Acceptable Use Policy

This Policy must be read together with the Beginso Terms of Use, Privacy Policy, Cookie Policy and any applicable subscription, enterprise, order-form or data-processing terms.

1. Purpose, Status and Scope

1.1 Purpose

Beginso is a software-as-a-service form management and data-collection platform that enables Users to create and publish Forms, collect and review Submissions, accept uploaded files, generate analytics and reports, collaborate through personal and shared Workspaces, assign roles and permissions, and manage related activity and account functions. This Policy establishes mandatory standards for lawful, safe and responsible use of those capabilities.

The objectives of this Policy are to protect the integrity, security, availability and reputation of the Platform; protect Users, Respondents and third parties from harm; reduce abuse, fraud and unlawful data collection; protect intellectual-property and privacy rights; and enable Beginso to take proportionate enforcement action when misuse occurs.

1.2 Binding Status and Incorporation

This Policy is incorporated by reference into the Beginso Terms of Use and forms part of the binding agreement governing use of the Platform. Acceptance of the Terms of Use includes acceptance of this Policy. If this Policy and the Terms of Use conflict on matters concerning prohibited conduct, Content or abuse prevention, the more restrictive requirement shall apply to the extent permitted by Applicable Law.

1.3 Who This Policy Applies To

This Policy applies to Registered Users, Workspace Owners and administrators, Team Members, Authorised Users, Form Owners, trial or beta users, enterprise or organisational users, developers or API users where applicable, Respondents insofar as they interact with the Platform, and any other person or entity that accesses or uses Beginso.

1.4 Legal Framework

This Policy is intended to operate consistently with Applicable Law, including where relevant the Information Technology Act, 2000, applicable rules issued under it, the Digital Personal Data Protection Act, 2023 and rules brought into force under it, the Copyright Act, 1957, the Bharatiya Nyaya Sanhita, 2023, consumer-protection law, intellectual-property law, cybersecurity obligations, export-control and sanctions requirements, and mandatory laws applicable in the jurisdiction of a User or Respondent. References to legislation include amendments, replacements and successor legislation.

2. Definitions

Capitalised terms not defined in this Policy have the meanings given in the Terms of Use or Privacy Policy.

"Authorised Purpose" means a lawful use of Beginso that is consistent with the Platform's intended form-management, data-collection, reporting, collaboration and workspace functionality and is permitted by the Terms of Use, this Policy and Applicable Law.

"Content" means all Forms, questions, labels, text, images, branding, logic, templates, responses, Submissions, uploaded files, reports, exports, comments, metadata, Workspace information, configuration data and other material created, uploaded, entered, transmitted, collected, stored or processed through the Platform.

"Form" means a form, questionnaire, survey, application, registration flow, request form or similar data-collection interface created or administered using Beginso.

"Form Owner" means the User or organisation that creates, controls, owns or administers a Form.

"Public Form Link" means a URL, embed, QR-linked page or other access method through which a Respondent may access a published Form.

"Respondent" means a person who accesses, completes, partially completes or submits information through a Form.

"Sensitive or Regulated Data" means personal, confidential or regulated information subject to heightened protection under Applicable Law, which may include children's data, health information, biometric data, financial information, government-issued identifiers, identity documents, criminal-record information, education records and similar information.

"Submission" means information entered, uploaded or submitted by or about a Respondent through a Form.

"Workspace" means a personal or collaborative Beginso environment in which Forms, Team Members, permissions, activity and related information are organised.

3. General User Responsibilities

3.1 Lawful and Authorised Use

You may use Beginso only for lawful and Authorised Purposes. You are responsible for all activity carried out through your Account, Workspace, Forms, Public Form Links, integrations and Authorised Users, except to the extent an activity results solely from Beginso's own breach of its obligations.

3.2 Authority and Permissions

You must have all rights, permissions, licences, consents and organisational authority necessary to create a Form, request information, upload Content, invite Team Members, grant access, publish a Form, collect Submissions, download or export information, or otherwise process Content through Beginso.

3.3 Accuracy and No Deception

You must not use Beginso to impersonate another person or organisation, misrepresent the source or purpose of a Form, fabricate approvals, present a Form as officially authorised when it is not, or intentionally collect information through materially false or deceptive representations.

