Acceptable Use Policy

1. Purpose

This Acceptable Use Policy (“AUP”) establishes the rules for acceptable use of TP-CAMP OneSuite (“OneSuite,” “we,” “us,” or “our”) and the applications, modules, websites, tools, integrations and services within the OneSuite ecosystem.

This Policy applies to all users, workspace owners, administrators, team members, trial users and other persons accessing OneSuite.

It applies across connected OneSuite applications, including services relating to Catalog, Splits, Operations, Invoice, Finance and other applications or modules that may be introduced.

This Policy forms part of the TP-CAMP OneSuite Terms of Service.

2. General Standard of Use

You may use OneSuite only for lawful and legitimate purposes consistent with the functionality made available to you.

You must not use OneSuite in a manner that:

• violates applicable law;
• infringes another person's rights;
• compromises platform security;
• interferes with another user's access;
• facilitates fraud or deception;
• damages OneSuite or its infrastructure;
• misuses information belonging to another person; or
• circumvents restrictions associated with your account, plan, workspace or permissions.

3. Authorized Access Only

You may access only accounts, workspaces, applications, records and functionality that you are authorized to access.

You must not:

• access another user's account without authorization;
• access another organization's workspace without authorization;
• attempt to discover another user's credentials;
• bypass login requirements;
• circumvent application permissions;
• manipulate entitlement controls;
• escalate your own privileges without authorization;
• impersonate another user;
• forge authentication information;
• interfere with OneSuite's centralized authentication systems; or
• use another person's account to bypass seat or access restrictions.

4. Account Security

Users must take reasonable steps to protect their OneSuite accounts.

You must not knowingly:

• disclose passwords or authentication credentials to unauthorized persons;
• permit unauthorized users to operate through your account;
• attempt to defeat account-security mechanisms;
• reuse compromised credentials after becoming aware of a security incident; or
• intentionally conceal unauthorized account activity.

Suspected unauthorized access should be reported promptly through the official TP-CAMP OneSuite support channels.

5. Workspace and Team Administration

Workspace owners and administrators are responsible for reasonably managing the access they grant to team members.

Administrators should provide users only with the level of access appropriate to their responsibilities.

Users who have been suspended, removed or whose authorization has ended must not attempt to regain access through another account or other unauthorized method.

6. Music Catalogue Information

Users may use OneSuite to manage information concerning musical works, recordings, releases, contributors and related rights information.

You must not knowingly enter materially false information concerning:

• song titles;
• recordings;
• writers;
• composers;
• publishers;
• performers;
• producers;
• labels;
• ownership;
• rights holders;
• identifiers; or
• other material catalogue information.

Users remain responsible for verifying information before relying on or submitting it to another organization.

7. Ownership and Split Information

You must not knowingly use OneSuite to make a false or fraudulent ownership claim.

This includes knowingly entering or submitting false information concerning:

• writer shares;
• composer shares;
• publishing shares;
• master ownership;
• producer interests;
• performer interests;
• contributor interests;
• copyright ownership; or
• other royalty or rights allocations.

OneSuite must not be used to fabricate ownership records, alter another person's legitimate share without authority, or create misleading documentation intended to deprive another rights holder of their interest.

8. Split Sheets and Rights Documents

Users may create, manage or generate split sheets and related rights documentation through OneSuite.

You must not:

• forge another person's approval or signature;
• falsely represent that another contributor agreed to a split;
• modify an executed agreement without appropriate authority;
• intentionally generate documents containing materially false rights information; or
• represent an unsigned or unapproved document as fully executed.

Users remain responsible for obtaining appropriate agreement from the relevant parties.

9. Rights Registrations and CWR Data

Where OneSuite provides tools for preparing or transmitting CWR files, repertoire information or other registration data, users must ensure they are appropriately authorized to submit the information.

You must not knowingly use OneSuite to:

• register works you do not control or have authority to administer;
• claim rights belonging to another party;
• falsify contributor information;
• submit intentionally incorrect ownership percentages;
• misuse another person's IPI, CAE or other identifier;
• fabricate music-industry identifiers;
• create knowingly fraudulent registration claims; or
• intentionally submit conflicting data for the purpose of diverting royalties.

10. Third-Party Rights Organizations

OneSuite may assist with workflows involving collective management organizations, performing-rights organizations, neighbouring-rights organizations, publishers, administrators, distributors or other music-industry services.

Users must comply with the legitimate submission rules and requirements of those organizations when interacting with them.

Technical access to a workflow does not authorize a user to make a claim they are not otherwise entitled to make.

11. Copyrighted and Proprietary Material

You must have appropriate rights, permission or another lawful basis for material uploaded or processed through OneSuite.

This may include:

• music;
• recordings;
• lyrics;
• artwork;
• photographs;
• contracts;
• documents;
• spreadsheets;
• databases; and
• other copyrighted or proprietary material.

