Acceptable Use Policy

In short

• Use Tarleaks for lawful business purposes and treat other people's data with care.
• Do not attack, overload, scrape or try to get around the security or limits of the platform.
• Do not share sign-in details. Each person who uses Tarleaks should have their own seat.
• Partners must also follow the partner rules in section 6: honest claims, no self-referral and no gifts to win business.
• If something is wrong, we will normally contact you first, explain, and give you reasonable time to fix it.
• We limit or suspend only when we need to, for example to protect people or the platform, and we restore access when the issue is resolved.
• Even then, we will not stop you from exporting your own data unless the law or an authority requires it.
• Found a security issue or abuse? Tell us at info@tarleaks.com.

1. Who this policy is for

1.1 This policy applies to every client and every user of a client's workspace, to people who run a self-hosted installation of Tarleaks, and to our partners.

1.2 It forms part of the Terms of Service for clients and of the Partner Agreement for partners. In this policy "you" means anyone to whom it applies, and "we" means Tarleaks.

1.3 A client is responsible for the use of Tarleaks by its users, including employees, contractors and any partner or adviser it invites.

2. Our approach

2.1 Tarleaks holds sensitive business and personal data. The rules below keep the platform safe and fair for everyone.

2.2 We write these rules in plain language. If you are unsure whether something is allowed, please ask us at info@tarleaks.com before you do it.

3. What you must not do

3.1 Break the law. Do not use Tarleaks for any unlawful purpose, including fraud, money laundering, tax evasion, dealing with persons or entities under sanctions that apply to us, or anything that is a crime under UAE law or the law of your country.

3.2 Harm the platform or other people. Do not upload or send malware, run denial-of-service or similar attacks, or put an unreasonable load on the platform.

3.3 Test or bypass security without permission. Do not probe, scan or test the platform, or try to gain access to accounts, data or systems that are not yours. Do not bypass limits, seat counts or access controls.

3.4 Misuse access.

• Do not share your sign-in details or let someone else use your seat. Add a new user instead.
• Do not use Tarleaks in a way that avoids paying for the seats you use.
• Do not scrape or copy the platform automatically in ways that we have not approved.

3.5 Resell or white-label without agreement. Do not resell Tarleaks, or offer it as your own, unless we have agreed in writing, for example in the Partner Agreement.

3.6 Misuse content and data. Do not upload content that infringes someone else's rights, or personal data that you have no lawful right to use. Do not use Tarleaks to hold or share unlawful content.

3.7 Send spam or deceive. Do not use Tarleaks to send unwanted bulk messages, to impersonate another person or business, or to give false information about yourself.

3.8 Create false records. Do not use the platform to create false invoices, payroll records or tax documents.

4. Self-hosted installations

4.1 Do not copy, share, change or tamper with your licence key, or the licence checks in the software.

4.2 Do not use the software beyond the number of user seats you are licensed for. If you need more, please contact us and we will help.

4.3 A fresh installation or re-activation needs a valid licence.

5. Handling other people's data

5.1 If you put personal data in Tarleaks, you must have a lawful basis to do so, and you must treat it in line with the law that applies to you, such as the PDPL.

5.2 Only give access to people who need it. Remove access when someone leaves your business.

6. Extra rules for partners

6.1 Describe Tarleaks honestly, and do not make claims that you cannot support.

6.2 Do not refer yourself, or a business that you own or control.

6.3 Do not bid on the Tarleaks brand in paid search.

6.4 Do not give or offer gifts or payments to a client's staff to win business. UAE Federal Decree-Law 31/2021 treats private-sector bribery as a crime.

6.5 Get a client's consent before you share its details with us, and keep client information confidential.

6.6 The Partner Agreement has the full rules.

7. Reporting a concern and security issues

7.1 If you see abuse or a breach of this policy, write to info@tarleaks.com. Please tell us what happened and when.

7.2 If you find a security weakness, please tell us at once, and do not use it, share it publicly or access data that is not yours. Give us reasonable time to fix it. We will not take action against anyone who reports a weakness honestly and follows these steps.

8. What we do if the policy is broken

8.1 We try to be proportionate and fair. We will usually follow these steps.

8.2 We will normally allow a client to export its data at any stage, unless the law or an authority prevents it.

8.3 We may share information with authorities where the law requires.

8.4 Unpaid invoices are handled under the Payment and Grace Period Policy, not under this policy.

9. Changes and contact

9.1 We may update this policy. For a significant change we will give notice on https://tarleaks.com and by e-mail before it applies.

9.2 Questions? Write to info@tarleaks.com, or to Tarleaks, United Arab Emirates.