Acceptable Use Policy

You will not use Aurex ERP:

• To violate any applicable law or regulation, including BIS hallmarking rules, GST law, anti-money-laundering rules (PMLA), customs law, FEMA, or state-specific jeweller licensing.
• To process transactions that you know or should reasonably know are part of tax evasion, undeclared income, or smuggling.
• To facilitate fraud, identity theft, or any deceptive trade practice.
• To infringe anyone's intellectual property rights.

You will not:

• Attempt to access another tenant's data, or any part of the Service you're not authorized to use.
• Probe, scan, or test the vulnerability of the Service or any associated network without our prior written permission. (See our Security page for how to report a vulnerability responsibly.)
• Bypass or disable any access control, rate limit, or security feature.
• Reverse engineer, decompile, or attempt to extract our source code.
• Use automated means (scraping, scripts, bots) to extract data from the Service at a rate or in a manner that interferes with normal operation.
• Upload viruses, malware, ransomware, or any code intended to damage or interfere with software, hardware, or data.
• Resell, sublicence, or rent access to the Service without our written permission.

You will not use Aurex ERP to:

• Harass, threaten, defame, or impersonate any person.
• Send spam or unsolicited bulk communications via email or SMS triggered through the Service.
• Store or distribute content that is obscene, defamatory, hateful, or otherwise unlawful in India.
• Process personal data in ways that breach DPDPA 2023 or any other privacy law that applies to you.

You will:

• Provide accurate and current registration and billing details, including legal entity name, GSTIN, and PAN.
• Promptly update us if anything changes — entity, address, billing email, ownership.
• Use the Service for genuine, ongoing jewellery-business purposes, not as a shell or for sham transactions.

• Each user must have their own login. Do not share credentials.
• Deactivate users promptly when staff leave.
• Use a strong password (the system enforces a minimum of 8 characters; longer is better).
• Tell us immediately at security@aurexerp.com if you suspect unauthorized access to your Workspace.

To protect the Service for everyone, we may apply reasonable rate limits, storage caps, or throttling — for example, on bulk imports, API calls, or attached files. We'll publish any specific limits in our documentation. We may temporarily restrict your Workspace if your use creates a sustained, abnormal load that risks affecting other customers.

If you believe someone is using Aurex ERP in a way that breaks this policy — or you've spotted a vulnerability — please tell us. Email security@aurexerp.com for security issues, or support@aurexerp.com for anything else.

If we believe you've breached this AUP, we may, depending on severity:

• Send you a notice asking you to stop or fix the issue.
• Restrict the affected feature.
• Suspend or terminate your Workspace under the Terms of Service.
• Notify regulators or law-enforcement when legally required.

Where the situation allows, we'll give you a chance to remedy a breach before taking any action that affects your access.

We may update this AUP from time to time. Material changes will be communicated by email or in-app notice at least 30 days in advance. Continued use after the effective date means you accept the updated policy.