Acceptable Use Policy

1. Lawful business use

HisaBooks must be used only for lawful business and professional purposes. Customers and users must comply with applicable privacy, employment, payroll, tax, accounting, consumer-protection, anti-spam, intellectual-property, sanctions, export-control, anti-bribery, and financial-crime laws.

You must not use HisaBooks to misrepresent your identity, impersonate another person or company, falsify records, hide illegal activity, evade taxes, violate employment duties, or create misleading documents.

2. Security and access misuse

You must not:

• access or attempt to access another company, user, account, workspace, API, file, public link, or system without permission;
• bypass authentication, authorisation, plan limits, workspace limits, rate limits, country restrictions, billing controls, email verification, or security controls;
• probe, scan, test, exploit, or disrupt HisaBooks systems except under written authorisation from AARK;
• share passwords, authenticator secrets, reset links, invite links, session tokens, API tokens, or admin access;
• upload malware, scripts, tracking code, harmful files, credential harvesters, or content designed to interfere with systems; or
• use bots, scripts, scrapers, credential stuffing, password spraying, or automated signup/login activity without written approval.

3. Data and content restrictions

You are responsible for the data you enter, upload, import, generate, send, or share through HisaBooks. You must not place data in HisaBooks unless you have the right and lawful basis to process it.

You must not use HisaBooks to store or process:

• unlawfully obtained personal data, stolen credentials, payment-card numbers not handled through Stripe, or bank data you are not authorised to hold;
• health, biometric, children's, criminal, government-secret, national-security, or other highly sensitive data unless the feature, law, contract, and safeguards clearly allow it;
• content that is defamatory, harassing, discriminatory, abusive, exploitative, sexually explicit, deceptive, or intended to threaten or harm people;
• material that infringes copyright, trademarks, trade secrets, privacy, publicity, or other rights; or
• data that violates the Customer's own privacy notices, employee notices, customer consents, or retention policy.

4. Intellectual-property complaints

Customers must not use HisaBooks to upload, send, publish, or share material that infringes copyright, trademarks, trade secrets, publicity, privacy, or other rights. AARK may disable public links, remove access to disputed material, notify the Customer administrator, or preserve evidence where a credible complaint is received.

To report an intellectual-property concern, email support@hisabooks.com with the subject "IP Complaint" and include the affected URL or document reference, the work or mark claimed to be infringed, your authority to act, contact details, and the action requested. We may ask for more information before taking action.

5. Email, public links, and documents

HisaBooks may allow users to email documents, generate PDFs, export data, share public form links, send notifications, and collect signatures or acknowledgements. You must not use these features for spam, phishing, malware delivery, deceptive marketing, harassment, illegal debt collection, unsolicited bulk messaging, or content that violates this AUP.

Customers are responsible for checking invoice, quotation, purchase, payroll, tax, HR, and statutory outputs before sending, filing, exporting, or relying on them. HisaBooks templates and calculations are software assistance, not professional advice.

6. Free plan and platform abuse

You must not create repeated Free workspaces, fake companies, misleading company codes, disposable identities, or duplicate accounts to avoid limits, verification, billing, review, suspension, or enforcement. You must not resell, rent, sublicense, white-label, or provide access to HisaBooks as a competing service without a written agreement.

AARK may apply anti-abuse controls, email verification, rate limits, device checks, manual review, usage limits, temporary blocks, or account closure where misuse is suspected.

7. Technical and resource limits

You must not overload, degrade, disrupt, or interfere with HisaBooks or its providers. Prohibited activity includes excessive API calls, bulk exports outside normal use, denial-of-service activity, storage abuse, repeated failed logins, malformed requests, unsupported automation, reverse engineering, scraping, copying the service, or attempting to extract source code or non-public data.

Use of desktop, mobile, or API clients must follow documented endpoints, permissions, and supported versions. AARK may block outdated or unsafe app versions where needed to protect the service.

8. High-risk and regulated use

HisaBooks is not designed for emergency services, life-critical systems, weapons, surveillance, regulated medical diagnosis, regulated financial trading, government identity systems, or other high-risk use where failure could cause death, serious harm, unlawful surveillance, or major public impact.

If your industry has special regulatory requirements, you are responsible for confirming that HisaBooks, your configuration, your notices, and your workflows meet those requirements before use.

9. Enforcement and reporting

AARK may investigate suspected violations and may remove content, disable public links, rate-limit features, suspend users, suspend a workspace, require verification, notify administrators, preserve evidence, or report unlawful activity where appropriate. Where reasonable, AARK will give notice and an opportunity to fix the issue, but urgent risks may require immediate action.

Report abuse, spam, phishing, public-link misuse, or security concerns to support@hisabooks.com. Include the company code, URL, document number, email headers, screenshots, and a short description where available.