Acceptable Use Policy

1.1 Purpose

The purpose of this Policy is to promote the lawful, secure, reliable, and responsible use of the Services while protecting BN Reports, its Customers, Authorized Users, and third parties from misuse, abuse, fraud, and security risks.

1.2 Objectives

This Policy is intended to:

• protect the integrity, availability, and security of the Services;
• establish acceptable standards of conduct for all users;
• prevent unlawful, fraudulent, or abusive activities;
• safeguard Customer Data and Personal Information;
• ensure fair access to platform resources;
• protect BN Reports' intellectual property; and
• maintain compliance with applicable laws and industry best practices.

1.3 Incorporation

This Policy is incorporated into and forms part of the MSA. Violation of this Policy may result in suspension or termination of access to the Services, in addition to any other remedies available under the MSA or Applicable Law.

2.1 Covered Users

This Policy applies to:

• individual subscribers;
• business subscribers;
• enterprise customers;
• franchise organizations;
• team administrators;
• Authorized Users;
• contractors;
• employees of Customers;
• consultants acting on behalf of Customers;
• API users;
• white-label customers;
• beta testers; and
• trial users.

2.2 Covered Services

This Policy applies to all BN Reports products and services, including:

• web applications;
• mobile applications;
• AI features;
• APIs;
• cloud storage;
• report-writing tools;
• scheduling tools;
• automation tools;
• customer communication tools;
• document generation;
• analytics features;
• integrations with third-party services; and
• any future services made available by BN Reports.

2.3 Customer Responsibility

Customers are responsible for ensuring that all Authorized Users accessing the Services under their subscription comply with this Policy. A Customer may be held responsible for violations committed by its Authorized Users where permitted by Applicable Law.

2.4 Geographic Scope

This Policy applies regardless of the jurisdiction from which the Services are accessed and regardless of the Customer's location.

3.1 Lawful Business Use

The Services are intended for lawful business and professional purposes. Users may use the Services only in a manner consistent with this Policy, the MSA, and Applicable Law.

3.2 Authorized Activities

Subject to the Customer's subscription plan, permitted uses include:

• creating and managing inspection reports;
• documenting residential and commercial properties;
• storing inspection photographs, videos, and related documentation;
• generating PDF, HTML, or digital inspection reports;
• communicating with clients;
• scheduling inspections;
• managing inspection workflows;
• maintaining business records;
• using AI-assisted drafting tools;
• using automation features to improve business efficiency;
• collaborating with Authorized Users within an organization; and
• integrating approved third-party services through supported APIs or integrations.

3.3 Professional Responsibility

BN Reports is a software platform only. Customers remain solely responsible for:

• conducting inspections;
• exercising professional judgment;
• verifying all information contained in reports;
• complying with licensing or certification requirements;
• complying with applicable standards of practice; and
• ensuring that all reports accurately reflect the inspector's findings.

3.4 Compliance with Laws

Users shall comply with all applicable federal, provincial, state, territorial, and local laws and regulations while using the Services.

4.1 Illegal Activities

Users shall not use the Services to:

• violate Applicable Law;
• facilitate criminal activity;
• engage in fraud or deception;
• evade legal obligations;
• launder money;
• facilitate identity theft;
• commit financial crimes; or
• knowingly assist others in unlawful conduct.

4.2 Intellectual Property Violations

Users shall not:

• upload content they do not have the legal right to use;
• infringe copyrights, trademarks, patents, or trade secrets;
• distribute pirated software or materials;
• misappropriate proprietary information; or
• violate the intellectual property rights of BN Reports or any third party.

4.3 Malware and Harmful Code

Users shall not upload, distribute, or transmit:

• viruses;
• worms;
• ransomware;
• spyware;
• Trojan horses;
• malicious scripts;
• destructive code;
• keyloggers;
• unauthorized executables; or
• any software intended to damage, disrupt, monitor, or gain unauthorized access to

systems or data.

