Acceptable Use Policy

1. Scope

This Acceptable Use Policy (“AUP”) sets out what customers and authorised users may and may not do when using the Standard Tonnage service (the “Service”). It is incorporated into the Terms of Service by reference. Breach of this AUP is a material breach of the Terms of Service.

2. Your responsibilities

You are responsible for:

• All activity on your account, including the actions of your authorised users.
• Keeping credentials confidential. Credentials must not be shared between individuals. Each person who uses the Service must have their own account.
• Enabling multi-factor authentication on your account where offered.
• Ensuring that data you upload or forward to the Service is lawful to share with us and is accurate.
• Ensuring that any recipients of SMS, WhatsApp, or email alerts have consented to receive them (see section 4).

3. Prohibited use

You must not, and must not permit any third party to:

• Use the Service in breach of any applicable law, including UK GDPR, PECR, the Computer Misuse Act 1990, sanctions regimes, or the terms of any upstream carrier API.
• Reverse engineer, decompile, disassemble, or otherwise attempt to derive the source code of the Service, except to the extent permitted by law.
• Copy, modify, create derivative works of, distribute, sell, sublicense, or otherwise commercially exploit any part of the Service beyond your permitted use.
• Scrape, harvest, or extract data from the Service by automated means for purposes other than your own operational use, or resell carrier tracking data.
• Circumvent or attempt to circumvent any authentication, rate limiting, or other technical control.
• Upload content that contains malware, viruses, worms, time bombs, or other malicious code.
• Use the Service to send unsolicited messages (“spam”), phishing messages, or messages intended to deceive recipients about the sender’s identity.
• Misrepresent your identity, affiliation, or authority to act on behalf of another party.
• Upload special-category data (UK GDPR Art. 9), criminal-offence data, children’s data, or data of data subjects who are not our intended categories (authorised users and business contacts on shipping documents).
• Use the Service to process data of EU/EEA data subjects in a manner that the Service is not designed to support without first notifying us and agreeing additional terms.
• Probe, scan, or test the vulnerability of the Service outside our Vulnerability Disclosure Policy.
• Interfere with or disrupt the integrity or performance of the Service or other customers’ use of it.
• Use the Service to build or train a competing product, model, or dataset.

4. SMS, WhatsApp, and email messaging rules

The Service sends alerts via SMS, WhatsApp, and email on your behalf. Because these channels are governed by the Privacy and Electronic Communications Regulations 2003 (PECR), WhatsApp Business Policy, and our upstream providers’ terms, you must:

• Only enter a phone number or email address as an alert recipient where the recipient has a pre-existing business relationship with you in connection with the relevant shipment, and has a reasonable expectation of receiving such alerts.
• Promptly remove recipients who ask to be removed.
• Not use alerts for marketing content. Alerts are operational only (container status, free-time warnings, escalation notifications).
• Not use the Service to contact consumers. The Service is business-to-business only.
• Not exceed reasonable volumes. We operate rate limits and may suspend channels that show signs of abuse.

We reserve the right to suspend or block individual recipients or senders where we reasonably believe these rules have been breached.

5. Credentials and carrier API keys

Where you provide credentials for third-party systems (for example, carrier tracking API keys) to enable data retrieval, you confirm that you are authorised to do so and that their use by the Service does not breach your agreement with that third party. We store such credentials encrypted and use them solely to retrieve data for your account.

6. AI features

The Service uses AI models to extract data from booking emails and to generate alert text. You must not use AI outputs as a substitute for your own operational judgement, must not rely on the Service as the sole source of truth for regulatory, customs, or legal decisions, and must not feed prompt input that you do not have the right to process. Where an AI output is materially wrong, please report it to info@standardtonnage.co.uk so that we can investigate.

7. Enforcement

We investigate suspected breaches of this AUP. Depending on severity, we may:

• Warn you and ask you to remedy the issue.
• Rate limit or temporarily block specific functionality (for example, SMS alerts).
• Suspend the account.
• Terminate the subscription for material or repeated breach, in accordance with the Terms of Service.
• Cooperate with law enforcement or regulators if required by law.

Where suspension or termination is imposed, we will endeavour to provide reasons and, where feasible, an opportunity to cure. Summary action may be taken where needed to protect the Service, our customers, or third parties.

8. Reporting abuse

If you believe another user is breaching this AUP or abusing the Service, please contact abuse@standardtonnage.com. For security vulnerabilities, please use our Vulnerability Disclosure Policy.

9. Changes

We may update this AUP from time to time. Material changes will be notified in accordance with the Terms of Service.