Acceptable Use Policy

This policy sets out what you may and may not do with this website, our client portal, and any system we host or operate for you. It applies to everyone who uses those systems, including your staff and contractors, and forms part of our Terms of Service.

1. What This Covers

• This public website.
• The client portal, including consultation, invoicing, and payment areas.
• Any application, environment, or infrastructure we host or administer on your behalf.

If you have an account, you are responsible for activity carried out under it and for keeping your credentials secure. Tell us immediately at hello@etradersgroup.online if you believe an account has been compromised.

2. What You Must Not Do

Security and Integrity

• Attempt to gain unauthorised access to any account, system, network, or data — whether ours or another user's.
• Probe, scan, or test the vulnerability of our systems without our prior written permission. See section 4 for how to report a vulnerability properly.
• Circumvent authentication, rate limits, access controls, or usage quotas.
• Introduce malware, ransomware, or any other harmful code.
• Interfere with service availability, including denial-of-service activity, or place a deliberately unreasonable load on our infrastructure.
• Scrape, harvest, or systematically extract data by automated means without written permission.

Content and Conduct

• Upload or transmit material that is unlawful, defamatory, harassing, discriminatory, obscene, or that promotes violence.
• Infringe anyone's intellectual property, privacy, or confidentiality rights.
• Impersonate any person or organisation, or misrepresent your affiliation with one.
• Upload personal data you have no lawful basis to share with us — this is a common and serious risk when sending sample data for a build.
• Upload special category data, payment card numbers, or health records into environments not explicitly agreed for that purpose.
• Use our systems to send unsolicited bulk messages.

Commercial Misuse

• Resell, sublicense, or provide access to a system we host for you to a third party without our written agreement.
• Use our website or materials to build a directly competing service.
• Submit a project enquiry or candidate application under false pretences in order to obtain commercial or competitive information.
• Reverse engineer any part of our systems except to the extent that restriction is prohibited by law.

AI-Specific Restrictions

Where we deliver an AI system to you or operate one on your behalf, you must not use it to:

• generate content that is unlawful, deceptive, or presented as human-authored when disclosure is legally required;
• make decisions with legal or similarly significant effects on individuals by fully automated means, without the human review the system was designed to include;
• infer sensitive characteristics about individuals — such as health, ethnicity, religion, or political opinion — from data not lawfully collected for that purpose;
• attempt to extract training data, system prompts, or credentials through prompt injection or similar techniques; or
• process personal data through a model provider in a way that breaches the terms we agreed for that engagement.

3. Reporting Misuse

If you become aware of a breach of this policy, tell us at hello@etradersgroup.online. We investigate every report and will keep your identity confidential where we can.

4. Responsible Security Disclosure

We welcome security reports and we will not pursue action against researchers acting in good faith. To qualify, please: report to hello@etradersgroup.online promptly and privately; test only against your own account or data; avoid accessing, modifying, or deleting data belonging to others; avoid degrading the service; and give us a reasonable period to remediate before disclosing publicly. We aim to acknowledge within 2 business days and provide a remediation timeline within 10.

5. What Happens If This Policy Is Breached

Depending on the severity, we may: contact you to resolve it; remove offending content; suspend an account or restrict access; suspend or terminate the engagement under the Terms of Service; and where required, report the matter to law enforcement or a regulator. Where a breach threatens the security or availability of systems belonging to us or another client, we may suspend access immediately and notify you afterwards. Otherwise we will contact you first.

6. Monitoring

We log access and administrative activity for security and audit purposes and retain those logs as set out in our Privacy Policy. We do not monitor the content of your business data except where necessary to investigate a specific reported incident, to comply with a legal obligation, or where you have asked us to.

7. Changes

We may update this policy as our services change. The version and last-reviewed date are shown at the top of this page, and we will give notice of material changes to account holders by email.