Authorised professional use
Use the service only for work you are entitled to perform. Keep information relevant and accurate, respect privacy and intellectual property, and ensure that your business has an appropriate basis for the data it enters.
Accounts and information
Do not impersonate another person, share their credentials, bypass permissions or attempt to access another organisation. Do not collect records by guessing identifiers or exploiting a link received in error.
If you find unexpected access, stop and report it without copying or publishing other people’s information.
Messages and system integrity
Do not send deceptive, abusive, fraudulent or unauthorised bulk messages. Do not upload malware or content you are not entitled to use. Connected channels must remain within their approved purpose.
Do not disrupt the service, overload its resources or run harmful security tests. Technical reports should describe safe steps and scope without expanding exploitation.
Reports and proportionate action
Report a concern to office@nawati.io with the relevant facts and a safe reply method. Use the privacy request route for personal-data rights.
A response may involve restricting a specific account or action to limit harm, subject to the service agreement and applicable duties. A report does not authorise broad disclosure or unjustified deletion.