dayrook
Book a walkthrough

Dayrook legal & privacy

Acceptable Use Policy

Rules for lawful administration, respectful use, security research and proportionate enforcement.

Read the document Contact legal

Published · Version 2026-09-06.1

Dayrook · Operated by RadiantOS

This policy applies to use of Services under an agreement that incorporates it. It protects customers, their users and third parties while permitting legitimate, authorized IT administration and security work.

1. Authorized use

You may manage your own systems and information or those you have permission to manage, within your purchased service scope. Obtain the rights, consent and notices needed for monitoring, remote access, backups, employee information, messaging and third-party integrations. Respect applicable privacy, intellectual-property, employment and communications laws.

2. Prohibited activity

  • Unauthorized access, credential theft, phishing, exfiltration, account takeover or attempts to bypass tenant boundaries, authentication, permissions or protective controls.
  • Malicious software, destructive interference, denial-of-service activity, exploitation outside an authorized test, or using customer infrastructure to attack another party.
  • Unlawful surveillance, harassment, abuse, deceptive impersonation, exploitation of children, or material whose possession, creation or distribution is unlawful.
  • Spam, deceptive bulk communications, unlawful marketing, payment fraud, trial abuse, self-referral schemes or manipulation of usage and billing records.
  • Infringing others’ rights, uploading information without authority, exposing secrets, or deliberately disabling protections necessary for lawful handling.
  • Disproportionate resource consumption intended to degrade others’ service, circumvention of agreed limits, or resale outside your agreed rights.
  • Prohibited export, re-export, transfer, end use or access under applicable trade restrictions.

3. Security testing and vulnerability reports

Legitimate security testing must stay within the relevant owner’s authorization, minimize access to others’ information and avoid disruption. Authorization to test your own systems is not authorization to test our platform or another tenant. Ask us before testing an uncertain boundary.

If you discover a vulnerability, report it to the legal contact with safe reproduction information. Do not exploit it beyond what is necessary to establish the issue, extract unrelated data, publicly expose credentials or demand payment as a condition of withholding harm. We can agree a secure channel for sensitive details. This policy does not promise a bounty or authorize otherwise unlawful research.

Nothing in this policy prohibits lawful criticism, consumer reviews, disclosures protected by law or reporting concerns to competent authorities.

4. Proportionate enforcement and review

Where activity creates a credible security, legal or abuse risk, we may restrict the affected access or functionality while investigating. We will consider severity, evidence and impact on legitimate users. Where appropriate and lawful, we will explain the restriction and steps needed to resolve it, and offer a reasonable opportunity to remedy a non-urgent breach.

You may question a decision through the legal contact with the account or case reference and relevant facts. We will review the information supplied. We may preserve evidence or disclose information where law requires or permits, as described in the Privacy Policy.

Termination, unused prepaid fees and customer-data handling follow the accepted service agreement, DPA and mandatory law. Suspension does not itself authorize indiscriminate deletion or eliminate legally required export or refund rights.