Legal
Acceptable Use Policy
The prohibited and restricted uses that protect participants, customers and the service.
- Audience
- Customers and authorised users
- Version
- AUP-2026-08-29-V1
- Effective date
- 2026-08-29
Use Votegrain lawfully and fairly
Use Votegrain only for the agreed internal organisational purpose. The restrictions below are contractual; they do not claim the product automatically detects or blocks every prohibited input or use.
Prohibited decision uses
- Public or political elections, statutory votes, regulated shareholder/charity/union processes or other high-consequence processes without a separately negotiated signed agreement and verified controls.
- Solely automated or materially influential decisions about an identifiable person's employment, discipline, pay, promotion, benefits, membership, admission, credit, health, immigration or similar status.
- Representing Votegrain as legal advice, an independent audit or proof that a result is binding.
Participant and privacy protections
- No coercion, threats, harassment or unlawful discrimination.
- No attempt to identify another person's ballot, evade small-cell suppression or combine data to re-identify a person.
- Do not share personal credentials or named invitation credentials. An authorised Customer administrator may distribute approved organisation or group join codes to eligible people only within the Customer's authorised scope and policy.
- Do not put passwords, payment-card data, government identifiers, special-category/criminal-offence data or highly confidential material into Customer Data or free-text fields except through a separately approved signed exception and verified controls.
Service security
- No malware, vulnerability probing, scraping/overloading, bypassing controls or impermissible reverse engineering.
- No violation of law, another person's rights, customer policy or applicable governance/consultation requirements.
Response
To the extent configured controls support it, Votegrain may restrict an affected membership or access route where reasonably necessary to protect people, Customer Data, the service or compliance with law. This is not a promise of arbitrary account suspension/reactivation or immediate universal session revocation.