This policy sets out the uses that are not allowed of the Sahl service provided by [the company's legal name], registered in the commercial registration under number [the commercial registration number]. It forms part of the terms and conditions of subscription, and the words used in it have the meanings defined in those terms.
The purpose of this policy is to protect the service, its customers and the people whose data it holds. A breach of this policy is a breach of the terms of subscription.
1. Scope
- This policy applies to the customer and all of its users, including HR staff, managers and employees, on the customer's site, in the phone app and in everything related to the service.
- The customer is responsible for its users' compliance with this policy and must take the steps needed to stop any breach it becomes aware of.
2. Data and content
The customer and its users may not:
- Process personal data in breach of the Personal Data Protection Law or any other law, including collecting it without a legal basis or using it for a purpose unrelated to the employment relationship.
- Enter data the customer has no right to hold or process, including data about people who have no work or recruitment relationship with the customer.
- Enter health data or other sensitive data except as far as needed and within the limits the law allows.
- Upload content that breaks the law or infringes the rights of others, including intellectual property and privacy rights.
3. Security and integrity of the service
The customer and its users may not:
- Attack the service, its servers or its networks, or try to access any part of it or another customer's data without authorisation.
- Scan the service for vulnerabilities, run penetration tests against it, or load test it, without Sahl's prior written consent.
- Upload malware or files containing it, or any code meant to disrupt or harm the service or its users.
- Reverse engineer, decompile or try to extract the source code of the service, except as far as the law expressly allows or the licences of its open-source components allow.
- Interfere with the operation of the service or overload it in a way that affects others' use of it.
4. Access and plan limits
The customer and its users may not:
- Resell or rent the service, give access to it to anyone outside the customer, or share user accounts with other people.
- Bypass or exceed the limits of the package, including the counted number of employees and the limits shown on the prices page or in the order.
- Extract data from the service automatically by scraping or similar tools, or use any automated means of access other than those Sahl provides. This does not prevent the customer from exporting its data with the tools the service provides.
- Get around permission controls or try to access data the user's permissions do not allow.
5. Messages and notifications
- Email, text messages, WhatsApp messages and phone notifications sent through the service may not be used for advertising or unsolicited messages, or for any purpose unrelated to using the service for work.
- When the customer connects its own account with a messaging provider, it must use that account under its contract with the provider and the laws in force.
6. Impersonation
No user may impersonate another person or organisation, sign in with someone else's account or with a phone key that is not theirs, or submit or approve a request in someone else's name without proper authorisation from the customer.
7. Investigation and suspension
- Sahl may investigate any suspected breach of this policy. For this purpose, its staff look at customer data only as far as needed to investigate and protect the service.
- Where a breach is found, Sahl may suspend a particular user or suspend the customer's site in whole or in part.
- Sahl notifies the customer before suspending and gives it a reasonable time to fix the breach where possible.
- Sahl may suspend at once without prior notice in urgent cases, including a risk to the security of the service, to customers' data or to third parties. In these cases Sahl notifies the customer without delay after suspending.
- Suspension is limited to what is needed and is lifted once the breach is fixed. Sahl may end the subscription for a material breach under the terms and conditions of subscription.
- Sahl may report a breach to the competent authorities where the law requires it to.
8. Reporting misuse
- Anyone can report misuse of the service by writing to Sahl at [the email address].
- Please include a description of what happened and when, and anything that helps identify the site or account concerned.
- Sahl handles reports confidentially and contacts the customer concerned where needed.
9. Changes to this policy
Sahl may change this policy. The provisions on changes in the terms and conditions of subscription apply to any change, including notice by email at least 30 days in advance.
This English text is a translation. The Arabic text prevails. العربية