Acceptable Use Policy (AUP)

HM-LEGAL-005·Usage rules

Acceptable Use Policy (AUP)

Document ID: HM-LEGAL-005 Title: Acceptable Use Policy (AUP) Version: 1.0-draft Last updated: 2026-06-14 Publisher: Headshot Marketing Private Limited (Burdenoff Group) Canonical location: https://burdenoff.com/contracts/headshotmarketing/HM-LEGAL-005 Burdenoff Group Contract Registry — root at https://burdenoff.com/contracts (one subgroup per product). The contracts referenced in this document belong to the HeadshotMarketing subgroup at https://burdenoff.com/contracts/headshotmarketing/. Every referenced contract is identified by its Document ID (HM-LEGAL-### / HM-PRICING-###) and incorporated by reference.

Status: TEMPLATE / DRAFT Applies to: anyone accessing the HeadshotMarketing Service, including all plan tiers and trial users; partners; resellers; affiliates; marketplace clients, freelancers and agencies; and employees, leads and customers using HeadshotMarketing through an organisation.

This AUP is incorporated into the MSA and the website Terms. Violation may result in suspension or termination per MSA §4 and §8.

1. General

You must use HeadshotMarketing only for lawful purposes, in accordance with the MSA, applicable laws (including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, applicable marketing, labour, wage and anti-discrimination law, and equivalents in your jurisdiction), and the rights of others.

2. Prohibited content

You must not upload, store, generate, transmit or distribute content that:

  • is unlawful, defamatory, fraudulent, obscene, or that sexualises or exploits minors;
  • infringes intellectual property rights, trade secrets, or rights of publicity / privacy;
  • contains malware, ransomware, viruses, worms, exploits, or rootkits intended to damage third-party systems;
  • contains exfiltrated or stolen credentials, including credential-stuffing lists;
  • consists of regulated or special-category personal data outside the scope of Annex 1 of the DPA (unless permitted under an Order Form with appropriate controls and a lawful basis);
  • targets or harasses any individual or group based on protected characteristics; or
  • is otherwise illegal under Indian law or the law of the user's jurisdiction (e.g., content prohibited under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021).

3. Prohibited activities

You must not use the Service to:

  • engage in unlawful or discriminatory marketing practices — audience targeting, segmentation, exclusion or personalised pricing on a basis prohibited by applicable anti-discrimination or consumer-protection law;
  • post fraudulent or misleading campaigns, "ghost" jobs, or fake brand / contact profiles, or use the Service to harvest lead data without a genuine intent to engage;
  • scrape, harvest or bulk-extract contact, lead, customer or influencer data, whether yours or others', or build a competing partner database from the Service;
  • make automated marketing decisions with legal or similarly significant effect on individuals (campaigning, rejection, promotion, discipline, termination, compensation, provider classification) without meaningful human review and the consents, notices and bias-audit obligations required by law;
  • conduct campaign delivery, monitoring, or surveillance of contacts without a lawful basis, notice and proportionality;
  • attempt to gain unauthorised access to any system, account, or data (yours, HeadshotMarketing's, or a third party's);
  • attack, probe, scan or test the vulnerability of any system or network without authorisation (security research on the Service is permitted only under HeadshotMarketing's responsible-disclosure programme);
  • circumvent any rate limit, plan limit, billing meter, licence check, audit log or content protection;
  • impersonate any person or entity, including misrepresenting your affiliation with HeadshotMarketing or with an brand / lead;
  • send unsolicited bulk email, SMS, or messages ("spam") via integrations, notifications or webhooks (including violations of the TRAI's UCC Regulations and the U.S. CAN-SPAM Act / EU PECR);
  • use the marketplace, payments or payout features for money laundering, terrorist financing, fee circumvention, or to evade provider-classification or labour law;
  • use the Service in violation of export-control, sanctions, anti-bribery, anti-money-laundering, or trade laws.

4. Marketing data and lead rights

When handling contact, lead or customer data, you must:

  • have a lawful basis and provide the notices and consents your jurisdiction requires before collecting or processing it;
  • limit access to contact, CRM and engagement data to appropriately-authorised roles via RBAC;
  • honour data-subject requests (access, correction, deletion) from your contacts, leads, customers and influencers as the controller;
  • not introduce special-category personal data outside the scope of your Order Form.

5. AI features

When using AI-assisted features (content generation, optimization assistance, content summarisation, recommendations, analytics):

  • you are responsible for the content of inputs and outputs and for reviewing AI outputs before relying on them;
  • you must keep a human in the loop for any decision affecting an individual;
  • you must discharge any deployer obligations for automated marketing-decision tools (AI-content disclosure, contact notice, transparency) under applicable law (e.g., the EU AI Act, the EU AI Act for high-risk marketing AI, state laws);
  • you must not use AI features to generate content that is illegal, harassing, deceptive, discriminatory, or in violation of the AUP;
  • you must not attempt to extract HeadshotMarketing's prompts, system instructions or internal model behaviour to reverse-engineer or build a competing service.

6. Marketplace conduct

If you participate in the HeadshotMarketing services marketplace (as a client, freelancer or agency):

  • you must comply with the Marketplace Terms (HM-LEGAL-011);
  • you must deal honestly — no fake reviews, no fee circumvention (taking engagements off-platform to avoid fees in breach of those Terms), no misrepresentation of skills, identity or availability;
  • clients must correctly classify and lawfully engage marketplace contacts and meet any tax / withholding / labour obligations;
  • you must not use the marketplace to facilitate trafficking, forced labour, or any unlawful labour practice.

7. Fair use of shared limits

Even where generous or "unlimited" usage is offered, use must be reasonable and in line with normal product workflows. HeadshotMarketing may apply fair-use throttling where consumption materially exceeds typical patterns and threatens platform stability or pricing integrity.

8. Vulnerability reporting

Good-faith security research is welcomed. Report vulnerabilities to security@burdenoff.com (PGP key on request) with:

  • a description of the issue;
  • reproduction steps;
  • the impact;
  • any logs, screenshots, or proof-of-concept.

Do not access data beyond what is needed to demonstrate the issue, do not test denial-of-service against production, and give HeadshotMarketing a reasonable time to remediate before public disclosure.

9. Enforcement

HeadshotMarketing may, without limiting its other rights:

  • investigate suspected violations and require Customer cooperation;
  • remove content that violates the AUP (including fraudulent campaigns or fake profiles);
  • suspend or limit access (in whole or in part);
  • terminate accounts for repeated or serious violations;
  • report violations to law-enforcement authorities or other competent authorities where required;
  • comply with court orders and regulator instructions (including under the IT Act, DPDP Act, CrPC, or equivalent).

Where feasible and lawful, HeadshotMarketing will provide notice before suspension or termination, and will, where practicable, preserve access to export contact and consent records during a wind-down.

10. Updates

HeadshotMarketing may update this AUP from time to time. Material changes will be notified at least 30 days in advance; continued use after the effective date constitutes acceptance. For consumer Customers, statutory consumer protections under the Consumer Protection Act, 2019 are preserved.

Reference and incorporation

All Burdenoff Group contracts, addenda, exhibits, policies and registers referenced in this document are identified by their Document ID (HM-LEGAL-### or HM-PRICING-###) and are published at https://burdenoff.com/contracts. Each such referenced document is incorporated into this document by reference. The version of a referenced document that applies is the version published at https://burdenoff.com/contracts as at the Effective Date of the applicable Order Form (or, where no Order Form exists, the version current at the date of acceptance), unless an executed Order Form specifies a frozen version.

Back to HeadshotMarketing Contracts