4.4 Unauthorized Access

Users shall not:

• bypass authentication mechanisms;
• access accounts belonging to others without authorization;
• attempt to gain unauthorized access to BN Reports systems;
• interfere with platform security;
• exploit software vulnerabilities;
• conduct penetration testing without prior written authorization; or
• interfere with the operation or availability of the Services.

4.5 Account Abuse

Users shall not:

• create fraudulent accounts;
• impersonate another person or organization;
• share login credentials except as expressly permitted by their subscription;
• sell, lease, or transfer accounts;
• permit unauthorized individuals to use licensed accounts; or
• exceed the number of licensed Authorized Users included in their subscription.

4.6 Spam and Unsolicited Communications

Users shall not use the Services to:

• send unsolicited commercial email;
• distribute phishing messages;
• send chain letters;
• conduct mass unsolicited messaging campaigns;
• distribute deceptive advertisements; or
• engage in any activity commonly associated with spam.

4.7 Harassment and Offensive Content

Users shall not upload, publish, or distribute content that is:

• defamatory;
• threatening;
• abusive;
• harassing;
• discriminatory;
• hateful;
• obscene;
• unlawful;
• sexually explicit where prohibited by law; or
• intended to intimidate or harm another person.

4.8 Fraudulent or Misleading Content

Users shall not knowingly create, upload, or distribute false, misleading, or fraudulent information through the Services, including falsified inspection reports, forged documents, or manipulated evidence intended to deceive clients or third parties.

4.9 Reverse Engineering and Competitive Use

Except where expressly permitted by Applicable Law, Users shall not:

• reverse engineer, decompile, or disassemble the Services;
• copy or replicate platform features;
• scrape or harvest platform data;
• create derivative works based on BN Reports' proprietary software;
• use the Services to develop or improve competing products; or
• use automated tools to extract source code, proprietary logic, or confidential business

information.

4.10 Excessive or Abusive Use

Users shall not intentionally consume excessive system resources by:

• generating excessive API requests;
• submitting abusive AI requests;
• storing unreasonable volumes of data beyond subscription limits;
• creating automated processes that materially impair Service performance; or
• engaging in any activity that negatively affects other Customers' access to the Services.

4.11 Circumvention

Users shall not attempt to circumvent:

• subscription restrictions;
• feature limitations;
• security controls;
• payment requirements;
• licensing mechanisms; or
• usage limitations imposed by BN Reports.

4.12 Responsibility for User Conduct

Customers are responsible for the conduct of all Authorized Users operating under their account and must take reasonable steps to ensure compliance with this Policy. BN Reports reserves the right to investigate suspected violations and to take appropriate action, including suspension or termination of access to the Services, in accordance with the MSA and Applicable Law.

5.1 AI Assistance Only

BN Reports' Artificial Intelligence ("AI") features are provided solely to assist Customers with drafting, organizing, summarizing, automating, and improving workflows. AI-generated content is intended to support—not replace—the professional judgment of qualified inspectors.

5.2 Professional Responsibility

Customers remain solely responsible for reviewing, verifying, editing, approving, and accepting all AI-generated content before it is shared with clients or incorporated into an Inspection Report. Customers shall not rely exclusively on AI-generated output when making professional decisions.

5.3 Prohibited AI Uses

Users shall not use AI features to:

• knowingly generate false or misleading inspection findings;
• fabricate inspection results;
• impersonate another person;
• create fraudulent reports;
• generate unlawful, defamatory, or abusive content;
• violate intellectual property rights;
• automate illegal activities;
• create malicious software or code;
• bypass security measures;
• submit prompts intended to exploit or compromise AI systems; or
• use AI in any manner that violates Applicable Law or this Policy.

5.4 AI Prompts

Customers are responsible for the content submitted to AI features. Users should avoid submitting confidential third-party information unless authorized to do so and should ensure prompts comply with applicable privacy and confidentiality obligations.

5.5 AI Availability

AI functionality may change, improve, be modified, or be discontinued at any time without notice. BN Reports does not guarantee uninterrupted availability or the accuracy of AI-generated content.

