Vibe Construction Suite Acceptable Use Policy

The purpose of this Policy is to describe acceptable and prohibited uses of the Services, to protect the security, integrity, availability, and lawful operation of the platform, and to protect Customers, their data, and the Company's intellectual property.

The Vibe Construction Suite is professional construction estimating and project software used by businesses. This Policy is intended to keep the platform safe, reliable, and fair for every company that relies on it.

This Policy is incorporated by reference into, and forms part of, the Vibe Construction Suite Terms of Service. It supplements the Privacy Policy, Subscription & Billing Policy, Refund Policy, and Cookie Policy. Capitalized terms not defined here have the meanings given to them in the Terms of Service.

A violation of this Policy is a violation of the Terms of Service. In the event of a conflict regarding permitted and prohibited use specifically, this Policy controls; in all other respects, the Terms of Service control.

Subject to a valid subscription or active free trial, and to continued compliance with this Policy and the Terms of Service, Customers are granted a limited, non-exclusive, non-transferable, revocable right to access and use the Services for their internal business purposes.

Authorized use means, among other things, that:

• access is limited to the number of licensed seats assigned to the company account;
• each licensed seat is used by one identified individual user and is not shared;
• the Services are used for lawful business purposes consistent with their intended function;
• the Services are accessed only through interfaces and APIs the Company makes available for that purpose; and
• all applicable laws, regulations, and third-party rights are respected.

Any use outside the scope of this authorization is unauthorized and is a violation of this Policy.

Customers are responsible for the security of their accounts and must:

• maintain secure passwords that are strong, unique to the Services, and not reused from other systems;
• protect account credentials, authentication tokens, invitation links, and any multi-factor authentication devices or codes from disclosure;
• promptly report suspected unauthorized access, credential compromise, or other security incidents to the Company; and
• maintain reasonable security for the devices, browsers, and networks used to access the Services, including current operating system and browser updates, device access controls, and appropriate protection against malicious software.

Customers are responsible for all activity occurring under their accounts and assigned seats, whether or not authorized by them.

Suspected unauthorized access should be reported without undue delay to admin@vibeconstructionsuite.com so that sessions can be reviewed and access secured.

In addition to account security obligations, each Customer is responsible for:

• ensuring that every user of its company account complies with this Policy and the Terms of Service;
• managing seat assignments, administrative roles, and permissions appropriately, and promptly removing access for individuals who leave the organization or change roles;
• the accuracy, legality, and appropriateness of all data, files, drawings, documents, images, and other content uploaded to or generated within the Services;
• obtaining any rights, permissions, or consents necessary for the content it uploads and the information it processes;
• maintaining its own backups or exports of any information it needs to retain outside the Services; and
• the acts and omissions of its personnel, contractors, and agents when using the Services.

The following activities are strictly prohibited. This list is illustrative and not exhaustive.

Software, licensing, and access integrity. You may not:

• reverse engineer the Services or any part of them;
• decompile the Services or any part of them;
• disassemble the Services or any part of them;
• attempt to obtain, derive, or reconstruct the source code, object code, algorithms, data models, or underlying structure of the Services;
• copy, replicate, or imitate the software's functionality, workflows, interfaces, or feature design for the purpose of building or improving a competing product or service;
• use APIs, endpoints, or integrations without authorization, outside documented purposes, or in excess of published or communicated rate limits;
• engage in automated scraping, crawling, harvesting, bulk extraction, or systematic downloading of data or content from the Services;
• share credentials with any other person;
• share accounts or seats with individuals beyond the licensed users to whom seats are assigned, including through shared logins, rotating users, or concurrent use of a single seat;
• circumvent, disable, or tamper with licensing restrictions, seat limits, entitlement checks, trial limitations, or feature gating; and
• bypass, disable, or interfere with authentication, authorization, encryption, logging, rate limiting, or any other security control.

Security, integrity, and availability. You may not:

• upload, transmit, host, or distribute malware;
• upload, transmit, host, or distribute ransomware;
• upload, transmit, host, or distribute viruses, worms, trojans, spyware, keyloggers, or any other harmful or malicious code;
• use the platform to distribute malicious content, phishing material, spam, or deceptive links to any person;
• interfere with or degrade system performance, stability, storage, bandwidth, or the availability of the Services for others;
• attempt unauthorized access to the Services, to any account, environment, server, database, network, or system, or to any non-public area or functionality;
• access, attempt to access, view, copy, or interfere with the data of any other customer, company, or user;
• interfere with other users' lawful use and enjoyment of the Services;
• conduct network attacks, including port scanning, intrusion attempts, packet interception, session hijacking, or man-in-the-middle attacks;
• conduct denial-of-service or distributed denial-of-service attacks, or generate load intended or reasonably likely to disrupt the Services; and
• perform penetration testing, vulnerability scanning, load testing, or other security testing of the Services without the Company's prior express written authorization.

Lawful and honest use. You may not:

• use the Services for any illegal purpose or in violation of any applicable law, regulation, sanction, or export control;
• engage in fraudulent activity, including payment fraud, false or deceptive statements, forged documents, or misuse of another party's financial information;
• impersonate any person or entity, or misrepresent your identity, affiliation, authority, or right to act on behalf of a company;
• harass, threaten, defame, or abuse any person, or upload content that is unlawful, infringing, or that violates the rights of others; and
• use the Services in any manner that violates the privacy, confidentiality, contractual, or intellectual property rights of any third party.

