HostedBI

Legal

Acceptable Use Policy

Version: 2026-11-09 · Effective date: November 9, 2026

1. Scope

This Acceptable Use Policy (“AUP”) sets the rules for using HostedBI, operated by Parity Development LLC (“we”, “us”). It is part of the Terms of Service. Capitalized terms not defined here have the meanings in the Terms.

It applies to the Customer and to everyone who uses the Service through the Customer’s organization: Client Owners, Client Admins, Report Managers, Viewers, and anyone who uploads or publishes reports. The Customer is responsible for making sure its users follow it, including when they send reports to Email-Only Recipients.

We may update this AUP as the Service changes, with notice to the Client Owner of material changes at least 30 days before they take effect. Effective date: November 9, 2026.

2. Prohibited data

2.1 No protected health information. You must not upload, publish, refresh into, store, display or send through the Service any protected health information (PHI) as defined under HIPAA, or any other health data regulated as sensitive. This covers PBIX files, the data sources your reports refresh from, uploaded files, and scheduled emails. We do not sign business associate agreements, and the Service is not designed to meet HIPAA requirements.

2.2 Other sensitive data. Unless we agree in writing, you must not use the Service for any of the following:

  • full payment card numbers or bank account credentials;
  • government identifiers such as Social Security, passport or driver’s license numbers;
  • data about children under 13;
  • biometric or genetic data;
  • data subject to export controls (for example ITAR-controlled technical data).

2.3 Credentials inside reports. Do not embed passwords, API keys or tokens in report queries (Power Query/M code) or parameters. Enter data source credentials through our credential wizard, which passes them to Microsoft Power BI to store encrypted. We may flag credentials we detect in your reports as a security risk.

2.4 Rights to the data. Only upload data you have the right to use and share with the people you give access to.

3. Prohibited conduct

You must not, and must not let anyone else:

  1. break the law, or infringe anyone’s intellectual property, privacy or other rights;
  2. access, or try to access, another customer’s organization, data or reports;
  3. bypass or weaken security controls, including sign-in, two-step verification, rate limits, report permissions or row-level security roles;
  4. probe, scan or test the Service’s vulnerabilities without our written permission (report suspected vulnerabilities to security@hostedbi.com instead);
  5. interfere with the Service, including by sending excessive automated requests, keeping reports open artificially, or uploading files designed to overload processing;
  6. upload malware, or files that are not genuine Power BI reports or permitted file types;
  7. use custom visuals, scripts or report content designed to collect viewers’ data, redirect them, or run unexpected code;
  8. resell, sublicense or share access to the Service outside your organization, except to the people you invite as Authorized Users or Email-Only Recipients, or as an Order allows;
  9. share a single login among several people;
  10. impersonate anyone, or misrepresent your affiliation, including any implied affiliation with or endorsement by Microsoft;
  11. use the Service to build or benchmark a competing product without our consent;
  12. use the Service for content that is fraudulent, defamatory, harassing, discriminatory or obscene.

4. Email rules

Scheduled emails are sent in your organization’s name from our sending domain. To protect deliverability for all customers:

  • Send only to people who expect your reports. Email-Only Recipients should be your staff, contractors, advisers, investors or business contacts with a reason to receive them. Do not add purchased, rented or scraped lists.
  • No marketing or bulk mail. The Service is for report delivery, not newsletters, promotions or cold outreach.
  • Respect unsubscribes. Every email includes a one-click unsubscribe link. Do not re-add someone who unsubscribed without their fresh consent.
  • Check what each recipient receives. If a report uses row-level security, assign each recipient the correct role. The Service sends nothing to a recipient without a role, but you are responsible for the roles you assign.
  • Follow email laws that apply to you and your recipients, such as CAN-SPAM in the US and the anti-spam laws of any other country where your recipients are.

We may pause a subscription that produces high bounce or complaint rates.

5. Account security

  • Keep passwords private and use a unique password of at least 12 characters.
  • Client Owners and Client Admins must use two-step sign-in (authenticator app); we recommend it for everyone.
  • Store recovery codes safely. If an administrator loses their device and codes, we reset two-step sign-in only after confirming identity outside the Service.
  • Remove users who leave your organization, and review who can see each report and folder.
  • Tell us promptly at security@hostedbi.com about any suspected compromise.

6. Fair use and plan limits

Plans set limits on viewers, reports, model size, refreshes, subscriptions and email renders. “Fair-use unlimited” features are meant for the normal reporting needs of one organization. We apply rate limits to protect the Service (for example on sign-in attempts, uploads, manual refreshes, “Send now” and report loads). If your usage consistently degrades the Service for others, we will contact you to agree a fix, such as an upgrade or schedule change, before restricting anything except in an emergency.

7. Enforcement

If we reasonably believe this AUP has been breached, we may:

  1. contact the Client Owner and ask for the issue to be fixed;
  2. remove or disable the content concerned (for example, a report containing PHI) or pause a subscription;
  3. suspend a user’s access, or suspend the Service under the Terms if the breach is serious or not fixed within a reasonable time;
  4. terminate under the Terms for serious or repeated breaches.

Where practical we give notice and a chance to fix the issue first. For PHI, security threats or unlawful content we may act immediately and then tell you. We do not routinely review Customer Content, but our staff may view it to investigate a reported or suspected breach; those actions are recorded in your activity log.

8. Reporting a concern

Report suspected abuse, security issues or content that breaches this AUP to abuse@hostedbi.com (security issues: security@hostedbi.com). Recipients who no longer want a report email can use the unsubscribe link in it, or contact the sending organization through the reply-to address.