Acceptable Use Policy

• Do not attempt to access a workspace, account or record you have not been granted access to.
• Do not enter customer or staff personal data you have no lawful basis or permission to process.
• Do not export workspace data for a purpose outside the business that owns it.

• No scanning, penetration testing, brute forcing, denial-of-service or rate-limit evasion without our prior written authorisation.
• No reverse engineering to bypass permissions or role checks.
• No malware, malicious file uploads or injection attempts.
• No automated scraping or bulk data harvesting.

• Illegal goods or services, fraud, money laundering or deceptive selling.
• Content that infringes intellectual property rights.
• Harassing, hateful or unlawful material, and any sexual content involving minors.

Attendance, selfie verification and geofencing exist to verify presence at work. They must not be used for covert surveillance, for tracking staff outside working hours, or without telling staff that attendance verification is in use. Location is only captured at deliberate clock events, and you must not attempt to extend it beyond that.

Do not clock in for another person, submit falsified selfies, spoof device location, or tamper with attendance records. Attendance corrections are logged with the reason and the person who made them.

The assistant is limited to a daily request quota per workspace. Do not automate bulk requests, attempt to make the assistant reveal data outside your workspace, or use prompt injection to alter its instructions.

Public storefronts must describe real products, real prices and real availability, and must not be used for phishing or to collect payment information outside supported channels.

Report abuse or a suspected security vulnerability to privacy@bizzpilot.shop. Please give us reasonable time to investigate and remediate before any public disclosure, and do not access or modify other users' data while testing.

We may investigate suspected breaches and may restrict, suspend or terminate access. Serious breaches may be reported to the relevant authorities.