EarnFlow
Legal

Acceptable Use Policy

This policy is part of our Terms of Service. It exists to protect EarnFlow customers, their customers and the Service itself. Most of it is common sense.

Effective October 5, 2026.

1. Lawful use

Use the Service only for lawful business purposes and in compliance with the laws that apply to you, including privacy, consumer protection, employment, tax and anti-spam laws. You are responsible for the personal information you enter about your customers and employees and for having the right to use it.

2. Communications to your customers

  • Send estimates, invoices, visit updates and reminders only to people who are your customers or have asked to hear from you.
  • Do not use EarnFlow to send marketing, bulk or unsolicited messages, or to contact people who have unsubscribed. The Service applies visit-update unsubscribes automatically; you must honour any other request promptly.
  • Do not misrepresent who you are or send messages that are misleading, abusive or threatening, including in collections reminders.
  • Keep recipient addresses accurate. We may suspend sending that generates excessive bounces or complaints.
  • Text only customers who agreed to receive texts from you. Do not record consent a customer didn't give, buy or import phone lists, send marketing texts without the consent the law requires, or work around STOP replies, quiet hours or the monthly allowance.
  • Give truthful business information for carrier registration and keep it current.
  • Do not offer incentives for reviews, ask only customers you expect to be happy, or post or ask for fake reviews.

3. Security

  • Do not attempt to access data or organizations you are not authorised to access, or to bypass permissions, roles, entitlements or rate limits.
  • Do not probe, scan or test the vulnerability of the Service without our written permission, except good-faith research on your own trial organization reported under our responsible disclosure process.
  • Do not upload malware or content designed to harm systems, and do not interfere with the Service's operation, including by overloading it.
  • Do not share accounts. Each User must have their own account; two-factor recovery codes must be kept private.

4. Content

  • Do not store or share content that is illegal, infringes others' intellectual property or privacy, or is harassing, hateful or sexually explicit.
  • Do not store payment card numbers, government identifiers or other highly sensitive data in free-text fields, notes or documents. Use the purpose-built features (for example Stripe for payments) instead.
  • Do not use the Service to make decisions about employees or customers in ways that violate human-rights or employment law.

5. AI features

  • Do not attempt to make AI features act outside their design, extract system instructions, produce harmful content, or act on data you are not permitted to see.
  • Review AI drafts and proposals before relying on them or sending them to a customer.
  • Automated and AI-assisted features are included in the Organization plan for ordinary business use. We may apply fair-use limits to usage that is automated, abusive or clearly outside normal operation of a field service business.

6. API and automation

  • Use API keys only for your own organization and keep them confidential; revoke a key immediately if it may have been exposed.
  • Respect rate limits and do not scrape the web app in place of using the API.
  • Do not build a product that resells or white-labels the Service without a written agreement with us.

7. Enforcement

We may investigate suspected violations, remove content, suspend sending, suspend or terminate access, and report unlawful activity to authorities. Where practical we will notify you and give you an opportunity to correct the problem first. Report abuse to legal@earnflow.ca.