This Acceptable Use Policy (“Policy”) forms part of the AveriWorks ERP Terms and Conditions. It applies to AveriWorks ERP and to all Customers, Authorised Users, Respondents and other persons who access or use the Services. Capitalised terms not defined in this Policy have the meanings given in the AveriWorks ERP Terms and Conditions.
This Policy consists of Part 1 (Common Rules), which are the same for every product in the AveriWorks family, and Part 2 (Schedule: Additional rules for AveriWorks ERP). Sections of Part 2 are numbered S1, S2 and so on.
By using the Services, the Customer agrees to comply, and to ensure that its Authorised Users comply, with this Policy.
Part 1 — Common Rules
1. Lawful use
The Services must only be used for lawful business purposes.
Users must not use the Services to create, publish, store, send, process or support any activity that is unlawful, fraudulent, misleading, harmful or in breach of applicable laws or regulations.
2. Phishing, impersonation and deceptive content
Users must not use the Services to create, publish or send any form, document, message or other content that:
impersonates, or could reasonably be mistaken for content of, any government agency, public body, bank, payment provider, telecommunications provider, employer, platform or other organisation, without that organisation’s authority;
imitates the login page, identity-verification page or branding of any other service, including Singpass, Corppass or any banking, email or social-media service;
is designed to deceive any person about who is collecting information, why it is collected or how it will be used;
promotes a scam, fake job offer, fake investment, fake prize, fake delivery notice or similar deceptive scheme; or
misrepresents that it is provided, endorsed or verified by us.
3. Prohibited data collection
Users must not use the Services to request, collect or store:
passwords, passcodes, PINs, one-time passwords, security questions and answers, or other authentication credentials for any service;
full payment card numbers, card security codes (such as CVV or CVC), card expiry data together with card numbers, or online banking credentials;
national identification numbers (including NRIC numbers, FIN numbers and passport numbers) or copies of identity documents, except where the collection is permitted under applicable law and the applicable guidance of the Personal Data Protection Commission, and never for use as a password or authenticator;
Personal Data of individuals below 18 years old, except where the Customer has appropriate lawful authority, including any required parental or guardian consent;
Personal Data that is not reasonably necessary for the purpose notified to the individuals concerned; or
information that the Customer is prohibited by law, contract or court order from collecting.
Where the Customer collects or stores sensitive Personal Data, such as health information, financial information, information about children or information about vulnerable individuals, the Customer must apply appropriate access restrictions, limit the number of Authorised Users with access, set an appropriate retention period, and ensure that it has lawful authority to collect that information.
4. Security and system integrity
Users must not:
attempt to gain unauthorised access to any Account, record, form, submission, system, network, database or infrastructure;
bypass authentication, permission, billing, subscription, usage, branding, anti-spam or security controls;
probe, scan, penetration test or vulnerability test the Services without our prior written approval;
interfere with the normal operation, availability or performance of the Services;
introduce malware, ransomware, viruses, worms, trojans, spyware or harmful code, whether through content, file uploads or otherwise;
use a form, document, file upload, link or redirect to distribute malware or to direct any person to a malicious website;
overload, flood, spam or disrupt the Services, including by making automated or bulk submissions without authority;
use automated tools, bots, scripts or crawlers in a way that harms or burdens the Services;
access the Services through unauthorised methods; or
conceal or misrepresent the origin of access or activity.
5. Account misuse
Users must not:
share login credentials between multiple individuals;
create false, misleading or unauthorised Accounts;
create multiple Free Tier Accounts to avoid usage limits, subscription fees, branding, advertisements or restrictions;
impersonate another person, business or organisation;
use another person’s Account without permission;
sell, transfer, rent, sublicense or commercially exploit access to the Services, or operate the Services as a service for third parties, without our written approval; or
use the Services after access has been suspended or terminated.
