Acceptable Use Policy (AUP)

To protect the privacy of your team, comply with global data protection laws, and maintain your own legal standing, you must adhere to strict data minimization practices.

Prohibited Identifiers: You are strictly prohibited from entering Personally Identifiable Information (PII) regarding third parties (such as direct reports, colleagues, or customers) into any open text fields or AI Coach prompts. You must use the UI-designated "Teammate" alias/nickname format (e.g., "Agent A"). You shall not input real full names, email addresses, specific geographical locations, or national ID numbers (e.g., SSNs).

Restrictions on Operational Copy-Pasting: Crescaa's open-text fields are designed exclusively for your synthesized, abstracted notes. You are strictly prohibited from copying and pasting raw, unredacted corporate documents into the application. This explicitly includes, but is not limited to: raw customer service transcripts or chat logs; unredacted Quality Assurance (QA) scorecards containing customer or agent identifiers; and official, unredacted company performance reviews or Performance Improvement Plan (PIP) documents.

You are solely responsible for ensuring that your use of Crescaa does not violate your employer's internal policies. You shall not use the platform to process operational data if doing so breaches your internal corporate confidentiality agreements, Non-Disclosure Agreements (NDAs), or employer restrictions regarding the use of third-party educational software. Crescaa assumes no liability for your breach of corporate policies.

Crescaa is designed exclusively to facilitate professional management development and educational coaching. You shall not use the platform to execute harmful, illegal, or unethical management practices, including:

Unauthorized HR Enforcement (EU AI Act Compliance): Utilizing AI Coach outputs or generated profiles as the sole basis for formal Human Resources decisions, disciplinary actions, performance improvement plans (PIPs), or terminations. All management actions must be grounded in independent human judgment and official HR systems of record.

Unlawful Employee Surveillance: Using the KPI features to execute covert workplace surveillance that violates localized labor laws, union bargaining agreements, or wiretapping statutes.

Harassment and Hostile Workspaces: Generating or saving performance notes designed to harass, defame, abuse, stalk, or intentionally humiliate a direct report.

Protected Attribute Profiling: Utilizing the app to track, categorize, or penalize team members based on protected characteristics (e.g., medical conditions, race, religion, sexual orientation, or trade union membership affiliation).

You are strictly prohibited from engaging in technical behaviors that threaten the platform, including:

System Scraping and Extraction: Deploying automated software, spiders, or screen scrapers to harvest training scenarios, user interfaces, system prompts, or AI processing patterns.

Malicious Disruption: Initiating denial-of-service (DoS) attacks, or introducing malicious code vectors (malware, rootkits) into the app ecosystem.

Unauthorized Probing: Scanning, testing, or auditing the vulnerabilities of our application or database storage without express written authorization from Crescaa engineering.

You shall not:

Falsely impersonate any individual, corporate executive, or entity.

Register automated dummy accounts to bypass established AI context usage limits, scrape content, or manipulate premium trial periods.

Falsify billing information or geographical IP data to evade localized subscription tax assessments.

Crescaa maintains absolute discretion to monitor platform analytics and user behavior for AUP violations. If an infraction occurs:

We reserve the right to immediately suspend your Account or permanently erase violating content records without notice.

For B2B Authorized Users operating under an Enterprise deployment, we reserve the right to report the violation directly to your corporate HR department or Enterprise Administrator.

We may report unlawful activities, including corporate data exfiltration or unlawful surveillance, to relevant national law enforcement authorities.