5.6 Monitoring of AI Abuse

BN Reports may monitor AI usage patterns to detect abuse, fraud, excessive consumption of resources, or violations of this Policy. Monitoring is conducted in accordance with the Privacy Policy and Applicable Law.

6.1 Authorized Access

Customers may access BN Reports APIs only if such access is included in their subscription or expressly authorized by BN Reports.

6.2 API Credentials

API keys, tokens, secrets, and authentication credentials are confidential. Customers are responsible for protecting API credentials against unauthorized disclosure or misuse.

6.3 Prohibited API Activities

Users shall not:

• share API credentials with unauthorized persons;
• circumvent API rate limits;
• attempt unauthorized API access;
• scrape or harvest Customer Data through the API;
• interfere with API availability;
• use automated requests to overload the Services; or
• reverse engineer API functionality.

6.4 Rate Limits

BN Reports may impose API rate limits, request limits, bandwidth restrictions, concurrency limits, or other usage controls to maintain Service stability. Customers shall not attempt to bypass such limitations.

6.5 Suspension of API Access

BN Reports may suspend or revoke API access where necessary to protect the security, integrity, or availability of the Services or to enforce this Policy.

7.1 Customer Responsibilities

Customers shall use commercially reasonable efforts to protect their Accounts and Customer Data. This includes:

• maintaining secure passwords;
• enabling multi-factor authentication where available;
• protecting login credentials;
• restricting unauthorized access;
• promptly updating software; and
• following reasonable cybersecurity practices.

7.2 Unauthorized Access

Customers shall immediately notify BN Reports upon becoming aware of:

• compromised accounts;
• unauthorized access;
• suspected credential theft;
• malware affecting their systems;
• suspected security incidents; or
• unauthorized use of the Services.

7.3 Customer Devices

Customers are responsible for securing devices used to access the Services, including computers, tablets, smartphones, and other connected devices.

7.4 Vulnerability Reporting

Customers discovering potential vulnerabilities within the Services shall promptly report such vulnerabilities to BN Reports and shall not publicly disclose or exploit them without prior written authorization.

8.1 Accurate Information

Customers shall maintain accurate, complete, and current Account information, including contact information, billing information, and administrative contacts.

8.2 Authorized Users

Customers shall ensure that only Authorized Users access the Services. Each Authorized User should use their own credentials unless otherwise expressly permitted under the applicable subscription.

8.3 Password Security

Customers shall:

• create strong passwords;
• avoid password reuse;
• keep passwords confidential;
• promptly change compromised passwords; and
• prevent unauthorized access.

8.4 Account Ownership

Customer Accounts remain under the control of the subscribing Customer. Administrators are responsible for managing Authorized Users, permissions, and access rights.

8.5 Cooperation

Customers shall cooperate with BN Reports during investigations involving security incidents, fraud, abuse, or violations of this Policy.

9.1 Shared Infrastructure

BN Reports operates shared cloud infrastructure. Customers shall use the Services in a manner that does not materially interfere with other Customers' access to the Services.

9.2 Excessive Consumption

BN Reports may investigate unusually high usage involving:

• AI requests;
• storage consumption;
• API requests;
• automation workflows;
• bandwidth utilization;
• report generation;
• uploads; or
• other resource-intensive activities.

9.3 Temporary Restrictions

Where necessary to maintain platform stability, BN Reports may temporarily limit or suspend specific activities that materially affect system performance.

9.4 Subscription Limits

Customers shall not intentionally exceed subscription limits relating to:

• users;
• reports;
• storage;
• AI usage;
• API usage;
• automation limits; or
• other plan-specific restrictions.

9.5 Enterprise Plans

Enterprise Customers may receive customized usage allocations under separate written agreements.

10.1 Right to Monitor

To protect the security, integrity, and availability of the Services, BN Reports may monitor system activity, usage patterns, authentication events, API activity, AI usage, and other operational information in accordance with the Privacy Policy and Applicable Law.

