Acceptable use

These proposed rules apply to workspace users, connected integrations and visitors using business chat. They are a draft companion to the terms of service and require final operator approval. Use only accounts, data and services you are authorised to access.

Do not use Gatherdesk to:

• Access another business’s records, evade permissions, steal credentials or impersonate a person or business.
• Distribute malware, exploit vulnerabilities, bypass rate limits or disrupt the service through excessive requests or automated abuse.
• Send spam, phishing, deceptive messages, harassment, threats or unlawful content.
• Upload or distribute material that violates someone else’s privacy, intellectual property or other rights.
• Publish passwords, private keys, session tokens or other credentials in messages, attachments or public content.

Collect only information needed for your business purpose, give people the appropriate notice, and use suitable permissions. A business is responsible for assessing whether Gatherdesk and any connected services meet the requirements of its industry and the information it plans to handle.

Do not use public demo forms or general website chat to collect payment card numbers, authentication secrets or highly sensitive records. Industry labels do not make Gatherdesk an emergency service or a substitute for specialist clinical, legal or financial systems.

Connect only mailboxes and provider accounts you have authority to use. Website widgets should be installed only on approved websites controlled by or authorised for the business. Keep provider credentials private and remove unused integrations.

Review AI-generated content before relying on it. Do not use AI to deceive people, disclose confidential information without authority or make unreviewed professional decisions. The business must assess the selected provider’s terms and data handling before sending it customer information.

Tell your workspace administrator about suspected misuse through a known channel. Platform concerns should go to the operator’s verified contact once published. Access may need to be restricted to protect accounts or investigate abuse; the final service agreement must define the review and notice process. These draft rules do not promise a particular remedy or remove rights provided by law.