Acceptable Use Policy (AUP)
Outlines operational standards, API rate limits, security hygiene, and prohibited activities for all customer administrators and employee users.
LEGAL NOTICE & CUSTOMIZATION ADVISORY
This policy contains baseline provisions tailored for a B2B Human Resource Management System (HRMS) handling payroll, biometric attendance, tax, and employee records under India's Digital Personal Data Protection Act, 2023 (DPDPA) and global privacy frameworks (including GDPR). Bracketed values such as [COMPANY_NAME], [PRIVACY_EMAIL], and statutory grievance officer details must be verified by qualified legal counsel prior to commercial execution.
This Acceptable Use Policy ("AUP") defines the rules governing access to and use of omniHR ("the Service"). This policy applies to all Customer administrators, HR managers, supervisors, and employee end-users.
Our platform is engineered to foster transparent, equitable, and secure workplace management. Violation of this AUP damages platform integrity and may result in immediate suspension or termination of user or tenant access.
Users shall not under any circumstances:
Customer administrators are prohibited from intentionally manipulating payroll calculations, falsifying statutory Provident Fund (PF) contributions, fabricating false attendance logs, or submitting fraudulent tax investment proofs.
omniHR records immutable audit trails of all payroll modifications. We reserve the right to cooperate fully with statutory labor and tax audit authorities investigating fraudulent alterations.
To maintain high availability and prevent Denial of Service across our multi-tenant cluster:
- Standard REST API Limits: Customer integrations are throttled to a default baseline of [120 requests per minute per tenant API key].
- Bulk Data Synchronization: Bulk employee synchronization and payroll exports must be scheduled during off-peak hours (between 20:00 and 06:00 UTC) using our designated batch API endpoints.
- Automated Backoff: Integrations encountering HTTP
429 Too Many Requestsmust implement exponential backoff algorithms.
Every user account must correspond to a distinct human individual. Account sharing is strictly forbidden. Administrators must not create generic shared credentials (such as admin@company.com or hr-team@company.com) used by multiple individuals.
Any compromised account credential must be reported immediately to security@omnihr.internal to trigger immediate session revocation.
If omniHR detects or reasonably suspects a violation of this AUP, we reserve the right to:
- Investigate the security anomaly and issue a remediation request;
- Temporarily suspend the offending user account or disable compromised API tokens;
- In the event of egregious malicious attacks or cross-tenant intrusion attempts, terminate the Customer's subscription immediately for cause without refund.