Acceptable Use Policy

This Acceptable Use Policy (“AUP”) sets out the rules for using bishop.work, the Bishop application, the Bishop browser extension for Google Chrome and other Chromium based browsers, including Microsoft Edge (the “Browser Extension”), and the Bishop add-in for Microsoft Office (the “Office Add-in”) (together, the “Service”). It is part of, and incorporated into, our Terms of Service. Capitalised terms have the meaning given in the Terms of Service. By using the Service, you and your Users agree to comply with this AUP.

The purpose of this AUP is to protect the Service, our customers, and the confidential and privileged information that the Service may touch.

1. General principles#

You may use the Service only:

• For its intended purpose, namely capturing and classifying your own or your firm’s work activity into time entries.
• In compliance with all applicable laws, professional rules and your firm’s policies.
• With data you are authorised to process, and on devices, accounts and browsers you are authorised to use.

2. Prohibited conduct#

You and your Users must not:

2.1 Misuse of data and access#

• Connect a mail, calendar or other account that you are not authorised to access, or process data you have no lawful basis or authority to process.
• Install or deploy the Browser Extension or the Office Add-in on a device, browser profile or account belonging to a person who has not been notified of its use in accordance with applicable law.
• Use the Service to access, capture or classify the communications, documents or browsing activity of individuals without the authority required under applicable law and your professional obligations.
• Use the Service as a covert surveillance tool, or configure it in a way designed to conceal from a User that their activity is being observed.
• Attempt to access another customer’s or User’s data, accounts or environment.

2.2 Security and integrity#

• Probe, scan or test the vulnerability of the Service, or breach or circumvent any security or authentication measure, without our prior written consent.
• Introduce malware, viruses, or other harmful code.
• Interfere with or disrupt the Service, its servers, or the networks connected to it, including through denial of service activity or excessive automated requests.
• Modify, repackage, sideload or redistribute the Browser Extension or the Office Add-in, or install either from a source other than an official store or a deployment channel authorised by us or your firm.
• Use the Service to gain unauthorised access to any system or data.

2.3 Intellectual property and reverse engineering#

• Copy, modify, distribute, sell or lease any part of the Service.
• Reverse engineer, decompile or attempt to extract the source code, models or underlying technology of the Service, except to the extent this restriction is prohibited by law.
• Remove or obscure any proprietary notices.

2.4 Unlawful and harmful use#

• Use the Service in violation of any law, regulation or third party right, including data protection, confidentiality, intellectual property, employment and anti spam laws.
• Use the Service to store or process content that is unlawful, infringing, defamatory, or that you are contractually or professionally barred from processing in this way.
• Use the Service to facilitate any fraudulent, deceptive or harmful activity, including the submission of time entries you know to be inaccurate.

2.5 Abuse of the platform#

• Resell, sublicense or make the Service available to third parties except as expressly permitted.
• Use the Service to build a competing product or to benchmark it for a competitor without our consent.
• Share account credentials, or exceed the seat count or usage limits of your plan, except as your plan permits.
• Use automated means to scrape or extract data from the Service other than through features we provide.

3. Your responsibilities for data#

Because the Service observes mail, calendar, document and browsing activity that may include confidential and privileged client information, you are responsible for:

• Ensuring you have the authority and lawful basis to connect each account and to process the data observed through each connected surface.
• Notifying your personnel, before deployment, that the Browser Extension and Office Add-in are in use and what they observe, and obtaining any consents required under applicable employment and data protection law.
• Configuring block lists so that browsing activity on sites your personnel are entitled to treat as private, such as banking, health and personal mail, is not collected.
• Configuring the Service, including retention and access settings, consistent with your firm’s policies and professional obligations.
• Reviewing every draft entry before it is confirmed or used for billing.

4. Monitoring and enforcement#

We do not routinely monitor the content or activity you process, and we access it only as needed to provide the Service, to investigate a security incident, or as required by law, in each case as described in Sections 9 and 11 of the Privacy Policy. However, we may investigate suspected violations of this AUP. If we believe a violation has occurred, we may:

• Warn you and ask you to remedy the issue.
• Suspend or restrict access to the Service, including immediately where there is a risk to security, legal compliance or other customers.
• Terminate your subscription in accordance with the Terms of Service.
• Report conduct to law enforcement where required or appropriate.

Where practical, we will give notice before taking action, but we may act first where necessary to protect the Service or others.

5. Reporting#

If you become aware of any violation of this AUP, or any security vulnerability or incident, please report it to us at tech@bishop.work.

6. Changes#

We may update this AUP from time to time. Material changes will be notified by a reasonable means and take effect on the date stated. Continued use of the Service after that date constitutes acceptance.