Acceptable Use Policy

1. What this covers

This Acceptable Use Policy ("AUP") sits inside our Terms of Service and binds anyone using the Service — including every User on your account.

We've written it positively where we can: most of what you'd want to do with construction-compliance, HR, estimating and invoicing software is fine. The list below is the small set of things that aren't.

2. Don't use the Service to

Break the law

• Do anything that's illegal under UK law, or under the law of any country where you operate or where the Service is reached
• Avoid taxes or duties — including using invoicing tools to facilitate fraud
• Engage in money laundering or sanctions-busting
• Carry out modern-slavery-related activity in connection with your workforce records
• Facilitate terrorism, child sexual exploitation, or other serious crimes

Infringe rights

• Upload, store, or distribute content that infringes anyone's copyright, trade mark, patent, design right, or any other intellectual property
• Use the Service to process anyone's personal data without a lawful basis under UK GDPR
• Defame, harass, threaten, or impersonate anyone — colleagues, subcontractors, clients, suppliers
• Misrepresent yourself or your business in documents generated by the Service (e.g. CIS statements, RAMS sign-offs)

Attack or degrade the Service

• Reverse-engineer, decompile, or attempt to extract source code
• Bypass, disable, or interfere with security or access-control measures
• Send malware, viruses, exploits, or malicious payloads through any Service feature (including file uploads or AI prompts)
• Conduct security testing without prior written permission — coordinated disclosure to info@site-lynx.co.uk is welcomed and rewarded
• Use automated tools to scrape, crawl, or extract data at volumes beyond ordinary use — in particular, no scraping of the preloaded regulatory library, rate library, or AI prompts
• Overload our infrastructure deliberately, including by submitting unreasonable bulk operations or unbounded recursive AI requests

Abuse the people-side features

• Use GPS clock-in, geofences, or location features for surveillance unrelated to legitimate workforce-management purposes
• Use Employ AI / employment-law features to generate misleading advice you then present to employees as our advice
• Misrepresent the legal effect of AI-generated documents (e.g. a draft RAMS) without your own competent person's review and sign-off
• Use audit-log features to retaliate against whistleblowers or to do anything else that would breach UK employment-protection law

Misuse AI features

• Generate content that promotes harm, hatred, discrimination, or that is otherwise prohibited by our AI Sub-processors' usage policies
• Use AI outputs to train competing AI models or to build a competing product where our outputs are the substantial training material
• Attempt to extract prompts, system instructions, or training data from AI features through prompt injection or other techniques
• Submit prompts intended to manipulate the AI into bypassing safety or ethical guardrails

Commercial misuse

• Resell or sublicense the Service without written permission
• Use the Service as the substantial foundation of a competing product, especially where our preloaded content (regulatory library, rate library, AI prompts) is doing the heavy lifting
• Send unsolicited bulk communications (spam) through the Service — including via the subbie portal, the invoice email features, or any system-generated email
• Use multiple free-tier accounts to circumvent paid-tier limits
• Share account credentials between people — give each User their own login

Identity & representation

• Provide false identity information when signing up
• Claim authority to bind a business you don't actually represent
• Hold yourself out as Site Lynx Group, our employees, or our products

3. Specific content restrictions

In addition to the general bans above, the following content is not permitted in the Service (including in uploads, documents, AI prompts, or any free-text field):

• Child sexual abuse material (any form, ever, full stop — we report to NCA CEOP and any other relevant authority)
• Terrorism-related content as defined by the Terrorism Act 2006
• Material that promotes violence against any individual or group
• Content that constitutes hate speech under the Public Order Act
• Stolen credentials, payment card details, or personally identifying data of third parties without their consent
• Content infringing third-party rights as set out in section 2

4. What happens if you breach

Most breaches we'll spot and talk to you about — you'll usually get a chance to fix the issue. For serious or repeated breaches we may:

• Issue a written warning with a deadline to fix the issue
• Restrict access to specific features
• Suspend your account temporarily
• Terminate your account and the Terms (with no refund for the unused portion of the current billing period where the breach is yours)
• Report criminal activity to the relevant UK authority — we don't need a warrant to do this, and we will
• Preserve relevant records for evidential purposes for as long as legally required

For any breach involving CSAM, terrorism material, or imminent threat to life, we may suspend or terminate immediately without warning.

5. How to report a violation

If you spot abuse — by another User on your account, or by someone using a different account against you — write to info@site-lynx.co.uk. Include:

• What you saw, with as much detail as you can give
• When and where you saw it (URL, account ID if known, timestamp)
• Your contact details so we can follow up

We'll respond within two working days and tell you what we're doing (within the limits of confidentiality and any ongoing investigation).

Security-specific issues (suspected vulnerabilities, account compromises) go to info@site-lynx.co.uk.

6. Changes

We may update this AUP from time to time. Material changes follow the same 30-day notice + in-app banner process as the Terms. Non-material changes (clarifications, statutory references) we publish with an updated date.