Acceptable Use Policy (AUP)

TC-LEGAL-005·Usage rules

Acceptable Use Policy (AUP)

Document ID: TC-LEGAL-005 Title: Acceptable Use Policy (AUP) Version: 1.1 Last updated: 2026-10-24 Publisher: Timecampus Technologies Pvt. Ltd. (Burdenoff Group) Canonical location: https://burdenoff.com/contracts/timecampus/TC-LEGAL-005 Burdenoff Group Contract Registry — root at https://burdenoff.com/contracts (one subgroup per product). The contracts referenced in this document belong to the TimeCampus subgroup at https://burdenoff.com/contracts/timecampus/. Every referenced contract is identified by its Document ID (TC-LEGAL-### / TC-PRICING-###) and incorporated by reference.

Status: Published v1.1 — effective 2026-10-24. Reviewed against the production platform and approved for publication by the founder (India jurisdiction); outside-counsel review checkpoints are tracked in TC-LEGAL-REG. Applies to: anyone accessing the TimeCampus Service, including all plan tiers and trial users; partners; resellers; affiliates; billable projects clients, client project teams; and employees, team members and team members using TimeCampus through an organisation.

This AUP is incorporated into the MSA and the website Terms. Violation may result in suspension or termination per MSA §4 and §8.

1. General

You must use TimeCampus only for lawful purposes, in accordance with the MSA, applicable laws (including the Information Technology Act, 2000, the Digital Personal Data Protection Act, 2023, applicable employment, labour, wage and anti-discrimination law, and equivalents in your jurisdiction), and the rights of others.

2. Prohibited content

You must not upload, store, generate, transmit or distribute content that:

  • is unlawful, defamatory, fraudulent, obscene, or that sexualises or exploits minors;
  • infringes intellectual property rights, trade secrets, or rights of publicity / privacy;
  • contains malware, ransomware, viruses, worms, exploits, or rootkits intended to damage third-party systems;
  • contains exfiltrated or stolen credentials, including credential-stuffing lists;
  • consists of regulated or special-category personal data outside the scope of Annex 1 of the DPA (unless permitted under an Order Form with appropriate controls and a lawful basis);
  • targets or harasses any individual or group based on protected characteristics; or
  • is otherwise illegal under Indian law or the law of the user's jurisdiction (e.g., content prohibited under the IT (Intermediary Guidelines and Digital Media Ethics Code) Rules 2021).

3. Prohibited activities

You must not use the Service to:

  • engage in unlawful or discriminatory employment practices — time tracking, monitoring, project tracking, compensation, promotion, discipline or termination on a basis prohibited by applicable employment / anti-discrimination law;
  • submit fraudulent or misleading time entries, expense claims, meeting records or billable hours, or otherwise falsify time-and-activity data to misstate work, billing or productivity;
  • scrape, harvest or bulk-extract team member, employee, contractor or expense receipt data, whether yours or others', or build a competing team time database from the Service;
  • make automated employment decisions with legal or similarly significant effect on individuals (promotion, discipline, termination, compensation, performance rating, classification based on tracked time and activity) without meaningful human review and the consents, notices and monitoring-transparency assessment obligations required by law;
  • conduct employee monitoring, monitoring, or surveillance of workers without a lawful basis, notice and proportionality;
  • attempt to gain unauthorised access to any system, account, or data (yours, Timecampus's, or a third party's);
  • attack, probe, scan or test the vulnerability of any system or network without authorisation (security research on the Service is permitted only under Timecampus's responsible-disclosure programme);
  • circumvent any rate limit, plan limit, billing meter, licence check, audit log or content protection;
  • impersonate any person or entity, including misrepresenting your affiliation with Timecampus or with an employer / team member;
  • send unsolicited bulk email, SMS, or messages ("spam") via integrations, notifications or webhooks (including violations of the TRAI's UCC Regulations and the U.S. CAN-SPAM Act / EU PECR);
  • use the billable-projects, invoicing or client-portal features for fraud, money laundering, terrorist financing, or to evade time-and-activity-monitoring or labour law;
  • use the Service in violation of export-control, sanctions, anti-bribery, anti-money-laundering, or trade laws.