6. Data misuse and re-identification
Users must not:
attempt to identify any individual, Customer, business, supplier, customer, counterparty, Respondent or transaction from Aggregated Data, statistics, benchmarks, reports, insights or data products made available by us;
combine information from the Services with other information for the purpose of re-identification;
reverse-engineer aggregated results;
extract confidential pricing, customer lists, supplier lists or transaction-level information relating to another business;
scrape, bulk download, harvest or systematically copy templates, reports, insights, advertisements, data products or Platform Data without authorisation;
use the Services to collect, use or disclose Personal Data unlawfully; or
upload data that the Customer does not have authority to provide or process.
7. Content and communications
Users must not use the Services to create, publish, store, send or distribute content that:
is unlawful, fraudulent, defamatory or misleading;
infringes intellectual property rights;
violates confidentiality obligations;
contains malicious code;
contains unlawful personal data;
promotes scams, phishing or deceptive practices;
is abusive, harassing, threatening or promotes violence;
promotes hatred or hostility on the grounds of race, religion or other protected characteristics;
is obscene, sexually explicit or exploitative, or involves the exploitation or abuse of children in any form;
promotes unlawful gambling, unlicensed lotteries, unlawful moneylending or other unlicensed regulated activity; or
would reasonably expose us, another customer, a Respondent or a third party to legal, security or reputational risk.
8. Advertising and branding
Where advertisements, sponsored content or partner offers are displayed to Authorised Users, users must not:
interfere with advertisement delivery or measurement;
manipulate impressions, clicks, conversions or campaign metrics;
use automated tools to generate false advertising activity;
misrepresent their identity or business category to obtain irrelevant offers; or
scrape, copy or redistribute advertisements or sponsored content without authorisation.
Users must not remove, conceal or alter AveriWorks or Product branding displayed on documents, forms or messages generated through a Free Tier unless their plan permits removal.
9. API and integration use
Where API access, integrations or connections between Products are made available, users must comply with any applicable technical documentation, rate limits, security requirements and usage restrictions.
Users must not:
exceed published or notified rate limits;
use APIs to replicate or compete with the Services;
use integrations to extract data without authority;
interfere with third-party systems or other Products;
transmit malformed, excessive or harmful requests;
remove, obscure or misuse API keys or credentials; or
share API credentials with unauthorised parties.
We may suspend or limit API access, integrations or connections between Products where usage creates security, operational, legal or commercial risk.
10. Artificial intelligence use
Where AI Features are made available, users must not use them to:
generate or submit unlawful, misleading, harmful, abusive, discriminatory, defamatory or infringing content;
create phishing content, scams, malware, spam or deceptive communications;
impersonate another person or organisation;
process Personal Data or confidential information without authority, including by uploading completed documents containing Personal Data where a blank or redacted document would suffice;
generate professional, legal, tax, accounting, financial or regulatory advice for third parties without proper review and authorisation;
bypass security, access, subscription or usage controls;
reverse-engineer, extract or replicate underlying models, prompts, workflows, datasets or system instructions;
use AI outputs to coordinate pricing or other anti-competitive conduct;
make decisions that produce legal or similarly significant effects on an individual without appropriate human review; or
publish, send or rely on AI-generated content, including AI-generated forms, without first reviewing it for accuracy.
We may monitor and restrict AI Feature usage to protect security, service quality, legal compliance and platform integrity.
11. Intellectual property
Users must not:
copy, modify, reverse-engineer or create derivative works from the Services except where legally permitted;
remove copyright, trademark or proprietary notices;
use our branding without permission;
reproduce our templates, reports, benchmarks, documentation or data products except as authorised;
publish a form or document that reproduces another organisation’s form, logo or trademark without authority; or
use the Services to develop a competing product or service.
12. Trade compliance and sanctions
Users must not use the Services in violation of applicable trade sanctions, export control or anti-money laundering laws, including those administered by Singapore, the United Nations, the United States, the European Union or other applicable authorities.
