Acceptable Use Policy

Authorized users must use Being Brilliant only for lawful, contracted educational and administrative purposes.

Prohibited conduct

Users must not:

• violate applicable law or another person's rights;
• upload content/data without required authority, notice or consent;
• attempt unauthorized access to another tenant, account or system;
• probe, scan, exploit or bypass authentication, authorization, rate limits, plan limits or security controls;
• introduce malware or malicious code;
• interfere with availability or impose abusive automated load;
• scrape/export data beyond authorized institutional purposes;
• impersonate another person or falsify identity/authority;
• send unlawful spam, harassment, threats or deceptive communications;
• use child/student data for unlawful profiling, targeted advertising or unrelated exploitation;
• use the Service to develop or benchmark a competing hosted service through prohibited access to non-public functionality;
• share credentials except through approved account/delegation features.

Security reporting

Suspected vulnerabilities should be reported privately to the verified security/support contact stated in the Order Form. Users must not publicly disclose exploitable details before reasonable coordinated remediation.

Enforcement

Provider may restrict or suspend affected accounts/features when reasonably necessary to investigate or stop a material AUP violation, security threat or legal violation. Where practicable, Provider will notify Client and limit action to the affected user/function.

Serious or repeated violations may constitute material breach of the SaaS Agreement.