Orgacha Acceptable Use Policy
Rules for organisations and authorised users of the Orgacha workplace platform
Effective from the date on which the relevant agreement is accepted, unless a different effective date is stated in an Order Form.
Version 3 | Last updated 11 October 2026
This policy applies to every organisation and authorised user accessing Orgacha, operated by Orgacha Ltd, a company registered in England and Wales with company number 17486898 whose registered office is at 66 Paul Street, London EC2A 4NA. It forms part of the agreement governing use of the Service and sets the minimum standards needed to protect users, customer organisations and the platform.
The Customer remains responsible for its workplace policies, administrators, moderation decisions and lawful use of employee data. Users must also follow any additional rules imposed by their organisation, provided those rules do not conflict with applicable law.
1 Permitted use
Orgacha may be used for lawful internal workplace communication, training, recognition, surveys, events, rewards, collaboration and other functionality made available under the Customer’s subscription. Use must be connected with the Customer’s legitimate business activities and consistent with the Agreement.
Users may share content only where they have the necessary authority, permissions and rights. Administrators must assign permissions proportionately and remove access promptly when it is no longer required.
Orgacha is a professional workplace service and is not intended for people under 16. Individual users may request account closure through their organisation administrator or info@orgacha.com. Closing an individual account does not cancel the organisation’s subscription; personal-data retention and requests are handled under the Privacy Policy and DPA.
2 Respectful and lawful conduct
Users must communicate professionally and must not use the Service to harass, bully, discriminate against, intimidate, threaten or deliberately humiliate another person.
Users must not:
- publish or send content that is unlawful, defamatory, fraudulent, deceptive, obscene, sexually exploitative or deliberately privacy-invasive;
- promote hatred, violence, terrorism, abuse or unlawful discrimination;
- impersonate another person or misrepresent identity, authority, employment status or affiliation;
- disclose another person’s confidential or personal information without a lawful reason and appropriate authority; or
- use posts, messages, surveys, recognition or other features to retaliate against a person who raises a concern or exercises a legal right.
- create or alter a profile to impersonate another person, misstate a person’s role or deliberately mislead other users;
- use profile information to harass, discriminate against, intimidate, retaliate against or unfairly target another person;
- copy, publish or reuse another user’s profile photograph or profile information without appropriate authority or a lawful reason; or
- pressure a worker to complete optional profile fields, enable colleague sharing of contact details, or penalise a person for leaving fields blank, hiding them or removing them.
3 Security and platform integrity
Users must not interfere with the availability, integrity or security of Orgacha or any connected service.
Users must not:
- introduce malware, malicious code, harmful files or links designed to compromise a device, account or network;
- attempt unauthorised access, credential theft, vulnerability exploitation or circumvention of authentication, permissions, rate limits or security controls;
- probe, scan or test the Service for vulnerabilities without Orgacha’s prior written permission;
- use automated scraping, harvesting, bots or bulk extraction except through an interface expressly approved by Orgacha;
- send spam, deceptive bulk messages or content that places an unreasonable or disproportionate load on the Service; or
- share credentials, allow unauthorised account use or fail to report a suspected account compromise promptly.
- enumerate, scrape, harvest, copy or compile colleague profiles or directory information in bulk, except through an interface and for a purpose expressly authorised by Orgacha and the Customer;
4 Data and prohibited submissions
Users must submit only information that the Customer is authorised to process through the Service. Customer administrators must configure collection, access and retention in a manner consistent with the Customer’s privacy information, lawful basis and workplace obligations.
Profile biographies, interests, skills and photographs must be appropriate for an internal workplace service. Users should not place confidential information, personal contact information, passwords, precise working schedules, health information or other sensitive personal information in optional social-profile fields. Email addresses and telephone numbers needed for authorised operational communication belong in the designated contact fields, subject to the applicable visibility and management-access controls.
Customer administrators must not configure or use colleague profiles as a substitute for an HR record, attendance system, performance record or employee-monitoring tool. Profile information must be limited to what is reasonably required for workplace identification, discovery and communication.
Unless Orgacha has expressly agreed otherwise in writing, users must not submit payment-card data, account passwords for other services, government authentication credentials, medical records, biometric templates, criminal-offence records or other information requiring controls the Service is not designed to provide.
