Document 5: Acceptable Use Policy

Plain-language summary: A short list of things you agree not to do with Relae, mostly common-sense rules so the service stays safe and lawful for everyone. The most important one for our context: only upload donor data you actually have the right to use.

1. Your commitments

When using the Platform, you agree not to:

• Upload or process personal information you do not have the right to upload or process, including Donor Data collected without a lawful basis, or connect a data source you are not entitled to connect.
• Use the Platform for any unlawful purpose, or in breach of privacy, anti-spam, or other applicable law.
• Send fundraising or marketing messages to Donors directly through Relae. Relae does not send donor outreach; drafts the Platform helps create are sent by you, from your own systems, as sender of record.
• Attempt to circumvent security, access another organization's data, or probe, scan, or test the vulnerability of the Platform without authorization.
• Upload malicious code, or interfere with or disrupt the integrity or performance of the Platform.
• Reverse-engineer, resell, or sublicense the Platform except as expressly permitted (see the Consultant and Agency Terms for multi-client use).
• Use the Platform to make solely automated decisions producing legal or similarly significant effects about Donors.

2. Enforcement

We may investigate suspected violations and may suspend or terminate access for serious or repeated breaches, with notice where practicable, following the suspension and termination process in the Master Subscription Agreement. We will favour notice and a chance to cure over immediate suspension wherever the safety of data allows.

3. Your responsibility for what you upload and send

You are responsible for the data you upload, the sources you connect, the third parties you authorize to access your data through any API or connection method, and the communications you send using content from the Platform. You will indemnify Relae against third-party claims arising from your breach of this Policy, including claims that data you uploaded or connected infringes a third party's intellectual-property or privacy rights, claims arising from a third party you authorized to access your data, or that communications you sent breached Canada's Anti-Spam Legislation or other applicable law. This indemnity is the counterpart of the commitments above and is consistent with the indemnification clause in the Master Subscription Agreement.