Exposure Watch Acceptable Use Policy

Effective date: June 15, 2026

Company: Exposure Watch, Inc.

This Acceptable Use Policy ("AUP") is incorporated into the Terms of Service.

1. General rule

Use Exposure Watch only for lawful internal business purposes and only in accordance with the Terms, applicable Orders, documentation, and this AUP.

2. Prohibited data

You must not submit, upload, import, paste, type, transmit, or store:

1. PHI, patient records, resident names, resident identifiers, clinical data, diagnosis data, treatment data, payment-for-care data, or health-plan data;
2. Social Security numbers, driver's license numbers, passport numbers, financial account numbers, biometric identifiers, precise personal location of individuals, or other highly sensitive personal information unless expressly authorized in writing by Exposure Watch;
3. payment card data except through the approved payment processor;
4. malware, exploit code, or harmful content; or
5. data you lack authority to provide.

3. Prohibited uses

You must not:

1. use the Service as a substitute for 911, official emergency alerts, emergency dispatch, emergency response, facility emergency plans, or life-safety systems;
2. present Exposure Outputs as official government warnings or emergency instructions;
3. use the Service to make clinical, medical, resident-care, admission, discharge, staffing, or evacuation decisions without independent professional review;
4. use the Service for unlawful surveillance, discrimination, harassment, abuse, deception, or harmful profiling;
5. scrape, crawl, bulk export, resell, sublicense, or redistribute the Service or Exposure Outputs except as permitted in the Terms or an Order;
6. remove or alter source attributions, timestamps, precision labels, evidence labels, or disclaimers;
7. interfere with, disrupt, overload, reverse engineer, probe, scan, or test the Service without written authorization;
8. bypass access controls, impersonate others, share accounts, or use another user's credentials;
9. use bots, scripts, or automated methods except approved APIs or documented features;
10. use the Service to send spam, unlawful messages, or alerts without required consent;
11. violate third-party or public-data source terms; or
12. use the Service in a way that could harm Exposure Watch, customers, data providers, public agencies, or third parties.

4. Security testing

Do not conduct penetration tests, vulnerability scans, load tests, or security research against the Service without prior written authorization. Report suspected vulnerabilities to security@exposurewatch.co.

5. Enforcement

Exposure Watch may suspend or terminate access, remove content, delete prohibited data, throttle usage, notify administrators, or take other remedial action for violations or suspected violations of this AUP.