Acceptable Use Policy

Use PayCanvas only for authorized business purposes

Customer may use PayCanvas only for lawful internal business purposes within its own tenant and within the permissions granted to each user. Customer must follow applicable employment, wage-and-hour, tax, privacy, security, anti-discrimination, intellectual-property, sanctions, and export-control laws.

Prohibited conduct

You may not:

• access, attempt to access, or disclose another customer’s data or credentials;
• bypass tenant isolation, roles, OAuth scopes, MFA, confirmations, rate limits, capability flags, or other safeguards;
• use shared accounts, misrepresent authority, or allow an unauthorized person to operate a payroll workflow;
• upload malware, disrupt the service, conduct unauthorized vulnerability testing, or use automated access that materially burdens the service;
• use PayCanvas to facilitate fraud, unlawful surveillance, discrimination, harassment, retaliation, wage theft, sanctions evasion, or other unlawful conduct;
• misrepresent provisional, synthetic, unreviewed, or AI-generated material as approved payroll, professional advice, or a compliance certification;
• scrape or use non-public PayCanvas content, outputs, or workflows to train or build a competing product except with written permission;
• submit data you lack authority or a lawful basis to process; or
• help another person do any of the above.

Restricted information in AI and public connector channels

Do not request, paste, or transmit through a public AI connector or chat: Social Security or other government identifiers; bank or routing information; payment-card data; health or benefits information; passwords; API keys; access or refresh tokens; authorization or MFA codes; raw provider credentials; raw provider payloads; or private employee mappings. Use only the designated secure product forms and approved workflows for supported sensitive information.

Enforcement and reporting

We may block a request, limit a capability, preserve relevant evidence, suspend access, or terminate use when reasonably necessary to investigate or stop a violation, protect people or systems, or comply with law. We will consider context, severity, and recurrence where practical. Report suspected abuse or a security issue to hello@paycanvas.io.