Acceptable Use Policy (AUP)
Policy Version: v1.1-2026-10Scope: All Customers, Administrators, Users, API Consumers, and Integrations
1. Account Responsibilities & Tenant User Oversight
This Acceptable Use Policy ("AUP", version v1.1-2026-10) governs the permitted and prohibited use of the LogiStock cloud platform, APIs, databases, microservices, and client software. This policy applies uniformly to all subscribing Customers, organizational account administrators, authorized staff users, third-party API consumers, and automated integration tokens.
- Credential Protection: Account administrators and users must safeguard their authentication tokens, API keys, and login credentials. Sharing administrative credentials across multiple individuals is strictly prohibited.
- Tenant User Oversight: Subscribing organizations are fully liable for all activity executed under their assigned tenant account, including actions performed by invited team members, warehouse dispatchers, and automated scripts.
- Immediate Revocation: In the event of an employee departure or suspected credential compromise, the Customer must immediately revoke access and regenerate any exposed API tokens via the Tenant Security settings.
2. Security & System Integrity Violations
The security and cryptographic isolation of our multi-tenant cloud environment is inviolable. You agree NOT to engage in, facilitate, or attempt any of the following activities:
- Row-Level Security (RLS) & Tenant Isolation Bypass: Tampering with JSON Web Tokens (JWTs), forging HTTP headers (e.g.,
X-Tenant-ID), injecting SQL fragments, modifying database connection session parameters, or manipulating API routes to inspect, query, exfiltrate, or alter data belonging to other tenant organizations. - Malicious Code & Payload Distribution: Uploading, injecting, transmitting, or linking to viruses, worms, Trojan horses, ransomware, webshells, rootkits, cryptominers, or corrupted file attachments across product catalogs or document storage.
- Disruption, DoS & Unauthorized Penetration Testing: Executing volumetric Denial of Service (DoS/DDoS) attacks, automated credential-stuffing campaigns, distributed port scans, fuzzing, or vulnerability probing without prior written authorization from LogiStock Security Operations.
- Reverse Engineering: Decompiling, disassembling, reverse-engineering, or scraping proprietary inventory replenishment models, demand forecasting neural networks, automated reorder formulas, or dynamic pricing algorithms.
3. API & Automated Access Guidelines
Programmatic interaction with LogiStock APIs and webhooks must comply with engineering best practices:
- Rate Limit Compliance: API callers must adhere to published tenant rate limits (default: 120 requests/minute per API key). Scripts must implement exponential backoff upon receiving HTTP
429 Too Many Requestsstatus codes. - Scraper Prohibition: Using headless browsers, automated web crawlers, or screen scrapers to harvest catalog pricing or aggregate market analytics from LogiStock without using authorized public APIs is prohibited.
- Throttling Rights: LogiStock reserves the right to throttle, drop, or rate-limit abusive automated connections that threaten system stability or degrade performance for neighboring tenants.
4. Prohibited Goods & Inventory Tracking Restrictions
LogiStock is engineered for lawful commercial enterprise operations. Customer shall NOT use the platform to catalog, store, track, dispatch, or manage warehouse logistics for:
- Controlled Substances: Illicit narcotics, scheduled drugs, or pharmaceuticals tracked without requisite Drug Enforcement Administration (DEA) or state health authority distribution licenses.
- Munitions & Firearms: Unregistered firearms, automatic weapons, untraceable ghost guns, ammunition, or military ordnance in violation of federal, state, or international arms trade treaties.
- Hazardous & Chemical Materials: Unregulated toxic chemicals, radioactive isotopes, biological agents, or explosive precursors lacking OSHA/DOT safety data sheets and regulatory tracking permits.
- Counterfeit & Stolen Merchandise: Pirated goods, counterfeit trademarked merchandise, or items known to be obtained via theft, fraud, or illicit supply chains.
5. Responsible Vulnerability Disclosure
LogiStock welcomes collaborative vulnerability disclosures from security researchers and customers adhering to safe-harbor guidelines:
- Direct confidential security reports to security@agents360ai.com prior to public disclosure.
- Allow our engineering on-call desk reasonable time to triage, reproduce, and remediate reported vulnerabilities.
- Do not access, download, or alter Customer Data belonging to other accounts during security testing.
Email: security@agents360ai.com
PGP Key ID: 0x9B417E22 (Available on request)
6. Enforcement, Suspension & Termination
LogiStock reserves the full discretionary right to investigate suspected violations of this AUP. Upon determining in good faith that a violation has occurred, LogiStock may take immediate corrective actions including:
- Issuing a formal compliance warning and demanding immediate remediation.
- Discretionary throttling or rate-limiting of tenant API access.
- Immediate temporary suspension or indefinite locking of the offending tenant account and user credentials.
- Permanent contract termination for cause with forfeiture of prepaid fees.
- Reporting unlawful conduct and handing over audit trail evidence to law enforcement agencies.