Authority and lawful activity
The owner checks data sources, staff authority and grounds for sharing. Connect only businesses, accounts and devices you are entitled to manage. Unauthorized use of another business’s tax ID or brand, impersonation, fabricated sales and false accounting evidence are prohibited.
Data and content restrictions
Do not upload malware, unlawful content, stolen data, CVVs, bank passwords or unnecessary identity documents. Special-category personal data requires an appropriate legal basis and agreed safeguards. Ensure you have rights to menu images, logos and uploaded files.
Technical and sharing boundaries
Do not bypass permissions, plan limits, QR/PIN expiry or security controls. Do not probe other people’s links, sessions or API keys. Bulk automated requests and security testing require prior agreement. Share booking, partner and terminal links only for their intended purpose and revoke them when no longer needed.
Response to misuse
The operator may temporarily suspend an affected link, integration or access to contain a threat. Measures should be proportionate, with reasons and a review channel where security and law allow. Investigation and export requests go to admin@hesabdar.site. Arbitrary confiscation of data is not part of this policy.