Acceptable Use Policy

This policy applies to every customer, Authorised User and Vendor User of PharmaERP Corporate (the “Service”). It is part of the Terms of Service. The customer is responsible for making sure everyone using the Service under its account follows it.

You must not use the Service to plan, record, document or facilitate:

• trade in counterfeit, falsified, substandard, stolen, diverted or smuggled medicines, medical devices or other health products;
• import, storage, distribution or sale of products that are not registered or authorised where the law requires it, or by anyone without the required licence from the Ministry of Health or another competent authority;
• trade in narcotic drugs, psychotropic substances or controlled precursors other than as the law strictly permits;
• trade that breaches sanctions, export controls or customs laws;
• bribery, kickbacks, bid rigging, price fixing or other corrupt or anti-competitive practices, including in public tenders;
• false, altered or misleading documents, including tender submissions, certificates, batch or expiry data, invoices, tax documents and customs declarations.

• Anything that breaks the law of Oman or of any country where you operate, including the Cyber Crime Law (Royal Decree 12/2011), the Electronic Transactions Law (Royal Decree 69/2008) and the Personal Data Protection Law (Royal Decree 6/2022).
• Content that is defamatory, obscene, threatening, discriminatory, contrary to public order or morals, or that infringes intellectual property, privacy or other rights.
• Uploading personal data of other people without a lawful basis, or special categories of personal data (such as health, genetic or biometric data, including patient data) without the permit the law requires.
• Fraud, phishing, impersonation or misrepresenting who you are or whom you act for.

• No spam: no unsolicited bulk, marketing or commercial messages, and no messages to people who have not agreed to receive them where consent is required.
• No misleading sender details or subject lines, and no hiding of the sender’s identity.
• Honour opt-out requests promptly.
• No messages containing malware, phishing links or illegal content.

• No attempt to access another customer’s data, accounts or companies, or any part of the Service you are not authorised to use.
• No probing, scanning, penetration or vulnerability testing, or load testing, without our prior written permission.
• No uploading of viruses, malware, ransomware or other harmful code or files.
• No getting around security controls, authentication, access rules, plan limits, AI usage limits or other usage limits.
• No overloading or disrupting the Service, including denial-of-service attacks, excessive automated requests or deliberately expensive AI usage.
• If you find a security weakness, report it to us at info@ciispc.com and do not exploit or disclose it.

• No copying, modifying, decompiling, disassembling or reverse engineering the Service, except to the extent the law expressly allows it despite this restriction.
• No scraping, crawling, or extracting data from the Service by automated means, other than through the export and features we provide.
• No using the Service, its templates or its output to build a competing product.
• No reselling, renting, sublicensing or providing the Service to third parties without our written agreement.
• No removing or hiding our notices, branding or legal terms.

• No sharing of logins or passwords. Each user must have their own login.
• No creating accounts with false details, or several trial accounts for the same business.
• No using another person’s account without their permission and the customer’s authority.

• No using AI features to create unlawful, misleading, discriminatory or infringing content, or false documents.
• No attempts to make the AI reveal other customers’ data, our system instructions or confidential information, or to bypass its safeguards.
• No relying on AI output without human review for regulatory, medical, legal, tax or financial decisions.

We may investigate suspected breaches. If we reasonably believe this policy has been breached, we may remove or disable content, limit features, suspend users or the account, or terminate the account under the Terms of Service, and we may report unlawful activity to the competent authorities and cooperate with them. We will act proportionately and, where reasonably possible, give notice first.

To report abuse of the Service, email info@ciispc.com.