Acceptable Use Policy

Applies to: Guests, Registered Users, Companies, Staff, administrators, providers and other authorized Platform users
Summary of changes: Initial acceptable-use draft.
Contact: [SUPPORT EMAIL] · Privacy: [DPO EMAIL]

Draft for review. This Policy is not effective until approved and published. A qualified lawyer must review it for [COUNTRY/LAW], including consumer, privacy, intermediary and cybersecurity requirements.

In plain words

Use Shogram only for its intended verification and business purposes. Do not copy or misuse Codes, mislead people about Results, submit knowingly false Reports, access another person’s account, bypass security, or disrupt the service. A Report is a claim for review, not proof. If a feature is only a preview or is not enabled for your account, this Policy does not make it available.

1. Scope

This draft applies to your access to the Shogram Platform, including consumer, Company and administrative features made available to you. Other effective agreements or feature rules may also apply. If rules conflict, the final document hierarchy must be set by [LAWYER REVIEW].

2. Acceptable use

You may use the Platform only for its intended purpose, with authority, and in compliance with applicable law. You must:

1. provide accurate account, Company, Product and Report information;
2. use only Codes and Label materials you are authorized to handle;
3. protect credentials, devices, MFA factors, Codes and Code-bearing files;
4. respect other users’ privacy, intellectual property and access permissions;
5. use Company, API, print and export features only when enabled and within the permissions granted; and
6. report a suspected security incident through [SECURITY CONTACT] once that channel is published.

3. Prohibited use

You must not:

• copy, publish, sell, guess, duplicate, reuse, alter or transfer a Code, or place it on an unrelated Product Unit;
• claim that a Result certifies safety, quality, effectiveness, legal compliance or government approval;
• submit a knowingly false, malicious or competitor-driven Report or impersonate a reporter, Company or authority;
• access another account, Company tenant, private document or administrative function without authorization;
• probe, scan, exploit, reverse-engineer or disrupt the Platform except under an explicitly authorized security-testing process;
• use scripts, bots, bulk requests or scraping to evade rate limits or collect information without permission;
• interfere with verification records, security controls, audit trails, moderation or KYC review;
• upload malware, unlawful content, personal data without authority, or material that infringes another person’s rights;
• harass, threaten, discriminate against or retaliate against another user; or
• help another person do any prohibited act.

4. Reports and content

A Report is an unverified submission until reviewed. Submit only accurate, relevant information that you are allowed to provide. Do not include unrelated identity documents, private contact details or images of bystanders. The Platform may review, route, restrict or remove material under effective policy and law. No particular review outcome or response time is promised by this draft.

5. Company and Code-specific conduct

Company users must follow the effective Company Terms of Service and Code of Practice once those documents are approved and published. Do not create Codes for unauthorized Products, export standalone Codes, bypass Label or Print Job controls, or share Company information beyond authorized users. A Company remains responsible for its products, claims, permissions and contractors.

6. Ratings and Promotions

Ratings and consumer Promotions are not currently available in the audited application. This Policy does not enable them. If introduced, their separate rules will govern eligibility, content, points, prizes, funding, moderation and disputes. Users must not represent an off-platform activity as a Shogram Promotion or Rating feature.

7. Review and enforcement

Where permitted by law, Shogram may investigate suspected misuse, preserve relevant records, restrict a feature or account, or refer a matter to an appropriate authority. Any action should be proportionate to the issue, explain the reason where safe and lawful, and provide the applicable response or appeal route. Urgent steps may be needed to protect accounts, Codes, users or the service. The actual process and appeal period must be published before this Policy becomes effective.

8. Changes and contact

This Policy may be updated through an approved version and notice process. Effective versions should be listed at [LEGAL VERSIONS ROUTE — pending].

Operator: [COMPANY LEGAL NAME] · Address: [ADDRESS]
Support: [SUPPORT EMAIL] · Security: [SECURITY CONTACT] · Privacy: [DPO EMAIL]

How to complain

For an account or content decision, contact [SUPPORT EMAIL] or use [COMPLAINTS ROUTE — pending]. For a privacy issue, contact [DPO EMAIL]. For a vulnerability, use [SECURITY CONTACT] after it is verified.

Change log