Acceptable Use Policy

1. Lawful Employee Monitoring Only

CleverControl is intended only for lawful employee monitoring by organizations. You may use CleverControl only for legitimate business purposes, such as productivity management, information security, compliance, resource management, internal investigations, attendance review, or protection of company-owned assets.

You are responsible for ensuring that your use of CleverControl complies with all applicable privacy, labor, employment, biometric data, wiretapping, audio/video recording, call recording, and data protection laws.

2. Company-Owned or Authorized Devices Only

You may install or use CleverControl only on devices that your organization owns or is otherwise legally authorized to manage.

You must not install or use CleverControl on personal devices, third-party devices, or any device where you do not have proper authorization from the device owner and legal authority to monitor activity.

3. Prior Notice and Consent Where Required

Before using CleverControl, you must inform monitored employees and other monitored users in advance about the monitoring.

Where required by applicable law, employment rules, company policy, collective agreements, or other legal obligations, you must obtain valid consent before monitoring begins.

Your notice should clearly explain what types of monitoring may occur, what business purpose the monitoring serves, what data may be collected, who may access the data, how long it may be retained, and how monitored users can exercise their rights.

4. No Unauthorized Surveillance

CleverControl must not be used for unauthorized or unlawful surveillance.

You must not use CleverControl to monitor any person without proper authorization, prior notice, and consent where required by law. You must not attempt to disguise unlawful monitoring as workplace monitoring.

5. No Personal-Device Monitoring Without Authorization

You must not use CleverControl to monitor personal devices without proper authorization and a lawful basis.

If your organization allows bring-your-own-device arrangements, you are responsible for ensuring that any monitoring is lawful, proportionate, properly disclosed, and limited to permitted work-related activity.

6. No Domestic or Intimate-Partner Surveillance

CleverControl must not be used for domestic surveillance, intimate-partner surveillance, stalking, harassment, personal spying, or monitoring family members, partners, former partners, roommates, private individuals, or any person outside a lawful workplace monitoring context.

Any such use is strictly prohibited.

7. No Password Harvesting or Prohibited Private-Communications Collection

You must not use CleverControl to collect passwords and authentication credentials. You must not use CleverControl to capture private messages, personal communications, financial information, medical information, or other sensitive personal data where such collection is unlawful, unnecessary, disproportionate, or prohibited by applicable law or company policy.

Monitoring settings must be configured proportionately and only for legitimate business purposes. You are responsible for avoiding unnecessary collection of private or sensitive information.

8. Audio, Video, and Call Recording Restrictions

You must not enable or use these features unless you have a lawful basis, prior notice, consent where required, a documented business purpose, limited retention, and appropriate access controls.

Ambient or continuous recording of private conversations is prohibited where not expressly lawful. Call recording must comply with all applicable consent, wiretapping, workplace, telecommunications, and privacy laws.

9. Customer Responsibilities

You are solely responsible for how you configure and use CleverControl.

Depending on your jurisdiction and use case, your responsibilities may include:

• preparing a written workplace monitoring policy;
• informing monitored users before monitoring begins;
• obtaining consent where required;
• conducting a data protection impact assessment or similar review where required;
• limiting monitoring to legitimate business purposes;
• limiting access to monitoring data to authorized personnel only;
• configuring retention periods and deleting data when it is no longer needed;
• protecting monitoring data against unauthorized access, disclosure, loss, or misuse;
• respecting employee rights under applicable privacy, labor, and data-protection laws;
• disabling features that are not lawful, necessary, or proportionate for your business purpose.

10. Prohibited Uses

You must not use CleverControl to:

• conduct unauthorized or unlawful monitoring;
• monitor personal devices without proper authorization;
• conduct domestic, intimate-partner, family, or personal surveillance;
• stalk, harass, threaten, blackmail, or intimidate any person;
• collect passwords, authentication credentials, or private communications where prohibited;
• collect personal or sensitive data beyond what is lawful, necessary, and proportionate;
• monitor individuals outside a lawful workplace or authorized business context;
• violate privacy, labor, employment, biometric data, wiretapping, audio/video recording, telecommunications, or data-protection laws;
• violate the rights of employees, contractors, customers, visitors, or any third party;
• use CleverControl in a way that is fraudulent, abusive, harmful, unlawful, or contrary to this Policy.

