Acceptable Use Policy

01Purpose and permitted business use

This Acceptable Use Policy forms part of the ZentriBase Terms of Service and applies to workspace owners, employee seats, integrations and anyone using our document or payment workflows. Resoltives LLC operates ZentriBase. The policy protects legitimate agency work, customers and the integrity of shared infrastructure.

You may use authorized features to run your agency, manage client contacts, sell lawful services through your own connected account, send agreements and prepare truthful evidence. Commercial agency activity is permitted. You must stay within your plan, assigned workspace and brand scope, respect others’ rights and comply with applicable law and provider rules.

02Payment and financial integrity

• Do not perform card testing, card-number enumeration, unauthorized authorization holds or attempts to validate stolen payment credentials.
• Do not use another party’s merchant keys, wallet or payment account without authority, or route agency payments through ZentriBase’s subscription credentials.
• Do not create false payment confirmations, manipulate webhook events, disguise the real seller, misrepresent transaction purposes or evade provider restrictions, sanctions or lawful financial controls.
• Do not fabricate refund requests or chargebacks, seek duplicate reimbursement, conceal a completed refund or generate fraudulent evidence to reverse a legitimate payment.
• Do not use the platform for money laundering, unlawful financial services or other illegal activity.

This policy does not prevent reporting an unauthorized payment, making an honest billing complaint or exercising lawful dispute and refund rights.

03Genuine signatures, documents and evidence

Only request signatures you are entitled to request. Give the recipient a complete agreement and accurate sender details, explain relevant tracking, and obtain required consent. Do not sign for someone else without lawful authority, backdate consent, alter a signed original or imply that an audit hash proves a fact it does not establish.

Do not fabricate an NDA, delivery receipt, client communication, invoice, IP trace, identity credential or chargeback dossier. AI assistance may organize genuine material and draft explanations; it must not invent facts or certificates. Review all generated content before use. A “verified” status may only describe a check actually completed, not a guaranteed legal result, identity certification or dispute win.

04Account access and tenant isolation

Use only the workspace, brands and functions your current role permits. Do not bypass authentication, MFA, revoked invitations, brand boundaries, seat capacity, subscription controls or rate limits. Do not share an owner login to avoid creating seats, sell access to another person’s account or impersonate staff.

Do not scrape another tenant’s records, enumerate private links, exploit an access-control defect or retain unauthorized data after discovering it. Report accidental exposure promptly, stop accessing it, and avoid distributing it. Legitimate security testing requires appropriate permission; a public website is not blanket authorization to probe customer data.

05Messaging, referrals and communications

Send messages only where you have a lawful basis and required consent. Do not use contact imports, document delivery, affiliate links or support tools for unsolicited bulk messaging, phishing, deceptive promotions, harassment, threats or repeated unwanted contact. Respect opt-outs and do not evade email-provider restrictions.

Disclose affiliate relationships where required. Do not manufacture customers, self-referrals, fake reviews or purchases to qualify for commissions. Do not claim a partnership, certification or provider endorsement that does not exist. Built-in signing and delivery events may be used for their disclosed purpose; covert surveillance or undisclosed tracking outside that purpose is prohibited.

06Privacy, intellectual property and unlawful content

Upload only material you have authority to process and share. Obtain required notices and permissions for personal data, evidence, logos and copyrighted work. Respect the Privacy Policy and the agency’s obligations to its own clients.

Do not upload illegal material, exploitative content involving children, malware, stolen identities, unlawfully obtained personal information or material infringing another person’s rights. Do not place passwords, full card numbers, CVV, wallet recovery phrases or private keys in ordinary files, chat or AI prompts. Authorized gateway credentials belong only in the designated owner integration flow. Do not request SSNs or unnecessary sensitive data from end-clients through a workaround.

07AI and technical safeguards

Do not use prompt injection or other instructions to extract platform secrets, hidden system prompts, unrelated client data or internal logs. Do not ask AI to evade access rules, fabricate proof, make an unauthorized financial decision or impersonate a person. Review AI drafts for accuracy and suitability and use qualified advice where needed.

Do not overload the service, deploy bots that evade limits, upload destructive files, interfere with workers or queues, or disable security/audit records. Do not reverse engineer or redistribute protected software except to the extent applicable law expressly permits. Authorized document exports and normal agency services are not prohibited redistribution.

08Reporting and investigation

Report suspected abuse, a security issue or an intellectual-property concern through support or support@zentribase.com. Include the affected record or URL, approximate time, what happened and how we can contact you. Do not include secret keys or unnecessary private records. If claiming infringement, identify the work, your authority, the relevant material and the basis for the concern.

Authorized personnel and automated safeguards may examine relevant events to investigate abuse and protect the service, consistent with the Privacy Policy. We do not promise to inspect every item. Preserve evidence lawfully and cooperate with reasonable requests; never continue accessing another tenant to demonstrate an issue.

09Enforcement, review and changes

Depending on the risk, we may limit a feature, quarantine a file, revoke a link, suspend access or terminate a materially abusive account. We use proportionate measures and ordinarily explain the issue and a corrective route. Urgent threats, legal obligations or an active investigation may require immediate action or restricted notice. We may preserve relevant records and make lawful disclosures; we do not publicly shame users or release private content as a punishment.

To challenge an error, contact support with your account and decision reference. Authorized staff can review the evidence and restore access or explain the outcome. An AI conversation is not the final authority to bypass restrictions. Refund, cancellation and statutory rights remain governed by the Terms and applicable law. Material changes to this policy are notified as described in the Terms and apply prospectively.