Acceptable Use Policy (AUP)

1. Legal & Regulatory Compliance

You may use the AccoNova ERP platform only for lawful purposes. You shall not use the Services in any way that breaches any applicable local, national, or international law or regulation. Specifically, in the context of Indian operations:

• Compliance with the Information Technology Act, 2000 and the Digital Personal Data Protection Act (DPDPA), 2023.
• Prohibition against using the platform for money laundering, tax evasion, or fraudulent financial reporting.
• Ensuring all employee data processed is obtained with valid legal basis or consent as required by law.

2. Network & System Security

Users are strictly prohibited from attempting any action that compromises the stability or security of the multi-tenant AccoNova environment:

• Unauthorized Probing: Performing vulnerability scans, port scans, or penetration tests without prior written authorization from our security team.
• Resource Abuse: Intentionally overloading the infrastructure (DDoS) or executing complex database queries designed to degrade performance for other tenants.
• Credential Sharing: Sharing SuperAdmin or administrative credentials outside of authorized personnel, which bypasses role-based access control (RBAC).
• Bypassing Security: Attempting to circumvent user authentication or security of any host, network, or account.

3. Content Standards & Prohibited Data

The AccoNova environment must not be used for storing, processing, or distributing data that falls into the following categories:

• Malicious Code: Uploading files containing viruses, Trojan horses, worms, or any other harmful programs designed to adversely affect computer software or hardware.
• Infringing Material: Data that infringes any patent, trademark, trade secret, copyright, or other proprietary rights of any party.
• Inappropriate Content: While the platform is a business tool, uploading defamatory, obscene, or hateful material via document management modules is strictly prohibited.
• Fraudulent Records: Creating fictitious employee profiles or "ghost employees" to manipulate payroll expenses or statutory contributions.

4. Automated Access & Scraping

To ensure high availability for all users, AccoNova enforces strict rules on automated interactions:

• No Scraping: Use of "bots," "spiders," or other automated systems to extract data from the web interface is prohibited.
• API Usage: Automated access must only occur through official, documented API endpoints using valid authentication tokens.
• Rate Limiting: Users must respect rate limits. Attempting to bypass these limits via IP rotation or other means is a violation of this policy.

5. Reporting & Enforcement

AccoNova Solutions PVT LTD reserves the right to determine, in its sole discretion, whether there has been a breach of this AUP. When a breach has occurred, we may take such action as we deem appropriate, including:

• Immediate, temporary, or permanent withdrawal of your right to use our Services.
• Issuance of a formal warning.
• Legal proceedings against you for reimbursement of all costs on an indemnity basis resulting from the breach.
• Disclosure of such information to law enforcement authorities as we reasonably feel is necessary.

To report a suspected violation of this policy, please contact our security desk at [email protected].