You must not knowingly use OneSuite to infringe copyright, trademark, privacy, confidentiality or other proprietary rights.

12. Personal Information

Users may enter information concerning other people when legitimately required for music-business or organizational purposes.

You must not use OneSuite to:

• unlawfully collect personal information;
• store information obtained through deception or unauthorized access;
• disclose another person's confidential information without authority;
• use personal information for unlawful harassment or discrimination;
• create unauthorized profiles of individuals; or
• intentionally violate applicable privacy or data-protection requirements.

13. Confidential Information

You must not knowingly upload confidential information that you are prohibited from providing to OneSuite.

Where your organization stores confidential business information through OneSuite, you are responsible for granting access only to appropriately authorized users.

14. Invoice and Financial Information

OneSuite must not be used to intentionally create fraudulent financial records.

Users must not knowingly use Invoice, Finance or related tools to:

• create fictitious invoices intended to deceive;
• falsify transaction records;
• create fraudulent receipts;
• conceal unlawful transactions;
• knowingly misrepresent amounts owed;
• manipulate records to facilitate tax evasion or financial crime;
• impersonate another business; or
• use OneSuite to facilitate money laundering or other unlawful financial activity.

15. Documents and Contracts

OneSuite may allow users to prepare or manage contracts and business documents.

You must not use these tools to:

• forge signatures;
• falsify another person's acceptance;
• impersonate a contracting party;
• alter an executed document without authorization;
• knowingly create fraudulent legal documents; or
• intentionally misrepresent the status of a document.

16. Electronic Signatures

Where electronic-signature functionality is available, users must use it only for legitimate transactions.

You must not attempt to:

• sign on behalf of another person without lawful authority;
• falsely represent another person's identity;
• manipulate signature records;
• circumvent signer authentication; or
• alter an executed document in a misleading manner.

17. Artificial Intelligence Features

Users may use OneSuite's AI-assisted functionality only for lawful purposes.

You must not intentionally use OneSuite AI features to:

• facilitate fraud;
• impersonate another person deceptively;
• create knowingly false rights claims;
• generate malicious software;
• attempt unauthorized access to systems;
• disclose confidential information without authorization;
• generate deceptive documentation intended to cause financial harm;
• circumvent OneSuite security; or
• perform another activity prohibited by these Terms or applicable law.

AI-generated information must be reviewed before being used for important business, rights, legal or financial decisions.

18. AI Inputs and Sensitive Information

Users should exercise care when submitting information to AI-powered features.

You must not knowingly submit information to an AI feature where you lack authority to process or disclose that information through the applicable functionality.

Users remain responsible for determining whether particular confidential or sensitive business information is appropriate to process through an AI-assisted feature.

19. Malicious Activity

You must not use OneSuite to develop, upload, transmit, distribute or execute:

• malware;
• ransomware;
• spyware;
• viruses;
• worms;
• malicious scripts;
• credential-stealing tools; or
• other harmful software.

You must not intentionally test or exploit OneSuite for vulnerabilities without TP-CAMP's authorization.

Good-faith security concerns should be reported through appropriate TP-CAMP support or security channels.

20. Interference With the Services

You must not intentionally:

• overload OneSuite infrastructure;
• interfere with normal service operation;
• conduct denial-of-service attacks;
• bypass rate limits;
• disrupt databases;
• interfere with integrations;
• corrupt records;
• disrupt synchronization between applications; or
• intentionally cause excessive technical load.

21. Automated Access

Users must not use bots, scrapers, automated scripts or similar tools to access or extract information from OneSuite unless the activity is:

• provided by OneSuite functionality;
• performed through an authorized API;
• expressly permitted by TP-CAMP; or
• otherwise legally protected and not subject to lawful restriction.

Automated activity must comply with applicable technical limits and access permissions.

22. Reverse Engineering and Circumvention

Except where applicable law expressly provides otherwise, users must not:

• reverse engineer protected OneSuite software;
• extract proprietary source code;
• defeat technical restrictions;
• reproduce protected platform functionality through unauthorized extraction;
• bypass licensing or entitlement controls; or
• manipulate OneSuite to obtain functionality for which the account is not authorized.

23. Payment and Entitlement Abuse

Users must not manipulate or attempt to manipulate:

• payment records;
• plan status;
• expiry dates;
• entitlement records;
• seat allocations;
• promotional credits;
• trial periods; or
• other billing or access controls.

Users must not intentionally create multiple accounts to improperly circumvent restrictions on trials, promotions, seats or paid functionality.

24. Fraud and Deceptive Conduct

OneSuite must not be used to facilitate fraud or material deception.

Prohibited conduct includes knowingly using the Services to:

• impersonate another person or organization;
• create false commercial records;
• make fraudulent rights claims;
• misrepresent ownership;
• submit false payment information;
• obtain unauthorized benefits; or
• deceive another person for financial or commercial gain.

