Acceptable Use Policy

1. Who this applies to

Everyone who uses TallyWeek: workspace owners, admins, members, guests, people who hold API keys, and anyone who submits a public form. Workspace owners are responsible for what their members and their API integrations do. This policy is part of the Terms of Service.

2. No illegal content or activity

• Do not store, share or link to content that is illegal where you are or where we are, including child sexual abuse material, content that infringes copyright or trademarks, or material that breaches someone's privacy or confidentiality.
• Do not use TallyWeek to plan, run or record fraud, money laundering, sanctions evasion or any other crime.
• Do not put data into TallyWeek that you have no lawful right to hold or process.

3. No harassment or abuse

• Do not use updates, @mentions, item names, form fields or notifications to threaten, harass, bully, stalk or defame anyone.
• Do not post content that incites violence or hatred against people because of who they are.
• Do not invite people to a workspace or share boards with them in order to expose them to abusive content.

4. No malware or attacks

• Do not upload files that contain viruses, ransomware or other malicious code, or link items to such files.
• Do not probe, scan or test the vulnerability of TallyWeek or its infrastructure without written permission. If you find a security issue, report it as described on the Security page.
• Do not attempt to bypass authentication, roles, board permissions, private-board restrictions or plan limits.
• Do not overload the service with automated requests, automation loops or uploads designed to degrade it.

5. No spam through forms or notifications

• Public forms exist to collect requests, applications and feedback. Do not publish forms whose purpose is to harvest email addresses for unsolicited marketing, to phish, or to collect passwords or card numbers.
• Do not use invitations, @mentions, assignments, automations or the "Notify someone" action to send bulk unsolicited messages.
• Do not submit junk, automated or abusive content to other people's public forms.

6. No scraping or abuse of the API

• Use the REST API and MCP server only with keys issued for your own workspace, within the scopes you were given.
• Do not scrape, crawl or bulk-download workspaces, boards or forms you are not a member of, whether through the API, embeds or the web app.
• Do not share API keys with people outside your workspace or embed them in public code. Revoke a key immediately if it leaks.
• Respect any rate limits we apply. If you need more capacity, ask us.

7. No reselling access

• Do not sell, rent or sublicense TallyWeek seats, workspaces or API access to third parties, or run TallyWeek as a white-label or hosted service for others.
• Agencies and consultants may run client work inside their own workspaces and invite clients as guests or members; that is normal use and allowed.
• Do not create multiple Free workspaces to avoid paying for seats you are using as one team.

8. No impersonation

• Do not pretend to be another person, company or AiroxLab LLC in your account name, workspace name, form titles or messages.
• Do not publish forms that imitate another organisation's branding to mislead the public.
• Do not use TallyWeek or AiroxLab LLC branding in a way that suggests we endorse you without our written agreement.

9. Enforcement

We act in proportion to the problem. Depending on the severity we may:

• Contact the workspace owner and ask for the content to be removed or the behaviour to stop.
• Remove or hide specific content, unpublish a form, or revoke an API key.
• Suspend an account or workspace while we investigate.
• Terminate the account or workspace under the Terms of Service, without a refund where the breach is serious.
• Report illegal activity to the relevant authorities where we are required or permitted to.

Where we suspend or terminate, we tell the workspace owner why and how to respond, unless doing so would break the law or put someone at risk. You can challenge any enforcement decision through the complaints process.

10. Reporting abuse

If you see content or behaviour on TallyWeek that breaks these rules, email info@airoxlab.com with a link or description. We acknowledge every report and act on it as quickly as we can. To report a security vulnerability, see the Security page.

11. Changes

We may update this policy as the product and the law change. Material changes are announced by email to workspace owners with at least 14 days' notice. See also the Privacy Policy.