Draft — subject to final review. This document is published for information while it is finalised and may change before it takes effect.
This Acceptable Use Policy (“AUP”) applies to everyone who uses the EmitLedger Service provided by Front End Engineering Consultancy Limited (Business Registration No. 75797664, Hong Kong), trading as FEEC (“FEEC”). It forms part of the Master Subscription Agreement (the “Agreement”). Capitalised terms have the meaning given in the Agreement. Customer is responsible for its Authorised Users’ compliance with this AUP.
1. Security and integrity
You must not:
1.1 Test security without consent. Probe, scan, penetration-test or test the vulnerability of the Service, or breach or circumvent any security or authentication measure, without FEEC’s prior written consent. If you want to test, write to security@emitledger.com; FEEC will agree scope, timing and rules. Good-faith reports of vulnerabilities you find in ordinary use are welcome at security@emitledger.com and will not be treated as a breach, provided you do not access other customers’ data, disrupt the Service or disclose the issue publicly before FEEC has had a reasonable time to fix it.
1.2 Access other tenants’ data. Access or attempt to access data, accounts or tenants you are not authorised to use, including by manipulating identifiers, tokens, requests or scopes.
1.3 Share credentials. Share accounts or credentials, or let more than one person use a single user account.
1.4 Upload harmful content. Upload or transmit viruses, malware, ransomware, macros intended to execute, exploit files, malformed or deliberately oversized files (such as zip bombs), or any code designed to harm, disrupt or gain unauthorised access to any system.
1.5 Circumvent limits. Bypass or interfere with plan limits (such as numbers of Assets or users), rate limits, file limits, licence checks or entitlements.
2. Load and automated access
You must not:
2.1 Overload the Service. Send traffic or requests at a volume that places an unreasonable load on the Service, or carry out denial-of-service attacks.
2.2 Scrape or harvest. Use bots, crawlers, scrapers or other automated means to access the Service or extract data, except through APIs and export features FEEC provides, and within their documented limits. You may, of course, export your own Customer Data.
2.3 Monitor for competitive purposes. Access the Service to benchmark it for a competing product, or to copy its features, methods, templates, user interface or content.
3. Intellectual property and the software
You must not:
3.1 Reverse engineer. Decompile, disassemble or reverse engineer the Service, the Software or the mobile app, or attempt to derive source code, algorithms or database structures, except where applicable law expressly permits it despite this restriction.
3.2 Copy or redistribute FEEC Materials. Copy, modify, frame, mirror, publish or redistribute FEEC Materials, including the Emission Factor Library as compiled by FEEC, calculation methods, Regulatory Packs, asset templates and Excel templates, other than as part of your own Outputs and Regulatory Submissions.
3.3 Resell. Resell, sublicense, rent, lease, time-share or provide the Service as a service bureau to third parties, or run it for several unrelated organisations, without a partner agreement with FEEC.
3.4 Remove notices. Remove or obscure proprietary notices, licence information or factor references.
4. Lawful use and data
You must not:
4.1 Break the law. Use the Service in breach of any law, including data protection, export control, sanctions, anti-bribery and securities laws.
4.2 Upload unlawful data. Upload data that you do not have the right to use, that infringes intellectual property or confidentiality rights, or that is defamatory, obscene or otherwise unlawful.
4.3 Upload restricted data without agreement. Upload special categories of personal data, government identification numbers, payment card data, classified or export-controlled technical data, or data about children, unless FEEC has agreed in writing.
4.4 Breach third-party data licences. Enter or use third-party emission factors or datasets (for example IEA data) in breach of their licence terms.
4.5 Mislead. Use the Service or Outputs to create knowingly false or misleading emissions reports, disclosures or Regulatory Submissions, or represent that FEEC has verified, certified or assured any Output.
4.6 Involve sanctioned parties. Provide access to, or use the Service for the benefit of, any person or entity that is subject to sanctions, or for any Asset, project or territory where such provision is prohibited under the laws referred to in clause 20 of the Agreement.
4.7 Impersonate or spam. Impersonate any person, misrepresent your affiliation, or use the Service’s invitation or notification features to send unsolicited messages.
5. Enforcement
5.1 Investigation. FEEC may investigate suspected breaches of this AUP, including by reviewing Usage Data and security logs. FEEC will access Customer Data for this purpose only where reasonably necessary and in line with the DPA.
5.2 Action. If FEEC reasonably believes this AUP has been breached, FEEC may, in proportion to the breach: (a) warn the Customer and ask it to remedy the breach; (b) remove or disable access to the offending content or files; (c) block IP addresses, throttle requests, or suspend individual Authorised Users; (d) suspend the Service under clause 12 of the Agreement; or (e) treat the breach as a material breach and terminate the Agreement under clause 13, where the breach is serious or not remedied.
5.3 Urgent action. Where a breach threatens the security or availability of the Service or other customers’ data, FEEC may act immediately and notify Customer afterwards.
5.4 Authorities. FEEC may report unlawful activity to the relevant authorities and cooperate with them, as permitted by law.
5.5 Reporting abuse. Report suspected breaches of this AUP to security@emitledger.com.
6. Changes
FEEC may update this AUP under clause 22 of the Agreement.