4. Team data and team member rights

When handling team, team member or team member data, you must:

  • have a lawful basis and provide the notices and consents your jurisdiction requires before collecting or processing it;
  • limit access to expense, document and monitored-activity data to appropriately-authorised roles via RBAC;
  • honour data-subject requests (access, correction, deletion) from your employees, team members, contractors and team members as the controller;
  • not introduce special-category personal data outside the scope of your Order Form.

5. AI features

When using AI-assisted features (activity categorisation, timeline summarisation, focus insights and meeting analytics, recommendations, analytics):

  • you are responsible for the content of inputs and outputs and for reviewing AI outputs before relying on them;
  • you must keep a human in the loop for any decision affecting an individual;
  • you must discharge any deployer obligations for automated employment-decision tools (monitoring-transparency focus-score assessment, team member notice, transparency) under applicable law (e.g., applicable employee-monitoring transparency law, the EU AI Act for high-risk automated time-and-activity analytics, state laws);
  • you must not use AI features to generate content that is illegal, harassing, deceptive, discriminatory, or in violation of the AUP;
  • you must not attempt to extract Timecampus's prompts, system instructions or internal model behaviour to reverse-engineer or build a competing service.

6. Billable Projects conduct

If you use the TimeCampus billable projects, client invoice or client portal features:

  • you must comply with the Billable Projects, Client Portal and Third-Party Integration Terms (TC-LEGAL-011);
  • you must record time and issue invoices honestly — no falsified hours, rates or invoices;
  • you must correctly classify the workers whose time you bill and meet any tax, withholding and labour obligations;
  • you must share client-portal links only with the intended client and deactivate them when no longer needed;
  • you must not use these features to facilitate trafficking, forced labour, or any unlawful labour practice.

7. Fair use of shared limits

Even where generous or "unlimited" usage is offered, use must be reasonable and in line with normal product workflows. Timecampus may apply fair-use throttling where consumption materially exceeds typical patterns and threatens platform stability or pricing integrity.

8. Vulnerability reporting

Good-faith security research is welcomed. Report vulnerabilities to security@burdenoff.com (an encrypted channel is available on request; see https://timecampus.com/security) with:

  • a description of the issue;
  • reproduction steps;
  • the impact;
  • any logs, screenshots, or proof-of-concept.

Do not access data beyond what is needed to demonstrate the issue, do not test denial-of-service against production, and give Timecampus a reasonable time to remediate before public disclosure.

9. Enforcement

Timecampus may, without limiting its other rights:

  • investigate suspected violations and require Customer cooperation;
  • remove content that violates the AUP (including fraudulent time and expense records or fake profiles);
  • suspend or limit access (in whole or in part);
  • terminate accounts for repeated or serious violations;
  • report violations to law-enforcement authorities or other competent authorities where required;
  • comply with court orders and regulator instructions (including under the IT Act, DPDP Act, CrPC, or equivalent).

Where feasible and lawful, Timecampus will provide notice before suspension or termination, and will, where practicable, preserve access to export expense and billing and statutory records during a wind-down.

10. Updates

Timecampus may update this AUP from time to time. Material changes will be notified at least 30 days in advance; continued use after the effective date constitutes acceptance. For consumer Customers, statutory consumer protections under the Consumer Protection Act, 2019 are preserved.

Reference and incorporation

All Burdenoff Group contracts, addenda, exhibits, policies and registers referenced in this document are identified by their Document ID (TC-LEGAL-### or TC-PRICING-###) and are published at https://burdenoff.com/contracts. Each such referenced document is incorporated into this document by reference. The version of a referenced document that applies is the version published at https://burdenoff.com/contracts as at the Effective Date of the applicable Order Form (or, where no Order Form exists, the version current at the date of acceptance), unless an executed Order Form specifies a frozen version.

Back to TimeCampus Contracts