Acceptable Use Policy

Communications

• Do not send communications you have no lawful basis to send, and do not use the service to send marketing to residents on behalf of a third party.
• Do not use it to harass, threaten, intimidate or demean an owner, resident, neighbour, employee or vendor.
• Honour opt-outs where the communication is one a person is entitled to opt out of, and keep the ability to reach people about genuine operational matters separate from anything optional.
• Do not misrepresent who a communication is from, or send it in a way designed to look like it came from a regulator, a court or a law firm.

Decisions about people

• Do not use the service, or any automated output of it, as the sole basis for a decision that affects a person's rights or interests without a person reviewing it. This includes a violation finding, a fine, a lien, a collections step, an access restriction and an architectural refusal.
• Do not use it to discriminate against a person on a ground protected where they live, or to enforce a rule that is unlawful or unenforceable there.
• Do not use photographic or video detection features to monitor individuals, as distinct from inspecting the condition of property, and do not deploy them where you have not given whatever notice your local law requires.

Data

• Only enter personal information you are entitled to hold and only what you need for the purpose.
• Do not enter special category or sensitive information, government identifiers or payment card numbers into free-text fields or uploaded documents.
• Do not attempt to access another customer's data, to de-anonymise aggregated information, or to use the service to build a competing dataset.
• Do not share a login. Give each person their own account with the narrowest role that lets them do their job, and remove it when they leave.

Security and integrity

• Do not probe, scan or test the vulnerability of the service or its infrastructure without our prior written permission, and do not breach or attempt to breach any security or authentication measure.
• Do not introduce malicious code, overload the service, scrape it at a volume that degrades it for others, or circumvent rate limits or usage limits.
• Do not reverse engineer the service except to the extent that restriction is unenforceable where you are.
• Report a vulnerability you find to info@fourcents.ca rather than disclosing or exploiting it. We will not pursue a researcher who reports in good faith, does not access or alter data beyond what is needed to demonstrate the issue, and gives us reasonable time to fix it.

Enforcement

We would rather ask you to stop than cut you off. Where we reasonably believe this policy is being breached we will normally contact you and give you an opportunity to fix it. Where the breach is serious, ongoing, or creates a legal, security or safety risk, we may suspend or restrict access immediately, and we will tell you why and what is needed to restore it.

To report misuse of the service, email info@fourcents.ca with enough detail for us to look into it.