, ransomware, or other malicious code.
4.3 Network and Resource Abuse
- Any activity that, in our reasonable judgement, may harm or disrupt systems, networks, or third-party services, including denial-of-service attacks or deliberate attempts to overload a system.
- Consuming resources beyond your entitlement in a manner that degrades the Service for others, or operating open relays or open proxies that facilitate abuse.
4.4 Email, Spam, and Messaging Abuse
- Sending, or permitting others to send on your behalf, unsolicited bulk or commercial messages (spam) in violation of applicable law.
- Forging TCP/IP packet headers, email headers, or any part of the header information, or otherwise disguising the origin of a communication.
4.5 Misuse of Data
- Processing personal data through the Services in breach of the DPDP Act or other applicable law, or using the Services to unlawfully harvest or exploit the data of others.
5. Your Responsibilities as a Customer
Security on a cloud platform is shared. Within your area of responsibility, you are accountable for:
- All activity conducted under your account, whoever conducts it.
- Safeguarding credentials, and securing the applications, configurations, operating systems, and content you control.
- Holding the lawful basis and consents required for any personal data you process using the Services.
- Reporting any suspected security incident, unauthorised access, or vulnerability to us promptly, and in any event within twenty-four (24) hours of becoming aware of it.
6. How We Monitor and Cooperate
We do not routinely inspect customer content and treat it as confidential. We do monitor service usage and traffic patterns to protect security, performance, and compliance, and we investigate suspected breaches of this Policy. When determining whether a breach has occurred, we may take into account your ability and willingness to comply, including the controls you have in place to prevent, identify, and remove prohibited content or activity. Where the law or a valid order requires, we cooperate with regulators and law-enforcement authorities, including CERT-In, limiting disclosure to what is compelled.
7. Reporting Violations
To report a violation of this Policy — abuse, a security incident, or unlawful content — please write to our abuse and security contact. We triage every report by severity; matters concerning child safety or active security threats are escalated immediately.
Note: Insert the dedicated abuse / security address (for example, [email protected]) and any published response target before publication.
8. Consequences of Violation
Our response is proportionate to the seriousness of the breach, and may include, in ascending order:
- Notice to you with a requirement to remediate within a stated period.
- Removal or disabling of access to the offending content.
- Throttling or suspension of the affected Service.
- Suspension or termination of the account, for serious, repeated, or unlawful conduct, or where required by law.
Notice and immediate action: wherever practicable and lawful, we will give notice and an opportunity to remedy before suspending the Service. We may act first and notify afterwards where there is a serious and immediate risk to security, legal compliance, or other users — for example, an active attack originating from your environment or content that endangers children.
Interaction with the SLA: downtime caused by a suspension or termination properly made under this Policy is Excluded Downtime under the applicable Service Level Agreement and does not count against our availability commitment or give rise to service credits.
9. Changes to This Policy
We update this Policy as our Services, the threat landscape, and the law evolve. The version published on our website, bearing the effective date above, is the one in force, and continued use after that date constitutes acceptance of the updated terms.
10. Contact
For questions about this Policy, or to report a violation, use the abuse, security, or support channels published on our website.
