Acceptable Use Policy

1. Purpose

EduWindow is designed to support legitimate educational and institutional operations, including administration, communication, attendance, academic workflows, fee management, reporting, analytics, automation, and related institutional activities.

Users must use the Services responsibly, lawfully, securely, and only for purposes connected with legitimate institutional activities.

2. Authorized Use

Authorized users may use EduWindow to:

• Manage institutional operations
• Access assigned academic and administrative information
• Record and review attendance
• Manage homework, tests, classes, timetables, and academic activities
• Communicate with authorized students, parents, teachers, and staff
• Generate institutional reports and analytics
• Use permitted AI and automation features
• Manage fees, notices, documents, media, and other institutional workflows
• Perform other activities permitted by the institution and the applicable subscription

Use must remain within the permissions assigned to the user.

3. Institutional Responsibilities

The institution is responsible for:

• Ensuring that users accessing EduWindow are authorized
• Creating and managing user accounts
• Assigning appropriate roles and permissions
• Protecting administrative credentials and authentication methods
• Removing or restricting access when a person leaves the institution or no longer requires access
• Ensuring that institutional data uploaded to EduWindow is accurate, lawful, and properly authorized
• Obtaining required notices, permissions, consents, or approvals for processing user data
• Ensuring that its use of EduWindow complies with applicable laws and institutional policies
• Ensuring that users follow this AUP

4. Individual User Responsibilities

Every individual user must:

• Use only their own authorized account
• Keep passwords, OTPs, authentication information, and other credentials confidential
• Access only information and features they are authorized to access
• Use the Services responsibly and for legitimate purposes
• Immediately report suspected unauthorized access or security issues to the institution
• Respect the privacy and rights of other users
• Follow applicable institutional rules and policies

Users must not knowingly allow another person to use their account or credentials.

5. Prohibited Activities

Users must not use EduWindow to:

• Gain unauthorized access to accounts, systems, databases, APIs, or infrastructure
• Attempt to bypass authentication, authorization, role-based access controls, security measures, or usage restrictions
• Hack, attack, disrupt, overload, or interfere with the Services
• Introduce malware, viruses, ransomware, malicious code, or other harmful software
• Conduct denial-of-service or similar attacks
• Scrape, crawl, harvest, or systematically collect data from the Services without authorization
• Use automated tools or scripts to access the Services in a manner that violates applicable limits or security requirements
• Abuse APIs, endpoints, authentication systems, or platform resources
• Reverse engineer, decompile, disassemble, or attempt to derive the source code or underlying technology of the Services, except where expressly permitted by applicable law
• Copy or reproduce substantial portions of the platform, UI, workflows, technology, documentation, or functionality for unauthorized purposes
• Use EduWindow to develop, train, operate, or support a competing service where such use is prohibited by applicable agreement or law
• Impersonate another person, institution, administrator, teacher, student, parent, or EduWindow representative
• Access another user's account without authorization
• Upload or distribute unlawful, fraudulent, defamatory, abusive, threatening, or harmful content
• Upload content that infringes intellectual property, privacy, confidentiality, or other rights of third parties
• Use the platform for harassment, bullying, stalking, discrimination, or intimidation
• Send unauthorized spam, bulk communications, or abusive messages
• Attempt to manipulate attendance, grades, test results, reports, analytics, leaderboards, or other institutional records through unauthorized methods
• Circumvent subscription, feature, user, API, storage, or other technical restrictions
• Use the Services in a manner that could materially harm EduWindow, its infrastructure, institutions, users, or third-party service providers

6. Unauthorized Data Access

Users must not:

• View another user's private information without authorization
• Download institutional data they are not authorized to access
• Attempt to access another institution's information
• Modify, delete, export, or transfer data outside their assigned permissions
• Use vulnerabilities or technical weaknesses to obtain unauthorized information

Authorized access does not permit a user to use information for unrelated or unauthorized purposes.

7. Security Testing

Security testing, vulnerability scanning, penetration testing, automated probing, or similar activities against EduWindow infrastructure require prior written authorization from EduWindow.

