Acceptable Use Policy

IvaBoard is a place for customers to give feedback and for teams to listen. This policy keeps it safe and useful for everyone. It applies to customers (the people who run a workspace) and to the participants who use a customer's portal. It is part of our Terms of Service.

Customers are responsible for what happens in their workspace and portals, including what their participants post. Please moderate your portals, using the tools in the console.

1. What you must not do

Illegal and harmful content

• Post or share content that is illegal where you or the people you reach live.
• Post content that sexually exploits or endangers children. We report this to the authorities.
• Post content that promotes violence, terrorism or self-harm, or that threatens people.
• Post hateful or discriminatory content aimed at people because of who they are.
• Infringe other people's copyright, trade marks or other rights. Do not post what you do not have the right to share.
• Share other people's private information without their permission (for example addresses, phone numbers, identity documents or private messages).
• Use IvaBoard to run scams, phishing, fraud or illegal sales.

Abuse of people

• Harass, bully, stalk or intimidate anyone.
• Impersonate another person, a company or IvaBoard, or mislead people about who you are. Using a name that is yours or your team's is fine.
• Collect other people's personal data from IvaBoard in ways they would not expect, or ask participants for sensitive data (such as health data) or data about children.

Spam and misuse of email

IvaBoard sends email for you, such as sign-in codes and notifications. You must not use it to send unwanted messages.

• Do not use IvaBoard to send spam, bulk marketing or chain messages.
• Do not enter email addresses of people who did not agree to be contacted, and do not trigger sign-in or notification emails to people who did not ask for them.
• Do not try to get around email limits, suppression lists or unsubscribe links.
• If you connect your own sending domain, use it only for IvaBoard's service emails, and follow the rules of your email and DNS providers.
• Do not post fake ideas, votes or comments, or run bots to move votes up or down.

Attacks on the service

• Do not try to break, overload, probe or bypass IvaBoard's security, rate limits, access controls or workspace isolation.
• Do not upload malware, or files made to harm a device. Only upload the file types the service accepts.
• Do not use webhooks or integrations to attack other systems, or to try to reach private networks.
• Security testing requires our written permission. If you find a vulnerability, please tell us at support@ivaboard.com and give us reasonable time to fix it before you share it. We will not take action against people who report in good faith and do no harm.
• Do not scrape or copy the service at scale, resell access to it, or build a competing product from it. Reading public portals normally in a browser, and using the documented API within your plan and its limits, are fine.
• Do not share sign-in details or API keys, and do not use someone else's account.

Misuse of the service

• Do not use IvaBoard for things it is not meant for, such as hosting files, running a general website, or storing data unrelated to feedback.
• Do not hide the source of a custom domain, or point a domain you do not control to IvaBoard.
• Do not use a lifetime or other license in a way that breaks the limits of your plan or the fair-use rule in the Terms.

2. Moderation by customers

Customers must act on reports of content in their portals that breaks this policy. IvaBoard gives them tools to hide, edit, merge and remove content, and to remove or block participants. A customer that ignores clear violations in its portals may have its workspace restricted.

3. How we enforce this

We may act when we think this policy is broken, based on a report or on our own checks. We do not read your content for no reason, but we may look at it when needed to investigate a report, keep the service safe, or follow the law.

What we may do, in proportion to the problem:

• ask you to fix it;
• remove or hide content;
• limit features such as sending email, API access or custom domains;
• suspend a participant or a workspace;
• end the account under the Terms of Service;
• report to the police or other authorities where the law requires or where someone may be in danger.

Where we reasonably can, we warn you first and give you time to fix the problem. We may act at once for serious or urgent cases (for example illegal content, a security attack or an abuse of email sending). We will explain what we did, unless the law stops us. Unused time on a paid annual plan is not refunded if we end an account for a serious violation.

4. Reporting a problem

If you see content or behaviour on an IvaBoard portal that breaks this policy, write to support@ivaboard.com with a link and a short description. For content in a customer's portal, we will usually pass your report to that customer too, and we may act ourselves if needed. If you think content is illegal, say why. If you are in immediate danger, call your local emergency number first.

5. Changes

We may update this policy as the service changes. We will update the date above, and tell workspace owners by email for material changes.

6. Contact

Ivacode SRL, str. Alba-Iulia 21/1, MD-2051, Chișinău, Republic of Moldova
Email: support@ivaboard.com