Acceptable Use Policy

Effective August 21, 2026.

This Acceptable Use Policy (**“AUP”**) governs use of the Workforce Catalyst Services. Capitalized terms not defined here have the meanings in the Terms of Service. ## 1. Authorized Business Use Use the Services only for lawful business and professional purposes within the scope of your subscription, role, permissions, and authority. You are responsible for users, Customer Content, exports, and actions taken through your organization. ## 2. Prohibited Conduct You may not use the Services to: - violate law, regulation, court order, contract, or third-party rights; - discriminate, harass, retaliate, threaten, intimidate, stalk, defame, or facilitate unlawful employment practices; - make a significant employment decision based solely on an AI output, assessment, survey, score, recommendation, or automated process; - covertly monitor employees or collect information without legally required notice or authority; - identify or attempt to identify an anonymous survey respondent; - pressure a person to reveal survey answers or retaliate based on participation or suspected answers; - impersonate another person or misrepresent authority; - access or attempt to access another organization, account, file, survey, employee record, or system; - share credentials or circumvent permissions, limits, billing, security controls, or anonymity thresholds; - probe, scan, penetrate, disrupt, overload, or interfere with the Services or related networks; - upload malware, malicious code, corrupted files, or content intended to exploit a vulnerability; - scrape, crawl, harvest, or use automated means to extract content or data except through an expressly authorized interface; - reverse engineer, decompile, disassemble, copy, mirror, frame, benchmark for a competing product, or discover source code or nonpublic prompts, except where a restriction is prohibited by law; - resell, sublicense, rent, timeshare, or provide the Services to an unrelated third party; - infringe intellectual-property, privacy, publicity, confidentiality, or other rights; - send spam, deceptive messages, unauthorized marketing, or unlawful survey invitations; - submit false, fabricated, or unlawfully obtained workplace information; - use the Services to create a social score, blacklist, or covert profile of an employee; - use outputs to evade labor, employment, safety, privacy, or anti-discrimination duties; or - assist another person in doing any prohibited act. ## 3. Prohibited and Restricted Data Do not enter, upload, or transmit: - Social Security numbers or tax identification numbers; - driver's-license, passport, or other government identification numbers or images; - complete payment-card, bank-account, routing, security-code, or financial-login information; - passwords, authentication tokens, private keys, or credentials; - biometric templates or genetic information; - consumer reports, background-check reports, or credit reports; - immigration or employment-authorization documents; - detailed medical records, health-insurance records, or information regulated by HIPAA; - education records regulated by FERPA; - classified, export-controlled, CJIS, or government-restricted information; - information about children under 13; or - any data requiring specialized safeguards that Workforce Catalyst has not agreed in writing to provide. Limited workplace descriptions involving accommodation, leave, safety, discrimination, harassment, retaliation, or misconduct may be entered only when reasonably necessary. Minimize detail, avoid diagnoses and unrelated facts, use neutral identifiers where possible, and restrict access. ## 4. AI Use Restrictions Do not use AI features to make autonomous decisions, infer protected traits, diagnose medical or mental-health conditions, determine credibility, generate unlawful discriminatory criteria, or provide emergency instructions. Review every output and follow the AI Disclaimer. ## 5. Files and Exports Upload only supported files you are authorized to use. Do not treat Workforce Catalyst upload validation as malware scanning. You are responsible for scanning files, controlling exported copies, and deleting local exports when no longer needed. ## 6. Security Research Do not test or investigate the Services for vulnerabilities without prior written authorization. Report suspected vulnerabilities responsibly to dyami.pike@theworkforcecatalyst.com and do not access, retain, alter, or disclose data belonging to others. ## 7. Enforcement We may investigate suspected violations and preserve relevant records. We may remove or restrict content, throttle use, suspend access, deactivate an organization, cancel a subscription, or report conduct to appropriate parties when reasonably necessary. Serious security, legal, or safety threats may result in immediate action without advance notice. When practicable, we will provide notice and an opportunity to cure. Enforcement does not limit other rights or remedies. Customer remains responsible for fees incurred and for legally required preservation of its own records. ## 8. Reporting Violations Report suspected violations to: Workforce Catalyst LLC · 4919 W Stanford St · Springfield, Missouri 65802 Email: dyami.pike@theworkforcecatalyst.com