Acceptable Use Policy

1. Scope

This Acceptable Use Policy applies to everyone who uses AceHR: customers and their authorized users, partner users, candidates, developers using our APIs, and website visitors. It is part of our Terms of Service. Customers are responsible for making sure their users and integrations follow it.

2. No unlawful discrimination

Do not use AceHR to discriminate unlawfully. In particular, do not:

• screen, rank, reject or otherwise treat people differently because of race, color, religion, sex, pregnancy, sexual orientation, gender identity, national origin, age, disability, genetic information, veteran status or any other characteristic protected by law, or use proxies for them, such as zip codes;
• use AI features to infer protected characteristics, or prompt them to consider such characteristics;
• publish job postings or screening questions that unlawfully exclude protected groups, or that ask about protected characteristics without a lawful reason; or
• refuse reasonable accommodations or alternative formats when a candidate asks for them or the law requires them.

3. No covert surveillance or misuse of monitoring

Monitoring and recording features exist only for transparent, job-related assessments and interviews. Do not:

• record, monitor or analyze anyone without the notice and consent the law requires, or hide or misdescribe proctoring, recording or AI use;
• use assessment monitoring to watch employees’ ordinary work, homes or private lives, or for any purpose other than the assessment;
• use recordings, images or AceHR features to identify people through facial recognition, or to infer emotion, personality or honesty; or
• share recordings or monitoring data with anyone who does not need them for the hiring decision.

4. Use only for staffing, recruiting and workforce purposes

Use AceHR only for legitimate staffing, recruiting and workforce administration. Do not:

• use AceHR, or any information or output from it, as a consumer report or for decisions about credit, insurance, housing or tenant screening, or for any other purpose covered by the Fair Credit Reporting Act;
• sell, rent or broker candidate or worker information, or use it to build lists for unrelated marketing; or
• charge candidates application or placement fees where the law prohibits it.

5. Data you upload

Upload only data you are allowed to use. Do not:

• upload personal information without a lawful basis and the notices and consents the law requires, including purchased or scraped contact lists you have no right to use;
• upload more sensitive information than the workflow needs; record Social Security, passport and bank account numbers only in the designated encrypted fields, never in notes, file names or AI prompts;
• upload health, genetic or medical information except where the law requires or permits it, such as an accommodation process, and then only as the law allows;
• upload information about children under 13; or
• upload content that infringes others’ rights, or that is unlawful, defamatory or malicious.

6. Responsible use of AI features

When you use AI features, do not:

• try to bypass their safeguards, for example through prompt injection or instructions hidden in documents;
• generate deceptive content, such as fake résumés, references, credentials, job postings or reviews;
• create synthetic voices, images or video that impersonate a real person, or deepfakes of any kind;
• rely on AI outputs as the sole basis for an employment decision, or present them as verified facts;
• extract outputs at scale to train or build competing AI models or services; or
• violate the usage policies of the AI providers listed on our subprocessor list.

7. Security and system integrity

Help keep AceHR secure. Do not:

• scan, probe or test the security of AceHR, including penetration testing, without our prior written permission;
• introduce malware, or interfere with or overload the Services;
• bypass authentication, access controls, rate limits, usage limits or metering, or access another organization’s data;
• share API keys or credentials, or use keys beyond their scopes; or
• interfere with assessment monitoring, recording, the code sandbox or the integrity of results.

If you find a vulnerability, report it to us promptly and do not exploit it or disclose it publicly before we have had a reasonable chance to fix it.

8. No scraping or bulk extraction

Use our documented APIs, public job feeds and embeddable widget within their limits. Do not scrape, crawl or bulk-download the Services or job boards by other means, harvest candidate contact information, or create accounts or applications automatically.

9. Messaging, calls and spam

When you contact candidates and others through AceHR, do not:

• send spam or unsolicited bulk messages, or messages that violate the CAN-SPAM Act or state email laws;
• make calls or send texts that use an AI-generated or prerecorded voice or an autodialer without the consent the Telephone Consumer Protection Act and state laws require;
• ignore opt-out requests; or
• send assessment or interview invitations to people who are not being considered for a role.

10. No impersonation or deception

Do not impersonate any person or organization, misrepresent your affiliation with an employer or with AceHR, post jobs that do not exist, or mislead candidates about who is hiring, how their information is used, or whether AI, recording or monitoring is involved.

11. Assessment content and integrity

Candidates must not share, post or sell assessment questions or answers, get help from others or from unauthorized tools, let someone else take an assessment for them, or tamper with monitoring.

Customers must keep assessment content, recordings and results confidential, use only job-related tasks, not ask candidates for unpaid production work, offer accommodations and alternatives, and make sure a person reviews results before acting on them.

12. Reporting and enforcement

Report suspected violations to acehrassociatesinc@gmail.com. We may investigate, and we may remove content, disable features or API keys, suspend or end access, and report unlawful activity to the authorities. Our response will be proportionate to the violation, and notice to customers follows the Terms of Service and the customer’s agreement.