Acceptable Use Policy

1. Scope

This policy forms part of the Terms of Service and applies to everyone who uses Agripino, whether account holder or user invited to an organisation.

The list is deliberately short. We do not try to anticipate every conceivable misuse, but to describe clearly what we will not tolerate.

2. Prohibited uses

You may not use Agripino to:

• Unlawful activity. Any purpose contrary to Costa Rican law or to the law of the country where you operate, including falsifying sanitary, traceability or payroll records.
• Impersonation. Passing yourself off as another person or entity, or falsely stating your connection to a farm or organisation.
• Unauthorised access. Attempting to reach another organisation's data, circumventing authentication or row-level security controls, or probing the infrastructure without written authorisation.
• Degrading the service. Generating disproportionate automated load, running stress tests without prior coordination, or interfering with other people's legitimate use.
• Harmful code. Uploading files containing malicious programs, or using the platform to distribute them.
• Third-party content without rights. Uploading material you have no rights to, or personal data of third parties you are not entitled to process.
• Unauthorised resale. Reselling, sublicensing or providing the service to third parties outside your organisation without a written agreement with us.
• Harassment. Using free-text fields, record names or platform messages to harass, threaten or defame anyone, including our support staff.

3. Your staff data

Agripino includes payroll and time-tracking modules. When you record data about your workers, you are the data controller and you assume the obligations of Law 8968.

In concrete terms, it falls to you to:

• Inform your staff that their data is recorded in Agripino, for what purpose and who may consult it.
• Obtain their express consent where the law requires it, separately from the employment contract.
• Handle the access, rectification and suppression requests your workers put to you.
• Record only the data necessary for employment management, and not sensitive data you do not need.

We act as processor and give you the tools to comply. The relationship is governed by the Data Processing Agreement, incorporated into the Terms as an annex.

4. Accounts and credentials

• Each user must have their own account. Sharing credentials makes it impossible to know who did what and compromises the traceability of records.
• You are responsible for keeping your password confidential and for telling us immediately if you suspect unauthorised use.
• When someone leaves your organisation, it is for you to deactivate their access on the platform.

5. What we do about a breach

We would rather talk than suspend. Unless there is immediate risk to other users or to the integrity of the service, we proceed as follows:

• Notice. We tell you in writing which conduct we consider contrary to this policy and give you a reasonable period, no less than 10 business days, to correct it.
• Suspension. If the breach persists after notice, we may suspend the account. Suspension is limited to what is necessary and is lifted once the cause is remedied.
• Termination. For a serious, unremedied breach we may terminate the contract. In that case we refund the pro-rata unused portion of the current cycle and keep your data available for export for 30 calendar days.

Immediate suspension without prior notice is reserved for manifest unlawful activity, attacks on the infrastructure, or a real risk to third-party data. Even then we tell you the reason within the following 24 hours.

6. How to report abuse

If you observe a use of Agripino that contravenes this policy, write to [email protected] with whatever detail you can provide. We review every report.