1. Scope
This policy applies to all use of the Service, by the Customer and by anyone the Customer gives access to. Breaching it is a material breach of the Terms of Service.
2. No mandated completion
You may not require any person to use the Service, condition employment, grades, shift assignment, evaluation, or any benefit on having used it, or maintain or request lists of who completed it.
Mandating converts help-seeking into compliance, which destroys the meaning of the signal; and enforcing it requires a list of who finished, which undermines the promise regardless of whether that list is technically joinable. What can be measured is awareness: posters placed and verified per site, supervisors briefed, new hires oriented, badges distributed. Those are real, honest numbers.
3. No attempted re-identification
You may not:
- Combine aggregate data with schedules, attendance records, shift logs, cameras, badge-access records, or any other source to work out who tapped what.
- Issue queries designed to isolate an individual, including series of queries whose difference reveals a small group.
- Ask your staff, or us, to work around small-group suppression.
- Use contact-plane data for any purpose other than responding to the person who asked to be contacted.
4. Not a clinical tool
You may not present the Service as screening, diagnosis, treatment, triage, or a crisis service; use it to evaluate an individual’s risk; or present it as a substitute for 911 or 988.
You also may not remove, hide, visually de-emphasise, or interpose anything in front of the crisis resources. Local resources may be added; the baseline ones may not be withdrawn.
5. Technical limits
- No unauthorised access, no penetration testing without prior written permission, and no attempts to defeat security controls or the isolation between organisations.
- No automated scraping, no load that degrades the service, and no reverse engineering beyond what the law permits.
- No submitting fabricated requests in volume and no impersonating a person when using the form.
6. Enforcement
We may suspend access immediately for use that endangers an individual’s privacy, and terminate for uncured breach. Where a request contradicts this policy, we will escalate it in writing rather than fulfil it.