8Dflow Acceptable Use Policy

1. Purpose of this policy

8Dflow is practical workflow and documentation software for manufacturing quality activities such as 8D reports, NCRs, SCARs, corrective actions, evidence tracking, owners, due dates, approvals, comments, workflow history, and report exports.

To protect our service, customers, users, and third parties, you must use 8Dflow responsibly, lawfully, and in line with this policy.

2. General rules

You must not use 8Dflow in a way that:

• violates any applicable law, regulation, contract, or third-party right;
• is fraudulent, deceptive, misleading, harmful, or abusive;
• interferes with the security, integrity, availability, or performance of 8Dflow;
• attempts to gain unauthorised access to 8Dflow, another account, another system, or another user’s data;
• infringes intellectual property, privacy, confidentiality, or data protection rights;
• exposes 8Dflow, our customers, users, or third parties to unnecessary legal, security, operational, privacy, financial, or reputational risk.

3. Falsified or misleading quality records

You must not use 8Dflow to create, store, submit, export, share, or distribute records that you know are false, misleading, deceptive, fraudulent, or materially incomplete in a way intended to mislead another person or organisation.

This includes, without limitation:

• false or misleading 8D reports;
• false or misleading NCRs;
• false or misleading SCARs;
• falsified inspection records;
• falsified evidence files;
• falsified approval records;
• falsified containment actions;
• falsified corrective actions;
• falsified verification or effectiveness checks;
• false customer-facing reports;
• false supplier communications;
• records that hide, disguise, or misrepresent known quality issues;
• records that are intentionally incomplete in a way that could mislead customers, suppliers, auditors, regulators, employees, contractors, or other third parties.

8Dflow helps teams manage and document workflows. It must not be used to make inaccurate records appear official, complete, approved, verified, accepted, or compliant.

4. Customer responsibility for records and outputs

You are responsible for the accuracy, completeness, quality, legality, and suitability of Customer Data entered into 8Dflow.

You are also responsible for reviewing any report, PDF, export, approval, workflow history, AI-assisted output, template, or other output before relying on it or sharing it.

8Dflow does not independently verify the technical correctness, completeness, customer acceptance, supplier acceptance, audit acceptance, certification suitability, or compliance of records created in the service.

You must not use 8Dflow reports, PDFs, exports, workflow history, approval records, or other outputs to misrepresent the status, completeness, evidence, approval, verification, effectiveness, or acceptance of a quality workflow.

5. Payment, billing, and commercial misuse

You must not use 8Dflow or related billing processes to:

• provide false, misleading, or unauthorised billing details;
• use a payment method without authorisation;
• commit payment fraud or tax fraud;
• abuse refunds, credits, trials, discounts, coupons, or promotional offers;
• create repeated trials to avoid payment;
• evade plan limits, seat limits, user limits, storage limits, usage limits, or fair-use limits;
• share seats or accounts in a way that avoids applicable subscription fees;
• initiate chargebacks or payment disputes in bad faith;
• misrepresent your organisation, identity, authority, location, tax status, or eligibility for a plan.

This does not limit any rights you have to dispute an incorrect charge in good faith or exercise rights that cannot lawfully be excluded.

6. Account and access misuse

You must not:

• share login credentials in a way that compromises account security;
• use another person’s account without permission;
• impersonate another person or organisation;
• misrepresent your identity, role, authority, or affiliation;
• allow unauthorised people to access 8Dflow through your account;
• continue accessing an account after your permission has ended;
• bypass seat limits, plan limits, storage limits, usage limits, or access restrictions;
• use account invitations, user roles, permissions, or administrator settings in a misleading or abusive way.

Customers are responsible for managing their users, permissions, administrators, billing contacts, and account access.