Customers may not:

• copy the software or any portion of the Services;
• republish the software, its interfaces, screens, or documentation;
• sell the software or access to it;
• resell the software, seats, or access, in whole or in part;
• license, sublicense, rent, lease, lend, distribute, or provide the software to any third party, including through service bureau, time-sharing, or outsourcing arrangements;
• create derivative works based on the software, its interfaces, or its documentation;
• duplicate, replicate, or reproduce the Company's proprietary workflows, calculation methods, takeoff processes, data structures, or user experience patterns;
• remove, obscure, or alter copyright notices;
• remove, obscure, or alter trademarks, service marks, logos, branding, or other proprietary notices; or
• misrepresent ownership of the software or hold the Services out as their own product or as the product of any third party.

Customers retain ownership of their own project data. Vibe Supply Products LLC retains ownership of all software, source code, branding, intellectual property, designs, workflows, and related technology.

Nothing in this Policy or in a subscription transfers any ownership interest in the Services to a Customer. The Company grants only the limited right of use described in Section 3 and in the Terms of Service, and all rights not expressly granted are reserved.

Customers must maintain secure passwords, protect account credentials, promptly report suspected unauthorized access, and maintain reasonable security for the devices used to access the Services.

In furtherance of these requirements, Customers must not:

• store credentials in shared documents, shared inboxes, unsecured files, or public repositories;
• transmit credentials, tokens, or invitation links to unauthorized persons;
• disable, evade, or misconfigure security features intentionally; or
• access the Services from devices they know or reasonably should know to be compromised.

The Company may require credential resets, session termination, or additional verification where it reasonably believes an account, seat, or device has been compromised. Customers must cooperate reasonably with such measures.

The Services may connect with, or permit Customers to connect with, third-party providers and applications, including authentication, mapping, payment, email, storage, and analytics providers.

When using third-party integrations, Customers must:

• comply with the terms, policies, and usage limits of the applicable third-party provider;
• connect only integrations they are authorized to connect on behalf of their organization;
• safeguard any API keys, tokens, or credentials used to establish a connection; and
• refrain from using an integration to extract, mirror, or replicate the Services' data or functionality in a manner otherwise prohibited by this Policy.

The Company does not control third-party providers and is not responsible for their availability, security, acts, or omissions. The Company may suspend or disable an integration that presents a security, stability, legal, or abuse risk.

The Company may investigate suspected violations and may suspend or terminate access for violations of this Policy or the Terms of Service, or for fraud, abuse, security risks, or illegal activity.

In connection with an investigation, the Company may review account activity, authentication and session records, audit and activity logs, licensing and seat usage, integration activity, and other operational records to the extent reasonably necessary. The Company may also require information or cooperation from the Customer.

Where appropriate, the Company may cooperate with law enforcement or other governmental authorities as required by applicable law, and may preserve or disclose information where it reasonably believes disclosure is necessary to comply with legal process, enforce its agreements, or protect the rights, property, or safety of the Company, its customers, or the public.

The Company's decision not to enforce a provision of this Policy in any instance does not waive its right to enforce that provision or any other provision later.

The Company may suspend access to the Services, in whole or in part, for a company account, a specific user, a specific seat, or a specific integration, where it reasonably believes suspension is necessary to address a violation of this Policy, protect the security or integrity of the platform, prevent harm to other customers, stop unlawful or fraudulent activity, or comply with legal obligations.

Where practicable and lawful, the Company will notify the affected account owner or administrator and describe the steps required to restore access. Where a threat is active, severe, or ongoing, suspension may be immediate and notice may follow.

Suspension for a violation does not suspend, pause, extend, or reduce subscription fees, and does not create a right to a refund. Refund treatment is governed by the Refund Policy and the Subscription & Billing Policy.

The Company may terminate a company account, a user account, or access to any application for a serious violation of this Policy, for a repeated or uncured violation following notice, for fraud or abuse, for activity that creates material security or legal risk, or for illegal activity.

Upon termination, licensed access ends, assigned seats are released, active sessions are invalidated, and integrations are disconnected. Customer project data is handled in accordance with the retention and deletion provisions of the Subscription & Billing Policy and the Privacy Policy, except where the Company is required or permitted to retain information for legal, security, or investigative purposes.

Termination for violation does not entitle the Customer to a refund of amounts already paid, and does not limit any other remedy available to the Company at law or in equity.

If you become aware of a violation of this Policy, a security vulnerability, suspected unauthorized access, misuse of an account or seat, infringement of intellectual property, or any other abuse of the Services, please report it to admin@vibeconstructionsuite.com.

To help us respond effectively, please include where possible:

• a description of the issue or suspected violation;
• the date and time it was observed;
• the company account, user, application, or URL involved; and
• any supporting detail, such as messages, screenshots, or steps to reproduce.

Reports are reviewed in good faith. Please do not attempt to prove a suspected vulnerability by exploiting it — security testing requires the Company's prior express written authorization, as stated in Section 6.

The Company may revise this Policy from time to time to reflect changes in the Services, in security practices, or in applicable law. When material changes are made, the Company will publish the revised Policy with an updated version number and Last Updated date and, where appropriate, provide additional notice through the Services or by email.

Each published version of this Policy is retained as a distinct, versioned document. Continued use of the Services after a revision takes effect constitutes acceptance of the revised Policy.

Questions, notices, abuse reports, and authorization requests relating to this Acceptable Use Policy should be directed to:

• Vibe Supply Products LLC
• Vibe Construction Suite
• Email: admin@vibeconstructionsuite.com