Acceptable Use Policy

1. Permitted Uses

MetricOra is designed for:

• Recording and calculating greenhouse gas emissions in accordance with recognised standards (GHG Protocol, DEFRA, ISO 14064).
• Generating sustainability disclosures and reports for internal and external stakeholders.
• Managing supply chain and field-worker emissions data.
• Conducting biodiversity net gain assessments and ecology surveys.
• Monitoring environmental compliance obligations.
• Assurance and audit workflows in connection with sustainability disclosures.

2. Prohibited Uses

You must not use MetricOra to:

• Falsify, misrepresent, or fraudulently manipulate emissions data or calculations.
• Upload or process data you do not have the right to use.
• Attempt to gain unauthorised access to another organisation's data or accounts.
• Reverse-engineer, decompile, or disassemble any part of the platform.
• Use the platform to transmit malicious code, viruses, or disruptive data.
• Engage in automated scraping, crawling, or data harvesting not expressly permitted by the API terms.
• Attempt to circumvent any security or access controls.
• Use the platform for any unlawful purpose, including violations of environmental reporting regulations.
• Impersonate any person or entity, or misrepresent your affiliation with any organisation.
• Interfere with the integrity or performance of the platform or its underlying infrastructure.

3. Data Accuracy and Integrity

Users are responsible for the accuracy of data they upload or enter into the platform. MetricOra calculates emissions figures based on data provided by users and the emission factor libraries configured in the platform. MetricOra does not independently verify the accuracy of source data submitted by users.

Knowingly uploading false or manipulated data for the purpose of creating misleading emissions disclosures is a serious breach of this policy and may constitute a breach of applicable financial reporting or environmental regulations.

4. Account Security

You are responsible for maintaining the confidentiality of your account credentials. You must notify MetricOra immediately at security@metricora.co.uk if you become aware of any unauthorised use of your account.

Organisation administrators are responsible for managing user access within their organisation and must promptly revoke access for any user who no longer requires it.

5. Field Worker and Mobile App Use

Field workers using the MetricOra mobile application must only submit data for projects and organisations they are authorised to work with. Invitation links are personal and must not be shared with unauthorised parties. Device PINs protect access to the application and must be kept confidential.

6. API Use

Access to MetricOra APIs is subject to rate limits documented in the developer portal. API keys are credentials and must be treated with the same care as passwords. Automated processes using the API must respect rate limits and must not attempt to bypass platform controls.

7. Consequences of Violation

MetricOra reserves the right to investigate suspected violations of this policy and may, without prior notice: suspend or terminate access to the platform; remove content that violates this policy; report violations to relevant authorities where required by law. MetricOra's decisions regarding enforcement of this policy are final.

8. Reporting Violations

If you become aware of any use of MetricOra that violates this policy, please report it to security@metricora.co.uk. We take all reports seriously and will investigate promptly.

9. Updates to This Policy

MetricOra may update this AUP from time to time. We will notify account administrators of material changes by email. Continued use of the platform following notification constitutes acceptance of the updated policy.

10. Governing Law

This AUP is governed by the laws of England and Wales. This policy should be read alongside our Terms of Service and Privacy Policy.