Acceptable Use Policy

1. Prohibited content

You may not use the Service to store, transmit, or process content that:

• Is illegal under applicable law or infringes intellectual property, privacy, or publicity rights
• Is defamatory, harassing, threatening, or intended to incite violence
• Is sexually explicit, sexually exploitative, or involves minors in any sexual context
• Facilitates or promotes illegal weapons, drugs, or other regulated goods outside of lawful commerce
• Contains malware, viruses, worms, or similar harmful code
• Constitutes spam or bulk unsolicited commercial communication in violation of CAN-SPAM or similar laws

2. Prohibited data categories

Because Brun is a general-purpose CRM and not a compliance-specific platform, you may not use the Service to store:

• Protected Health Information (PHI) subject to the Health Insurance Portability and Accountability Act (HIPAA)
• Cardholder data subject to PCI-DSS (card numbers, CVV, track data, PIN — Brun is not a PCI-compliant environment)
• Classified government information of any kind
• Children's personal information collected in violation of COPPA (information about children under 13)
• Data subject to export controls (ITAR, EAR) beyond the limits we are authorized to process

If your business handles these categories, Brun is not the right tool. We will not sign Business Associate Agreements (BAAs) or equivalent compliance attestations at this time.

3. Prohibited conduct

You may not:

• Circumvent the encryption model. Don't attempt to extract keys from other users' sessions, exploit the client to bypass encryption, or try to access ciphertext belonging to other customers.
• Probe for vulnerabilities without our written authorization. If you are a security researcher, please coordinate with us first by emailing [email protected].
• Scrape or automate access to the Service beyond our documented interfaces. Brun does not offer a public data API for reading or exporting your CRM records.
• Reverse engineer the Service, except to the extent such restriction is prohibited by applicable law.
• Resell, rent, or sublicense the Service without our written permission. The Service is licensed to your organization for your use, not for repackaging.
• Impersonate another person, company, or entity, or misrepresent your affiliation with any of them.
• Use automated bots or scripts to create accounts, inflate seat counts, or circumvent billing.
• Interfere with the Service — including attempts to disrupt, degrade, or overload our infrastructure, or attempts to interfere with other customers' use of the Service.

4. Security and authentication

• Keep your passwords confidential and do not share login credentials.
• Notify us promptly at [email protected] if you believe your account has been compromised.
• Maintain access to your workspace (see the Recovery Key section of our Terms of Service).
• Do not attempt to log in to accounts you do not own.

5. Email and outreach conduct

Brun is not an email marketing platform and does not send email on your behalf. However, if you use information stored in Brun to contact leads or prospects outside the Service, you agree that your outreach will comply with applicable law, including:

• CAN-SPAM (US)
• State anti-spam laws
• Do-not-call registries where applicable

Using Brun to organize outreach does not exempt you from these obligations.

6. Reporting violations

If you believe another user is violating this AUP, or you have been the target of misuse of the Service, contact us at [email protected]. We investigate all credible reports.

7. Enforcement

We may investigate suspected violations and take action including:

• Requesting that you modify or remove content
• Temporarily suspending your account
• Terminating your account without refund
• Notifying law enforcement where required by law

We will generally attempt to contact you before terminating your account, except in cases involving illegal content, security threats, or where law prohibits advance notice.

8. Changes to this Policy

We may update this AUP from time to time to reflect new types of abuse or changes in law. Material updates will be announced by email.

9. Contact

• General questions: [email protected]
• Abuse reports: [email protected]
• Security issues: [email protected]