Acceptable Use Policy

Version 2026-11-06 · in effect from 2026-11-06

1. Who this applies to

This policy is part of the agreement between csr eco solutions and Customer for recovery. It applies to Customer and to every Authorised User. "You" means both. "We" means csr eco solutions. Words with capital letters have the meaning given in the Terms of Service.

The short version: use your own account, enter what your records show, share results as recovery produced them, and do not test or get around our controls.

2. Your account

You must:

give your real name, your real organisation and an email address that you control;
use your own sign-in, and keep multi-factor authentication switched on;
tell us promptly if you think someone else has used your account.

You must not:

share a sign-in between people, or let someone who is not an Authorised User use yours;
pretend to be another person or organisation, or say you act for an organisation when you do not;
sell, lend or transfer an account;
use recovery to try to find out whether another organisation is a customer.

3. The Free plan

The Free plan gives each organisation a fixed number of projects for the life of the organisation, once. You must not try to get more by:

opening more than one free account for the same organisation, whether under different email addresses, domains or names;
closing an account and opening a new one, or deleting and recreating projects;
signing up with a disposable or borrowed email address, or with false details, to pass our review of new accounts;
sharing sign-ins to stay under the limit on people who can enter data;
using a promotional or referral code in a way it was not offered.

If two teams in the same organisation have each opened an account in good faith, tell us and we will join them.

4. Truthful data

Enter what your records show. You must not:

enter a figure that you know, or have good reason to believe, is false;
make up, alter or backdate a scale ticket, receipt, donation record, photograph or other document;
use the same scale ticket or record for more than one project or more than one account, or use a ticket that belongs to someone else's load;
leave out loads, including loads sent to landfill, to make a result look better;
enter a load grade or weight that differs from the one on the ticket;
attach a file as evidence that does not relate to the entry;
give a false reason when you keep an entry that an automated check has flagged;
submit false or altered evidence for Verification Services.

An honest mistake is not a breach of this policy. Correct it as soon as you find it.

5. Sharing results

This section covers anything recovery produces from your data that you share or publish: reports and exports, share links, results cards, post text and public results pages.

You must:

keep the data source statement that recovery provides with the item;
make sure you have the right to publish what the item shows.

You must not:

change any figure;
crop, cover or remove the data source statement, the "Powered by csr eco solutions" line or the "Made with recovery" line;
say or suggest that csr eco solutions verified, certified or endorsed a figure that is not labelled "Verified by csr eco solutions";
use csr eco solutions' name, or any statement about its own environmental management practices or about any independent review of them, to describe your own figures;
present another organisation's results as your own;
put personal information on a public results page or card;
keep using a page or card that we have withdrawn.

Any target, comparison or forward-looking statement you publish is your own.

6. Security

You must not:

probe, scan or test recovery for weaknesses, or run a penetration test or load test against it, without our written permission first;
get around sign-in, multi-factor authentication, plan limits, rate limits or any other control;
access, or try to access, another organisation's data, including by guessing links or identifiers;
collect data from recovery by scraping, crawling or any other automated means, other than through the export features or an interface we provide for that purpose;
upload a file that contains malicious code;
disrupt recovery or place an unreasonable load on it;
use recovery to send unsolicited messages.

If you find a weakness, tell us at info@csrecosolutions.com. Do not use it and do not disclose it to anyone else until we have dealt with it.

7. Content you must not upload

You must not upload or enter anything that:

is unlawful, defamatory, harassing or obscene;
infringes another person's copyright, trademark or other rights;
you have no right to share, including another organisation's confidential information.

Personal information. recovery is for project records, not for information about people. Enter only the personal information that a project record needs, such as a name on a scale ticket or a site contact. You must not upload:

government identity numbers or copies of identity documents;
health information;
bank account or payment card numbers;
information about children;
personnel or payroll records;
passwords or other sign-in details.

Where a document holds personal information that the record does not need, remove or cover it before you upload it. Avoid photographs in which people can be identified.

Files. When file uploads are available, you must not:

upload a file that contains malicious code, or active content such as scripts or embedded files;
upload a file you have no right to share;
try to get around, disable or fool the checks that scan files, including by disguising a file's type or splitting a file to avoid them;
upload a file type we do not accept. recovery accepts PDF, PNG, JPEG and WebP files only, up to the size limit shown in the Platform. HEIC and SVG files are not accepted; or
upload a file that holds more personal information than the record needs.

A file that fails the checks is rejected. A file that cannot be checked is not shown. File uploads may be switched on after launch.

8. Fair use

You must stay within the storage and other limits of your Plan, and must not use recovery as general file storage or for anything other than reporting on decommissioning, reuse, donation and recycling projects. You may enter projects that you run for your own clients. You must not resell recovery or offer it to others as your own service.

9. What we may do

If we reasonably believe this policy has been breached, we may do one or more of the following, choosing what fits the breach:

contact you and ask for an explanation or a correction;
hold or switch off a feature for a new account while we review it;
withhold a verification, or remove a "Verified by csr eco solutions" label;
suspend a report, a share link, a public results page or a card, or withdraw a public results page or card record. Where we withdraw a page or card, a notice stays at its address;
remove or disable content;
set an organisation's remaining Free plan allowance to zero, or join duplicate accounts;
suspend an Authorised User or the account;
close the account and end the agreement, as the Terms of Service allow;
tell a regulator, a court or the police, where the law requires or permits it.

How we decide. A match found by an integrity check is not a finding that any data is inaccurate, and we will not treat it as one. A person at csr eco solutions, not an automated system, makes any decision to suspend or close an account under this policy. Some limits apply automatically, such as rate limits and the Free plan allowance already used by your organisation; you can ask a person to review those.

Notice and review. We will tell you what we have done and why, unless the law prevents it or the explanation would create a security risk or reveal information about another customer. You can ask for a review by writing to info@csrecosolutions.com or to dpo@csrecosolutions.com.

Fees. No refund is due where we suspend or close an account for a breach of this policy.

We are not obliged to monitor accounts or content, to run any check, or to detect any breach of this policy.

10. Reporting a concern

To report misuse of recovery, a concern about a public results page or card, or a privacy concern, write to dpo@csrecosolutions.com or use the "Report a concern" link on the page.

11. Changes to this policy

We may change this policy as section 22 of the Terms of Service describes.