Acceptable Use Policy

ASection A

Introduction & General Use

This Acceptable Use Policy ("AUP" or "Policy") establishes the rules governing use of Franstorm's websites, software, applications, CRM functionality, automation tools, AI-enabled functionality, integrations, communication tools, lead-management services, APIs, and other products and services. This Policy applies to all Customers, Users, authorized Personnel, and other persons who access or use Franstorm Services, and forms part of the Franstorm Terms of Service.

General acceptable use

You may use Franstorm Services only for lawful purposes, in accordance with the Terms of Service and this Policy, within the limits of your Subscription, in accordance with applicable Data Protection Laws and electronic-communication laws, in accordance with third-party platform requirements where integrations are used, and in a manner that does not compromise the security, integrity, reliability, or availability of the Services. Customers are responsible for the actions of Users authorized to access their Accounts.

Compliance with applicable laws

You must comply with all laws applicable to your use of the Services, which may include privacy and data protection, electronic communications, direct marketing, anti-spam, consumer protection, intellectual property, advertising, employment, telecommunications, cybersecurity, export controls, and economic sanctions. The availability of functionality within Franstorm does not mean a particular use is lawful in every jurisdiction — you remain responsible for determining whether your specific use is lawful.

BSection B

Data & Privacy Use

Privacy and Personal Data

You may process Personal Data through Franstorm only with an appropriate lawful basis and any required notices, permissions, or consents. You must not collect or upload unlawfully obtained Personal Data, use it for incompatible purposes, ignore valid Data Subject rights, circumvent privacy controls, disclose it to unauthorized persons, conduct unlawful surveillance, or otherwise violate applicable Data Protection Laws. Where you act as Controller and Franstorm as Processor, your instructions must comply with applicable law and the Franstorm DPA.

Customer responsibility for data

Customers are responsible for Customer Data submitted to or processed through Franstorm, and represent and warrant they have all rights, permissions, consents, and lawful bases necessary to collect, upload, process, communicate, and connect that data to third-party integrations. Franstorm's provision of technology does not independently establish a lawful basis for the Customer's processing activities.

Sensitive and special category data

Standard Services are not intended for processing Sensitive or Special Categories of Personal Data unless Franstorm has expressly agreed in writing and appropriate safeguards are established. This may include data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, trade-union membership, genetic or biometric data, health information, or information concerning sex life or sexual orientation. Customers are responsible for determining whether information is sensitive under applicable law.

Children's data

Customers must not knowingly use Franstorm to unlawfully collect or process children's Personal Data. Where legally permitted, the Customer is responsible for obtaining required parental or guardian consent and complying with applicable age-related privacy requirements.

CSection C

Communications, CRM & AI Features

Email and electronic communications

You must use email and communication functionality responsibly and in accordance with applicable marketing, privacy, and anti-spam laws. You must not send unlawful spam, disguise the sender's identity, use deceptive subject lines, distribute fraudulent offers, ignore valid opt-outs, or circumvent legally required unsubscribe mechanisms. Where consent is required, you are responsible for obtaining and maintaining evidence of it.

Opt-out and unsubscribe requests

Customers must respect legally valid opt-out, objection, and unsubscribe requests, and must not intentionally circumvent a recipient's lawful preference. Customers are responsible for maintaining suppression lists where required.

Lead generation, prospecting & CRM

Lead-management and prospecting functionality must be used lawfully — Personal Data used for outreach must be lawfully obtained, have an appropriate legal basis, provide required privacy notices, respect opt-out rights, and comply with marketing laws and platform rules. CRM functionality must not be used to create or distribute databases containing unlawfully obtained information, and Customers are responsible for appropriate retention and deletion practices.

Automation

Customers are responsible for reviewing and configuring automation appropriately, and must not configure it to perform unlawful activities, send prohibited communications, circumvent third-party restrictions, harass individuals, facilitate fraud, collect data unlawfully, overwhelm third-party services, or bypass security measures.

AI-enabled features

AI-enabled functionality assists Users and is not a substitute for appropriate human judgment. You are responsible for reviewing AI-generated or AI-assisted outputs before relying on them where errors could materially affect another person, Customer, business, or legal obligation, and must not use Franstorm AI functionality to generate or distribute unlawful or harmful content.

