Acceptable Use Policy

Version 1.0. Last updated: 6 September 2026.

Published in English, Russian and Uzbek. The English text prevails if the versions differ.

This Policy is part of the Terms of Service and of the Public Offer.

1. The idea

Tracepo receives whatever you send it. That makes this Policy shorter and more important than most: the two things that matter are what you put into the telemetry and what you do to the platform.

This Policy applies to you and to everyone you invite into your organisation. You are responsible for them.

2. What you must not send us

2.1 Sensitive data - never

Do not use the Service to process:

biometric data and genetic data;
health and medical data;
data revealing racial or ethnic origin, political opinions, religious or philosophical beliefs, or trade union membership;
data about sex life or sexual orientation;
data about criminal convictions, offences or related security measures;
government-issued identification numbers, including passport, national ID and tax identification numbers;
payment card numbers, cardholder data and bank account credentials.

This is a hard prohibition. If we find such data in your account, we may remove it and we will tell you.

Under the law of the Republic of Uzbekistan, biometric and genetic data carry mandatory localisation and handling requirements that our Service is not built for. That is why the prohibition is absolute rather than a matter of configuration.

2.2 Other personal data - reasonable efforts

Telemetry catches personal data by accident: a user identifier in a request path, an email address in an error message, an IP address in a log line. We do not pretend this can be reduced to zero.

Use reasonable efforts to keep personal data out of what you send: redact or hash identifiers at the source, keep request bodies out of spans, and configure your logging so that personal data is not written in the first place.

2.3 Secrets - never on purpose

Do not deliberately send passwords, API keys, access tokens, private keys, session cookies or other credentials.

If a secret reaches us by accident, treat it as compromised: rotate it, then tell us at support@tracepo.io. We will help you remove the affected data. We do not scan your telemetry looking for secrets, so we will not notice it for you.

2.4 Content that is unlawful or harmful

Do not send content that is unlawful, that infringes someone's rights, that contains malware, or that you have no right to send.

3. What you must not do to the platform

Do not:

attempt to gain access to accounts, organisations or data that are not yours;
probe, scan or test the security of the Service without our prior written permission, or conduct penetration testing against it;
circumvent authentication, tenant isolation, plan limits, quotas or rate limits, or attempt to;
send telemetry using ingestion credentials that were not issued to your organisation;
interfere with the Service's availability or performance for anyone else, including through excessive automated requests or deliberately malformed data;
reverse engineer, decompile or disassemble the Service, except where mandatory law allows it;
resell, sublicense or provide the Service to third parties as your own service, without our written agreement;
use the Service to build a competing product;
remove or obscure our notices and branding.

We welcome security research. If you think you have found a vulnerability, write to support@tracepo.io before doing anything else, and give us reasonable time to fix it. We will not pursue anyone who reports in good faith and does not access other customers' data.

4. What you must not use the Service for

Do not use the Service:

to break the law of the Republic of Uzbekistan or of any country where you operate;
to monitor people covertly, or in a way that violates their privacy or employment rights;
to store or process data you obtained unlawfully;
to send unsolicited bulk email through our alert channels, or to use alerting as a delivery mechanism for messages unrelated to monitoring;
to support activity that is fraudulent, deceptive, or designed to harm others;
in any way that would put us in breach of applicable sanctions or export controls.

5. Fair use of resources

Plan limits are published and enforced by the product. There is no automatic overage: when you reach a limit, the operation is refused rather than billed.

Beyond the published limits, we ask for common sense. If your usage threatens the stability of the platform for other customers, we will contact you first and work out a solution. We will only take technical measures if talking does not work or if the situation is urgent.

6. What happens if you break this Policy

Our response is proportionate to what happened.

Usually we contact you, explain the problem and give you a reasonable time to fix it.

Where the risk is immediate - an ongoing attack, unlawful content, a threat to the platform or to other customers, or a legal requirement - we may suspend access first and explain afterwards. We will tell you as soon as we can, and we will restore access as soon as the cause is resolved.

We may terminate for a serious or repeated breach, as described in the Terms of Service.

Suspension under this Policy is not the same as suspension for non-payment. Non-payment follows the Billing and Refund Policy, which has its own grace period and its own timetable.

7. Reporting a problem

If you believe someone is misusing the Service, tell us at support@tracepo.io. Include enough detail for us to investigate.

8. Changes

We may update this Policy. If a change materially restricts what you may do, we will tell you by email at least 30 days before it takes effect.

"BEATAI LABS" LLC, TIN 312569409, Toshkent shahri, Mirobod tumani, Yuksalish MFY, Kuylik-3 mavzesi, 37-uy, 26-xonadon, Republic of Uzbekistan. support@tracepo.io