3.4 Account and Workspace Security

You must maintain the confidentiality of credentials and access tokens, promptly revoke access that is no longer required, use available security and permission controls appropriately, and notify security@beginso.com if you become aware of actual or suspected unauthorised access, credential compromise, security incident or misuse affecting the Platform.

4. Data Collection, Privacy and Sensitive Information

4.1 Form Owner Responsibility

A Form Owner determines what information a Form requests and the purpose for which it is collected. The Form Owner is solely responsible for ensuring that the collection, use, sharing, retention, export and other processing of Respondent Data through that Form is lawful and appropriately disclosed to Respondents.

4.2 Privacy Notices and Consent

Where Applicable Law requires a privacy notice, consent, parental or guardian authorisation, employment notice, sector-specific disclosure or another legal basis before data is collected, the Form Owner must provide or obtain it before collection. Use of Beginso does not itself supply a lawful basis, consent or regulatory authorisation for a User's independent processing activities.

4.3 Prohibited Privacy Conduct

Users shall not use the Platform to collect, upload, process or disclose personal data in a manner that unlawfully infringes privacy, confidentiality, data-protection or personality rights. This includes collecting personal data without a lawful basis where one is required; covert surveillance; unlawful tracking; non-consensual intimate material; unauthorised biometric collection; deceptive identity harvesting; or collecting information through phishing, impersonation or other fraudulent means.

4.4 Children's Data

Where a User collects personal data relating to children or minors, the User is solely responsible for determining whether the collection is lawful and for obtaining any verified parental or guardian consent or other authorisation required by Applicable Law. Users must not use Beginso in a manner that exploits, endangers, manipulates, profiles or unlawfully targets children.

4.5 Sensitive and Regulated Data

Users may process Sensitive or Regulated Data through Beginso only where they have a lawful basis, all necessary permissions and authorisations, and any safeguards required by Applicable Law. Beginso may, at its discretion, prohibit or condition particular categories of high-risk processing, require additional contractual safeguards, or require a separate Data Processing Agreement or enterprise arrangement before permitting such processing.

Without Beginso's prior written agreement, use of the Platform does not constitute any representation or warranty that the Platform is certified, approved or suitable for a particular sector-specific regulatory regime applicable to healthcare, financial services, government, defence, education, identity verification, KYC, biometrics or any other regulated activity.

4.6 Data Minimisation and Form Design

Users should request only information reasonably necessary for the stated purpose of a Form. Beginso may restrict, disable or investigate Forms that appear designed primarily to harvest excessive personal information, credentials, financial information, government identifiers or other high-risk data without a legitimate purpose.

5. Prohibited Content — Absolute Prohibitions

The following Content is prohibited. A violation may result in immediate action without prior warning where appropriate.

• Child sexual abuse material (CSAM), child exploitation, grooming material, sexualised content involving minors, or material that facilitates or promotes abuse or exploitation of children.
• Content that promotes, glorifies, incites, recruits for or materially facilitates terrorism or violent extremism, or supports organisations prohibited under Applicable Law.
• Content that unlawfully incites violence, hatred or discrimination against persons or groups based on protected characteristics.
• Non-consensual intimate imagery, unlawful obscene material, sexual exploitation material, or other content whose possession, collection, publication or distribution is prohibited by Applicable Law.
• Malware, ransomware, spyware, credential stealers, phishing kits, malicious scripts, cryptojacking code, botnet tools, denial-of-service tools, exploits or other code designed to compromise systems or persons.
• Content used for unlawful surveillance, stalking, coercive monitoring, doxxing, harassment or threats.
• Fraudulent forms, phishing forms, fake login pages, credential-harvesting forms, deceptive payment forms, identity-theft schemes or other content designed to obtain information or money through deception.
• Content that infringes copyright, trademark, patent, trade-secret, privacy, publicity or other third-party rights.
• Content whose collection, storage, disclosure or processing is unlawful in the relevant jurisdiction.