Automated decision-making and profiling

Where use involves automated decision-making or profiling of individuals, the Customer is responsible for determining whether applicable Data Protection Laws impose additional requirements, and must not make solely automated decisions producing legal or similarly significant effects where prohibited by law. Appropriate safeguards, transparency, and human review must be implemented where required.

DSection D

Platforms, Access & Security

Third-party platforms & Google services

When using an integration you must comply with this Policy, Franstorm's Terms, the third party's applicable terms, API and developer policies, privacy requirements, and technical restrictions, and must not circumvent restrictions imposed by a connected platform. Where Franstorm integrates with Google APIs, you must not obtain access beyond authorized permissions; Franstorm's use of Google-API data follows the Google API Services User Data Policy, including Limited Use requirements.

Unauthorized access & security interference

You must not access another User's Account without authorization, bypass authentication or MFA, exploit account-recovery mechanisms, use stolen credentials, or otherwise attempt unauthorized access. You must not distribute malware, viruses, ransomware, or malicious scripts, install backdoors, steal credentials, exploit vulnerabilities, bypass security controls, conduct unauthorized penetration testing, or launch denial-of-service attacks. Report vulnerabilities responsibly rather than exploiting them; authorized security testing requires prior written permission unless covered by a published disclosure program.

Service disruption & excessive use

You must not intentionally overload infrastructure, consume unreasonable resources, circumvent rate limits or usage quotas, create excessive automated requests, interfere with other Customers, or otherwise degrade platform performance. Franstorm may implement reasonable technical limits to protect reliability and fair usage.

Credentials, account sharing & circumvention

ESection E

Prohibited Conduct

FSection F

Monitoring & Enforcement

Monitoring and investigation

Franstorm may investigate suspected violations where reasonably necessary to protect Customers, Users, Data Subjects, Franstorm, third parties, infrastructure, or the integrity and security of the Services, reviewing relevant Account, system, security, usage, or technical information in accordance with applicable law and Franstorm's Privacy Policy. Franstorm does not undertake an obligation to proactively monitor every communication or activity.

Enforcement

Where Franstorm reasonably determines a violation has occurred, it may take proportionate action depending on severity — a warning, requested corrective action, limiting functionality, temporary restriction, Account suspension, disabling an integration, termination, or other action necessary to protect the Services or comply with law. Where practicable, Franstorm may provide an opportunity to remedy a violation before termination; serious violations may result in immediate action.

Immediate suspension

Franstorm may suspend access without prior notice where reasonably necessary to prevent an active security threat, stop fraudulent activity, prevent significant harm, respond to an emergency, comply with a lawful governmental or judicial requirement, prevent unlawful processing of Personal Data, protect other Customers or third parties, or prevent material disruption — seeking to limit scope and duration where reasonably practicable.

Reporting violations & cooperation with authorities

Report suspected violations to support@franstorm.com with enough detail to evaluate the matter — do not include passwords, complete payment-card details, or authentication codes. Franstorm may preserve, disclose, or provide information where required by law, valid legal process, or an appropriate authority, handling any disclosure of Personal Data in accordance with applicable Data Protection Laws and Franstorm's Privacy Policy.

GSection G

Responsibilities, Related Policies & Contact

Customer responsibility for authorized Users

Customers are responsible for ensuring their authorized Users understand and comply with this Policy. A violation by an authorized User may be treated as a violation by the Customer where appropriate under the applicable Agreement, so Customers should implement suitable internal controls, training, and access-management practices.

Relationship with third-party & Franstorm policies

Use of Franstorm does not exempt Customers from complying with policies applicable to connected third-party platforms, including their terms of service, developer terms, API policies, and privacy requirements — Franstorm is not responsible for a third party's decision to restrict or terminate access. This Policy should be read together with Franstorm's Terms of Service, Privacy Policy, GDPR Compliance Policy, Data Processing Agreement (DPA), Security & Compliance Policy, and Refund & Cancellation Policy. Where this Policy conflicts with a specifically negotiated agreement, the more specific agreement controls to the extent expressly applicable.

Acknowledgment

By accessing or using Franstorm Services, you acknowledge that you have read and understood this Policy and agree to use the Services in accordance with it, the Terms of Service, and applicable law. Customers are responsible for ensuring their authorized Users also comply with these requirements.

Contact

Get in Touch