Acceptable Use Policy (AUP)

BRA-LEGAL-005·Usage rules

Acceptable Use Policy (AUP)

Document ID: BRA-LEGAL-005 Title: Acceptable Use Policy (AUP) Version: 1.0 Last updated: 2026-10-24 Publisher: Timecampus Technologies Pvt. Ltd. (Burdenoff Group) Canonical location: https://burdenoff.com/contracts/brainyrich/BRA-LEGAL-005 Burdenoff Group Contract Registry — root at https://burdenoff.com/contracts (one subgroup per product). The contracts referenced in this document belong to the BrainyRich subgroup at https://burdenoff.com/contracts/brainyrich/. Every referenced contract is identified by its Document ID (BRA-LEGAL-### / BRA-PRICING-###) and incorporated by reference.

Status: Published v1.0 — effective 2026-10-24. Reviewed against the production platform and approved for publication on 2026-10-24 under the founder's delegated legal sign-off (India jurisdiction); outside-counsel review checkpoints are tracked in BRA-LEGAL-REG. Applies to: anyone accessing the BrainyRich Service, including all plan tiers and trial users; partners; resellers; affiliates; marketplace clients, independent advisors and firms; and account-holders, prospects and advisors using BrainyRich through an organisation.

This AUP is incorporated into the MSA and the website Terms. Violation may result in suspension or termination per MSA §4 and §8.

1. General

You must use BrainyRich only for lawful purposes, in accordance with the MSA, applicable laws (including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, applicable financial-services, securities, consumer-protection and anti-discrimination law, and equivalents in your jurisdiction), and the rights of others.

2. Prohibited content

You must not upload, store, generate, transmit or distribute content that:

  • is unlawful, defamatory, fraudulent, obscene, or that sexualises or exploits minors;
  • infringes intellectual property rights, trade secrets, or rights of publicity / privacy;
  • contains malware, ransomware, viruses, worms, exploits, or rootkits intended to damage third-party systems;
  • contains exfiltrated or stolen credentials, including credential-stuffing lists;
  • consists of regulated or special-category personal data outside the scope of Annex 1 of the DPA (unless permitted under an Order Form with appropriate controls and a lawful basis);
  • targets or harasses any individual or group based on protected characteristics; or
  • is otherwise illegal under Indian law or the law of the user's jurisdiction (e.g., content prohibited under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021).

3. Prohibited activities

You must not use the Service to:

  • engage in unlawful or discriminatory financial practices — lending, account-opening, advice, allocation, or other significant financial decisions on a basis prohibited by applicable financial-services / anti-discrimination law;
  • post fraudulent or misleading financial information, sham listings, or fake advisor / firm profiles, or use the Service to harvest investor or client data without a genuine intent to engage;
  • scrape, harvest or bulk-extract investor, client-household, independent-advisor or financial-account data, whether yours or others', or build a competing advisory database from the Service;
  • make automated financial recommendations with legal or similarly significant effect on individuals (account-opening, account-rejection, allocation, rebalancing, lending, or other significant financial outcomes, client classification) without meaningful human review and the consents, notices and suitability obligations required by law;
  • conduct KYC checks, monitoring, or surveillance of clients without a lawful basis, notice and proportionality;
  • attempt to gain unauthorised access to any system, account, or data (yours, Timecampus's, or a third party's);
  • attack, probe, scan or test the vulnerability of any system or network without authorisation (security research on the Service is permitted only under Timecampus's responsible-disclosure programme);
  • circumvent any rate limit, plan limit, billing meter, licence check, audit log or content protection;
  • impersonate any person or entity, including misrepresenting your affiliation with Timecampus or with an advisor / firm / client;
  • send unsolicited bulk email, SMS, or messages ("spam") via integrations, notifications or webhooks (including violations of the TRAI's UCC Regulations and the U.S. CAN-SPAM Act / EU PECR);
  • use the marketplace, payments or payout features for money laundering, terrorist financing, fee circumvention, or to evade KYC, AML, or financial-services law;
  • use the Service in violation of export-control, sanctions, anti-bribery, anti-money-laundering, or trade laws.

