Acceptable Use Policy

1. Scope

This Acceptable Use Policy ("Policy") applies to all users of the cepaos platform ("the Platform"), operated by cepaos LLC (Wyoming, United States). It supplements the Terms of Service and the Privacy Policy. By using the Platform, the User agrees to comply with this Policy.

2. Permitted Use

The Platform is intended exclusively for:

• Winery and vineyard operations management (cellar, vineyard, production).
• Facilitating the preparation of information for regulatory filings (e.g., INV). cepaos is not a system certified by the INV.
• Administrative management, inventory, and billing related to winemaking activity.
• Generating operational reports and analytics.

Compliance with all environmental, phytosanitary, and land-use regulations is the exclusive responsibility of the User.

3. Prohibited Conduct

3.1 Unauthorised Access

• Attempting to access data from other Organisations.
• Circumventing the Platform's security mechanisms.
• Sharing credentials with unauthorised third parties.
• Using other users' credentials.

3.2 Technical Abuse

• Scraping or automated extraction without authorisation.
• DoS/DDoS attacks.
• Reverse engineering of the software.
• Introduction of malicious code.
• Exploiting vulnerabilities instead of reporting them responsibly.

3.3 Illegal or Fraudulent Use

• Activities contrary to applicable law.
• Infringement of third-party intellectual property rights.
• Money laundering, tax evasion, or any fraudulent activity.
• Deliberately entering false information in traceability records.

3.4 Unauthorised Commercial Use

• Reselling or subleasing access to third parties.
• Using the Platform as infrastructure for services to third parties.
• Creating multiple accounts to circumvent plan limits.

3.5 Service Interference

• Degrading performance for other users.
• Using bots or tools that generate disproportionate load.

4. Traceability Data Integrity

• Records must accurately reflect actual operations.
• The User is solely responsible for data accuracy.
• cepaos does not verify the accuracy of entered data.

5. Usage Limits

• API calls are subject to rate limiting per plan.
• File storage is limited per plan.
• Resource usage must be proportional and reasonable.

6. Vulnerability Reporting (Responsible Disclosure)

Report vulnerabilities to security@cepaos.com before any public disclosure.

7. Consequences of Non-Compliance

1. Warning: notification with time to rectify.
2. Temporary suspension: restricted access.
3. Account cancellation: service termination.
4. Legal action: in cases of damages or illegal activities.

8. Contact

• Abuse: legal@cepaos.com
• Vulnerabilities: security@cepaos.com