Acceptable Use Policy

This Acceptable Use Policy ("AUP") applies to all use of BarrelLogic, including the web application, mobile app, API, specialists, and hardware. By using BarrelLogic you agree to these rules. Violations may result in account suspension or termination and, where warranted, referral to law enforcement.

1. Lawful use

You must comply with all laws that apply to you, including:

• Alcohol production, import, export, distribution, and retail laws in every jurisdiction you operate.
• Tax and excise obligations.
• Labor, employment, and health-and-safety laws for your staff.
• Privacy and consumer-protection laws for any data you import, including customer lists.

BarrelLogic is a tool. It does not assume your regulatory obligations, and the specialists' suggestions do not constitute legal advice. You are responsible for reviewing every compliance draft, every campaign, and every report before acting on it.

2. Security and integrity

You will not:

• Attempt to access another winery's data. Our RLS + audit trail surface these attempts.
• Attempt to bypass authentication, rate limits, or billing.
• Probe, scan, or penetration-test the Service without a written authorisation (security@barrellogic.com for bug bounty scope).
• Submit malformed payloads with the intent to crash workers or exhaust resources.
• Use the Service to host or distribute malware.
• Reverse-engineer the specialists' system prompts or exfiltrate training data. System prompts are our intellectual property and contain domain knowledge we've invested in curating.

3. AI and specialist conduct

You will not:

• Use the specialists to generate content that violates law (fraudulent filings, deceptive marketing claims, discriminatory employment material).
• Attempt prompt-injection attacks (our Phase 23 screening will log attempts; repeated attempts will result in suspension).
• Use the conversation surface to abuse or harass our specialists, other users, or our team. The specialists are designed to be useful and honest; they are not for role-play, entertainment, or generating non-winery content.
• Resell specialist output as your own professional advice (e.g. packaging briefings as a consulting product). Limited use for your winery's internal purposes is fine.

4. Customer data

If you import customer lists (from Commerce7 or elsewhere):

• You represent that you have the right to process that data and, where required, valid consent to contact those customers by email.
• You are the Controller of that data per GDPR and equivalent laws; BarrelLogic is the Processor. See the DPA.
• You will promptly action Data Subject Access Requests forwarded to you via the Service.

5. Email sending

Campaigns sent via the Sales specialist must:

• Comply with CAN-SPAM (US), CASL (Canada), GDPR + PECR (UK), ePrivacy + national laws (EU), and similar regimes.
• Include a functioning unsubscribe link (we generate one automatically; do not remove it from templates).
• Identify the sender accurately.
• Not use deceptive subject lines or sender names.

Complaint rates above 0.3% or bounce rates above 5% will trigger a sending pause while we investigate with you.

6. Hardware

You will not:

• Operate BarrelLogic hardware outside the documented physical operating ranges (temperature, humidity, voltage, pressure).
• Install firmware other than what we ship via OTA. Devices that detect modified firmware will refuse to report to the platform.
• Resell, sublease, or transfer leased hardware.

7. Cross-platform (BarrelTaster, SplitVineyards)

When your wines or vineyard programs appear on the consumer surfaces:

• Product descriptions, chemistry, and tasting notes must be accurate.
• Images must be your own or licensed.
• Shipping promises (dates, compliance with destination-state DTC rules) must be honoured.

8. Enforcement

Violations are evaluated case by case. Typical response escalation:

1. Educational warning with documentation link.
2. Feature-specific throttle (e.g. conversation disabled pending review).
3. Account suspension pending resolution.
4. Termination + data export offered before purge.
5. In cases of deliberate abuse or illegal activity, data preservation for lawful request.

We document every enforcement action in our internal audit log and notify you in writing.

9. Reporting violations

If you believe another user is violating this AUP, email abuse@barrellogic.com with specifics. All reports are investigated. We do not share reporter identity with the reported party.

10. Changes

Material changes to this AUP are announced via email and the in-app banner at least 30 days before they take effect.