Full-control Mac Rules

1. Scope

These Rules apply to every Macyou plan that includes administrator access (“Full-control Mac”). They supplement the Terms of Service and the Acceptable Use Policy, form part of the Terms, and you accept them when you order a Full-control Mac. They apply to you and to anyone you give access to the Mac; you are responsible for their actions.

2. Macyou's management layer

The Mac belongs to Macyou and stays under Macyou's management for the whole rental, so that it can be suspended, recovered, erased and handed to the next customer safely. The management layer consists of:

• the Mac's enrolment in Macyou's device management (Apple Business Manager and Macyou's MDM service), its supervision and the management profiles installed through it;
• the Macyou node agent and the other Macyou launch daemons, their files and their keys;
• the Recovery Lock and the security settings Macyou sets (including System Integrity Protection);
• the network: the Mac is connected to the internet only through Macyou's wired Ethernet connection and router, at the address Macyou assigns. Wi-Fi is kept off.

3. What you must not do

You must not, and must not allow anyone else to:

1. remove, un-enrol or disable the Mac's device management, remove its management profiles, or block or interfere with its traffic — including through /etc/hosts, firewall, DNS, proxy or routing changes aimed at Macyou's or Apple's management servers;
2. stop, disable, remove, modify, replace, imitate or block the Macyou agent or any other Macyou component, its files or its keys;
3. turn on Wi-Fi, or connect the Mac to any network other than Macyou's Ethernet connection — including Wi-Fi, a personal hotspot, Bluetooth, Thunderbolt or USB networking;
4. change the Mac's assigned network address, its hardware (MAC) address or its network configuration in order to avoid Macyou's network controls;
5. turn off System Integrity Protection, change or remove the Recovery Lock, change boot or firmware security settings, start recoveryOS or another operating system, or restore or revive the Mac;
6. turn on Activation Lock or Find My Mac, or otherwise lock the Mac to an Apple Account (signing in to an Apple Account for development, the App Store or iCloud services is allowed as long as Find My Mac stays off);
7. try to get around a suspension, quarantine or any of the checks described in Section 4.

If you are not sure whether something you plan to do is allowed, ask support@macyou.co first.

4. Automatic checks

Macyou checks the management layer continuously and automatically, from outside the Mac wherever possible and through its management components on the Mac. The checks look at:

• whether the Mac reports to device management, and the security status it reports (supervision, System Integrity Protection, Recovery Lock, Activation Lock, remote management);
• whether the Macyou agent is running and reporting;
• the Mac's network: interface type, local address, and the public address its traffic reaches the internet from;
• Wi-Fi power and association, and whether Macyou's components are present;
• entries in /etc/hosts that point management servers elsewhere.

The checks do not read your files, documents, or the content of your network traffic. Where a check finds a breach Macyou can undo, Macyou undoes it automatically — for example, switches Wi-Fi off, restarts a stopped Macyou component, or removes /etc/hosts entries that block management servers (a copy of the file is kept on the Mac). Data from the checks is processed as described in our Privacy Policy.

5. What happens on a breach

1. First breach that Macyou reverted automatically — we email you a warning.
2. A repeated breach, or one that cannot be reverted automatically — network access to the Mac is suspended immediately and without prior notice, and we email you. A suspension does not extend the paid period and does not touch the data on the Mac.
3. Termination for cause — Macyou may end the rental for a breach of these Rules (Terms, Section 12). Access is closed and the Mac is erased as described in the Terms (Section 8). No refund or credit is issued for the unused part of the paid period, and the deposit is withheld in full to cover the cost of recovering the Mac.

If we find that a suspension was caused by an error on our side, we restore access as soon as we confirm it. You can reply to any of our emails or contact support to dispute a finding.

6. Deposit

A Full-control order includes a security deposit shown at checkout. It is refundable when the rental ends normally, less any amount you owe Macyou, as set out in the Refund Policy. It is withheld in full when the rental is terminated for a breach of these Rules.

7. Your data

You are responsible for backing up anything you need. Macyou is not liable for data lost when access is suspended or a rental is ended under these Rules.

8. Changes

Macyou may change these Rules as described in Section 18 of the Terms of Service. The version you accepted is recorded with your order.