This policy is part of the Terms of Service. It applies to every account, every user on an account, and anyone acting through one. It exists to protect recipients, other customers and the service itself, and it is enforced.
1. Content and data you must not put through the Service
- Protected health information subject to HIPAA. We are not a business associate and offer no Business Associate Agreement.
- Payment card data. Do not build a form that asks a recipient for a card number. Card payments belong with our payment processor, which is built for it.
- Content you have no right to use, including a document you do not own or are not licensed to distribute.
- Malware, exploit code, or a file crafted to attack a viewer, a parser or another recipient.
- Content that is unlawful where it is sent or received, including material that harasses, defames, threatens, or sexually exploits anyone, and any material involving a minor.
- Data collected from a person without a lawful basis and without the notices they are entitled to.
2. Conduct
- Do not send links to people who have not agreed to hear from you, or use the Service for bulk unsolicited messaging.
- Do not impersonate another organization or person, or send a document that misrepresents who is asking for the information.
- Do not use the Service to make or support an employment, credit, housing or insurance decision in a way that breaks the law that governs it — including the Fair Credit Reporting Act's disclosure and authorization rules, fair-chance and “ban the box” ordinances, and anti-discrimination law.
- Do not ask a recipient for a specific identity document in a way that breaks document-abuse rules under IRCA, or retain I-9 copies for some employees and not others.
- Do not resell, sublicense, white-label or operate the Service as a service of your own, or use it to build a competing product.
3. Technical limits
- Do not probe, scan or test the security of the Service without our written permission. Good-faith vulnerability reporting under the security page is welcome and is not a breach of this policy.
- Do not attempt to access another tenant's data, another user's account, or any endpoint you have not been granted.
- Do not scrape, crawl or automate the interface beyond ordinary use, or circumvent a rate limit, quota, plan limit or spending cap — including those on AI features. Those limits protect a shared system and a real bill.
- Do not deliberately place an unreasonable load on the Service, or use it to attack anyone else.
- Do not reverse engineer, decompile or attempt to extract source code, except where law expressly permits it.
4. AI features
AI features exist to map and generate the structure of your own documents. Do not use them to process content unrelated to a document you are preparing, to generate content for another product, or to extract the underlying model's behaviour. Do not attempt to make the Service send a recipient's answers, a signature image or an uploaded file to the AI provider — the Service does not do it, and trying is a breach of this policy.
5. What happens when this policy is breached
Depending on severity we may warn you, disable a feature, suspend an account, terminate it, or preserve and disclose records where law requires. Where there is an immediate risk to the Service, to a recipient, to another customer or to us, we act first and explain as soon as we reasonably can. Suspension for a breach of this policy does not entitle you to a refund.
Report abuse to legal@branfillable.com, or a security issue to security@branfillable.com.