Acceptable use policy
Status: Draft, pending legal review. Version 1.0. This page will show an effective date and a “What changed” note once it is final. Our disclaimers page explains what a draft means.
This policy says what you may and may not do with Amyn. Most of it comes down to one idea: run your business honestly, treat other people fairly, and do not break the tools that other businesses rely on.
What this policy covers
This policy applies to everything we provide. The website and account terms define the words we use in every policy. Together we call all of this “the service”:
- the website at amynpos.com, including the waitlist and contact forms;
- Amyn accounts and the dashboard;
- the help assistant on the website;
- the point of sale, including any screen that faces your customers;
- any API, integration or developer tool we offer now or later.
“We” and “Amyn” mean Amyn, the company that provides the service. “You” means anyone who uses it. That includes a visitor to the website, a merchant, the merchant’s staff, and anyone who connects software to the service. A merchant is responsible for what its staff do through its account.
When you create an account, you accept this policy. We record that acceptance with the policy version, the time, your IP address and your browser (user agent). The privacy notice says more about that record.
The service is built for businesses and the adults who run them. It is not directed at anyone under 18.
This policy works alongside the website and account terms, the merchant agreement, the privacy notice, the cookie notice, the AI notice, the data processing addendum and the responsible disclosure policy. If they disagree, the same order applies in every policy: the merchant agreement comes first, with the data processing addendum deciding anything about personal data, and the website and account terms come next. Within that order, the responsible disclosure policy wins on security research, as the terms say, and the AI notice has the detail on the help assistant.
Use the service lawfully
You must follow every law that applies to your business and to your use of the service. That includes consumer protection, tax, privacy, sanctions and export laws. Once payments are available, it also includes the rules of the card networks and the card-data security rules that apply to your setup. Our payment processor’s agreement sets those out, and the merchant agreement says how card-security duties will be split between you, us and the processor before payments are enabled.
For businesses and items we cannot serve, we follow the list of our payment processor, which we will name here before any payment is taken. Amyn adds no exclusions of its own. We will link to that list so you can check it before you sign up.
Content you must not post
You may upload content such as item names, logos, photos, receipt text and customer notes. You keep ownership of it, and you are responsible for it. Do not post content that is:
- unlawful, or that helps someone break the law;
- harassing, threatening or abusive toward any person;
- hateful toward people because of who they are, such as their race, religion, nationality, sex, disability or age;
- infringing, meaning it uses someone else’s trademark, photo, artwork, text or other work without permission;
- false and damaging to a real person or business, such as an untrue claim about a rival;
- using a real person’s name, face or voice to promote your business without their permission;
- deceptive, including false claims about a product, a price or your business;
- sexually explicit, or graphically violent.
We do not review content before it goes live. We may remove content that breaks this policy, and we will tell you when we do unless the law stops us.
Images on the customer screen
The point of sale can show your own photos and messages to your customers on a screen that faces them. These rules apply to anything you show there:
- You must own the rights to each image, or have permission to use it. Stock photos need a licence that covers public display in a business.
- Nothing offensive. No nudity, graphic violence, slurs or hateful symbols, and nothing a reasonable customer would find threatening or demeaning.
- No misleading offers. If the screen shows a price or a promotion, it must be real and current.
- Respect other people’s privacy. Do not show one customer’s name, photo or purchase to other customers without that person’s consent.
We may remove any image that breaks these rules, and we may ask for proof that you hold the rights.
Messaging your customers
If you use the service to send receipts, texts or emails to your customers, you are the sender. The laws on marketing messages apply to you. Each of us keeps our own legal duties. This policy does not move yours to us or ours to you. Counsel: how the sender and initiator duties under the CAN-SPAM Act and the Telephone Consumer Protection Act fall between the merchant and Amyn once messaging is built.
- Get consent first. This is Amyn’s rule, and for email it is stricter than the law requires. Send marketing texts or emails only to customers who have clearly agreed to receive them from your business. A sale alone is not consent for marketing.
- Receipts and order updates are different. You may send a receipt or an order update to a customer who gave their number or email for that purpose. If you add a promotion to a receipt, treat the whole message as marketing.
- Honour opt-outs. Stop as soon as you can, and never later than 10 business days after a customer asks you to. Keep a record of the request.
- Say who you are. Every marketing message must name your business and give a simple way to opt out. A marketing email must also show your business’s postal address, and its “from” line and subject must be accurate.
- No bulk unsolicited messages. Do not upload purchased contact lists, and do not message people who have never dealt with your business.
Texting is not available yet. Before we offer it, we will publish how consent is recorded, how a customer can withdraw it, and how we stop messages from going to anyone who has opted out.
The point of sale creates a customer record only when the customer agrees. Do not work around that at the counter. Counsel: the consent wording to be settled with counsel against the Telephone Consumer Protection Act and the CAN-SPAM Act.
