GROSA · LEGAL INFORMATION
Acceptable Use Policy
Clear expectations for responsible use of the Grosa website and for interactions with our team. Service-specific obligations belong in the agreed customer contract.
Last updated
Use it lawfully
Respect other people, their information and the rights in content you share.
Keep access authorised
Do not bypass controls, misuse credentials or test production systems without permission.
Report concerns privately
Help us investigate issues without exposing someone else's records.
1. Scope and operator
This policy sets expectations for use of www.grosa.io, its enquiry forms and communications with the Grosa team. The operator is Mars AI Technology Solutions Limited, registered in England and Wales under company number 14863498, at 71-75 Shelton Street, Covent Garden, London WC2H 9JQ, United Kingdom.
Where this policy is expressly included in a customer service agreement, it also supplements that agreement's acceptable-use obligations. Its publication on the marketing website alone does not create a new subscription agreement or change an existing contract.
2. Genuine and respectful enquiries
Use the forms for relevant business enquiries, demonstration requests or questions. Do not impersonate another person or business, submit deliberately misleading details, send threats or discriminatory abuse, or use the form to distribute unsolicited promotions.
Do not repeatedly submit automated or duplicate requests to overwhelm the website or team. Reasonable follow-up on an existing enquiry is welcome; include its reference where possible.
3. Lawful information and content
Only share information you are authorised to provide. Do not submit material that unlawfully infringes intellectual property, confidentiality or personal-data rights, or promotes illegal activity. Do not distribute malware, phishing links or content intended to deceive or compromise another person.
Use the first enquiry to describe your business and requirements. Do not attach or paste payment-card details, passwords, customer databases, sensitive personal information or staff records. If project work requires data exchange, agree the purpose and a suitable transfer method first.
4. Access controls and system integrity
Do not try to access administrator screens, private enquiries, accounts or infrastructure without authorisation. Do not guess credentials, misuse another person's session, bypass authentication or exploit a vulnerability to obtain information.
Do not interfere with normal operation through malicious requests, denial-of-service activity or disruptive automation. Security testing and load testing require prior written authorisation identifying the permitted systems and scope. A public URL is not permission to test the underlying production service.
5. Software, business records and third-party tools
For a contracted Grosa service, users must act within their authorised roles and the agreed scope. The customer's own lawful instructions and responsibilities for its records remain relevant; a role label is not permission to access every branch, customer or transaction.
Third-party providers, integrations and devices have their own access conditions. Do not use Grosa references to bypass a provider's restrictions, claim a certification that has not been granted, or process information without an appropriate basis. These expectations do not promise that a named integration is enabled or available in your service.
6. Reporting suspected misuse or a vulnerability
Send a report to [email protected] with the affected page, time, relevant enquiry reference and a short explanation. Provide only the minimum evidence needed to explain the issue. Do not publish private records, extract data to prove an issue or continue testing beyond authorised scope.
If you encounter someone else's information unintentionally, stop accessing it and tell us privately. Do not alter, share or reuse it.
7. How we may respond
We may investigate reports, reject abusive submissions, apply proportionate request limits or restrict access where needed to protect the website or people using it. A response should take account of the seriousness, evidence and risk of the issue. Urgent protective action may be necessary before a full review can be completed.
Service suspension, termination, data handling or other remedies for a contracted account must follow the applicable agreement and law. This policy does not authorise automatic deletion of business records or create a blanket right to retain prepaid fees. Information may be disclosed to a competent authority where required by law.
8. Questions, review and changes
If you believe a submission or access restriction was applied in error, contact us with the relevant context so it can be reviewed. Do not attempt to evade the control by impersonating another user or repeatedly resubmitting the same material.
We may update this policy when website practices change and will display the revised date. Updates do not retrospectively change an existing service agreement. The Terms & Conditions and Privacy Policy provide the wider website context.
Have a question about this policy?
Contact our team with the policy name and relevant context. For an existing enquiry, include its reference if you have it.