4. Financial data and prospect rights

When handling account-holder, prospect or client data, you must:

  • have a lawful basis and provide the notices and consents your jurisdiction requires before collecting or processing it;
  • limit access to financial-account, document and verification data to appropriately-authorised roles via RBAC;
  • honour data-subject requests (access, correction, deletion) from your account-holders, prospects, independent advisors and advisors as the controller;
  • not introduce special-category personal data outside the scope of your Order Form.

5. AI features

When using AI-assisted features (insight generation, recommendations, analytics):

  • you are responsible for the content of inputs and outputs and for reviewing AI outputs before relying on them;
  • you must keep a human in the loop for any decision affecting an individual;
  • you must discharge any deployer obligations for automated investment-recommendation tools (suitability review, client notice, transparency) under applicable law (e.g., SEC/FINRA robo-advisory and suitability guidance, the EU AI Act for high-risk AI, state laws);
  • you must not use AI features to generate content that is illegal, harassing, deceptive, discriminatory, or in violation of the AUP;
  • you must not attempt to extract Timecampus's prompts, system instructions or internal model behaviour to reverse-engineer or build a competing service.

6. Marketplace conduct

The services marketplace is not live as of 2026-10-24; this section applies once it launches. If you participate in the BrainyRich services marketplace (as a client, independent advisor or agency):

  • you must comply with the Marketplace Terms (BRA-LEGAL-011);
  • you must deal honestly — no fake reviews, no fee circumvention (taking engagements off-platform to avoid fees in breach of those Terms), no misrepresentation of skills, identity or availability;
  • clients must correctly classify and lawfully engage marketplace clients and meet any tax, withholding and regulatory obligations;
  • you must not use the marketplace to facilitate fraud, market manipulation, or any unlawful financial practice.

7. Fair use of shared limits

Even where generous or "unlimited" usage is offered, use must be reasonable and in line with normal product workflows. Timecampus may apply fair-use throttling where consumption materially exceeds typical patterns and threatens platform stability or pricing integrity.

8. Vulnerability reporting

Good-faith security research is welcomed. Report vulnerabilities to security@burdenoff.com (PGP key on request) with:

  • a description of the issue;
  • reproduction steps;
  • the impact;
  • any logs, screenshots, or proof-of-concept.

Do not access data beyond what is needed to demonstrate the issue, do not test denial-of-service against production, and give Timecampus a reasonable time to remediate before public disclosure.

9. Enforcement

Timecampus may, without limiting its other rights:

  • investigate suspected violations and require Customer cooperation;
  • remove content that violates the AUP (including fraudulent financial listings or fake profiles);
  • suspend or limit access (in whole or in part);
  • terminate accounts for repeated or serious violations;
  • report violations to law-enforcement authorities or other competent authorities where required;
  • comply with court orders and regulator instructions (including under the IT Act, DPDP Act, CrPC, or equivalent).

Where feasible and lawful, Timecampus will provide notice before suspension or termination, and will, where practicable, preserve access to export account and statutory records during a wind-down.

10. Updates

Timecampus may update this AUP from time to time. Material changes will be notified at least 30 days in advance; continued use after the effective date constitutes acceptance. For consumer Customers, statutory consumer protections under the Consumer Protection Act, 2019 are preserved.

Reference and incorporation

All Burdenoff Group contracts, addenda, exhibits, policies and registers referenced in this document are identified by their Document ID (BRA-LEGAL-### or BRA-PRICING-###) and are published at https://burdenoff.com/contracts. Each such referenced document is incorporated into this document by reference. The version of a referenced document that applies is the version published at https://burdenoff.com/contracts as at the Effective Date of the applicable Order Form (or, where no Order Form exists, the version current at the date of acceptance), unless an executed Order Form specifies a frozen version.

Back to BrainyRich Contracts