CRM Bunker — Acceptable Use Policy

Last updated: 21 October 2026 · Forms part of the Terms of Service between you and Cyber Shark Labs Pty Ltd (ACN 701 604 560, ABN 55 701 604 560)

This policy sets out what you can and can't do when using CRM Bunker. It applies to you and to anyone you give access to your account. Breaching this policy is treated as a breach of the Terms of Service and may result in a warning, suspension, or termination of your account, depending on the seriousness of the issue.

1. General Conduct

You may not use CRM Bunker to:

• Break any applicable law, including privacy, anti-spam, consumer protection, or intellectual property law.
• Harass, threaten, defame, or abuse another person.
• Upload, store, or transmit content that is illegal, fraudulent, or infringes someone else's rights.
• Impersonate another person or business, or misrepresent your affiliation with anyone.
• Attempt to gain unauthorised access to another customer's account or data, or to any part of the underlying infrastructure you're not meant to access.

2. Email, Lead Capture, and Outbound Communication

Because CRM Bunker includes features for capturing leads and exporting contacts for email marketing, this section matters more than it might for a typical piece of software. When sending communications to contacts stored in or exported from CRM Bunker, you must:

• Only send marketing communications to people who have genuinely agreed to hear from you, or with whom you have an existing business relationship that reasonably allows it under the Spam Act 2003 (Cth) or equivalent law in your contacts' jurisdiction. Keep evidence of the consent relied on.
• As a platform restriction, never import or use a purchased, scraped, or otherwise unconsented contact list through the platform.
• Clearly identify yourself or your business as the sender and provide accurate contact details in any communication you send.
• Include a lawful unsubscribe facility in commercial electronic messages, keep it working for at least 30 days and action requests within five working days. Do not send further marketing to opted-out contacts, including through exports or integrations. Necessary non-marketing service messages may still be sent where lawful.

We reserve the right to review account activity, restrict sending features, or suspend an account where there's a reasonable basis to believe these requirements are being breached — for example, an unusually high bounce or complaint rate associated with an account's exports or integrations.

3. Data You Store

• Don't store sensitive categories of information (health records, government identity numbers, financial account details, and similar) unless you have our prior written approval, a genuine business need and a proper legal basis to hold that information.
• You're responsible for ensuring you have the right to collect and store any personal information you enter about third parties, including your own customers and contacts.
• Don't use the platform to store or distribute malware, or any file intended to damage or gain unauthorised access to another system.

4. Platform Integrity

• Don't attempt to reverse-engineer, decompile, or extract the underlying source code of the Service.
• Don't use automated tools to scrape, overload, or stress-test the platform without our prior written permission.
• Don't attempt to circumvent account limits, seat restrictions, or plan features you haven't paid for.
• Don't probe, scan, or test the security of the Service without prior written authorisation — if you've found a genuine vulnerability, we'd rather you tell us directly at [email protected] than test it further.

5. Using the AI Assistant

• If the AI Assistant feature is enabled on your account, using it sends your message to a third-party AI provider to generate a response, as described in our Privacy Policy. Do not submit personal or confidential information unless you are authorised to disclose it to that provider.
• Responses from the AI Assistant may be inaccurate, incomplete, or not appropriate for your situation. You're responsible for using your own judgement before relying on or acting on anything it tells you, particularly for anything resembling legal, financial, or other professional advice.
• Don't use the AI Assistant to attempt to extract, probe, or interfere with the underlying AI model or service, or to generate content that would itself breach Section 1 of this policy if a person had written it directly.
• You're responsible for how you and your team use the AI Assistant, and for the consequences of relying on its output, in the same way you're responsible generally for information you put into CRM Bunker (see Terms of Service, Section 6).
• We may restrict or disable access to the AI Assistant for an account if its use places an unreasonable load on the underlying service, or if we reasonably believe it's being misused.

6. Third-Party Integrations

If you connect a third-party service (for example, an accounting or field-service platform) to CRM Bunker, you're responsible for using that integration in line with the third party's own terms, and for the consequences of any data that flows to or from it as a result of your own configuration.

7. Reporting a Problem

If you become aware of misuse of the platform, a security concern, or another customer breaching this policy, please let us know at [email protected]. We take reports seriously and will look into them promptly.

8. Enforcement

Where we reasonably believe this policy has been breached, we may issue a warning, temporarily restrict specific features (such as outbound email or exports), suspend the account, or terminate it, depending on the severity and whether the issue is repeated. All enforcement under this policy is subject to the notice, cure and urgent-risk provisions in Section 12 of the Terms of Service.

Cyber Shark Labs Pty Ltd (ACN 701 604 560, ABN 55 701 604 560), trading as CRM Bunker · PO Box 599, Cottesloe WA 6911 · [email protected]