Effective Date: 2026-05-08

This Acceptable Use Policy (the "AUP") sets out the conduct and content rules that apply to all users of SafetySphere (the "Service"). It is incorporated into our Terms of Service. Violation of this AUP is a material breach of those Terms.

You must not use the Service in any way that violates law, infringes the rights of others, or threatens the security or integrity of the Service or its users.

Prohibited content

You must not upload, post, transmit, or store content that:

1. Is unlawful, defamatory, harassing, threatening, abusive, or invasive of privacy.
2. Infringes any patent, trademark, trade secret, copyright, or other intellectual property right.
3. Contains malicious code (viruses, worms, ransomware, trojans).
4. Is obscene, hateful, or promotes discrimination, violence, or harm against any person or group.
5. Violates anti-spam law (including CASL or CAN-SPAM) when sent through the Service.
6. Contains payment card data, government IDs, or other sensitive data we identify as restricted, unless under a specific written agreement.
7. Contains protected health information subject to HIPAA, unless a Business Associate Agreement is in place.

Prohibited conduct

You must not:

1. Falsify or misrepresent H&S records. Do not knowingly enter false information into incident reports, risk assessments, permits to work, audits, training records, or other H&S records, particularly with the intent to deceive a regulator, an employer, an insurer, or a court.
2. Circumvent access controls. Do not access accounts, data, or systems you are not authorized to access, attempt to bypass authentication, or share credentials.
3. Disrupt the Service. Do not perform denial-of-service attacks, send excessive automated requests, or otherwise impair the Service's availability or performance.
4. Probe or scan vulnerabilities without our advance written authorization. Coordinated security research is welcome under our responsible disclosure process — see "Reporting" below.
5. Reverse engineer the Service, except to the extent expressly permitted by law.
6. Scrape, crawl, or harvest data from the Service without our written permission.
7. Resell or sublicense the Service or use it on behalf of third parties not covered by your subscription.
8. Use the Service to build a competing product or to benchmark for a competing product.
9. Send unsolicited communications through the Service.
10. Impersonate any person or organization or misrepresent your affiliation.
11. Violate export controls or sanctions. Do not use the Service in or for the benefit of any country, person, or entity subject to applicable Canadian or US sanctions.
12. Use the Service in life-critical or fail-safe contexts where failure could lead to death, personal injury, or environmental damage, except as a non-primary, advisory tool used in conjunction with appropriate qualified human oversight.

Health & safety record integrity

H&S records often have legal weight — they are reviewed by regulators, used in workers' compensation proceedings, and entered into evidence in litigation. Tampering with safety records can be a criminal offence under occupational health and safety legislation in many Canadian provinces and US states. You are responsible for the integrity of records you create and maintain in the Service. We may, where required by law, cooperate with regulators investigating record-keeping fraud.

Customer responsibility for users

If you are a customer organization, you are responsible for the conduct of your Authorized Users. You should communicate this AUP to them, monitor their use, and take prompt action against violations.

Enforcement

We may investigate suspected violations and take any action we consider appropriate, including:

• Removing or disabling content
• Suspending or terminating Authorized User access
• Suspending or terminating the customer's account
• Cooperating with law enforcement or regulators
• Pursuing legal remedies

We aim to give notice and an opportunity to cure where reasonable, but may act immediately to protect the Service, our users, or third parties.

Reporting

To report a violation, security vulnerability, or abuse:

• Abuse and AUP violations: info@stoneytechnologies.com
• Security vulnerabilities (responsible disclosure): info@stoneytechnologies.com
• Please include sufficient detail for us to investigate, and avoid testing on production data without authorization.

Changes

We may update this AUP from time to time. Material changes will be communicated through our standard notice channels. Continued use of the Service after the effective date constitutes acceptance.

---

Version: 1.0 — 2026-05-08