Users must not upload content that infringes intellectual-property, confidentiality, privacy, publicity or other third-party rights.
5 Fair workplace use
The Service must not be used for covert, excessive or unlawful monitoring of workers. The Customer must give workers appropriate information about relevant collection and use, restrict access according to role and apply fair internal review processes.
Engagement, survey, recognition, training, reward, attendance or activity data must not be treated as a complete or infallible measure of performance, conduct or wellbeing. It must not be the sole basis for dismissal, discipline, promotion, redundancy or another decision producing legal or similarly significant effects for a worker.
Where the Customer uses Service data in an employment decision, it must consider context, data quality, reasonable explanations and applicable equality, employment and data-protection obligations, and provide meaningful human review where required.
Reports and exports must be used only for authorised purposes and within the permitted organisation, role, venue and content audience. Users must not defeat small-group or anonymous-survey protections, combine reports to identify anonymous respondents, or use reporting access to obtain restricted records. Internal analytics must exclude private-message content and activity, personal contact details, optional social-profile fields, private files and sensitive information. A higher subscription tier does not override access restrictions or authorise disproportionate worker monitoring.
6 Translation and artificial intelligence
AI translation is available only when the relevant organisation-level control has been enabled. Personal automatic translation must remain a user choice. Private messages require the user to select Translate and acknowledge the translation notice before the selected text is sent to the approved translation provider.
Machine translations may be inaccurate or incomplete. Users must not rely on a translation without suitable human checking where the content concerns safety, legal rights, disciplinary action, dismissal, health, emergency instructions or another high-impact matter.
Users must not use translation or any future AI-enabled feature to generate unlawful content, evade this policy, infer sensitive characteristics, or make solely automated significant employment decisions. Enabling a product control does not remove the Customer’s responsibility to establish a lawful basis and provide required information.
7 Customer administration and moderation
The Customer is responsible for selecting trustworthy administrators, reviewing permissions, maintaining internal reporting routes and responding fairly to workplace complaints. It must not direct Orgacha or a user to act unlawfully or in breach of another person’s rights.
The Customer should preserve relevant context when investigating content and must avoid retaliatory, discriminatory or disproportionate moderation. Orgacha does not determine whether workplace speech breaches an employer’s internal policy unless the conduct also affects Orgacha’s Service, legal duties or rights.
The Customer must choose profile visibility proportionately, review access after organisational or venue changes, correct inaccurate workplace details and ensure profiles are hidden promptly when users are disabled or offboarded. Moderators and administrators must not use profile access or reports to circumvent venue, audience, private-message or employment-record restrictions. Administrators must respect independent user controls for colleague email and telephone visibility and must not opt a worker into sharing on their behalf. Permitted management access to contact details must remain within the viewer’s authorised role, assigned scope and operational purpose.
8 Reporting concerns
A suspected breach, security issue or unlawful use may be reported to the Customer’s administrator or to info@orgacha.com. Reports should identify the affected account or content, describe the concern and include relevant evidence where it is safe and lawful to do so.
Urgent threats to life or safety should be reported to the appropriate emergency service. Orgacha is not an emergency reporting channel.
9 Investigation and enforcement
The Customer may moderate its workspace in accordance with law, its workplace policies and the Agreement. Orgacha may investigate suspected misuse and may remove or restrict content, limit functionality, suspend access, preserve relevant evidence or terminate an account or subscription where reasonably necessary to address a breach, security threat, harm to another person, risk to the Service or legal obligation.
Where practicable, Orgacha will notify the Customer, act proportionately and limit a suspension to the affected account, content or function. Immediate action may be taken where delay could increase harm, compromise security, prejudice an investigation or breach a legal requirement.
Orgacha may cooperate with lawful requests from courts, regulators and law-enforcement bodies. Information will be disclosed only where permitted or required by law and handled in accordance with the Privacy Policy and Data Processing Addendum.
10 Changes and contact
Orgacha may update this policy to reflect changes to the Service, risks or legal obligations. Material changes will be communicated to affected Customers through the Service, by email or through another appropriate method. Continued use after the stated effective date is subject to the updated policy, without limiting any contractual notice requirement.
Questions or reports may be sent to info@orgacha.com. Orgacha Ltd, a company registered in England and Wales with company number 17486898 whose registered office is at 66 Paul Street, London EC2A 4NA.