Acceptable Use Policy

Customers must not use our Services to create, upload, copy, store, distribute, publish, or transmit content in a manner that infringes another person’s copyright, trademark, trade secret, confidential information, or other intellectual property or proprietary rights.

Customers are responsible for ensuring that they have the rights, licences, permissions, and authority required for information and materials they provide for use with our Services.

Customers must not knowingly use our Services to distribute unlawful content or content that they are legally prohibited from possessing, distributing, or making available.

Our Services must not be used to send commercial electronic messages, marketing communications, automated messages, text messages, or other communications in violation of applicable laws or regulations.

Customers are responsible for obtaining any consent required before sending communications and for maintaining appropriate records of that consent where required.

Our Services must not be used to:

• Send unlawful spam or unsolicited bulk communications.
• Add individuals to email, telephone, text message, or other marketing lists without the consent or other lawful basis required for doing so.
• Use purchased, scraped, harvested, or improperly obtained contact information for unlawful messaging or marketing.
• Circumvent unsubscribe requests, suppression lists, consent requirements, or other applicable communication preferences.
• Misrepresent the identity of the sender or use deceptive information in connection with a communication.

Customers remain responsible for compliance with Canada’s Anti Spam Legislation and any other electronic messaging laws that apply to their activities.

Our Services must not be used to compromise, disrupt, damage, interfere with, or obtain unauthorized access to any system, account, network, application, device, data source, or electronic resource.

Prohibited conduct includes:

• Accessing or attempting to access accounts, data, systems, applications, or networks without authorization.
• Introducing, distributing, or executing malware, ransomware, viruses, malicious scripts, or other harmful code.
• Attempting to bypass authentication, security controls, access restrictions, usage controls, or technical protections.
• Conducting unauthorized vulnerability testing, security scanning, credential testing, penetration testing, or similar activities.
• Launching or assisting denial of service attacks or other attempts to disrupt the availability of a system or service.
• Intercepting, altering, deleting, corrupting, or manipulating information without authorization.
• Using credentials, API keys, tokens, accounts, or other access mechanisms belonging to another person without authorization.

Nothing in this section prevents legitimate security testing that has been expressly authorized by the owner of the affected system and is permitted under the customer’s agreement with Northfield Technology Partners.

Customers must not use our Services to collect, access, disclose, process, monitor, or distribute personal information in violation of applicable privacy or data protection laws.

Customers are responsible for ensuring they have the authority and any required consent to provide personal information, confidential information, customer records, employee information, or other data to systems, applications, AI tools, or workflows connected to our Services.

Our Services must not be used to:

• Obtain personal information through fraud, deception, unauthorized access, or other unlawful means.
• Disclose personal or confidential information without proper authority.
• Circumvent privacy settings, access controls, or security measures.
• Conduct unlawful surveillance or monitoring.
• Create or maintain databases of personal information obtained unlawfully.

Customers should only provide information reasonably necessary for the intended purpose of the Service.

Where our Services include artificial intelligence, automated workflows, AI agents, or systems connected to third party AI services, customers remain responsible for how those systems are used within their business.

Customers must not knowingly use an AI or automated system provided or configured by Northfield Technology Partners to:

• Commit fraud, impersonate another person deceptively, or misrepresent the origin of communications or content.
• Generate, distribute, or assist unlawful activity.
• Gain unauthorized access to systems, accounts, or information.
• Violate another person’s privacy, intellectual property, contractual, or other legal rights.
• Make unlawful discriminatory decisions about individuals.
• Circumvent security, access restrictions, safety controls, or legal requirements.
• Present AI generated information as verified professional advice where independent professional review is required by law or by the nature of the decision.

Customers are responsible for reviewing AI generated outputs where human review is reasonably appropriate. Artificial intelligence systems may produce inaccurate, incomplete, or unexpected results and should not be treated as infallible.

Customers must not use our Services to engage in fraud, identity theft, phishing, deceptive impersonation, financial scams, or other activities intended to improperly obtain money, property, information, credentials, access, or trust.

Customers must not impersonate Northfield Technology Partners or falsely claim an endorsement, partnership, authorization, employment relationship, or other business relationship with us.

Customers must not reproduce or use our name, branding, intellectual property, systems, or materials in a manner intended to mislead another person.

Our Services must not be used to knowingly threaten, stalk, harass, intimidate, or abuse another person in violation of applicable law.

Our Services must not be used to promote or coordinate unlawful violence or to distribute content involving the sexual exploitation or abuse of children.

We may take immediate action where we reasonably believe use of our Services presents a serious security risk or an imminent risk of unlawful harm.

Our Services must not be used to conduct, promote, support, or conceal activities that are prohibited by applicable law.

This includes unlawful trafficking, money laundering, fraud, terrorist activity, illegal weapons activity, unlawful gambling operations, or the distribution of illegal controlled substances.

Customers must also comply with applicable sanctions, trade restrictions, and export control requirements.

Customers must not intentionally use our Services in a manner that materially disrupts Northfield Technology Partners, another customer, or a third party service connected to our work.

Customers must comply with applicable terms, policies, technical limits, and access requirements imposed by third party platforms they choose to connect with our Services.

A customer’s access to a third party platform through a system, workflow, or integration configured by Northfield Technology Partners does not grant the customer rights beyond those provided by that third party.