Acceptable Use Policy

This Acceptable Use Policy (the "Policy") forms part of the Terms of Use and the Subscription Agreement and is binding on all waydot Customers and Users. It is intended to protect the people whose data is recorded in the platform, the accuracy of the records and the security of the Services.

1. Use in line with the purpose of the Services

The Services must be used to coordinate, document and pay for work actually performed. They may not be used to monitor people beyond that purpose or to create false records.

2. Geolocation and staff monitoring

The Customer and its Users must:

1. Use location, routes and geofences only during working hours and for work-related purposes, such as job assignment, safety, visit verification and mileage calculation.
2. Inform staff in advance, through the Customer's privacy notice and, where applicable, its internal work rules, of what information is recorded, when and for what purpose.
3. Not use waydot to track anyone outside working hours, on rest days or during vacations, or to monitor their private life, union membership, beliefs or activities unrelated to work.
4. Comply with the Federal Labor Law, including the prohibition of measures that undermine workers' dignity or privacy and, where applicable, the telework rules on the use of cameras and microphones.

3. Integrity of records

The following are prohibited:

1. Faking or simulating locations (for example, using mock-location apps, emulators or tampered devices), or recording attendance, arrivals or evidence on behalf of someone else.
2. Altering photos, signatures, timestamps or forms to record work that was not performed.
3. Sharing accounts or credentials.
4. Bypassing mandatory evidence, ticket closure or approval controls.

waydot may detect anomalies, such as impossible location jumps, and flag them for the Customer's review. A flag does not by itself establish misconduct, and the Customer must review it before making any employment decision.

4. Prohibited content

You may not upload, store or transmit through waydot any content that:

1. Is unlawful, defamatory or discriminatory, constitutes harassment or incites violence.
2. Infringes third-party intellectual property rights, trade secrets or image rights.
3. Contains sensitive personal data without the consent required by law, or data about minors without the authorization of the person exercising parental authority.
4. Contains malware, code designed to damage systems, or phishing links.

5. Platform security

The following are prohibited:

1. Attempting to access other customers' accounts, workspaces or data.
2. Probing, scanning or exploiting vulnerabilities without waydot's written authorization. Anyone who finds a vulnerability should report it in good faith to [email protected]. waydot will not take action against anyone who reports a vulnerability in accordance with this Policy and without affecting third-party data.
3. Carrying out denial-of-service attacks, deliberately overloading the infrastructure or bypassing usage and API rate limits.
4. Decompiling, reverse engineering or copying the Services, except to the extent expressly permitted by law.
5. Extracting data in bulk by scraping, outside the documented exports and API.

6. Messages and notifications

Email, messaging, notification and integration features must not be used to send unsolicited advertising or communications to people unrelated to the service. Messages to end clients must be operational in nature (for example, notices of a scheduled visit, a technician on the way or service sign-off) and comply, where applicable, with the Federal Consumer Protection Law.

7. Artificial intelligence

The artificial intelligence features may not be used to make hiring, dismissal, disciplinary or pay decisions without human review, to generate misleading content, or to inject instructions designed to manipulate the system or gain access to unauthorized data.

8. Resale

Unless agreed in writing, you may not resell, sublicense or provide the Services to third parties as your own, or use them to develop a competing product.

9. Consequences of breach

If waydot detects a breach or receives a report of one, it may require the Customer to remedy it, remove the content, suspend the Users involved or, in serious or repeated cases, suspend or terminate the Services under the Subscription Agreement. Where appropriate, waydot will notify the competent authorities. Except in urgent cases or where legally prohibited, waydot will notify the Customer before taking these measures.

10. Reporting

Uses contrary to this Policy may be reported to [email protected], and security matters to [email protected].