Acceptable Use Policy

1. Illegal, fraudulent and deceptive activity

You must not use the Service, or help anyone else use it, to:

• break any applicable law or regulation, or encourage anyone else to;
• commit fraud, or create, send or keep fake, inflated or deceptive invoices, quotes, receipts, credit notes, statements or other financial records;
• falsify accounting records to mislead tax authorities, auditors, lenders, investors, customers or anyone else;
• launder money, finance terrorism, evade taxes, or conceal the origin or ownership of funds;
• evade economic sanctions or export controls, or do business on behalf of sanctioned persons or in sanctioned countries or regions;
• sell or promote goods or services that are illegal where you or your customers are located; or
• infringe anyone's intellectual property, privacy or other rights.

2. Email, invoices and the customer portal

The Service sends invoices, quotes, statements, reminders and other messages on your behalf, and lets you invite your customers to a customer portal. You must not use these features to:

• send spam, bulk unsolicited messages or marketing that recipients have not agreed to receive;
• send phishing messages, or messages that impersonate another person, business or brand;
• demand payment for goods or services that were not supplied, or that the recipient did not order;
• send email to anyone without a lawful basis for contacting them, or keep contacting someone who has asked you to stop where the law requires you to honour that request;
• harass, threaten, defame or abuse anyone, or send content that is hateful, obscene or violent; or
• include links to malware, credential-harvesting pages or other harmful content.

If your messages generate high bounce or complaint rates, we may pause sending while we work with you to fix the cause.

3. Data you upload

You must not upload, enter or store in the Service:

• special category personal data, such as health, genetic, biometric, religious, political or sexual orientation data, or criminal records data;
• payment card numbers, card security codes, full bank login credentials or government identity numbers in notes, descriptions, attachments or other free-text fields (card payments for your PilotLedger subscription are collected by Stripe, not stored in your records);
• personal data you do not have the right to process; or
• files containing viruses, malware or any other harmful code.

4. Security and the integrity of the Service

You must not:

• attempt to access another customer's account or data, or any part of the Service you are not authorized to use;
• probe, scan or test the vulnerability of the Service, or bypass authentication, permissions, plan limits or other security or usage controls;
• share login credentials between people, or create accounts using false information or automated means;
• interfere with or disrupt the Service, its servers or networks, including through denial-of-service attacks or by sending excessive requests;
• run load tests, stress tests or automated performance tests against the Service without our prior written permission;
• scrape, crawl or harvest data from the Service, or use bots to access it, except through features we provide for that purpose; or
• copy, decompile, disassemble or reverse engineer the Service, except to the extent applicable law expressly permits despite this restriction.

If you believe you have found a security vulnerability, please report it to support@pilotledger.net and do not access or alter data that is not yours. We welcome good-faith reports.

5. Commercial misuse

You must not resell, rent, sublicense or provide the Service to third parties as a service bureau or hosted offering, or use it to build a competing product, unless we have agreed to this in writing. Accountants and bookkeepers may use PilotLedger for their clients' books when each client has its own organization, or as invited Users on a client's account.

6. Enforcement

We may investigate any suspected breach of this policy. When we reasonably believe a breach has occurred, we may, depending on its seriousness:

• contact you and ask you to correct it;
• remove or disable access to the content concerned;
• limit features, such as pausing email sending from your account;
• suspend or terminate your account under the Terms of Service; and
• report illegal activity to law enforcement or the appropriate authorities, and cooperate with lawful requests.

Where practical, we will give notice and an opportunity to fix the problem before taking action. We may act without notice where a breach is serious, is causing harm to others or the Service, or where we are legally required to. Enforcement decisions are made at our reasonable discretion, and we are not obliged to monitor content in the Service.

7. Reporting abuse

If you receive a suspicious invoice or email sent through PilotLedger, or believe someone is using the Service in breach of this policy, email support@pilotledger.net with as much detail as you can, including the sender's name, the date and a copy of the message. We review every report. Please note that we cannot settle commercial disputes between a PilotLedger customer and their own customers.

8. Changes to this policy

We may update this policy as the Service and the risks it faces change. We will post the updated version on this page with a new effective date, and notify customers of material changes as described in the Terms of Service.