Acceptable Use Policy

1. Scope and responsibilities

This policy applies to use of STRACT.us, Pulse, Signal and related Services by Customers, suppliers, candidates and other users. It supplements the Terms of Use and applicable agreements; a controlling signed agreement prevails to the extent of a direct conflict.

Use only the capabilities and data you are authorized to access. Organizations are responsible for appropriate instructions and oversight of their Authorized Users.

2. Authorized access and workspace boundaries

Do not access, solicit, expose or attempt to access another Customer’s, supplier’s or user’s information without authorization.

• No credential sharing, impersonation, account takeover or unauthorized use of another person’s access.
• No tenant-boundary circumvention, permission escalation or misuse of organization selection.
• No probing of private records, API endpoints, keys, tokens or stored files outside your assigned scope.

3. Security and Platform integrity

Do not damage, disrupt, compromise or extract the Services beyond authorized use. Any security testing requires STRACT’s prior written authorization and an agreed scope.

• No malicious code, exploitation, denial-of-service activity or unauthorized scanning.
• No scraping or unauthorized bulk extraction, reverse engineering or defeating safeguards.
• No circumventing service limits or creating misleading activity or evaluation records.

4. Lawful and respectful conduct

Do not use the Services for unlawful, infringing, fraudulent, harassing, discriminatory or abusive purposes. Respect confidentiality, intellectual-property rights and the rights of individuals.

Do not use Pulse, Signal, candidate comparisons or other outputs to facilitate unlawful employment discrimination or other prohibited decisions.

5. Data authority and accuracy

Upload personal data, resumes, candidate evidence, interview information and compliance material only with appropriate authority and lawful basis. Provide required notices and permissions.

Do not falsify or materially manipulate candidate, supplier, requirement, engagement, compliance or evaluation information. Do not submit regulated or highly sensitive information that STRACT has not expressly agreed to process, including unnecessary financial-account credentials, government identifiers, medical information or other protected categories.

6. Responsible AI and Signal use

Do not manipulate AI outputs, inject instructions intended to defeat safeguards, bypass access controls or disclose unauthorized information. Do not feed confidential Customer, supplier, candidate or STRACT information into unapproved external AI services.

Generated intelligence is decision support. Verify material facts and evidence; never use an output as the sole basis for consequential employment, engagement, compensation or termination decisions.

7. Commercial restrictions

No unauthorized resale, sublicensing, competitive benchmarking or use of the Services or extracted content to build a competing product. These restrictions do not override permissions expressly granted in writing or rights that cannot lawfully be restricted.

8. Reporting and enforcement

Report suspected misuse or security concerns to privacy@stract.us or through the STRACT contact form. Do not continue testing, access unrelated records or send secrets when reporting.

STRACT may investigate violations, preserve appropriate records and restrict or suspend access when reasonably necessary to protect customers, users, data or the Services, subject to controlling agreements and applicable law. Further action may include termination, notification to affected organizations or referral to competent authorities where appropriate.