Acceptable Use Policy

Purpose and scope

This policy applies to use of the BNAX website, inquiry channels, and access BNAX provides to its systems. Project-specific rules may also apply under your agreement. It is intended to protect visitors, clients, data, and service availability.

Use that is not permitted

• Fraud, impersonation, deceptive requests, unlawful activity, harassment, threats, or knowingly false project or contact information.
• Submitting personal information, copyrighted material, confidential records, or account access without the necessary rights or authority.
• Sending spam, using forms to deliver unwanted messages to someone else, or repeatedly submitting requests to evade limits.
• Introducing malware, attempting unauthorized access, probing private records, bypassing authentication, or manipulating another person’s inquiry or proposal.
• Disrupting the site through excessive automated traffic, exploiting a defect, or interfering with hosting, email, or security controls.
• Using access granted for one task to inspect unrelated systems or to continue access after that permission ends.
• Using BNAX branding, staff identity, or work samples to falsely imply sponsorship, affiliation, endorsement, or ownership.

Sensitive information and lawful projects

Do not place passwords, card data, identity documents, medical records, student records, or similarly sensitive material in public forms. If your project needs to process such information, describe the requirement without sharing the records and arrange the appropriate safeguards before transfer.

Clients are responsible for accurately describing their intended use and obtaining authority for content, data, and integrations they ask us to handle. We may decline work that would be unlawful, deceptive, abusive, or outside the agreed service scope. AI-assisted services are also subject to the AI & Automation Policy and relevant provider requirements.

Reporting a concern

Email contact@bnaxdesigns.com with “Security report,” “Abuse report,” or “Rights concern” in the subject. Include the affected URL, a concise description, and enough information to reproduce or locate the issue safely. Redact private data and do not include passwords, access tokens, or a copy of another person’s records.

If you encounter information you should not see, stop accessing it and report the location. This reporting channel is not permission to perform intrusive testing, obtain records, interrupt service, or conduct social engineering. Any authorized security assessment requires a separate written scope.

Response and review

We may investigate, reject a submission, limit traffic, remove abusive material, or restrict access as reasonably necessary and permitted by law. Urgent protective action may precede notice. We aim to explain an action when doing so is appropriate and does not compromise security, privacy, or a legal obligation.

If you believe a restriction is mistaken, contact us with the relevant reference and explanation. We will review the information. This process does not eliminate contractual obligations, lawful claims, or other remedies available to either party.