Users must not conduct security testing against the Services without authorization.

Nothing in this section restricts lawful security research rights that cannot legally be excluded.

8. API and Automated Access

API access, integrations, automation, and programmatic access are permitted only where supported or expressly authorized by EduWindow.

Users and institutions must:

• Use valid authentication
• Follow applicable API limits
• Respect rate limits and usage restrictions
• Protect API credentials
• Avoid unnecessary or abusive requests
• Not attempt to access internal or undocumented APIs for unauthorized purposes

Direct access to EduWindow's internal databases or infrastructure is not permitted.

9. Data Upload and Content

Institutions and users must ensure that content uploaded to EduWindow:

• Is lawful
• Is relevant to the intended institutional purpose
• Does not knowingly contain malicious code
• Does not unlawfully infringe third-party rights
• Does not violate applicable privacy or confidentiality obligations

The institution remains responsible for the legality and authorization of institutional content it uploads or instructs EduWindow to process.

10. Academic and Institutional Records

EduWindow provides technology for recording, managing, analyzing, and displaying institutional information.

Institutions and authorized personnel remain responsible for decisions relating to:

• Grades
• Attendance
• Academic evaluation
• Promotion
• Discipline
• Student performance
• Teacher performance
• Institutional policies

Users must not manipulate records or use unauthorized methods to alter institutional outcomes.

11. AI and Automated Features

AI-powered features, including ADWO, must be used responsibly.

Users must not intentionally use AI features to:

• Generate unlawful content
• Circumvent security controls
• Produce fraudulent institutional records
• Harass or impersonate individuals
• Make unauthorized decisions affecting other users
• Generate or distribute harmful content

AI-generated information should be reviewed by an appropriately authorized human where it may affect important academic, administrative, disciplinary, financial, or other institutional decisions.

12. Privacy and Personal Information

Users must not use EduWindow to improperly collect, access, disclose, transfer, or misuse personal information.

Users must respect applicable privacy laws and institutional privacy requirements.

Access to personal information must be limited to legitimate institutional purposes and authorized responsibilities.

13. Children and Students

Where EduWindow is used by schools, coaching institutions, pre-schools, or other organizations involving minors, institutions and authorized users must use student information only for legitimate and authorized purposes.

Institutions remain responsible for ensuring that required permissions, notices, parental consent, and other legal requirements are satisfied where applicable.

14. Communication Features

Communication features, including notifications, email, SMS, WhatsApp, push notifications, and similar services, must not be used for:

• Spam
• Harassment
• Fraud
• Unauthorized marketing
• Misleading communications
• Excessive or abusive messaging

Institutions are responsible for configuring authorized recipients and communication settings appropriately.

15. Fraud and Misrepresentation

Users must not:

• Provide materially false information to obtain access
• Misrepresent their identity or authority
• Impersonate an institution or authorized representative
• Manipulate subscription or payment information
• Use EduWindow for fraudulent activities
• Attempt to obtain services or functionality through deception

16. Competitive and Commercial Misuse

Unless expressly authorized by EduWindow, users must not use the Services to:

• Copy substantial platform functionality
• Replicate proprietary workflows or technology
• Extract proprietary information for commercial exploitation
• Build a competing service using unauthorized access or copied proprietary materials
• Resell access to EduWindow outside permitted arrangements

This section does not restrict lawful independent development or activities permitted by applicable law.

17. Intellectual Property

EduWindow's software, source code, platform architecture, UI/UX, branding, documentation, algorithms, AI technology, workflows, and related technology remain protected by applicable intellectual property laws.

Access to EduWindow does not transfer ownership of these materials to an institution or user.

Institutional data and authorized user content remain subject to the ownership and licensing provisions of the Terms of Service.

18. Resource and System Abuse

Users must not consume platform resources in a manner that materially interferes with the Services or other customers.

This includes excessive:

• API requests
• Automated requests
• Storage usage
• Data extraction
• Authentication attempts
• Computational workloads

EduWindow may apply reasonable technical limits to protect system performance, security, and availability.

