Acceptable Use Policy

The workspace Owner is responsible for everything that happens in their workspace— including the actions of every user they invite and every message sent through integrations they connect (Razorpay, WhatsApp Business, email). If a user in your workspace breaks this policy, that's on the workspace.

You may not use Rebaar to:

• Break the law. Store, generate, or transmit content that is illegal under Indian law, or use the Service to facilitate fraud, money laundering, tax evasion, or fake invoicing.
• Spam or send deceptive messages. Send unsolicited bulk messages, phishing, or deceptive content over WhatsApp, email, or any channel Rebaar relays (see §3).
• Attack the Service. Probe, scan, or test the vulnerability of the system; circumvent authentication, rate limits, or workspace isolation; or run automated traffic beyond the documented API limits.
• Cross tenant boundaries.Attempt to access, or to derive the existence of, another customer's workspace or data. Misrepresenting your identity to bypass isolation or referral attribution is prohibited.
• Resell or sublicense.Resell, sublicense, white-label, or expose Rebaar's functionality to third parties without our written consent.
• Infringe rights.Upload content that infringes someone else's intellectual property, privacy, or other rights, or that you have no lawful basis to process.
• Distribute malware or upload files containing viruses, worms, or other harmful code.
• Harass or harm other Rebaar customers, our staff, or the public — including using the Service to threaten, defame, or stalk.
• Scrape or overload. Use bots, scrapers, or other automated means to extract data or place an unreasonable load on the infrastructure.

When you send WhatsApp or email through Rebaar, you are the sender of record. You must:

• Only message people who have a genuine business relationship with you (your clients, vendors, staff) and who you have a lawful basis and, where required, consent to contact.
• Honour opt-outs. If a recipient asks to stop, stop. Marketing email sent through Rebaar carries a one-click unsubscribe; don't strip it or re-add unsubscribed contacts.
• Follow WhatsApp Business Platform policies and India's telecom/commercial-communication rules (including DLT registration where it applies to you). Rebaar is a relay, not your compliance officer.
• Never use Rebaar to send content unrelated to your construction business to a purchased list.

Good-faith security research is welcome — but do it through our coordinated disclosure programme, not against live customer data. Don't access data that isn't yours, don't run denial-of-service tests, and give us time to fix before any public disclosure. Researchers who follow the programme will not be penalised under this policy.

Depending on severity, a violation can result in a warning, throttling, temporary suspension, or permanent termination of the workspace. For imminent harm— active fraud, an ongoing attack, illegal content, or risk to other customers — we may suspend immediately and without prior notice. Otherwise we'll email the workspace Owner first.

Every administrative action we take on a workspace (including any access under impersonation) is audit-logged. We review flagged anomalies before acting, and we preserve records as required by law even after a workspace is terminated.

If you believe someone is misusing Rebaar — spam, fraud, illegal content, an attempt to reach another tenant's data, or anything else in §2 — please tell us. See How to report misuse, or email [email protected] directly.

We may update this policy as the product, law, or our processors change. Material changes are announced at least 14 days in advance via the workspace Owner's email. Continued use after the effective date is your acceptance of the updated policy.