6. Prohibited Activities

Users shall not, directly or indirectly, engage in any of the following activities or permit an Authorised User to do so:

• gain or attempt to gain unauthorised access to another Account, Workspace, Form, Submission, file, system, network, database or administrative interface
• circumvent, disable, bypass or interfere with authentication, role permissions, rate limits, anti-bot measures, access controls, usage limits or other technical restrictions
• use multiple Accounts, Workspaces, automation, aliases or other techniques to evade restrictions, enforcement actions, usage limits or plan limitations
• scrape, crawl, index, harvest, mirror or extract Platform data through automated means except where expressly authorised by Beginso
• reverse engineer, decompile, disassemble or attempt to derive source code, non-public APIs, algorithms, security controls or internal architecture except to the extent such restriction is prohibited by law
• use Beginso to spam, send unsolicited bulk communications, operate chain-letter or pyramid schemes, or distribute deceptive promotions
• manipulate analytics, response counts, activity logs, reports or other Platform measurements
• use the Platform to build, train or benchmark a competing product using unauthorised extraction of Beginso's non-public functionality, data or design
• resell, sublicense, rebrand, white-label or commercially redistribute access to the Platform except under an express written agreement with Beginso
• impersonate another individual, company, public authority, educational institution, financial institution or other organisation
• use Beginso for money laundering, fraud, sanctions evasion, unlawful financial solicitation or other financial crime
• interfere with Platform availability, overload infrastructure, conduct denial-of-service activity, or create unreasonable resource consumption
• use Respondent information obtained through Beginso for unlawful profiling, discrimination, harassment or purposes materially inconsistent with the notice given to the Respondent
• use exported or downloaded information in violation of Applicable Law or the rights of the relevant Respondent or data subject
• assist, encourage or enable another person to engage in any prohibited activity

7. Feature-Specific Use Rules

7.1 Forms and Public Form Links

Forms and Public Form Links must be used for legitimate data-collection purposes. Users must not disguise the identity or purpose of a Form in order to obtain information deceptively; present a Form as an official form of an organisation without authority; publish Forms intended primarily for credential theft, unlawful surveillance or fraud; or knowingly direct Respondents to unlawful or harmful Content.

7.2 Embeds and QR Codes

Users are responsible for where and how they embed, distribute or publish Beginso Forms or QR codes. Embedding a Form on a third-party website must not mislead Respondents as to the operator or purpose of the Form, circumvent third-party rules, or cause Beginso to be represented as endorsing an unauthorised third-party website or service.

7.3 File Uploads

File-upload fields must be used only for legitimate purposes. Users must not intentionally solicit malware, prohibited content, stolen credentials, unlawfully obtained identity documents or other illegal material. Form Owners are responsible for ensuring that they are authorised to request and retain uploaded documents and for applying appropriate access restrictions to sensitive files.

7.4 Workspaces, Teams and Permissions

Workspace Owners and administrators are responsible for granting access only to persons who are authorised to receive it. Team Members must not access, copy, export, disclose or use Form or Respondent information beyond the permissions and legitimate purposes granted to them. Users must promptly revoke access where a person no longer requires it.

7.5 Analytics, Reports and Exports

Analytics, reports and exports are provided for legitimate operational and reporting purposes. Users must not intentionally falsify Platform analytics, misrepresent reports as independently verified evidence where they are not, or use exported Respondent Data for unlawful purposes. Once data is exported from Beginso, the User is responsible for securing, retaining, sharing and deleting the exported copy in accordance with Applicable Law.

7.6 Templates

Beginso templates are general starting points and do not constitute legal, regulatory, tax, medical, financial or professional advice. Users are responsible for adapting any template to their own purposes and legal obligations before publication.

8. Intellectual Property and Copyright Complaints

8.1 Respect for Third-Party Rights

Users must not create, publish, upload or distribute Content that infringes the Intellectual Property Rights of another person. This obligation applies to Form content, logos, branding, images, templates, documents, uploaded files, text, software, reports and other materials.

8.2 Copyright Complaints

A copyright owner or authorised representative who believes that Content available through Beginso infringes copyright may submit a complaint to copyright@beginso.com. The complaint should identify the protected work, identify the allegedly infringing Content with enough information for Beginso to locate it, provide the complainant's contact information, explain the basis of the complaint and include any statements or confirmations required by Applicable Law.

8.3 Takedown and Counter-Notice

Beginso may remove or disable access to allegedly infringing Content where appropriate. Where legally permissible and practicable, Beginso may notify the affected User and allow the User to submit a counter-notice or appeal to copyright@beginso.com or legal@beginso.com. Beginso may restore, keep disabled or further investigate Content based on the available information and Applicable Law.

8.4 Repeat Infringers

Beginso may suspend or terminate Accounts or Workspaces associated with repeated or serious infringement of third-party Intellectual Property Rights.