7. Security misuse and vulnerability reporting

You must not:

• attempt to access accounts, systems, data, or networks without permission;
• probe, scan, test, or bypass security controls without written authorisation;
• interfere with authentication, authorisation, logging, monitoring, rate limits, or access controls;
• conduct credential stuffing, password spraying, brute-force attacks, phishing, session hijacking, or similar attacks;
• introduce malware, ransomware, worms, viruses, trojans, spyware, or harmful code;
• conduct denial-of-service attacks or similar activity;
• overload, disrupt, degrade, or interfere with 8Dflow or related infrastructure;
• use bots, scrapers, crawlers, or automation in a way that harms, overloads, extracts from, or disrupts the service;
• attempt to reverse engineer, decompile, or extract source code except where such restriction is not permitted by law;
• exploit bugs or vulnerabilities instead of reporting them responsibly;
• publicly disclose a suspected vulnerability before we have had a reasonable opportunity to review and address it.

If you discover a vulnerability or security issue, report it to legal@8dflow.com.

Do not access, copy, alter, delete, or disclose data that does not belong to you while investigating or reporting a vulnerability.

8. Prohibited data

This section is the primary Prohibited Data list referenced by 8Dflow’s legal terms.

Unless 8Dflow expressly agrees in writing, you must not submit or store the following in 8Dflow:

• payment card data requiring PCI DSS controls;
• sensitive health information;
• highly sensitive personal information;
• government identity numbers where not necessary;
• classified information;
• export-controlled technical data;
• passwords;
• private keys;
• API keys;
• access tokens;
• seed phrases;
• production credentials;
• similar secrets or security credentials;
• special category data under European Data Protection Laws, unless expressly supported in writing;
• information you are not authorised to upload, process, or share;
• data that requires legal, regulatory, contractual, technical, or security controls not supported by your plan or by 8Dflow.

8Dflow is not intended for storing highly regulated, highly sensitive, special category, export-controlled, classified, payment-card, or secret credential data unless we expressly support that use in writing.

You are responsible for determining whether Customer Data is appropriate for use with 8Dflow.

9. Sanctions, export controls, and restricted use

You must not use 8Dflow in a way that violates applicable sanctions, trade control, export control, anti-bribery, anti-corruption, anti-money-laundering, or similar laws.

You must not use 8Dflow if you are prohibited from doing so under applicable law.

You must not use 8Dflow to upload, store, process, export, or share export-controlled technical data unless 8Dflow expressly supports that use in writing and you have all required rights, permissions, licences, and approvals.

We may restrict, suspend, or terminate access where we reasonably believe use of 8Dflow may breach applicable sanctions, trade control, export control, anti-bribery, anti-corruption, anti-money-laundering, or similar laws.

10. Illegal, harmful, abusive, or misleading content and communications

You must not use 8Dflow to upload, store, create, send, invite, export, or share content or communications that:

• are unlawful, defamatory, harassing, threatening, abusive, hateful, or discriminatory;
• promote violence or illegal activity;
• violate privacy, confidentiality, intellectual property, or data protection rights;
• contain malware or harmful code;
• are intended to deceive, defraud, impersonate, phish, or manipulate another person or organisation;
• are used to harass employees, contractors, suppliers, customers, competitors, or other third parties;
• are spam, unsolicited bulk messages, or misleading commercial communications;
• misrepresent your identity, authority, role, company, product, supplier relationship, customer relationship, or quality decision.

11. Misuse of AI-assisted features

If AI-assisted features are available, you must use them responsibly.

You must not use AI-assisted features to:

• create records you know are false, misleading, deceptive, or fraudulent;
• hide, disguise, minimise, or misrepresent known quality issues;
• generate customer, supplier, auditor, regulator, employee, or contractor communications intended to mislead;
• make automated quality, engineering, product-safety, regulatory, approval, release, or compliance decisions without appropriate human review;
• upload information you do not have the right to use;
• upload prohibited data, secrets, credentials, or highly sensitive information unless expressly supported;
• generate unlawful, harmful, infringing, abusive, or deceptive content;
• misrepresent AI-assisted output as independently verified, approved, accepted, or compliant.

AI-assisted features are drafting and productivity aids only. You are responsible for reviewing, verifying, editing, and approving any AI-assisted output before relying on it or sharing it.

12. Misuse of templates, resources, exports, and 8Dflow intellectual property

You must not misuse 8Dflow templates, examples, checklists, prompts, resources, workflows, formats, layouts, reports, PDFs, exports, website content, documentation, or other 8Dflow materials.

