Acceptable Use Policy

Purpose

This policy is part of the Terms of Service. It applies to every user of PayrollGrove, including company administrators, employees using self-service, and partner firm staff. Payroll software handles money instructions and highly sensitive data, so we take misuse seriously.

Prohibited payroll and financial activity

You may not use PayrollGrove to:

• pay, or generate payment files for, people who do not actually work for your company, or create fictitious employees or contractors;
• pay workers of a business that is not the company registered in the account (each legal employer needs its own company account);
• launder money, evade taxes, structure payments to avoid reporting, or finance unlawful activity;
• misrepresent wages, hours, or worker classification in order to deceive workers, agencies, lenders, or insurers;
• divert another person's pay, including by changing a worker's bank account without their authorization; or
• process payroll for people or businesses subject to US sanctions.

Prohibited data and content

You may not upload or store:

• data you have no right to process, or personal data collected without legally required notice or consent;
• malware, scripts, or files designed to exploit software;
• content that is unlawful, harassing, or infringes others' rights; or
• data unrelated to HR and payroll purposes, such as health records not needed for payroll deductions.

Prohibited technical activity

You may not:

• access, or try to access, another company's data, accounts you are not authorized to use, or our systems outside the normal interface;
• share credentials, disable multi-factor authentication for others, or circumvent step-up checks, cooling-off periods, or other security controls;
• scrape, crawl, or bulk-extract the Service by automated means, other than the data export tools we provide;
• overload, disrupt, or degrade the Service, including by exceeding rate limits deliberately;
• reverse engineer the Service except where the law allows; or
• probe, scan, or test the security of the Service without our written permission.

Security research

We welcome good-faith security research. Please follow the responsible disclosure process on our Security page and report findings to security@payrollgrove.com. Do not access data that is not yours, and stop and report as soon as you find a vulnerability.

Enforcement

We may investigate suspected violations, and we may suspend or restrict access where needed to prevent harm, as described in the Terms. Where we can do so safely and lawfully, we will tell you what happened and how to resolve it. We may report suspected crimes to law enforcement.

Reporting misuse

Report suspected misuse to security@payrollgrove.com.