Acceptable Use Policy

The StaffApp™
Effective Date: April 15, 2026  ·  Last Updated: April 15, 2026

Prohibited Conduct

1. Illegal Activity

You may not use the Service to:

• Violate any federal, state, local, or international law or regulation
• Facilitate or encourage illegal activity by others
• Store, transmit, or process content that is illegal to possess or distribute
• Evade taxes, launder money, or otherwise conceal the proceeds of illegal activity

2. Employment Law Violations

The Service is designed to support lawful workforce management. You may not use it to:

• Create fabricated or knowingly false disciplinary records
• Document employees in ways designed to build a pretextual case for termination based on a protected characteristic (race, color, religion, sex, national origin, age, disability, genetic information, or any characteristic protected under applicable federal, state, or local law)
• Retaliate against employees who have engaged in legally protected activity (whistleblowing, filing complaints, union organizing, requesting accommodations, exercising leave rights)
• Circumvent disclosure requirements under applicable employee monitoring, AI transparency, or background check laws
• Store information you have no lawful basis to collect, including information improperly obtained about job applicants or employees

3. Harm to Others

You may not use the Service to:

• Harass, stalk, intimidate, or threaten any person
• Document or encourage workplace harassment, discrimination, or a hostile work environment
• Defame any individual through false statements presented as factual observations
• Invade the privacy of employees, applicants, or any other person beyond what is lawfully permitted in an employment context

4. Misuse of AI Features

The DevCoach AI assistant is a tool for coaching and reflection. You may not:

• Rely on DevCoach outputs as the sole basis for consequential employment decisions (hiring, firing, promotion, demotion, pay changes) where applicable law requires human review
• Use DevCoach to generate content intended to harass, harm, or deceive
• Attempt to manipulate DevCoach into producing content that violates this AUP (including through prompt injection, jailbreaking, or role-play framings designed to bypass safety guidelines)
• Present DevCoach-generated content as having been produced by a licensed professional (HR consultant, attorney, therapist, etc.)
• Use the Service to develop, train, or benchmark competing AI systems

5. Voice Dictation Misuse

You may not:

• Record any person without any legally required consent
• Use voice dictation in jurisdictions where doing so violates applicable wiretapping, eavesdropping, or biometric information laws
• Enable voice dictation for staff accounts without appropriate notice to those staff
• Record conversations, meetings, or other audio involving third parties with the intent to transcribe and store their statements in Staff Records

The Dictate feature is designed for a single authorized user dictating their own notes. It is not a meeting-recording tool.

6. Security Violations

You may not:

• Attempt to gain unauthorized access to any part of the Service, another customer’s account, or our systems
• Probe, scan, or test the vulnerability of the Service without our prior written consent
• Circumvent, disable, or attempt to bypass authentication, rate limits, access controls, or other security features
• Use another person’s credentials or share your own credentials with unauthorized parties
• Impersonate any person or entity, or misrepresent your affiliation with a person or entity
• Interfere with the proper functioning of the Service for other users

7. Malicious or Abusive Technical Conduct

You may not:

• Upload, transmit, or distribute malware, viruses, or any other malicious code
• Use the Service to send spam, phishing, or unsolicited communications
• Use automated means (bots, scrapers, crawlers) to access the Service except through our documented APIs
• Reverse engineer, decompile, or disassemble any part of the Service
• Remove, alter, or obscure any copyright, trademark, or other proprietary notices
• Resell, redistribute, sublicense, or provide the Service to third parties outside your Customer Organization
• Exceed the rate limits, storage limits, or other quantitative restrictions of your plan through technical workarounds

8. Content That Doesn’t Belong

The Service is not the appropriate place to store or process certain types of information. You may not upload, enter, or transmit:

• Protected health information regulated by HIPAA or similar laws (unless a specific HIPAA Business Associate Agreement is in place, which is not currently offered)
• Payment card numbers, bank account numbers, or other financial account credentials of employees or third parties
• Social Security numbers or other government identifiers beyond what is strictly necessary for employment records
• Classified, export-controlled, or legally privileged information
• Material that is obscene, pornographic, or sexually explicit
• Material protected by copyright where you lack the right to store or share it
• Information about minors (individuals under 18) as subjects of employment records, except where lawfully permissible for youth employment and with appropriate parental consents where required

9. Identity and Representation

You may not:

• Create fake accounts
• Share accounts between multiple individuals (each authorized user needs their own login)
• Use the Service to operate under a false identity
• Misrepresent the nature of your organization (for example, representing a restaurant group that doesn’t exist to obtain services)

Consequences of Violation

We take violations of this AUP seriously. Depending on the severity and nature of the violation, we may:

• Issue a warning
• Require specific remediation before continued use
• Suspend access to specific features
• Suspend the entire account pending investigation
• Terminate the account without refund
• Report the violation to relevant authorities
• Pursue legal remedies, including injunctive relief and damages

For violations involving employment law (Section 2), we may preserve evidence and make it available in response to lawful requests from regulatory authorities or in connection with legal proceedings.

Reporting Violations

If you believe someone is using the Service in violation of this AUP, please report it to abuse@thestaffdevapp.com. Please include:

• A description of the alleged violation
• Any evidence you can share (screenshots, account identifiers, timestamps)
• Your contact information, if you’re comfortable providing it

We review every abuse report. We cannot always share the outcome of investigations due to privacy and legal considerations, but every report is taken seriously.

If you are a Data Subject whose Personal Data is being processed in the Service and you believe that processing violates applicable law or this AUP, please contact the Customer Organization using the Service first. If you cannot resolve the issue through them, you may contact us at privacy@thestaffdevapp.com.

Changes to This AUP

We may update this AUP from time to time. Material changes will be communicated by email and/or in-app notice. Continued use of the Service after the effective date of changes constitutes acceptance.

Contact