Acceptable Use Policy

1. Scope

This policy applies to everyone who uses Catomni Studio — studios, their staff, and family account holders. It forms part of the Terms of Service. Where we refer to "you", we mean whoever is using the Service.

2. General prohibitions

You must not:

• Use the Service for anything unlawful, or to facilitate anything unlawful.
• Upload personal data you have no lawful basis or consent to hold — in particular information about a child without the parental consent the law requires.
• Use information about students or families for a purpose unrelated to the studio's services to that family, including selling it, renting it, or providing it to a third party for marketing.
• Harass, threaten, bully, defame or abuse anyone, or use the messaging features to do so.
• Upload material that is unlawful, obscene, or that sexualises or endangers a child. We will report such material to the appropriate authorities.
• Impersonate another person, or misrepresent your role or your authority to act for a studio or a family.
• Infringe anyone's intellectual property rights, or upload material you do not have the right to use.
• Resell, sublicense or provide the Service to a third party as your own, except as expressly permitted in writing.

3. Messaging: email and text messages

• Obtain and be able to evidence the consent required before sending text messages, including prior express written consent where the message is marketing or promotional. In the United States this includes the Telephone Consumer Protection Act and, for application-to-person messaging, carrier 10DLC registration and campaign requirements.
• Honour opt-out requests promptly and permanently. Recognise standard opt-out keywords such as STOP, and act on a request made by any reasonable means, including verbally to your staff.
• Identify yourself as the sender, so a recipient knows which studio a message is from.
• Send only within reasonable hours — as a guide, 8am to 9pm in the recipient's local time. The platform does not enforce this for you.
• Do not send unsolicited marketing, and do not use family contact details obtained through the Service to market anything other than your own studio's services.
• Do not send sensitive information by text message. Text messages are not a secure channel, and a phone number may be shared or reassigned. Do not put medical information, financial details or anything else you would not want read aloud into an SMS.
• Keep messages relevant to the recipient's relationship with your studio.

We may suspend the text messaging feature for an account that generates complaints or that appears to be sending without consent, because carrier-level consequences affect every customer on the platform, not just the sender.

4. Technical restrictions

You must not:

• Attempt to access another studio's data, another user's account, or any part of the Service you have not been granted access to.
• Circumvent or attempt to circumvent authentication, authorisation, rate limiting, bot protection or any other security control.
• Introduce malware, or upload a file intended to damage or gain unauthorised access to any system.
• Scrape, crawl or bulk-extract data other than through features provided for that purpose, or use automated means to place unreasonable load on the Service.
• Reverse engineer, decompile or attempt to derive source code, except to the extent that restriction is unenforceable by law.
• Interfere with the Service's availability or integrity for anyone else.
• Remove or obscure any proprietary notice.

5. Security research

We welcome good-faith reports of security vulnerabilities, and the Security Overview explains how to send one. Testing must not involve accessing, modifying or exfiltrating another person's data, degrading the Service for others, social engineering, physical attacks, or denial-of-service testing. Please report what you find and give us a reasonable opportunity to fix it before disclosing it publicly.

6. Enforcement

Where we can, we will contact you first and give you an opportunity to put things right. Where the circumstances do not allow for that — an active security threat, unlawful material, or conduct causing harm to others — we may suspend access immediately and tell you afterwards. We will limit any action to what the circumstances require.

Serious or repeated violations may result in termination under the Terms of Service. To report a violation, contact us at [TO BE CONFIRMED: abuse contact email].