Acceptable Use Policy

Effective Date: March 10, 2026 Last Updated: March 10, 2026

This Acceptable Use Policy (“AUP”) defines the permitted and prohibited uses of the RepairOps platform. This policy supplements our Terms of Service and applies to all users — Organization Owners, Staff Users, API consumers, and plugin developers.

1. Intended Use

RepairOps is designed for lawful repair shop management operations, including:

Managing device repair workflows (intake, diagnostics, repair, QC, pickup)
Communicating with customers about repair status, quotes, and pickups
Tracking inventory, parts, and vendor orders
Processing payments and generating invoices
Analyzing shop performance through KPI dashboards
Building and recommending custom PC configurations
Managing team schedules, roles, and shift tracking
Integrating with third-party services via the REST API and plugin system

2. Prohibited Uses

You agree not to use the Service to:

2a. Illegal Activity

Violate any applicable local, state, national, or international law or regulation
Process or store data that you do not have the legal right to possess
Facilitate money laundering, fraud, or other financial crimes
Traffic in stolen goods or counterfeit products

2b. Harmful Content

Upload, transmit, or store malware, viruses, trojans, ransomware, or other malicious code
Distribute phishing content or impersonate others
Store or distribute child sexual abuse material (CSAM) or any content that exploits minors
Host or distribute content that incites violence, hatred, or discrimination

2c. Abuse of the Platform

Attempt to access other Organizations’ data or bypass tenant isolation
Probe, scan, or test the vulnerability of the Service without written authorization
Reverse engineer, decompile, or disassemble any part of the Service
Circumvent rate limits, plan limits, metering, or access controls
Use automated tools (bots, scrapers, crawlers) outside of the documented REST API
Create multiple free trial accounts to avoid payment
Resell or redistribute access to the Service without authorization

2d. Communication Abuse

Send unsolicited bulk messages (spam) via SMS, email, or push notifications
Violate CAN-SPAM, GDPR, TCPA, or other applicable communication laws
Send marketing messages to customers who have not provided opt-in consent
Use the notification system to harass, threaten, or intimidate
Send communications that misrepresent the sender’s identity

2e. AI Feature Abuse

Use AI features to generate content that is harmful, deceptive, defamatory, or illegal
Submit prompts designed to extract confidential information from AI models
Use AI-generated content without appropriate human review where safety or accuracy is critical
Attempt to use AI features to circumvent content moderation or safety filters
Submit data to AI providers in violation of their acceptable use policies

2f. API and Integration Abuse

Exceed documented API rate limits (1,000 requests/minute for Enterprise)
Share API keys with unauthorized parties
Use the API to build a competing product or service
Scrape or bulk-download data through the API beyond your Organization’s data
Use webhooks or integrations to exfiltrate data to unauthorized systems

2g. Data and Privacy

Store Personally Identifiable Information (PII) in fields not designed for it (e.g., ticket notes used to store SSNs)
Process data subject to HIPAA, PCI-DSS Level 1, or ITAR without a separate compliance agreement
Collect or process customer data beyond what is necessary for repair operations
Fail to honor data subject access or deletion requests from your customers

3. Resource Limits

To ensure fair usage for all customers, the following resource limits apply:

Resource	Starter	Pro	Enterprise
Tickets per month	150	Unlimited	Unlimited
Staff Users	3	15	Unlimited
Shops	1	5	Unlimited
SMS per month	100	500	Unlimited
Shop Displays	0	1	Unlimited
API requests/minute	N/A	N/A	1,000
File upload size	25 MB	25 MB	100 MB
Storage per Organization	5 GB	25 GB	100 GB

Exceeding these limits will result in service degradation (blocked actions) rather than overage charges. Contact sales@repairops.app for custom limit increases.

4. Monitoring and Enforcement

4a. Monitoring

We monitor the Service for abuse, security threats, and Terms violations using automated systems. We do not routinely review Customer Data content, but may do so when:

Required by law or legal process
Necessary to investigate a reported violation
Needed to protect the security of the Service or other users

4b. Enforcement Actions

For violations of this AUP, we may take one or more of the following actions:

Severity	Action	Notice
Minor (e.g., exceeding rate limits)	Warning email + temporary throttling	Immediate notification
Moderate (e.g., spam complaints, API abuse)	Feature restriction + 5-day cure period	5 business days to resolve
Serious (e.g., security breach attempt, data exfiltration)	Immediate account suspension	Notification within 24 hours
Critical (e.g., illegal content, CSAM)	Immediate termination + law enforcement referral	No prior notice

4c. Appeals

If you believe an enforcement action was taken in error, you may appeal by emailing legal@repairops.app within 10 business days. Include your Organization ID, a description of the situation, and any supporting evidence. We will review and respond within 10 business days.

5. Reporting Violations

If you become aware of any violation of this AUP, please report it to:

Security issues: security@repairops.app
Abuse reports: abuse@repairops.app
Legal concerns: legal@repairops.app

All reports are investigated and kept confidential to the extent possible.

6. Updates to This Policy

We may update this AUP to reflect changes in our Service, legal requirements, or security practices. Material changes will be communicated at least 30 days in advance via email to Organization Owners.