Acceptable Use Policy

Version 2.0

1. Introduction

This Acceptable Use Policy ("AUP") applies to all users of the Tiquo platform and services ("Users"), including operators, administrators, employees, contractors, and end users acting on behalf of a Tiquo customer. By accessing or using Tiquo, Users agree to comply with this policy.

This AUP forms part of the Tiquo Platform Terms and should be read alongside the Tiquo Privacy Policy, Data Processing Agreement, and any applicable order form or subscription agreement. In the event of a conflict, the Platform Terms prevail, save where this AUP is more restrictive.

Tiquo may update this AUP from time to time. Where a change is material, Tiquo will provide reasonable prior notice. Continued use of Tiquo after changes take effect constitutes acceptance of the updated policy.

2. Permitted Use

Users may use Tiquo only:

• for legitimate business purposes consistent with the services offered by Tiquo (such as hotel, restaurant, venue, event, booking, staff, or operational management);
• in a lawful, honest, and responsible manner;
• for authorised accounts only, and only within the access permissions granted by the account owner or administrator;
• in accordance with applicable laws in every jurisdiction in which the User operates; and
• in accordance with Tiquo's published documentation, guidance, and rate limits.

3. Prohibited Use

Users must not use Tiquo, or permit others to use it, for any of the following:

• any unlawful, fraudulent, deceptive, or harmful activity;
• uploading, storing, or transmitting content that is illegal, infringing, obscene, defamatory, hateful, harassing, discriminatory, or otherwise objectionable;
• distributing viruses, malware, ransomware, or any malicious code, or facilitating network attacks, denial-of-service, hacking, probing, or other disruptive or intrusive behaviour;
• attempting to reverse-engineer, decompile, bypass security measures, copy, or replicate platform features to build a competing service;
• unauthorised access to other Users' accounts, data, or system resources;
• harvesting, scraping, or collecting personal data of other Users or third parties without appropriate consent or a valid legal basis;
• using Tiquo to send unsolicited communications (spam), marketing, or mass messaging without proper consent or outside lawful use;
• engaging in multi-level marketing, pyramid schemes, or similar practices using Tiquo;
• misusing the Tiquo APIs, including exceeding published rate limits, circumventing authentication, or automating access in a manner that degrades service for other Users;
• uploading personal data without having a lawful basis, or uploading special category or criminal offence data outside the scope of the Customer's agreement with Tiquo;
• using Tiquo to process payment card data outside the approved Stripe integration;
• any activity that could compromise the availability, stability, or performance of Tiquo or harm Tiquo's infrastructure or other Users.

This list is illustrative and not exhaustive. Tiquo reserves the right to suspend or terminate access for behaviour Tiquo reasonably considers unacceptable.

4. AI Features

Tiquo offers features that use artificial intelligence and machine learning ("AI Features"). When using AI Features, Users must comply with Sections 2 and 3 above and, in addition, must not:

• attempt to extract, manipulate, or override the system prompt, safety controls, or guardrails of any AI Feature, including through prompt injection, adversarial inputs, or jailbreak techniques;
• use AI Features to generate, assist with, or attempt to generate unlawful content, child sexual abuse material, content that facilitates violence or serious harm, or content that violates intellectual property rights of third parties;
• use AI Features to impersonate a person or entity, or to produce content that falsely represents itself as human-authored where transparency is required by law;
• submit to AI Features any personal data, confidential information, or third-party data that the User is not authorised to disclose;
• use AI Features, or the outputs of AI Features, to develop, train, improve, or benchmark any competing artificial intelligence model, product, or service;
• use AI Features in any way that breaches the terms of Tiquo's upstream AI service providers as notified by Tiquo from time to time; or
• rely on AI Feature outputs for decisions that produce legal or similarly significant effects on data subjects without appropriate human review.

Users acknowledge that AI Feature outputs may contain errors, omissions, or hallucinations, and must review outputs before acting on them. Further information about available AI Features is published at docs.tiquo.co.

5. Security Obligations

Users must:

• safeguard their login credentials and not share them with unauthorised persons;
• use multi-factor authentication where offered and required by their account administrator;
• comply with any security or privacy instructions issued by Tiquo (including password policies, account recovery, data access controls, and incident response cooperation);
• report any suspected security incident, misuse, or vulnerability to Tiquo at security@tiquo.co without undue delay; and
• cooperate in good faith with Tiquo's investigation of any suspected breach of this AUP or security incident.

6. Responsible Disclosure

Tiquo welcomes reports of security vulnerabilities. Researchers and Users who believe they have identified a vulnerability should contact security@tiquo.co with details. Tiquo will not pursue legal action against researchers acting in good faith, who avoid privacy violations, service disruption, and data destruction, and who give Tiquo a reasonable period to remediate before public disclosure.

7. Rights of Tiquo

Tiquo reserves the right to:

• monitor use of the platform to verify compliance with this AUP, in accordance with the Privacy Policy and applicable law;
• investigate any suspected breach of this AUP;
• suspend, restrict, or terminate a User's access immediately where a violation is reasonably suspected and the risk to Tiquo, its Customers, or third parties warrants immediate action;
• remove or block content that breaches this AUP or applicable law; and
• take legal action and notify law enforcement or regulators where required or appropriate.

Tiquo will use reasonable efforts to notify the relevant Customer administrator before suspending or restricting access, unless doing so would prejudice an investigation, risk further harm, or conflict with a legal obligation.

8. Consequences of Violation

Violation of this AUP may result in:

• immediate suspension or termination of the User's account, with or without prior notice;
• removal of access to data or services, and deletion of offending content;
• claims for damages, indemnification, and recovery of investigation or remediation costs in accordance with the Platform Terms;
• referral to law enforcement or regulators; and
• termination of the Customer's agreement with Tiquo where the violation is material or repeated.

9. Reporting Misuse and Contact

To report suspected misuse, abusive behaviour, or AUP violations or security vulnerabilities, contact security@tiquo.co. For general questions about this policy, contact support@tiquo.co.

10. Review

This AUP is reviewed at least annually and whenever there is a material change to the Tiquo platform, the AI Features, applicable law, or Tiquo's risk posture.