10.2 Investigation

BN Reports reserves the right to investigate suspected violations of:

• this Policy;
• the Master Subscription Agreement;
• Applicable Law;
• security requirements; or
• platform integrity.

Investigations may include reviewing relevant logs, account activity, authentication records, and other information reasonably necessary to assess compliance.

10.3 Corrective Measures

Where BN Reports reasonably determines that a violation has occurred or is likely to occur, it may take one or more of the following actions:

• issue a warning;
• request corrective action;
• temporarily restrict specific features;
• suspend Accounts or Authorized Users;
• revoke API access;
• remove prohibited content where legally permitted;
• terminate subscriptions in accordance with the MSA; or
• pursue any other remedies available under contract or Applicable Law.

10.4 Emergency Action

BN Reports may immediately suspend or restrict access to all or part of the Services without prior notice where reasonably necessary to:

• protect Customers;
• prevent fraud;
• respond to a cybersecurity incident;
• preserve system integrity;
• comply with legal obligations; or
• mitigate an imminent threat to the Services or third parties.

10.5 No Waiver

A failure by BN Reports to enforce any provision of this Policy in one instance does not constitute a waiver of its right to enforce that provision or any other provision in the future.

11.1 Duty to Report

Customers and Authorized Users are encouraged to promptly report any suspected violation of this Policy, the Master Subscription Agreement, or any activity that may compromise the security, integrity, availability, or lawful operation of the Services.

11.2 Reportable Activities

Examples of reportable activities include, but are not limited to:

• unauthorized account access;
• suspected credential theft;
• fraudulent Accounts;
• phishing attempts;
• malware or malicious code;
• abuse of AI features;
• abusive API activity;
• copyright or intellectual property infringement;
• unauthorized disclosure of confidential information;
• spam or phishing campaigns;
• exploitation of software vulnerabilities; and
• any activity reasonably believed to violate Applicable Law.

11.3 Reporting Procedure

Reports may be submitted through BN Reports' official support channels. Reports should include, where reasonably available:

• the reporting person's contact information;
• the date and time of the incident;
• the Account involved;
• a description of the suspected violation;
• supporting documentation, screenshots, or logs; and
• any other information reasonably necessary to investigate the matter.

11.4 Good Faith Reporting

Individuals making reports in good faith shall not be subject to retaliation by BN Reports for submitting legitimate security or compliance concerns. Knowingly submitting false, malicious, or misleading reports may itself constitute a violation of this Policy.

11.5 Confidentiality

BN Reports will use commercially reasonable efforts to treat reports confidentially, subject to legal obligations, regulatory requirements, and the need to investigate or respond to the reported issue.

12.1 Right to Investigate

BN Reports reserves the right to investigate any suspected violation of:

• this Policy;
• the Master Subscription Agreement;
• Applicable Law;
• security requirements; or
• platform integrity.

12.2 Investigation Methods

Investigations may include reviewing:

• authentication records;
• system logs;
• API activity;
• AI usage logs;
• audit logs;
• uploaded content;
• account activity;
• communications with Customer Support; and
• other information reasonably necessary to determine compliance.

BN Reports will conduct investigations in accordance with its Privacy Policy and Applicable Law.

12.3 Customer Cooperation

Customers agree to cooperate in good faith with reasonable requests relating to investigations, including providing information necessary to verify compliance with this Policy. Failure to cooperate may result in temporary suspension of access where reasonably necessary to protect the Services or other Customers.

12.4 Preservation of Evidence

BN Reports may preserve relevant records, logs, backups, or account information where reasonably necessary to:

• investigate violations;
• protect Customers;
• preserve evidence;
• comply with legal obligations; or
• respond to lawful requests from governmental authorities.

12.5 Corrective Measures

Where appropriate, BN Reports may request that a Customer:

• remove prohibited content;
• correct security deficiencies;
• update software;
• change passwords;
• modify API usage;
• disable abusive automations; or
• otherwise remedy violations within a reasonable period.

