Acceptable Use Policy

1. Purpose

This Acceptable Use Policy (“AUP”) governs use of the Palate platform (the “Service”), operated by FastSail Technologies LLC d/b/a Palate. It is part of the Terms of Service and applies to restaurants that subscribe to the Service and to everyone who uses it through them. Violation may result in suspension or termination.

2. Prohibited Uses

You may not use the Service to:

1. Violate any law or regulation, including data protection, consumer protection, payment, employment, wage-and-hour, and tax laws.
2. Infringe the intellectual property or privacy rights of others.
3. Upload or transmit malware, or attempt to disrupt, compromise, or gain unauthorized access to the Service or its infrastructure.
4. Probe, scan, or test the vulnerability of the Service without prior written authorization — see Section 5.
5. Circumvent authentication, rate limits, or security controls, including sharing staff PINs or credentials to defeat access controls or manager approvals.
6. Process personal data without a lawful basis or the consents your own privacy notice and applicable law require.
7. Send unlawful, unsolicited, or deceptive communications through the Service’s email or SMS features, or otherwise violate the TCPA, CAN-SPAM, or carrier and CTIA messaging rules. You must have prior express written consent before sending marketing SMS, and must honor STOP requests.
8. Misrepresent identity or affiliation, or use the Service to defraud guests, employees, or payment systems.
9. Collect or process the data of children in violation of applicable law.
10. Resell, sublicense, or provide the Service to third parties except as expressly permitted.
11. Reverse engineer, decompile, or attempt to extract source code, except to the extent applicable law prohibits that restriction.
12. Engage in money laundering, sanctions violations, or other financial crimes.
13. Falsify time records, tip allocations, or payroll data, or use the Service to conceal a wage-and-hour violation.

3. Payment and Financial Conduct

Payments flow through Stripe, so you must also comply with Stripe’s policies and the applicable card network rules. Fraudulent transactions, prohibited business categories, and chargeback abuse are violations of this AUP.

4. Content and Data Responsibility

You are responsible for all data and content you and your users submit. You must hold the rights and permissions necessary for Palate to process it as described in the Terms of Service and the Data Processing Addendum.

5. Responsible Disclosure

If you discover a security vulnerability, report it to hello@palate.pro rather than exploiting it or making it public.

Our commitment. If you report in good faith, give us a reasonable opportunity to fix the issue before disclosure, act only against your own account and data, avoid privacy violations, service degradation, and data destruction, and do not exfiltrate data beyond the minimum needed to demonstrate the issue, then:

• We will not treat your research as a violation of this AUP or the Terms of Service.
• We will not pursue or support legal action against you for it.
• We will acknowledge your report within five business days and keep you informed of our progress.

Palate does not currently operate a paid bug bounty, and this Section is not an offer of payment.

6. Enforcement

Palate may investigate suspected violations and may suspend or terminate access, with or without notice depending on severity. Where practical and lawful, Palate will notify the account’s owner before suspending, and will limit any suspension to the narrowest scope that addresses the problem.

Consistent with Section 4.6 of the Terms of Service, an enforcement suspension is distinct from a billing suspension: Palate does not suspend point-of-sale, payment acceptance, kitchen display, or time-clock functions over non-payment.

7. Changes

Palate may update this AUP with notice as described in the Terms of Service.

8. Contact

Questions or reports: hello@palate.pro