1. Purpose and who is bound
1.1 The Services are used for recruitment, staffing, bidding and procurement, activities that affect people's livelihoods and public money. This AUP sets the minimum standard of lawful, honest and safe use.
1.2 It binds Customer, its Affiliates, Authorised Users, contractors, partners, vendors and bidders given access, and any other person using a Service through Customer. Customer is responsible for their compliance and for their acts and omissions as for its own.
1.3 A breach of this AUP is a breach of the Master Subscription Agreement. Where this AUP and an Order Form conflict, clause 3.1 of the Master Subscription Agreement decides.
2. General rules
You shall not, and shall not permit anyone to, use a Service to:
- (a) breach Applicable Law, regulation, court order, sanctions or a third party's rights;
- (b) infringe intellectual property, confidentiality, privacy or publicity rights;
- (c) defraud, deceive or mislead any person, or impersonate any person or organisation;
- (d) transmit malware, ransomware or other harmful code, or conduct unauthorised scanning, probing, penetration, denial of service or load testing;
- (e) gain or attempt to gain unauthorised access to any system, account, data or tenant;
- (f) interfere with the integrity, security or performance of a Service or of any Third-Party Provider's service;
- (g) use any Service in breach of the terms of a Third-Party Provider that the Service uses, including AI Providers' usage policies, app store rules and integration terms;
- (h) evade or defeat a usage limit, rate limit, licence control, safety filter or access restriction; or
- (i) use the Service in any way that could foreseeably cause death, serious injury or serious damage to property or environment.
3. Account security
3.1 Credentials are personal. Do not share them, and enable multi-factor authentication where offered.
3.2 Tell support@bnr360.com promptly of any suspected compromise or unauthorised use.
3.3 Customer shall promptly remove Authorised Users who leave or no longer need access, and assign roles on least privilege.
4. Data and privacy
You shall not:
- (a) submit personal data without the lawful basis, notice and consent that Applicable Law requires;
- (b) submit prohibited categories of data listed in clause 9.4 of the Master Subscription Agreement;
- (c) scrape, harvest, buy or compile personal data from any source in breach of that source's terms or the law, or use a Service to build profiles of individuals unrelated to a legitimate recruitment or procurement purpose;
- (d) use personal data for a purpose that is incompatible with the purpose communicated to the individual, including unrelated marketing, lending, insurance or surveillance decisions;
- (e) record any person in secret where notice or consent is required; or
- (f) use data for stalking, harassment, doxxing, intimidation or retaliation.
5. AI use
In addition to clause 13 of the Master Subscription Agreement and the AI Addendum, you shall not use a Service or AI Output to:
- (a) except through the NeuroHire Analysis Module as NeuroHire Product Addendum permits, infer or classify emotion, personality traits, mental state, health, disability, sexual orientation, religion, political opinion, race, ethnicity or any other protected characteristic of an individual, or to use any prohibited practice under Applicable Law;
- (b) except through the NeuroHire Analysis Module as NeuroHire Product Addendum permits, identify an individual from face, voice or other biometric data, or enable biometric categorisation;
- (c) make a solely automated decision with legal or similarly significant effect on an individual where Applicable Law forbids it or requires a human to decide;
- (d) present AI Output as human-authored or verified where Applicable Law, a procurement rule or a duty of candour requires disclosure;
- (e) generate or spread deepfakes, fabricated documents, fabricated references or fabricated credentials intended to deceive;
- (f) attempt prompt injection, jailbreaking, model inversion, extraction of system prompts or model weights, or reveal another customer's data;
- (g) submit adversarial or poisoned documents intended to manipulate AI scoring or ranking;
- (h) use AI Output to train, tune or benchmark a competing product or model; or
- (i) build automated workflows that send communications, rejections, disqualifications or submissions without meaningful human review.
6. Recruitment and staffing
You shall not use a Service to:
- (a) discriminate unlawfully on any protected ground in job descriptions, criteria, screening, ranking, interviewing or hiring, or use criteria that operate as proxies for a protected ground;
- (b) post fake, misleading or ghost job advertisements, or advertise roles that do not exist or that you have no authority to fill;
- (c) collect fees from candidates that are unlawful, or engage in exploitative recruitment, forced labour, human trafficking, debt bondage, retention of identity documents or fraudulent migration schemes;
- (d) submit a candidate to a client, employer or bid without the candidate's authority, or falsely claim exclusive representation of a candidate;
- (e) fabricate or inflate qualifications, titles, dates, experience, certifications, clearances or references, or alter a resume to misrepresent a candidate's actual experience;
- (f) impersonate a candidate, or complete an assessment for another person;
- (g) ask questions that are unlawful in the jurisdiction, or collect information about protected characteristics where it is unlawful to do so; or
- (h) harass, threaten or intimidate any candidate.
