Security Policy Agreement

1. Purpose and Scope

This User Security Policy ("Policy") establishes the security obligations of every individual who accesses or uses the MyPanelMapper platform, including all subscription holders, account administrators, invited team members, and any other authorized users (collectively, "Users"). By accessing the Platform, each User agrees to be bound by this Policy in its entirety. Failure to comply may result in suspension or termination of access and may expose the non-compliant User to legal liability.

2. User Responsibilities

2.1 Account Credentials

Each User is solely responsible for maintaining the confidentiality of their login credentials. Users must not share their username, password, or any authentication token with any other person. Account access is personal and non-transferable. If credentials are compromised, Users must immediately notify the account administrator and change their password.

2.2 Device Security

Users must only access the Platform from devices protected by up-to-date operating system patches, antivirus software, and a screen lock. Accessing the Platform from shared, public, or unmanaged devices is prohibited.

2.3 Network Security

Users must not access the Platform over unsecured public Wi-Fi without a VPN. Users are responsible for ensuring their home or office network is protected by a password-secured router with current firmware.

2.4 Authorized Use Only

Users may only access data to which they have been explicitly granted access. Attempting to access data beyond assigned permissions — through technical means, URL manipulation, or any other method — constitutes a material breach of this Policy and may constitute unauthorized computer access under applicable law.

2.5 No Sharing of Exported Data

Any data exported from the Platform contains sensitive facility information. Users must not share, distribute, publish, or transmit exported data to unauthorized parties. Exported documents must be stored securely and disposed of in a manner that prevents unauthorized recovery.

2.6 Acceptable Use

The Platform may only be used for its intended purpose of documenting, managing, and maintaining electrical panel and facility data. Automated scraping, bulk data extraction, or any attempt to reverse-engineer the Platform's systems is strictly prohibited.

3. Account Administration Responsibilities

Account administrators must promptly remove access for any team member who leaves the organization, changes roles, or no longer requires access. Access should be reviewed at least quarterly. Administrators are responsible for ensuring all team members have read and agreed to this Policy before being granted access. Failure to revoke access for a departed employee is the sole responsibility of the administrator.

4. Incident Reporting

Users must report any actual or suspected security incident to the account administrator immediately upon discovery. Confirmed security incidents affecting Platform data must be reported to MyPanelMapper support within 24 hours of discovery. Delayed reporting that results in extended exposure is the responsibility of the User or administrator who failed to report in a timely manner.

5. Limitation of Platform Operator Liability

The Platform operator shall not be held liable for any security incident, data breach, data loss, or unauthorized access that results, in whole or in part, from:

• A User sharing their credentials with another person;
• A User accessing the Platform from an unsecured or compromised device or network;
• A User's failure to report a suspected incident in a timely manner;
• An administrator's failure to revoke access for a departed team member;
• A User's violation of any provision of this Policy;
• Malware, keyloggers, or other malicious software present on a User's device;
• Social engineering attacks (e.g., phishing) targeting a User's credentials;
• Any action or omission by a third party outside the Platform operator's control.

By using the Platform, each User acknowledges and agrees that their compliance with this Policy is a material condition of their access, and that non-compliance shifts responsibility for any resulting harm entirely to the non-compliant User.

6. Consequences of Non-Compliance

Violation of this Policy may result in immediate suspension or permanent termination of the User's account, notification of the account administrator, legal action to recover damages, and reporting to relevant law enforcement authorities where the violation constitutes a criminal act.

7. Policy Updates

This Policy may be updated from time to time. Users will be notified of material changes. Continued use of the Platform following notification of an update constitutes acceptance of the revised Policy.