13.1 Suspension

BN Reports may suspend access to all or part of the Services where it reasonably believes a Customer or Authorized User has:

• violated this Policy;
• violated the Master Subscription Agreement;
• engaged in fraudulent activity;
• created an unacceptable security risk;
• failed to pay applicable fees;
• compromised platform stability; or
• violated Applicable Law.

13.2 Immediate Suspension

BN Reports may immediately suspend Accounts without prior notice where reasonably necessary to:

• prevent fraud;
• stop unauthorized access;
• respond to cybersecurity threats;
• comply with legal obligations;
• protect Customer Data;
• protect third parties; or
• preserve the integrity or availability of the Services.

13.3 Effect of Suspension

During suspension, BN Reports may:

• restrict login access;
• disable specific features;
• revoke API credentials;
• suspend AI functionality;
• limit administrative privileges; or
• temporarily prevent access to Customer Data where necessary to address the underlying

issue.

13.4 Termination

Repeated, serious, or intentional violations of this Policy may result in termination of the Customer's subscription in accordance with the Master Subscription Agreement. Termination under this Policy does not limit any other contractual, legal, or equitable remedies available to BN Reports.

13.5 Survival

Any provisions intended by their nature to survive suspension or termination, including confidentiality, intellectual property, limitation of liability, dispute resolution, and indemnification provisions, shall survive as provided in the Master Subscription Agreement.

14.1 Request for Review

A Customer whose Account has been suspended or terminated may submit a written request asking BN Reports to review the decision.

14.2 Information Required

Appeals should include:

• the Customer's name;
• Account information;
• a description of the action being appealed;
• supporting documentation; and
• any information explaining why the Customer believes the decision should be

reconsidered.

14.3 Review Process

BN Reports will review appeals in good faith using information reasonably available at the time of review. BN Reports may request additional information where necessary.

14.4 Final Decision

Following completion of the review, BN Reports may:

• reinstate access;
• continue the suspension;
• impose additional conditions;
• uphold termination; or
• take any other action reasonably necessary to protect the Services.

BN Reports' decision following review shall be final, subject to any rights provided under Applicable Law.

14.5 No Obligation to Reinstate

Nothing in this Policy obligates BN Reports to restore access where BN Reports reasonably determines that doing so would create an unacceptable legal, operational, or security risk.

15.1 Legal Compliance

BN Reports may cooperate with law enforcement agencies, courts, regulators, or governmental authorities where required or permitted by Applicable Law.

15.2 Disclosure

Where legally required or permitted, BN Reports may disclose information reasonably necessary to:

• comply with court orders;
• respond to subpoenas;
• comply with search warrants;
• satisfy regulatory obligations;
• investigate fraud;
• protect public safety;
• protect Customers; or
• enforce its legal rights.

15.3 Customer Notification

Where legally permitted and reasonably practicable, BN Reports may notify affected Customers before disclosing Customer information in response to legal process. BN Reports may delay or withhold notification where prohibited by law or where notification could compromise an investigation or public safety.

15.4 No Duty to Monitor

Nothing in this Policy requires BN Reports to actively monitor Customer activity or communications beyond what is reasonably necessary to operate, secure, and maintain the Services or comply with Applicable Law.

15.5 Reservation of Rights

BN Reports reserves all rights available under the Master Subscription Agreement and Applicable Law to cooperate with lawful investigations while protecting the privacy, confidentiality, and security of Customer information to the fullest extent permitted by law.

16.1 Right to Amend

BN Reports reserves the right to modify, revise, update, replace, or discontinue this Acceptable Use Policy at any time to reflect:

• changes in Applicable Law;
• regulatory requirements;
• technological advancements;
• cybersecurity threats;
• industry best practices;
• changes to the Services;
• operational requirements; or
• other legitimate business needs.

