Acceptable Use Policy (AUP)

Last Updated: February 11, 2026

Capitalized terms not defined here have the meanings in the Terms of Service (the "Terms") available at https://www.keycafe.com/keycafe-tos.

1. Scope; Contractual

   This Schedule applies to the Products and is incorporated into and forms part of the Terms. Customer is responsible for compliance by its Authorized Users and downstream users.

2. Prohibited Use

   Customer will not and will not permit any person to:

   • use the Products in violation of applicable law;
   • use the Products for fraudulent, deceptive, or harmful activity;
   • use the Products to facilitate or enable unauthorized physical access, trespass, burglary, theft, stalking, harassment, or violent or threatening activity;
   • exchange, distribute, or provide keys or access credentials (including master keys, building fobs, or restricted-area keys) without the permission of the lawful owner or authorized controller of the relevant property or access system;
   • create, share, sell, or publish access instructions or credentials (including PINs, access links, codes, or QR credentials) except to intended recipients under Customer’s configured permissions;
   • store hazardous, flammable, explosive, illegal, perishable, or otherwise prohibited items in the Equipment;
   • access or attempt to access any system, account, SmartBox, bin, location, key, or data without authorization;
   • probe, scan, test, breach, bypass, or disable any security or access controls;
   • tamper with, force open, disable, or circumvent any physical or technical safeguards on Equipment;
   • introduce, transmit, or store malware or other harmful code;
   • interfere with, disrupt, overburden, or degrade the Products or any connected network;
   • send unsolicited messages or use the Products in violation of applicable anti-spam laws;
   • infringe, misappropriate, or otherwise violate any intellectual property or other proprietary rights of Keycafe, its Affiliates, or any third party; or
   • use the Products for High-Risk Use or with High-Value or Regulated Items except as expressly permitted under the Terms.
   • use the Products in violation of applicable trade controls, export laws, or economic sanctions, or make the Products available to any person or entity on a Canada, US, EU, Japan denied party list or embargoed jurisdiction.
   • use the Equipment to store, exchange, or hide weapons, ammunition, explosives, controlled substances, stolen property, or illegal contraband;
   • use the Equipment as a "dead-drop" or anonymous exchange point for any items other than authorized keys or assets;
   • use camera or recording features to monitor individuals without their knowledge and valid consent, or in locations where a reasonable expectation of privacy exists (e.g., restrooms, changing areas, healthcare facilities). Customer and Authorized users are solely responsible for displaying required signage and complying with all applicable surveillance and wiretapping laws;
   • use the Products to track, monitor, or collect telemetry regarding any person, vehicle, or asset in violation of applicable privacy, surveillance, or labor laws, or without providing required notices and obtaining valid consent where required;
   • store electronic devices (e.g., phones, tablets, laptops) in Equipment without first removing or securing all sensitive data. Keycafe is not responsible for data breaches resulting from physical theft of devices stored in Equipment; or
   • Customer and its Authorized Users must ensure that independent, redundant access methods (such as backup keys or physical master keys) are maintained and available for all critical assets.

3. Personal Data

   Customer will not collect, store, use, transmit, or disclose Personal Data using the Products unless Customer has all required rights, consents, and notices and complies with applicable law and the Terms.

4. Enforcement

   Keycafe may investigate suspected violations and may suspend or restrict access to the Products.

5. Changes to this AUP

   Keycafe may update this Schedule in its sole discretion. Posting the updated Schedule to Keycafe’s Terms constitutes notice.