Security
Do not do anything that weakens the security of the service or of anyone who uses it. The service runs on systems from Supabase, Inc. (our database, sign-in, file storage and server functions) and Netlify, Inc. (our website host). These rules cover your use of those systems through Amyn as well. You must not:
- look for weaknesses in our systems, by scanning or any other method, unless we have given you written permission to test;
- get into, or try to get into, an account, a device or data that is not yours;
- upload or send malware, or anything built to damage or take over a system;
- flood or overload the service, or get in the way of other merchants using it;
- bypass sign-in, rate limits, payment limits or other controls;
- share your password or a device pairing code, or let someone else use your login;
- copy the service, take it apart to learn how it is built, or pull data out of it with automated tools, unless a law gives you that right;
- run the point of sale on a device that has been altered to remove its built-in protections.
If you find a security weakness, tell us. Our responsible disclosure policy explains how to report it safely, what testing it allows, and what we promise in return. Research that follows that policy does not break this one.
Fraud and impersonation
Do not use the service to deceive anyone. You must not:
- run scams, phishing or fake offers;
- pretend to be Amyn, our staff, our payment processor, or any other person or business;
- make a page, message or screen look like it comes from Amyn when it does not;
- give false information about your identity, your business or its owners when you sign up or when we ask;
- create fake receipts, fake sales or fake refunds;
- hide the true nature of what you sell.
Payment misuse
Once payments are available, the following rules apply to every transaction you process through the service.
- Process only your own sales. Do not accept payments on behalf of another business, and do not let someone else use your account to take payments.
- No cash advances to yourself. Do not run your own card, or a card belonging to an owner, an employee or a relative, to turn credit into cash.
- Describe sales honestly. Each charge must match what the customer bought, at the price they agreed to.
- Do not split a sale into several smaller charges to get around a limit or a check.
- Refund to the original payment method, and only for a real sale.
- Do not resell or rent out the service, and do not use it to move money for people who are not your customers.
You may want to add a surcharge for card payments, or offer a discount for cash. Whether you can depends on state law, the card networks and our payment processor’s rules. Those rules govern it, and we will link to them before any payment is taken.
Our payment processor will have its own transaction rules, and those apply too. On payment matters, our payment processor’s rules and the merchant agreement come first.
Integrations and data
If we offer an API or let other software connect to Amyn, a merchant is trusting that software with its data. Anyone who builds on Amyn has to earn that trust:
- Take only the data the integration needs to do its job, and tell the merchant plainly what that is.
- Nothing in the background. If a merchant has not knowingly agreed to share a piece of data, the integration must not read it, copy it or move it.
- Amyn does not sell personal data or use it for advertising, and nothing built on Amyn may do so either.
- When we show a merchant or a customer a permission screen, the answer they give is final. Do not design around it.
- Treat API keys and tokens like the keys to the shop. Keep them secret, and replace them the moment they leak.
- When the merchant or a customer asks for their data to be deleted, or when the connection ends, delete it.
- Data we have anonymised stays anonymous. Do not try to work out who it belongs to.
The data processing addendum covers personal data that passes through an integration. If an integration breaks these rules, we may cut off its access without warning.
Using the help assistant
The help assistant on our website is provided by Anthropic (model: Claude). It answers questions about Amyn and nothing else. It cannot see any account, sale or customer data. Please use it this way:
- Keep card numbers, passwords, bank details and sensitive personal data out of the chat. The help assistant has no safe place to put them, and we do not want them.
- Ask it about Amyn. It is not a tool for writing scams, abuse or anything against the law, and it is not there to help anyone target another person.
- Take it as it is. Do not try to trick it past its limits, or to make it pose as a person, as Amyn staff or as another service.
- Its capacity is shared by every visitor. Do not send it automated or bulk requests, and do not copy its answers to build a rival product.
The help assistant can be wrong. Check anything important with a person before you act on it. It does not give legal, tax, financial or religious advice. We keep chats briefly and never use them to train AI models. The AI notice has the details.
What happens if this policy is broken
Our aim is to fix problems, not to punish people. Where we can, we will tell you what the problem is and give you a chance to put it right before we act.
We act at once, without notice, when we see fraud, a risk to anyone’s safety, a security threat, or when the law requires it. Depending on the problem, we may:
- remove or hide content;
- turn off a feature or an integration;
- suspend an account, a device or an API key;
- close an account;
- report what we have found to our payment processor or to law enforcement when we must.
If you think we got a decision wrong, reply to our notice and tell us why. A person will look at it again.
If we close an account for breaking this policy, the merchant still gets the 60-day export window in the merchant agreement, unless the law stops us.
How to contact us
Email info@amynpos.com or use the contact form on the website. Put “Acceptable use” in the subject line so we can route it. If you need this document in another format, ask us; our accessibility statement explains how we help. We will publish our mailing address here before launch. Every policy, with its version and effective date, is listed at /policies.
To report abuse, including abuse by an Amyn merchant, use the same channels with “Abuse report” in the subject line. Tell us what you saw, where, and when. We read every report and reply.
Changes to this document
Every version of this document carries a version number, an effective date and a “What changed” note. Earlier versions stay in an archive linked from /policies. If we make a material change, we email account holders at least 30 days before it takes effect. Smaller changes, such as fixing a typo or a link, take effect when posted. This is version 1.0, and no earlier version exists.
A material change to this policy is one such as a new rule or a new way we enforce one.