16.2 Notice of Material Changes

Where a material change is made to this Policy, BN Reports may provide notice through one or more of the following methods:

• email notification;
• account dashboard notices;
• in-application notifications;
• website announcements;
• customer support communications; or
• any other commercially reasonable method.

Failure to receive or review such notice does not invalidate the effectiveness of an updated Policy where notice has been provided in a commercially reasonable manner.

16.3 Effective Date of Amendments

Unless otherwise specified, amendments become effective upon the date stated in the updated version of the Policy. For existing Customers, continued access to or use of the Services after the effective date constitutes acceptance of the revised Policy, to the extent permitted by Applicable Law.

16.4 Customer Responsibilities

Customers are responsible for periodically reviewing this Policy to remain informed of their obligations and any changes affecting the use of the Services.

16.5 Conflicts

In the event of a conflict between this Policy and the Master Subscription Agreement, the Master Subscription Agreement shall govern unless Applicable Law requires otherwise.

17.1 Questions

Questions regarding this Policy or the acceptable use of the Services may be directed to BN Reports through the official support channels listed on the BN Reports website.

17.2 Security Reports

Reports relating to:

• suspected security vulnerabilities;
• compromised Accounts;
• unauthorized access;
• abuse of AI features;
• API misuse;
• phishing attempts;
• fraud;
• or violations of this Policy,

should be submitted promptly using BN Reports' designated support or security contact methods.

17.3 Legal Notices

Legal notices concerning this Policy should be delivered in accordance with the notice provisions contained in the Master Subscription Agreement unless BN Reports specifies an alternative legal contact.

17.4 Response Times

BN Reports will use commercially reasonable efforts to respond to inquiries and reports in a timely manner; however, response times may vary depending on the complexity, severity, and nature of the matter. Submission of an inquiry or report does not guarantee any particular outcome, investigation result, or response timeframe.

18.1 Entire Policy

This Acceptable Use Policy constitutes the complete policy governing acceptable use of the Services and supersedes any prior acceptable use policies relating to the Services.

18.2 Relationship to Other Agreements

This Policy forms part of and is incorporated into the BN Reports Master Subscription Agreement, Privacy Policy, Terms of Use, and other applicable agreements governing the Services. Customers agree to comply with all such agreements when accessing or using the Services.

18.3 No Waiver

Failure by BN Reports to enforce any provision of this Policy shall not constitute a waiver of its right to enforce that provision or any other provision at a later time.

18.4 Severability

If any provision of this Policy is determined by a court or tribunal of competent jurisdiction to be invalid, illegal, or unenforceable, the remaining provisions shall continue in full force and effect to the maximum extent permitted by Applicable Law.

18.5 Assignment

Customers may not assign or transfer any rights or obligations under this Policy without the prior written consent of BN Reports. BN Reports may assign this Policy in connection with a merger, acquisition, sale of assets, corporate reorganization, financing transaction, or by operation of law.

18.6 Governing Law

This Policy shall be governed by and interpreted in accordance with the governing law provisions contained in the BN Reports Master Subscription Agreement.

18.7 Reservation of Rights

BN Reports expressly reserves all rights, remedies, and protections available under:

• the Master Subscription Agreement;
• Applicable Law;
• intellectual property laws;
• privacy laws;
• contract law; and
• equitable principles.

Nothing in this Policy limits any legal or equitable remedy available to BN Reports.

18.8 Language

The parties acknowledge that they have expressly requested that this Acceptable Use Policy and all related documents be drafted in the English language. Les parties reconnaissent avoir expressément demandé que la présente Politique d'utilisation acceptable ainsi que tous les documents qui s'y rattachent soient rédigés en langue anglaise.

18.9 Effective Date

This Acceptable Use Policy is effective as of the Effective Date stated above and remains in effect until amended or replaced by BN Reports.

18.10 Acceptance

By accessing or using the Services, creating an Account, purchasing a subscription, or otherwise using BN Reports, Customers and Authorized Users acknowledge that they have read, understood, and agree to be bound by this Acceptable Use Policy.