19. Security Vulnerabilities

If a user discovers a suspected security vulnerability, unauthorized access, data exposure, or other security issue, the user should report it to EduWindow through the designated security or support channel.

Users must not exploit the vulnerability, access additional information, modify data, or disclose the vulnerability publicly before allowing EduWindow a reasonable opportunity to investigate and respond.

20. Monitoring and Investigation

To protect the Services and users, EduWindow may monitor and analyze appropriate technical and security information, including activity logs, authentication events, API usage, error logs, and security signals.

Monitoring will be conducted subject to applicable law and EduWindow's Privacy Policy.

EduWindow may investigate suspected violations of this AUP.

21. Removal or Restriction of Content

EduWindow may remove, restrict, disable, or make unavailable content that it reasonably believes:

• Violates this AUP
• Violates applicable law
• Creates a security or privacy risk
• Infringes third-party rights
• Could materially harm the Services or users

Where appropriate and legally permitted, EduWindow may provide notice to the relevant institution or user.

22. Suspension of Access

EduWindow may temporarily restrict or suspend access where reasonably necessary because of:

• Serious security threats
• Unauthorized access
• Fraud
• Illegal activity
• Material violation of this AUP
• Abuse of platform resources
• Risk to other users or institutions
• Non-payment or other contractual reasons

Suspension may apply to an individual account, institution, feature, API, integration, or the Services as reasonably necessary.

23. Account-Level and Institution-Level Action

Where a violation is attributable to an individual user, EduWindow may take action against the relevant account.

Where the violation creates an institutional, security, legal, or operational risk, EduWindow may take broader action affecting the relevant institution or associated services.

EduWindow may coordinate with the institution's authorized administrator where appropriate.

24. Reporting Violations

Institutions and users may report suspected violations, unauthorized access, security incidents, or misuse through EduWindow's designated support or security channels.

Reports should contain sufficient information to allow EduWindow to investigate the matter.

25. No Circumvention

Users must not attempt to circumvent:

• Account restrictions
• Subscription limitations
• Role permissions
• Security controls
• API limits
• Authentication requirements
• Feature restrictions
• Geographic or technical restrictions

Attempting to circumvent a technical control may itself constitute a violation of this AUP.

26. Third-Party Services

EduWindow may integrate with third-party services such as cloud infrastructure, messaging providers, payment providers, authentication services, analytics providers, and other service providers.

Use of third-party services may also be subject to their own terms, policies, technical restrictions, and availability.

Users must not misuse third-party services through EduWindow.

27. Enforcement

EduWindow may consider the nature, seriousness, frequency, security impact, legal impact, and potential harm associated with an alleged violation when determining an appropriate response.

Possible actions include:

• Warning
• Content restriction or removal
• Feature restriction
• Account suspension
• API or integration restriction
• Institution-level restriction
• Termination of access
• Referral to appropriate authorities where legally required or reasonably necessary

28. Cooperation with Institutions

Where appropriate, EduWindow may work with an institution's authorized administrator to investigate suspected misuse involving the institution's users or data.

The institution remains responsible for managing its internal users and taking appropriate internal action.

29. Legal Compliance

Nothing in this AUP prevents a user or institution from exercising rights that cannot legally be restricted.

EduWindow may take actions necessary to comply with applicable laws, lawful government orders, court orders, regulatory requirements, or legitimate security obligations.

30. Changes to This Policy

EduWindow may update this AUP from time to time to reflect changes in the Services, technology, security practices, legal requirements, or operational practices.

Material changes may be communicated through the EduWindow platform, registered institution email, website, or other appropriate channels.

Continued use of the Services after an applicable update constitutes acceptance where legally valid.

31. Relationship with Other Policies

This AUP should be read together with:

• Terms of Service
• Privacy Policy
• Cookie Policy
• AI Terms
• Data Retention & Deletion Policy
• Security Policy
• Intellectual Property Policy
• Subscription & Refund Policy
• Data Processing Agreement, where applicable

If there is a conflict between this AUP and a separately executed written agreement with an institution, the applicable written agreement will govern to the extent of the conflict.

32. Contact

For questions, concerns, or reports relating to acceptable use: