Acceptable Use Policy

This Acceptable Use Policy ('AUP') governs the use of all Vectro Airport Operating System platform applications operated by TechHouseCa Inc. ('TechHouseCa,' 'we,' 'our,' or 'us'), including all subdomain applications accessible under the vectro.ca domain (including queue.vectro.ca, apron.vectro.ca, command.vectro.ca, boards.vectro.ca, flow.vectro.ca, and all other current and future Vectro subdomain deployments).

This AUP applies to all users of Vectro Platform applications, including airport operations staff, security personnel, ground crew, contractors, drivers, and any other individual granted access to any Vectro Platform application by a Customer organization ('User,' 'you,' or 'your').

By accessing or using any Vectro Platform application, you acknowledge that you have read, understood, and agree to comply with this Acceptable Use Policy. This AUP forms part of the overall terms governing your use of the Vectro Platform and should be read together with the Vectro Terms of Use and the Privacy Policy published at vectro.ca.

Your Customer organization (the airport operator or enterprise deploying Vectro) is responsible for ensuring that all authorized users within their organization are aware of and comply with this AUP.

You are authorized to use the Vectro Platform applications only for the following purposes:

Authorized operational use: Performing the airport operational, security, and administrative functions assigned to your role within your organization, as permitted by the access rights and role-based permissions configured by your organization's Vectro administrators.

Role-limited access: Accessing only the modules, data, records, and functions to which your role permissions entitle you. You must not attempt to access modules, data, or functions beyond your assigned permissions.

Organizational compliance: Using the Vectro Platform in accordance with your organization's internal policies, operating procedures, and applicable aviation, security, and data protection regulations.

Support and troubleshooting: Reporting technical issues, providing feedback, and cooperating with authorized support processes.

You agree to use the Vectro Platform in good faith and in a manner consistent with the operational purpose for which it was deployed at your organization.

The following conduct is strictly prohibited when using any Vectro Platform application:

Unauthorized access: Attempting to access, view, copy, modify, or delete any data, account, system, or function beyond your assigned role permissions, or attempting to access another user's account.

Credential sharing: Sharing your login credentials (username, password, access tokens, or MFA codes) with any other person, including colleagues. Each user must maintain their own unique credentials.

Reverse engineering: Attempting to reverse engineer, decompile, disassemble, or otherwise derive source code from any Vectro Platform software, application, or component.

Automated scraping: Using automated tools, bots, scripts, or crawlers to access, extract, or copy data from any Vectro Platform application without the express written consent of TechHouseCa.

Introducing malicious code: Uploading, transmitting, or introducing viruses, ransomware, spyware, trojans, worms, or any other malicious or harmful code into the Vectro Platform.

Service disruption: Attempting to overload, disrupt, degrade, or interfere with the performance, availability, or integrity of any Vectro Platform application or its underlying infrastructure.

Circumventing security controls: Attempting to bypass, disable, or circumvent any security feature, authentication mechanism, access control, Role-Based Access Control (RBAC) configuration, firewall, or other technical protection measure implemented in the Vectro Platform.

Unauthorized data exfiltration: Downloading, copying, or transmitting operational data, personal data, or other proprietary information outside the Vectro Platform without authorization from your organization and in compliance with applicable law.

Unlawful use: Using the Vectro Platform to store, process, or transmit data or content that violates any applicable law or regulation, including aviation safety regulations, export control laws, privacy legislation, or anti-terrorism laws.

Impersonation: Impersonating another user, TechHouseCa personnel, your organization's administrators, or any other person or entity within the Vectro Platform.

Misrepresenting data: Deliberately entering false, misleading, or inaccurate data into the Vectro Platform, including falsifying operational records, log entries, access records, or incident reports.

You are responsible for maintaining the security of your Vectro Platform account. Your responsibilities include:

Password security: Using a strong, unique password for your Vectro Platform account. Your password must not be shared with any other person under any circumstances.

Multi-factor authentication (MFA): Where MFA is available or required on your Vectro Platform application, you must enable and maintain MFA on your account. MFA significantly reduces the risk of unauthorized access. Do not share MFA codes.

Prompt reporting: Immediately reporting any known or suspected unauthorized access to your account, loss or theft of credentials, or any other security concern to your organization's Vectro administrator and to TechHouseCa at info@techhouseca.com.

Session management: Logging out of Vectro Platform applications when you have finished using them, particularly on shared or unattended devices.

Device security: Ensuring that devices used to access the Vectro Platform are kept up to date with security patches and are not left unattended while logged in.

Account transfers: Not transferring your Vectro account, credentials, or access rights to any other person. If you change roles or leave your organization, you must inform your organization's Vectro administrator so that your account can be updated or deactivated accordingly.

The Vectro Platform processes operational data and personal data on behalf of your organization. As an authorized user, you have responsibilities regarding the data you access and handle:

Organizational policies: You must handle all operational data and personal data accessed through the Vectro Platform in accordance with your organization's data handling policies, privacy policies, and any applicable confidentiality obligations.

Applicable law: You must comply with all applicable data protection and privacy laws in your handling of personal data accessed through the Vectro Platform, including Canada's PIPEDA, BC PIPA, and any other applicable legislation.

Minimum necessary access: You should access only the data necessary to perform your authorized operational functions. Accessing, copying, or retaining data beyond what is required for your role is prohibited.

No unauthorized disclosure: You must not disclose operational data or personal data accessed through the Vectro Platform to unauthorized third parties or use such data for any purpose other than performing your authorized role.

Retention and deletion: You must comply with your organization's data retention policies when handling records generated through or exported from the Vectro Platform.

TechHouseCa reserves the right to monitor the Vectro Platform for security, integrity, and compliance purposes. This monitoring may include:

Security monitoring: Automated monitoring of platform access logs, authentication events, API usage, and system activity for the purpose of detecting unauthorized access, security incidents, anomalous behavior, and policy violations.

Compliance monitoring: Reviewing usage patterns and access records where there is reasonable suspicion of a violation of this AUP or applicable law.

Incident investigation: Accessing and reviewing activity logs and data associated with a reported or detected security incident, policy violation, or legal obligation.

By using the Vectro Platform, you acknowledge and consent to this monitoring for the purposes described above.

TechHouseCa will handle any personal data collected through monitoring in accordance with the Vectro Privacy Policy and applicable privacy law.

If TechHouseCa identifies a violation of this AUP, it may take enforcement action as described in Section 7.

Violations of this Acceptable Use Policy may result in one or more of the following consequences, at TechHouseCa's reasonable discretion and in cooperation with the Customer organization:

Account suspension: Temporary suspension of your Vectro Platform account pending investigation of a suspected violation.

Account termination: Permanent termination of your Vectro Platform account if a material violation is confirmed.

Notification to your organization: TechHouseCa will notify the relevant Customer organization of confirmed violations involving their authorized users.

Legal action: Where a violation constitutes criminal conduct, a serious security breach, unauthorized data access, or otherwise exposes TechHouseCa or the Customer to legal liability, TechHouseCa reserves the right to refer the matter to law enforcement authorities and to pursue all available legal remedies.

Cooperation with investigations: Where required by applicable law or legal process, TechHouseCa may disclose information about violations to law enforcement or regulatory authorities.

Nothing in this Section limits TechHouseCa's rights under the Terms of Use, the Master Service Agreement, or applicable law.

If you become aware of a potential violation of this AUP, a security incident, unauthorized access, or any suspicious activity on the Vectro Platform, you are encouraged to report it promptly.

To report a violation or security concern, please contact TechHouseCa at:

Email: info@techhouseca.com

Subject line: 'AUP Violation Report' or 'Security Concern'

Please include as much detail as possible, including the nature of the concern, any relevant timestamps, affected accounts or data, and your contact information.

You may also report concerns to your organization's designated Vectro administrator or internal security team, who can escalate to TechHouseCa on your behalf.

TechHouseCa takes all reports seriously and will investigate and respond in a timely manner. Reports made in good faith will be treated with confidentiality to the extent permitted by law.

TechHouseCa reserves the right to update or modify this Acceptable Use Policy at any time to reflect changes in platform capabilities, applicable law, or operational requirements.

When we make material changes, we will update the 'Effective Date' at the top of this Policy. Where appropriate, TechHouseCa will notify Customer organizations of material changes via email or in-Platform notice, and Customer organizations are responsible for communicating relevant changes to their authorized users.

Your continued use of any Vectro Platform application after the effective date of an updated AUP constitutes your acceptance of the revised Policy.

We encourage all users to review this Policy periodically.

If you have any questions about this Acceptable Use Policy or TechHouseCa's platform policies, please contact us:

TechHouseCa Inc.

Kelowna, British Columbia, Canada

Email: info@techhouseca.com

Subject line: 'Acceptable Use Policy Inquiry'

For security incidents or urgent concerns, please mark your subject line as 'URGENT — Security Concern' to ensure priority handling.