You must not:

• remove context from a template, resource, export, or report in a way that makes it misleading;
• present a general template as a certified, approved, guaranteed-compliance, audit-ready, or certification-ready document;
• resell, sublicense, rent, lease, or commercially redistribute 8Dflow templates, resources, examples, workflows, formats, layouts, or documentation except as expressly permitted;
• extract, copy, scrape, or bulk download 8Dflow templates, resources, examples, workflows, formats, layouts, documentation, or website content to create a competing product, service, resource library, template library, database, AI system, or software tool;
• use 8Dflow templates, resources, examples, workflows, formats, layouts, documentation, or website content to train, fine-tune, benchmark, or build a competing AI model, template library, resource library, or software product;
• use exports or PDFs to misrepresent the status, approval, evidence, verification, effectiveness, completeness, customer acceptance, supplier acceptance, audit acceptance, or compliance of a quality workflow;
• imply that 8Dflow has reviewed, approved, certified, endorsed, accepted, or verified your reports, records, products, suppliers, customers, quality decisions, or corrective actions.

Templates and resources are general starting points only. You are responsible for adapting them to your organisation, products, customers, suppliers, standards, contracts, and internal procedures.

13. Platform abuse and excessive use

You must not use 8Dflow in a way that creates unreasonable load, risk, cost, or disruption.

This includes:

• excessive automated requests;
• unauthorised scraping, crawling, indexing, harvesting, or extraction;
• attempts to bypass usage, storage, rate, seat, workspace, or plan limits;
• using the service to host unrelated files or content;
• using the service as a general file storage system unrelated to supported workflows;
• using the service to run unauthorised benchmarks, load tests, security tests, or performance tests;
• interfering with other customers’ use of 8Dflow;
• using 8Dflow in a way that harms the reliability, performance, security, cost, or availability of the service;
• using integrations, APIs, imports, exports, or automation in a way that exceeds permitted use or disrupts the service.

We may apply reasonable technical limits to protect the service, customers, users, and third parties.

14. Third-party rights and data

You must only upload, process, share, or export information if you have the right to do so.

You are responsible for ensuring that Customer Data does not violate:

• privacy rights;
• confidentiality obligations;
• intellectual property rights;
• employment obligations;
• supplier or customer agreements;
• applicable laws or regulations.

You are also responsible for giving any notices and obtaining any permissions or consents required from your users, employees, contractors, suppliers, customers, or other individuals whose information is included in Customer Data.

15. Monitoring, enforcement, and preservation

We are not required to monitor all content or activity in 8Dflow.

However, we may investigate suspected breaches of this policy and may take action if we reasonably believe there has been a breach, risk, or misuse.

Actions may include:

• notifying the Customer or account administrator;
• requesting removal or correction of content;
• restricting access to specific features;
• applying technical limits;
• suspending users or accounts;
• disabling access to content;
• terminating access in accordance with the Terms of Service;
• preserving information where reasonably necessary for security, legal, fraud-prevention, compliance, billing, or dispute purposes;
• reporting unlawful activity where required or appropriate.

Where reasonable, we will give notice and an opportunity to resolve the issue. However, we may act immediately where needed to protect security, comply with law, prevent harm, prevent misuse, investigate suspected fraud, or protect 8Dflow, customers, users, or third parties.

Where reasonably practicable and safe, we may allow limited access for export or account administration during a suspension.

16. Reporting misuse

If you believe someone is misusing 8Dflow or violating this policy, contact us at:

8Dflow Pty Ltd
64A Burnett Street
Buderim QLD 4558
Australia
Email: legal@8dflow.com

Please include enough detail for us to review the issue.

17. Changes to this policy

We may update this Acceptable Use Policy from time to time.

If we make material changes, we will take reasonable steps to notify affected customers, such as by posting an updated version on our website, sending an email, or providing an in-product notice.

Changes that are reasonably needed for legal, security, fraud-prevention, misuse-prevention, operational, or service-protection reasons may take effect immediately or on shorter notice where appropriate.

Your continued use of 8Dflow after the updated policy takes effect means you accept the updated policy, except where applicable law requires a different process.