10A. تیسرے فریق کے انضمام سے ڈیٹا

اس قابل قبول استعمال کی پالیسی کے تقاضے تیسرے فریق کی خدمات کے ساتھ انضمام کے ذریعے حاصل کردہ ذاتی ڈیٹا اور کام کی معلومات پر یکساں طور پر لاگو ہوتے ہیں، بشمول پروجیکٹ مینجمنٹ، ٹکٹنگ، تعاون اور دیگر کاروباری ایپلی کیشنز جیسے Atlassian Jira۔ CleverControl انضمام وقت سے باخبر رہنے، رپورٹنگ اور کام کے بوجھ کی منصوبہ بندی کے لیے بنائے گئے ہیں۔

انضمام فعال کرتے وقت آپ پر لازم ہے کہ:

• سیکشن 3 کے تحت ملازمین اور دیگر صارفین کو جو نوٹس آپ فراہم کرتے ہیں اس میں انضمام کو شامل کریں، بشمول فریق ثالث سروس سے کون سا ڈیٹا درآمد کیا جاتا ہے اور CleverControl ان کی طرف سے کون سا ڈیٹا اسے لکھتا ہے (مثال کے طور پر، Jira میں ورک لاگز)؛
• کسی صارف کے اکاؤنٹ کے منسلک ہونے یا انضمام کے ڈیٹا پر کارروائی کرنے سے پہلے قابل اطلاق قانون کے ذریعے مطلوبہ رضامندی حاصل کریں۔
• انضمام کا ڈیٹا صرف ان مقاصد کے لیے استعمال کریں جن کے لیے انضمام کو فعال کیا گیا تھا، جیسے کہ ٹائم ٹریکنگ، رپورٹنگ اور کام کے بوجھ کی منصوبہ بندی؛
• انضمام کے ڈیٹا تک رسائی کو مجاز اہلکاروں تک محدود کریں اور سیکشن 9 کے تحت مطلوبہ برقرار رکھنے اور حذف کرنے کے طریقوں کو لاگو کریں؛
• فریق ثالث سروس کی شرائط اور قابل قبول استعمال کی پالیسیوں کی تعمیل کریں، بشمول Atlassian Customer Agreement اور Atlassian Acceptable Use Policy جہاں قابل اطلاق ہوں۔

آپ کے لیے درج ذیل کام ممنوع ہیں:

• صارف کی اپنی اجازت کے بغیر کسی صارف کے تیسرے فریق اکاؤنٹ کو جوڑنا یا جوڑنے کی کوشش کرنا؛
• خفیہ، غیر متناسب یا کسی اور طرح کی غیر قانونی نگرانی کے لیے انضمام کے ڈیٹا کو اکیلے یا دوسرے ڈیٹا کے ساتھ استعمال کرنا؛
• افراد کے پروفائل بنانے یا ان کی حساس خصوصیات اخذ کرنے کے لیے انضمام کا ڈیٹا استعمال کرنا؛
• غیر قانونی امتیازی سلوک، ہراساں کرنے یا سیکشن 10 کے تحت ممنوع کسی مقصد کے لیے انضمام کا ڈیٹا استعمال کرنا؛
• انضمام کا ڈیٹا ایسے طریقے سے استعمال کرنا جو ملازمت، رازداری یا ڈیٹا کے تحفظ کے قابل اطلاق قوانین سے مطابقت نہ رکھتا ہو۔

11. Enforcement

We may suspend or terminate accounts, restrict access to CleverControl software or services, refuse support, refuse refunds, or take other appropriate action if we suspect or determine that CleverControl is being used for unauthorized, unlawful, abusive, or non-compliant monitoring.

No refund is issued for misuse, unauthorized installation, use on devices without proper authorization, or use contrary to this Acceptable Use Policy, our Terms and Conditions, our Refund Policy, or applicable law.

We may also cooperate with legal authorities, payment processors, hosting providers, or other relevant parties where required or permitted by law.

12. Questions and Compliance Contact

If you have questions about acceptable use of CleverControl or need to report suspected misuse, please contact us:

CleverControl Solutions, LLC
support [at] clevercontrol.com