7. Procurement, tendering and bidding
You shall not use a Service to:
- (a) rig bids, fix prices, cover bid, allocate markets or otherwise collude or restrict competition;
- (b) offer, give, request or accept a bribe, kickback, gift or advantage to influence a procurement or award;
- (c) obtain, use or upload confidential procurement information that you have no right to hold, including competitors' bids, scoring information, evaluation notes or internal budgets;
- (d) conceal or fail to disclose a conflict of interest, or evaluate while conflicted where the rules forbid it;
- (e) draft specifications to predetermine a winner, apply undisclosed criteria, or change evaluation criteria, weights or formulas after the rules forbid it;
- (f) fabricate bids, evaluation records, audit trails or approvals;
- (g) make a false certification, declaration or representation to a procuring authority; or
- (h) falsify experience, references, qualifications or financial information in a bid.
8. Content standards
8.1 You shall not submit, store or share content that is unlawful, defamatory, threatening, harassing, hateful, sexually explicit, or that promotes violence, terrorism or self-harm, or that depicts or promotes the abuse or exploitation of any person.
8.2 Child safety. BnR360 has zero tolerance for child sexual abuse and exploitation material and any content that sexualises minors, or any conduct that grooms, solicits or endangers a child. Customers shall not submit data of persons under 18 except as clause 9.4 of the Master Subscription Agreement allows. BnR360 will remove such content, preserve evidence as the law requires, terminate access without notice or refund, and report to the competent law enforcement authorities and child protection bodies in Pakistan and elsewhere as the law requires.
9. Mobile Apps and APIs
9.1 You shall comply with the app store terms and the Mobile App's permissions model, and shall not modify, decompile, jailbreak around, or redistribute a Mobile App except as the law permits.
9.2 You shall use APIs only with issued credentials, within rate limits and security rules in the Documentation, and shall not use bots, scripts or scrapers to bypass controls.
10. Third-party services
When you connect LinkedIn, job boards, email, calendar, identity, storage or procurement portal accounts, you shall do so only with authority, comply with their terms, and not use a Service to circumvent their limits or access controls.
11. Reporting breaches and concerns
11.1 Report suspected breaches of this AUP, security vulnerabilities, unlawful content, AI output harms or discrimination concerns to support@bnr360.com, with the subject AUP Report. We read and reply to email Monday to Friday, 7:00 a.m. to 4:00 p.m. EST, excluding public holidays gazetted in Sindh, Pakistan, and cannot monitor reports outside those hours.
11.2 Reports of risk to life or child safety should also be made immediately to local emergency and law enforcement services. Email to BnR360 is not an emergency channel.
11.3 We will investigate reports as resources permit. We are not obliged to disclose the outcome.
12. Monitoring and enforcement
12.1 BnR360 has no general duty to monitor Customer Data or use of the Services, but may review use to enforce this AUP, protect security, comply with law and respond to reports, subject to the DPA and the Privacy Policy.
12.2 BnR360 may, at its discretion and with or without notice: warn Customer; require corrective action; remove or block content; limit features; suspend an Authorised User or account; terminate under clause 24.3 of the Master Subscription Agreement; and refer a matter to law enforcement or a regulator.
12.3 No refund is due where access is suspended or terminated for breach.
12.4 BnR360 may disclose information to authorities and to affected third parties where the law requires or permits, including to prevent harm.
12.5 Customer shall cooperate reasonably with BnR360's investigation, including by providing information on request.
13. Responsible disclosure
Security researchers acting in good faith, who follow clause 18.6 of the Master Subscription Agreement, will not be pursued by BnR360 for a violation of this AUP.
14. Changes and remedies
BnR360 may update this AUP on notice under clause 43 of the Master Subscription Agreement. Its rights are in addition to every other remedy, and failure to enforce is not a waiver. Customer shall indemnify the BnR360 Indemnitees under clause 31 of the Master Subscription Agreement for claims arising from a breach of this AUP.