9. Monitoring, Reporting and Enforcement

9.1 Monitoring Rights

Beginso reserves the right, but assumes no general obligation, to investigate suspected violations, review Content where reasonably necessary, respond to complaints, protect Platform security and integrity, prevent abuse, enforce this Policy and comply with lawful orders. The exercise of these rights does not create a general duty to proactively monitor all Content or User activity beyond duties imposed by Applicable Law.

9.2 Automated Abuse Prevention

Beginso may use automated and manual measures to identify suspicious activity, spam, abuse, malware, bot traffic, credential harvesting, unusual usage patterns or other indicators of prohibited conduct. Such measures may include rate limiting, anti-bot controls, security scanning, pattern analysis and technical restriction mechanisms. Use of substantive Form, Submission or uploaded-file content for AI model training remains governed by the Privacy Policy and Terms of Use.

9.3 Reporting Channels

Reports may be made through the following channels:

9.4 Enforcement Actions

Where Beginso reasonably determines that a violation has occurred, is likely to have occurred, or presents an immediate legal, security or safety risk, Beginso may take one or more of the following actions, with or without prior notice where appropriate and permitted by law:

• warn the User and require remediation within a specified period
• restrict publication or distribution of a Form or Public Form Link
• remove, disable or restrict access to Content, Forms, Submissions or uploaded files
• suspend an Account, Workspace, integration or API access pending investigation
• revoke or modify permissions or technical access
• terminate an Account or Workspace for material, serious or repeated violations
• preserve relevant Content, logs or account information for legal, security or investigative purposes
• refer unlawful conduct to law-enforcement, regulatory or other competent authorities where appropriate or required
• disclose information where required by a valid legal process or Applicable Law
• seek injunctive relief, damages, recovery of costs or other legal remedies

9.5 Urgent Harm and Absolute Prohibitions

Beginso is not required to provide a warning before taking action against CSAM, exploitation of children, terrorism, malware, phishing, credential theft, serious fraud, threats, unlawful surveillance or other conduct presenting significant legal, security or safety risk.

9.6 Good-Faith Reports

Beginso will not retaliate against a person for submitting a genuine good-faith abuse, security, copyright or legal report. Knowingly false, malicious, deceptive or abusive reports may themselves constitute a violation of this Policy or Applicable Law.

10. Appeals and Review

A User affected by a removal, restriction, suspension or termination may request review by contacting support@beginso.com or the relevant specialist address. The request should identify the affected Account, Workspace, Form or Content and provide any supporting information reasonably necessary to assess the matter.

Following review, Beginso may restore access, maintain the action, modify the action, request additional information or take further action. Nothing in this review process requires Beginso to restore unlawful Content or access where restoration would violate Applicable Law, a lawful order, the rights of another person or a material security requirement.

11. Security Obligations and Prohibited Technical Conduct

11.1 User Security Obligations

Users must protect credentials, devices, sessions, Workspace permissions, integrations and exported data; promptly revoke credentials or access that may have been compromised; and report suspected security issues to security@beginso.com.

11.2 Prohibited Security Testing

Without prior written authorisation from Beginso, Users must not conduct penetration testing, vulnerability scanning, active probing, exploit testing, credential attacks, traffic interception, security-control bypass, data extraction from non-public systems or any other testing reasonably likely to affect the confidentiality, integrity or availability of the Platform or another User's data.

11.3 Responsible Disclosure

Beginso encourages responsible reporting of genuine security vulnerabilities. Reports should be submitted confidentially to security@beginso.com with sufficient technical detail to allow investigation. Researchers should avoid accessing unnecessary personal data, disrupting service, modifying or deleting data, or publicly disclosing a vulnerability before Beginso has had a reasonable opportunity to investigate and remediate it.

12. Platform Status, Third-Party Content and Legal Notices

12.1 Platform Role

Beginso provides technological tools that allow Users to create Forms and process Content. Except where Beginso itself creates or controls specific Content, Beginso does not ordinarily determine the substance, purpose or legality of a User-created Form or Submission. Users remain responsible for their own Content and conduct.

12.2 No Endorsement

The presence of a Form, Workspace, Public Form Link, Submission or other User Content on Beginso does not mean that Beginso has reviewed, approved, verified, certified or endorsed its accuracy, legality, legitimacy, regulatory compliance or suitability.