25. Illegal and Harmful Activity

You must not use OneSuite to plan, facilitate, promote or carry out activity that violates applicable law.

You must not use the Services to intentionally threaten, harass, exploit or unlawfully harm another person.

26. Spam and Unsolicited Communications

Where OneSuite provides communication functionality, users must not use it to send unlawful spam or communications prohibited by applicable law.

Users are responsible for ensuring that customer, marketing and business communications sent through or in connection with OneSuite have an appropriate lawful basis where required.

27. Misrepresentation of TP-CAMP

You must not falsely represent that:

• you are employed by TP-CAMP;
• you are an authorized representative of TP-CAMP;
• TP-CAMP endorses you;
• TP-CAMP has verified a rights claim when it has not;
• TP-CAMP has approved a contract when it has not; or
• TP-CAMP guarantees information merely because it appears within OneSuite.

28. External Services and Integrations

Users must not use a OneSuite integration to violate the rules, rights or security of an external service.

Where OneSuite connects to another provider, users must comply with applicable requirements governing their authorized use of that service.

29. Usage Limits and Fair Use

TP-CAMP may apply reasonable technical or plan-based limits to protect service reliability and enforce purchased entitlements.

Limits may relate to:

• records;
• storage;
• API usage;
• AI usage;
• seats;
• file sizes;
• exports;
• requests;
• communications; or
• other resource-intensive functionality.

Users must not intentionally circumvent such limits.

Where unusually excessive use materially threatens platform stability or creates disproportionate infrastructure costs, TP-CAMP may contact the customer, restrict the affected activity, or require an appropriate service arrangement.

30. Reporting Misuse

Users who become aware of suspected misuse of OneSuite may report it through TP-CAMP's official support channels.

Reports should provide sufficient information for TP-CAMP to investigate the issue.

TP-CAMP may request additional information where reasonably necessary.

31. Investigation

TP-CAMP may investigate suspected violations of this Policy.

Where reasonably necessary and permitted by law, an investigation may involve reviewing relevant:

• account information;
• workspace activity;
• access records;
• security logs;
• payment records;
• integration events;
• communications with TP-CAMP; and
• content directly related to the reported violation.

Investigations will be handled consistently with the Privacy Policy and applicable law.

32. Enforcement

Where TP-CAMP reasonably determines that this Policy has been violated, it may take proportionate action.

Depending on the circumstances, this may include:

• issuing a warning;
• requesting corrective action;
• restricting particular functionality;
• removing or disabling unlawful content where appropriate;
• suspending an individual user;
• suspending a workspace;
• restricting integrations;
• terminating access; or
• taking other action reasonably necessary to protect OneSuite, its users or third parties.

33. Immediate Action

TP-CAMP may take immediate action without advance notice where reasonably necessary to address:

• fraud;
• active security threats;
• unlawful conduct;
• serious rights infringement;
• malicious software;
• unauthorized system access;
• material threats to other users; or
• activity capable of causing significant harm to OneSuite or third parties.

34. Preservation of Records

Where reasonably necessary, TP-CAMP may preserve relevant records concerning suspected fraud, security incidents, rights disputes, payment disputes or other violations.

Such information may be retained in accordance with the Privacy Policy, Data Retention & Deletion Policy and applicable law.

35. Law Enforcement and Legal Requests

TP-CAMP may respond to legally valid requests from courts, regulators, law-enforcement authorities or other authorized bodies where required by applicable law.

TP-CAMP does not voluntarily grant unrestricted access to customer accounts merely because a third party requests information.

36. Customer Responsibility

Organizations using OneSuite are responsible for establishing appropriate internal rules for their users in addition to this Policy.

Workspace owners and administrators should ensure that team members understand the permissions and responsibilities associated with their access.

37. Relationship to Other OneSuite Policies

This Acceptable Use Policy forms part of the broader TP-CAMP OneSuite legal and operational framework.

Users should also review the:

• Terms of Service;
• Privacy Policy;
• Refund Policy;
• Cancellation Policy;
• Cookie Policy;
• Copyright & Intellectual Property Policy;
• AI Usage & Transparency Policy;
• Security & Data Protection Policy; and
• Data Retention & Deletion Policy,

where applicable.

If a specific written agreement imposes additional acceptable-use requirements for a particular service, those additional requirements will also apply.

38. Mandatory Legal Rights

Nothing in this Policy is intended to restrict a lawful activity that cannot legally be prohibited or to remove a right that cannot lawfully be excluded.

39. Changes to This Policy

TP-CAMP may update this Acceptable Use Policy as OneSuite's Services, technology, risks or applicable legal requirements evolve.

The current version will display its effective or last-updated date.

Material changes may be communicated through the OneSuite website, application interface, email or another reasonable method.

40. Contact

Questions about acceptable use or reports of suspected misuse should be submitted through the official TP-CAMP OneSuite contact or support channels.

The current Acceptable Use Policy will be available through the TP-CAMP OneSuite website.