Users must not:
use the Services if the Customer or any Authorised User is a sanctioned party, or is owned or controlled by a sanctioned party, under applicable sanctions laws;
use the Services in or for the benefit of a country, region or territory that is subject to comprehensive trade sanctions, except as permitted under an applicable licence or exemption;
use the Services to facilitate a transaction that would violate applicable sanctions, export control or anti-money laundering laws; or
use the Services to evade or circumvent sanctions, export control or anti-money laundering obligations.
The Customer represents that neither it, nor any Authorised User, is subject to sanctions that would prohibit its use of the Services, and must notify us promptly if this ceases to be true.
13. Customer messaging and communications
Where the Services are used to send invoices, statements, reminders, confirmations, copies of submissions, invitations to complete a form or other communications to the Customer’s own customers, suppliers, Respondents or other contacts, the Customer is responsible for ensuring that such communications comply with applicable law, including the Spam Control Act 2007 and the Do Not Call provisions of the Personal Data Protection Act 2012.
Users must not use the Services to:
send unsolicited commercial electronic messages that do not comply with applicable opt-out, sender-identification or consent requirements;
add contacts or Respondents to marketing lists, or send them marketing messages, unless they have given any consent required by law;
send messages to a Singapore telephone number registered with the Do Not Call Registry, other than as permitted by law; or
disguise or misrepresent the origin of a message sent through the Services.
We may restrict or suspend a Customer’s ability to send bulk or automated communications where we reasonably believe this Section has been breached.
14. Prohibited industries or use cases
We may restrict or refuse use of the Services for activities that we consider high-risk, unlawful or unsuitable for the platform, including where such use may expose us, Respondents or other users to material legal, regulatory, security or reputational risk. We may publish or notify additional restricted activities from time to time.
15. Monitoring and enforcement
We do not have a general obligation to monitor Customer Data. We may, however, monitor use of the Services, including content, file uploads and Platform Data, to detect security threats, phishing, misuse, excessive usage, policy violations, fraud, abuse, unlawful activity or operational issues.
Where we reasonably believe this Policy has been breached, we may:
issue a warning;
disable, restrict, unpublish or remove content, a form or a document;
stop a form from accepting submissions, or stop a function from sending or receiving information;
remove, quarantine or block content or files;
throttle or limit usage;
suspend features, integrations, API access, Subscriptions or Accounts;
downgrade or terminate access;
delete unlawful or harmful content;
preserve information for investigation or legal proceedings;
report unlawful activity to relevant authorities; or
take any other action reasonably necessary to protect the Services, Respondents, users, third parties or ourselves.
Where reasonable, we will provide notice and an opportunity to remedy the issue. However, we may act immediately, and without prior notice, where required for security, legal, regulatory or operational reasons, or where we reasonably believe the Services are being used for phishing, fraud, impersonation or malware distribution.
16. Reporting misuse
Suspected misuse of the Services, including a suspected phishing or fraudulent form, may be reported using any reporting link displayed in the Services or on the relevant form, or by email to support@zetta-solution.com.
Reports should include the link to the relevant content or form and sufficient information for us to investigate the issue. A person who believes they have submitted information to a fraudulent form should also consider contacting the organisation being impersonated, their bank where financial information is involved, and the Singapore Police Force.
Part 2 — Schedule: Additional rules for AveriWorks ERP
S1. Competition and pricing conduct
This Section supplements Section S11 of the Product Schedule in the AveriWorks ERP Terms and Conditions. Users must not use AveriWorks ERP, or any benchmarks, reports, pricing insights or data products made available through it, to:
coordinate prices with competitors;
agree, signal or align future prices;
allocate customers, suppliers, territories or markets;
restrict output or supply;
exchange competitively sensitive information unlawfully;
manipulate market behaviour;
pressure another business to adopt a particular price; or
engage in conduct that may breach the Competition Act 2004 or any other applicable competition or antitrust law.
Any pricing benchmarks or market insights provided through AveriWorks ERP are for independent business analysis only. Each Customer remains responsible for making its own independent pricing and commercial decisions.