12.3 Intermediary or Hosting Protections

Where Beginso qualifies for intermediary, hosting or safe-harbour protections under Applicable Law in relation to third-party Content, Beginso reserves all rights and protections available under those laws. Nothing in this Policy is intended to waive any statutory immunity, defence or limitation available to Beginso. The applicability of any such protection depends on the relevant facts, legal requirements and jurisdiction.

13. Sector-Specific and High-Risk Uses

A User intending to use Beginso for high-risk or regulated processing — including healthcare records, financial-services workflows, government or defence information, biometric processing, large-scale children's data, identity verification, KYC, background checks or similarly regulated activities — must independently determine whether the Platform is suitable and whether additional agreements, approvals or safeguards are required.

Beginso may prohibit, restrict or condition such use where the Platform has not been expressly configured or contractually approved for the relevant regulatory requirement.

14. Export Controls, Sanctions and International Compliance

Users must comply with applicable sanctions, export-control, trade-control and restricted-jurisdiction laws. Users must not use Beginso to collect, transmit, disclose or make available controlled technology, information or services where doing so would violate Applicable Law or require an authorisation that has not been obtained.

15. Anti-Scraping, Automation and API Restrictions

15.1 Automated Access

Unless expressly authorised by Beginso, Users may not access the Platform using bots, scrapers, crawlers, indexers, automated agents or similar tools for extraction, replication, benchmarking, competitive intelligence or mass interaction with Forms, accounts, Workspaces or Platform interfaces.

15.2 API Use

If Beginso makes an API available, use is subject to the applicable documentation and limits. API access must not be used to replicate or redistribute Beginso functionality, bypass permissions or usage controls, create excessive load, access data without authority or facilitate any prohibited activity.

15.3 Technical Enforcement

Beginso may use rate limiting, CAPTCHA or anti-bot measures, traffic analysis, access restrictions, session controls, IP or device-based protections and other technical measures to prevent abuse. Circumvention of such measures is prohibited.

16. Free, Trial, Beta and Future Plan Use

Where Beginso offers Free, trial, beta, promotional or other limited-access plans, those plans may be subject to limits on Forms, responses, storage, uploads, Workspaces, Team Members, reports, exports, integrations, retention or other resources. Such limits may be stated on the Platform, pricing page or applicable plan terms and may be changed in accordance with the Terms of Use.

Users must not create multiple Accounts, use automation, rotate identities, abuse invitations or otherwise evade plan restrictions or usage limits. Beginso may restrict excessive or abusive usage that threatens service quality, security, infrastructure or fair access for other Users.

Detailed commercial limits, retention rules, downgrade treatment or paid-plan entitlements are not fixed by this AUP unless expressly stated elsewhere by Beginso.

17. General Provisions

17.1 Relationship to Other Policies

This Policy operates together with the Terms of Use, Privacy Policy, Cookie Policy and any applicable Data Processing Agreement, subscription terms or enterprise agreement. Those documents collectively govern the User's relationship with Beginso.

17.2 Amendments

Beginso may amend this Policy from time to time. Updated versions will be published on the Platform or otherwise notified as appropriate. Continued use after an amendment becomes effective constitutes acceptance to the extent permitted by Applicable Law.

17.3 Severability

If any provision of this Policy is held invalid or unenforceable, it shall be modified to the minimum extent necessary to make it valid and enforceable or severed if modification is not possible, without affecting the remaining provisions.

17.4 No Waiver

Failure by Beginso to enforce any provision in one instance does not waive its right to enforce that provision or any other provision later. No waiver is effective unless made in writing by an authorised representative of Beginso.

17.5 Governing Law and Dispute Resolution

This Policy is governed by the laws of the Republic of India, subject to mandatory rights that cannot lawfully be excluded. Disputes relating to this Policy are subject to the dispute-resolution and arbitration provisions of the Beginso Terms of Use, including the Mumbai, Maharashtra, India framework stated there.

17.6 Survival

Provisions relating to prohibited conduct, intellectual property, enforcement, security, legal compliance, liability allocation, confidentiality, dispute resolution and any provision that by its nature should survive will continue to apply after suspension, termination or cessation of use.

18. Contact Directory

19. Acknowledgement and Acceptance

This Acceptable Use Policy was last reviewed and updated on 23 September 2026.