Acceptable Use

01Messages and approval links

• Send approval links and reminders only to people who are part of the workflow
• Do not use the Service to send marketing or bulk messages over WhatsApp or email
• Follow WhatsApp Business and email provider rules when using those channels

02Public forms

• Do not use public forms to collect passwords, full card numbers or other secrets
• Tell people filling a public form who will see their data and why
• Do not build forms that imitate another organisation to mislead people

03Data you store

• Only store data your organisation has a right to process
• Use field level access for sensitive data such as salary, health or identity documents
• Do not upload files that contain malware

04Connectors and API

• Use the API within the published rate limits
• Do not try to access workspaces, data or systems you are not authorised for
• Do not probe, scan or load test the Service without written permission from us

05Prohibited use

• Anything unlawful, including fraud and harassment
• Workflows designed to get around approvals your organisation requires
• Reselling access to the Service without an agreement with us

06If something goes wrong

If we see use that breaks these rules, we will contact the workspace administrator first where we can. We may pause a workflow, a connector or a user account when there is a risk to others, and will restore it once the issue is fixed.