Acceptable Use Policy
This Acceptable Use Policy ("AUP") governs your use of Bridgham's website, platform, and services (collectively, the "Services"). This AUP is incorporated into and forms part of our Terms of Service.
By using our Services, you agree to comply with this Acceptable Use Policy.
1. Purpose
Bridgham provides cybersecurity services to regulated and semi-regulated firms. Our Services must be used lawfully and in a manner that respects the rights of others.
This AUP:
- Defines prohibited activities
- Protects our infrastructure and other customers
- Supports alignment with applicable laws
Violation of this AUP may result in immediate suspension or termination of your account, with or without notice.
2. Prohibited Activities
You agree NOT to use our Services for any of the following purposes:
2.1 Illegal Activities
- Violating any federal, state, local, or international law
- Engaging in fraud, identity theft, or financial crimes
- Hacking, unauthorized access to systems, or computer intrusion
- Distributing malware, viruses, ransomware, or other malicious code
- Facilitating or promoting illegal activities (drug trafficking, weapons sales, human trafficking, etc.)
- Circumventing export controls or trade sanctions
Examples of illegal use:
- Using our Services to scan targets you do not own or have authorization to test
- Accessing third-party systems without permission ("black hat" hacking)
- Distributing pirated software or copyrighted content
2.2 Abuse, Harassment, or Threats
- Harassing, bullying, stalking, or threatening others
- Posting content that incites violence or hatred
- Doxing (publishing private information about individuals without consent)
- Impersonating another person or entity
2.3 Spam and Unsolicited Communications
- Sending unsolicited emails, messages, or advertisements (spam)
- Using our Services to collect email addresses for marketing purposes
- Distributing phishing emails or social engineering attacks
- Violating the CAN-SPAM Act or similar anti-spam laws
2.4 Intellectual Property Infringement
- Violating copyrights, trademarks, patents, or trade secrets
- Uploading or distributing pirated content (software, movies, music)
- Reverse engineering, decompiling, or disassembling our software
- Removing or altering proprietary notices, logos, or trademarks
2.5 Disruption of Services
- Interfering with the proper functioning of our Services
- Launching denial-of-service (DoS) or distributed denial-of- service (DDoS) attacks
- Overloading our servers with excessive requests (e.g., scraping, automated scripts)
- Exploiting vulnerabilities in our systems (unless part of an authorized bug bounty program)
- Bypassing rate limits, authentication, or access controls
2.6 Unauthorized Access
- Accessing accounts, data, or systems you do not own or have permission to access
- Sharing your account credentials with unauthorized users
- Attempting to gain elevated privileges (e.g., admin access) without authorization
- Bypassing security measures (firewalls, encryption, authentication)
2.7 Misuse of Security Tools
Using our threat scanning tools to:
- Attack third-party systems without authorization
- Scan targets you do not own or have written permission to test
- Violate third-party terms of service (e.g., VirusTotal, AbuseIPDB)
Authorized Pentesting Only: You may use our Services for authorized penetration testing of your own systems or systems where you have explicit written permission from the owner.
2.8 Data Scraping and Harvesting
- Scraping, crawling, or harvesting data from our website or Services
- Using automated tools (bots, spiders, scrapers) without written permission
- Collecting user data (emails, names, reviews) for commercial purposes
Exceptions:
- Search engine crawlers (Googlebot, etc.) are permitted
- Accessibility tools (screen readers) are permitted
2.9 Resale or Redistribution
- Reselling, sublicensing, or redistributing our Services without written permission
- Offering our Services as part of a competing product (white-labeling) without authorization
- Sharing your account with multiple organizations (account sharing)
2.10 Fraudulent or Deceptive Practices
- Providing false information during registration (fake name, email, company)
- Using stolen credit cards or fraudulent payment methods
- Initiating chargebacks for services you received (chargeback fraud)
- Manipulating our systems to gain unauthorized benefits
2.11 Offensive or Harmful Content
Posting content that is:
- Obscene, pornographic, or sexually explicit
- Promoting violence, terrorism, or hate speech
- Discriminatory based on race, religion, gender, sexual orientation, disability, etc.
- Graphically violent or disturbing (e.g., gore, animal cruelty)
2.12 Violation of Third-Party Rights
- Violating the privacy rights of others
- Defamation, libel, or slander
- Violating contractual obligations (e.g., non-disclosure agreements)
- Infringing on publicity or privacy rights
3. Monitoring and Enforcement
3.1 Right to Monitor
Bridgham reserves the right to monitor use of our Services to:
- Monitor compliance with this AUP
- Detect security threats or abuse
- Investigate complaints or violations
- Comply with legal obligations
3.2 Abuse Reports
If you believe another user is violating this AUP, report it to:
Email: support@bridghamcyber.com
Subject Line: "AUP Violation Report"
We will investigate all reports within 5 business days.
3.3 Enforcement Actions
If you violate this AUP, we may take the following actions:
- Warning: For minor or first-time violations
- Suspension: Temporary suspension (7-30 days) for moderate violations
- Termination: Immediate termination for severe or repeated violations
- Legal Action: We reserve the right to report illegal activities and pursue legal remedies
No Refunds: Violations may result in forfeiture of prepaid subscription fees.
4. Reporting Security Vulnerabilities
4.1 Responsible Disclosure
If you discover a security vulnerability, we encourage responsible disclosure.
Do:
- Email support@bridghamcyber.com with details
- Provide detailed description and proof of concept
- Allow reasonable time to fix (typically 90 days)
Don't:
- Exploit the vulnerability for malicious purposes
- Access or modify other users' data
- Publicly disclose before we fix it
5. Compliance with Laws and Regulations
You agree to comply with all applicable laws, including:
- Computer Fraud and Abuse Act (CFAA): Prohibits unauthorized access
- Digital Millennium Copyright Act (DMCA): Protects copyrighted content
- CAN-SPAM Act: Regulates commercial email
- CCPA / State Privacy Laws: Protects consumer data
- Export Control Laws: Restricts export of technologies
6. Consequences of Violations
Violations of this AUP are addressed on a graduated scale. First-offense responses range from a warning for minor violations, to a 7-day suspension for moderate violations, to immediate termination for severe violations. Repeat or progressive violations escalate the response: minor offenses move from warning to 7-day to 30-day suspension; moderate offenses from 7-day suspension to 30-day suspension to termination; severe offenses from immediate termination to permanent ban to legal action.
Appeals: Contact support@bridghamcyber.com within 30 days if you believe action was taken in error.
7. Third-Party Services and Integrations
When using our third-party integrations, you must comply with their terms:
- Stripe: Services Agreement
- Cloudflare: Terms
- VirusTotal: Terms of Service
8. Changes to This Policy
We may update this AUP to reflect changes in our Services or legal requirements.
Notification: Updated date at top, email for material changes, and website notice.
Continued use constitutes acceptance of updates.
9. Contact Us
Bridgham Compliance Team
Email: support@bridghamcyber.com
Entity: Bridgham Cyber, LLC, Raleigh, North Carolina
10. Acknowledgment
By using our Services, you acknowledge that you have read, understood, and agree to comply with this Acceptable Use Policy.
Violations will be taken seriously and may result in account termination and legal action.
Effective November 3, 2025