Acceptable Use Policy

1Where this applies

This policy applies to the BlueWave websites, the private product tour, the sign-in gateway, and, for anyone who holds a portal account, use of CaseTrace itself. It forms part of the Terms of Use. For a subscribing organization it sits alongside, and does not replace, the contract documents the organization has signed.

If something here is unclear, the principle behind every rule is the same: CaseTrace documents what happened for the people authorized to act on it, and nothing on this platform is to be used to identify, screen, target or surveil people.

2You may not

• use the Site, the tour or a portal to collect information about people for any purpose other than documenting an incident in your own environment under your subscription
• use any output of CaseTrace, including a Similarity Result, a network signal or a record, as a factor in deciding eligibility for employment, contracting, credentialing, tenancy, insurance, credit or any purpose governed by the Fair Credit Reporting Act or a comparable state law
• treat a Similarity Result as an identification, or represent to anyone that CaseTrace identified a person
• submit a service site located in a jurisdiction where the applicable functions are not offered, route media from such a site through another site, or otherwise use the platform to avoid a jurisdiction's restrictions
• upload media, records or data you do not have the lawful right and authority to submit, or that was obtained unlawfully
• use the platform for an unlawful, discriminatory or harassing purpose
• share credentials, use another person's account, or attempt to obtain a role or administrative control you were not granted; the Super Admin role is reserved to BlueWave staff
• reverse engineer, decompile or attempt to extract the source or models behind CaseTrace, or bypass an access control
• probe, scan or test the security of the Site or any portal without BlueWave's prior written authorization
• scrape, crawl or bulk-download content, or use the Site to train or evaluate a competing product
• record, screenshot, re-transmit or share the private tour, or show it to anyone who builds or sells video analytics
• move, transfer, reinstall or operate a CaseTrace Edge Device at a site other than the one it is locked to, without BlueWave's prior written approval
• resell access, or use the platform to provide a service to a third party except as the selected edition expressly allows
• interfere with the platform, its integrity, or another customer's use of it

3Credentials and secrets

Never place camera passwords, API secrets, payment credentials or similar secrets into free-text fields, chat, or ordinary email. When a credential must be exchanged, use the secure channel BlueWave provides. Tell your administrator, and BlueWave, promptly if you believe an account or credential has been compromised.

4Reporting

If you find a security vulnerability, or believe someone is using the platform in a way this policy prohibits, write to admin@bluewavetech.io. We will acknowledge good-faith reports and will not pursue a claim against a researcher who reports responsibly, tests only against their own account, and does not access, alter or exfiltrate anyone else's data.

5What happens on a violation

BlueWave may suspend or end access to any part of the Site, a tour link, or a portal account to address a violation, a security threat, or a risk to the platform or others, giving notice where practicable and limiting the suspension to what is affected. Suspension does not delete a customer's records. A violation by a subscribing organization is also a breach of its contract documents and is handled under them.