Acceptable Use Policy

The basic rule

Proper Works services must be used lawfully, safely and in a way that respects other people, their data and the rules of the platforms the service connects to.

You are responsible for activity carried out through accounts, bots and automations under your control.

Prohibited activity

You must not use a Proper Works service to:

• commit, facilitate or conceal fraud, theft, deception or other unlawful activity;
• send spam, unlawful marketing, harassment or abusive communications;
• impersonate another person or organisation in a misleading or unlawful way;
• collect passwords, card PINs, authentication codes or other credentials without a legitimate and secure need;
• circumvent platform restrictions, security controls or access permissions;
• distribute malware, phishing material or content designed to compromise systems;
• infringe intellectual-property, privacy or confidentiality rights; or
• use the service in a way that creates a material risk of harm to people, systems or Proper Works.

Regulated and high-impact uses

Do not use a bot or automation as the sole decision-maker for high-impact matters such as credit, employment, insurance, medical treatment, legal rights, housing or other similarly significant decisions unless the project has been explicitly scoped for that use and the required human review, legal basis, controls and professional oversight are in place.

A bot may collect information or support an authorised professional, but it should not falsely present itself as a regulated professional.

Marketing and communications

Automated messaging must comply with applicable direct-marketing and privacy rules. Where consent is required, you must be able to demonstrate a valid opt-in and provide a practical way to stop further marketing.

You must not purchase or scrape lists and use Proper Works systems to send unsolicited promotional messages where doing so would be unlawful or contrary to platform rules.

Content and data

You must have the necessary rights, authority and lawful basis for content and data you provide to the service. Do not upload or process more personal data than the use case reasonably requires.

If a project involves particularly sensitive or regulated information, tell Proper Works before launch so that the architecture and contractual controls can be reviewed.

Security obligations

Keep account credentials, tokens and administrator access secure. Use multi-factor authentication where available, remove access for former staff, and tell Proper Works promptly if you suspect compromise or unauthorised use.

Enforcement

We may investigate suspected misuse and may suspend or restrict a service where reasonably necessary to protect users, platforms, Proper Works or third parties. Serious or repeated misuse may result in termination.

Where required by law, we may preserve or disclose relevant information to competent authorities.

Report a concern

To report suspected misuse of a Proper Works service, use the contact form and include enough information for us to identify the relevant service and investigate.