Acceptable Use Policy (AUP)
Last Updated: September 17, 2026
Who This Applies To
This Acceptable Use Policy ("AUP") governs all use of Keycafe's products, software, services and equipment (the "Products"). It applies to you if you use, access, install, configure, administer, or provision access to the Products in any capacity — including as a customer, authorized user, administrator, installer or contractor, location host, reseller, or user of an account provisioned by another party. By using the Products you agree to it. If you act for an organization, you accept for that organization and yourself.
Customer is responsible for compliance by its Authorized Users and downstream users.
Important Safety Notice
Keycafe Equipment is not a safe and is not rated or certified to any safe or vault standard. It provides convenient key management, accountability and audit capability — not protection against determined entry. Keycafe does not insure contents, and is not responsible for financial, data or other loss resulting from physical theft of contents stored in Equipment. You must maintain independent backup access (such as physical master or secondary keys) for all critical and life-safety assets and must not rely on the Products as a sole or emergency means of access.
Except as expressly stated in the Terms and the Store Terms, the Products are provided "as is" and "as available," and to the fullest extent permitted by law Keycafe disclaims all warranties, express or implied, including merchantability, fitness for a particular purpose, and non-infringement. You are solely responsible for determining whether the Products are suitable for your intended use, site, environment, and risk profile.
Prohibited Use
You will not, and will not permit any person to:
- use the Products in violation of applicable law;
- use the Products for fraudulent, deceptive, or harmful activity;
- use the Products to facilitate or enable unauthorized physical access, trespass, burglary, theft, stalking, harassment, or violent or threatening activity;
- exchange, distribute, or provide keys or access credentials (including master keys, building fobs, restricted-area keys, or vehicle keys and fobs) without the permission of the lawful owner or authorized controller of the relevant property, vehicle, asset, or access system;
- create, share, sell, or publish access instructions or credentials (including PINs, access links, codes, or QR credentials) except to intended recipients under Customer's configured permissions;
- use, configure, site, or operate the Products to deny, restrict, or condition access in a manner that is discriminatory under, or that fails to meet the accessibility requirements of, applicable fair housing, disability, accessibility, or other anti-discrimination laws — including, in the United States, the Americans with Disabilities Act and the Fair Housing Act, and applicable state and local accessibility and anti-discrimination laws, and equivalent accessibility and anti-discrimination requirements in other countries and jurisdictions — or to lock out or exclude any lawful occupant, tenant, or authorized person other than through lawful process;
- install, site, configure, or operate Equipment other than in accordance with Keycafe's published installation, environment, and documentation specifications and all applicable building, fire, and accessibility laws, permits, and property-owner consents, or in any manner that obstructs a fire exit, egress route, fire suppression equipment, or accessible route, or for any purpose or in any environment for which the Products are not designed, documented, or reasonably suited;
- rely on the Products as the sole or emergency means of access to any person, property, vehicle, or asset, or fail to maintain independent redundant access (such as backup or physical master keys) for all critical and life-safety assets;
- store hazardous, flammable, explosive, perishable, or illegal items in the Equipment, including weapons, ammunition, controlled substances, stolen property, or other contraband;
- use the Equipment as a "dead-drop" or anonymous exchange point for any items other than authorized keys or assets;
- access or attempt to access any system, account, SmartBox, bin, location, key, or data without authorization;
- probe, scan, test, breach, bypass, or disable any security or access control, or tamper with, force open, or circumvent any physical or technical safeguard on Equipment;
- introduce, transmit, or store malware or other harmful code;
- interfere with, disrupt, overburden, or degrade the Products or any connected network;
- send unsolicited messages or use the Products in violation of applicable anti-spam laws;
- infringe, misappropriate, or otherwise violate any intellectual property or other proprietary rights of Keycafe, its Affiliates, or any third party;
- use the Products for life-critical or high-risk purposes, or store high-value or regulated items without controls commensurate with the risk (such as monitored siting, surveillance, and restricted access);
- use the Products in, or to control or record access to, any classified, restricted, secure, or otherwise access-controlled government, defense, critical infrastructure, or regulated facility except with the express written authorization of the responsible authority and in compliance with all applicable facility security, clearance, and information-handling requirements;
- use the Products in violation of applicable trade controls, export laws, or economic sanctions, or make the Products available to any person or entity on a Canada, US, EU, or Japan denied party list or in an embargoed jurisdiction;
- use camera, recording, location, tracking, telemetry, or biometric features or devices — including any Keycafe fob, tag, or accessory capable of reporting its location — to locate, monitor, or identify any person, vehicle, or asset without providing all required notices and obtaining valid consent where required, or in violation of applicable privacy, surveillance, wiretapping, biometric, anti-stalking, or labor laws, or in locations where a reasonable expectation of privacy exists (e.g., restrooms, changing areas, healthcare facilities). You will not place, attach, or conceal any such device on or in any person, vehicle, or property without the knowledge and authorization of its owner or lawful custodian. You are solely responsible for displaying required signage and, where biometric identifiers are collected, for maintaining a compliant retention and destruction policy; or
- store electronic devices (e.g., phones, tablets, laptops) in Equipment without first removing or securing all sensitive data.
Personal Data
Customer will not collect, store, use, transmit, or disclose Personal Data using the Products unless Customer has all required rights, consents, and notices and complies with applicable law and the Terms.
Enforcement
Keycafe may investigate suspected violations and may suspend or restrict access to the Products.
Other Terms
Where an organization has a separate agreement with Keycafe, that agreement governs the commercial relationship; this AUP governs conduct in the use of the Products and applies in addition. This AUP is incorporated into and forms part of the Terms of Service (the "Terms") available at https://www.keycafe.com/keycafe-tos, and also applies on its own terms to any person who uses the Products, whether or not that person is a party to the Terms. Capitalized terms not defined here have the meanings given in the Terms; "Equipment" means Keycafe SmartBoxes, fobs, enclosures, and related hardware and accessories. Nothing in this AUP limits any disclaimer, exclusion, or limitation of liability in the Terms.
Changes to this AUP
Keycafe may update this AUP in its sole discretion. Posting the updated AUP to Keycafe's Terms constitutes notice. Keycafe may also give notice by any other reasonable means, including in the Software, by email to account administrators, or by display on or through Equipment. Notice is effective when given by any of these means, whether or not any particular person views it. Continued use of the Products after the effective date of an updated AUP constitutes acceptance of it.