Admin Tea Acceptable Use Policy

Admin Tea Pty Ltd (ACN 701 160 456, ABN 93 701 160 456) · South Australia

This policy applies to everyone who uses Admin Tea, including business owners, managers, payroll officers, staff and contractors. For businesses, it forms part of the Terms of Service. For staff and contractors, it sets the conditions for using the account a business gives you.

1. One account, one person

Every Admin Tea account belongs to a single named individual.

You must not share your username, password or sign-in codes with anyone, including colleagues, managers, payroll bureaux, bookkeepers or Admin Tea staff. Nobody at Admin Tea will ever ask you for your password or a verification code.

If another person needs access to a business's information in Admin Tea, they must be invited as their own user, with their own account and permissions. You must not create an account in another person's name or hold an account on someone else's behalf.

Why this matters. Admin Tea records who did what: who approved a pay run, who changed an employee's bank details, who lodged a report with the ATO. If two people use one account, that record no longer identifies a person, and nobody can establish who was responsible. Shared passwords also cannot be revoked for one person without cutting off the others, so a departing employee's access outlives their employment.

2. Two-step sign-in

Every account must complete a second step at sign-in, using an authenticator app, a passkey or a code sent by text message. This applies to all users, including employees who only use Admin Tea to view their own roster, payslips or super information.

Two-step sign-in cannot be switched off, by you or by the business you work for. Your last remaining second-step method cannot be removed; add another method first if you want to change it.

You must not:

• set up two-step sign-in on a device or in an authenticator account that another person can access;
• forward, screenshot, read out or otherwise pass on a verification code;
• attempt to bypass, disable or automate the sign-in process.

3. Keeping your account secure

• Use a password of at least 12 characters that you do not use anywhere else. Admin Tea checks passwords against lists of publicly breached passwords and will refuse one that appears on them.
• Lock or sign out of shared and unattended devices. Admin Tea locks an idle screen after 15 minutes and ends every session within 24 hours of sign-in, but neither replaces locking a device you walk away from.
• Tell us promptly at yasir@admintea.com if you believe someone else has used your account, learned your password, or has access to your second-step method.

4. Things you must not do

You must not use Admin Tea to:

• access, or try to access, information you are not authorised to see, including other businesses' data;
• enter information you have no right to use, or that is false or misleading, including in pay, tax, super or NDIS records;
• harass, threaten, discriminate against or unlawfully monitor anyone, including through messages;
• send spam or unrelated marketing through its messaging or email features;
• upload malware, or test, probe or scan the service for vulnerabilities without our written permission;
• overload the service, or scrape or extract data with automated tools other than features we provide;
• break any law, including privacy, workplace, tax and NDIS laws.

If you find a security weakness, please tell us at yasir@admintea.com and give us a reasonable chance to fix it before telling anyone else.

5. If these rules are broken

We may suspend an account that breaks these rules, as far as reasonably needed to protect the service and the information in it, and tell the business that gave you access. Where an incident affects tax, payroll or super information, Admin Tea may also be required to report it to the ATO and, under the Notifiable Data Breaches scheme, to affected individuals and the Office of the Australian Information Commissioner.