Acceptable Use

What you may and may not do with the service. · Beta. Operated by pending registration.

This is a calculator, not an adviser. Read the full disclaimer.

Scope and Application

This Acceptable Use Policy ("Policy") governs all access to and use of Resonate Invoicing ("Resonate"), available via resonatedemo.ca. This Policy is issued by <span class="pending-operator" title="Legal entity registration is pending">pending registration</span> (which prints as "pending registration" because the business entity is not yet registered, operating as a one-person pre-launch beta service based in Toronto, Ontario, Canada).

This Policy applies to:

• Every registered account holder;
• Every authorized user, collaborator, or guest accessing an account; and
• Every network, script, integration, or device that sends requests to or receives data from our servers.

By creating an account, accessing the interface, or sending requests to our domain, you agree to comply with this Policy. If you do not agree, you must immediately cease all access to the service.

Permitted Use

Resonate is designed specifically for independent film and audiovisual (AV) crew members and technicians. Permitted use is limited to the legitimate administration of your own independent contracting business, including:

• Creating, managing, and issuing professional invoices for your own labor, day rates, overtime, kit rentals, and production expenses;
• Calculating applicable taxes, including Ontario Harmonized Sales Tax (HST);
• Transmitting legitimate transactional invoices and payment receipts directly to clients and production companies who have hired you; and
• Exporting your own billing records for bookkeeping, tax compliance, and personal archives.

You may only use Resonate to invoice for services, rentals, or expenses that you have actually supplied or contracted to provide.

Prohibited Conduct

We maintain zero tolerance for activities that compromise the integrity, security, or legal standing of our infrastructure, our users, or third parties. Prohibited conduct is organized into six mandatory categories below.

(a) Unlawful or Harmful Content

You may not store, process, generate, transmit, or link to any material that:

• Violates any applicable federal law of Canada or provincial law of Ontario;
• Contains, facilitates, or promotes hate speech, targeted harassment, defamation, extortion, or threats of violence;
• Depicts, facilitates, or promotes child sexual abuse material (CSAM) or any form of child exploitation;
• Distributes malicious software, including viruses, trojans, worms, keyloggers, ransomware, or malicious URL redirects; or
• Facilitates identity theft, fraud, money laundering, or illegal trade.

(b) Intrusion and Security Abuse

Resonate relies on self-hosted infrastructure, including Proxmox virtualization, MinIO object storage, Authentik identity management, and database-level tenant isolation. You must not:

• Probe, scan, test, or audit the vulnerability of any Resonate system, network, port, or interface without our explicit written authorization;
• Attempt to breach, bypass, exploit, or tamper with the database-level tenant isolation that separates your workspace and records from those of other accounts;
• Access, view, alter, or attempt to decrypt data, files, or records belonging to any other user or tenant;
• Share your Authentik login credentials, session tokens, or multi-factor authentication codes with unauthorized parties, or maintain accounts under shared, unmanaged credentials; or
• Interfere with, disrupt, or launch denial-of-service (DoS or DDoS) attacks against our hosts, network links, or upstream connectivity.

(c) Data Abuse and Privacy Violations

Our systems operate under the requirements of Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). You must not:

• Use spiders, crawlers, scrapers, automated harvesters, or bulk extraction tools to pull data from Resonate;
• Enter, upload, or process any individual's personal information without having obtained verified lawful authority or express consent to do so under PIPEDA;
• Enter personal financial data, including credit card numbers or banking credentials, into invoice line items, notes, or file attachments; or
• Upload, store, or process any personal health records, health histories, or medical documentation covered by Ontario's Personal Health Information Protection Act (PHIPA). Resonate is an invoicing tool, not a health information custodian or healthcare repository.

(d) Anti-Spam and CASL Compliance

Resonate uses Resend strictly for transactional email delivery (such as sending invoices, payment receipts, and password resets). You must strictly comply with Canada's Anti-Spam Legislation (CASL) and must not:

• Upload, import, or send messages to purchased, rented, harvested, or third-party email lists;
• Send commercial electronic messages to individuals or businesses without an existing business relationship, express consent, or another verified statutory exemption under CASL;
• Use Resonate as a general marketing platform, newsletter service, cold-outreach system, or bulk mailing tool; or
• Forge email headers, disguise sender identity, or circumvent delivery bounce and suppression mechanisms.

(e) Financial and Invoicing Abuse

Resonate provides professional billing tools that interface with Canadian financial workflows. You must not:

• Create, issue, or distribute fictitious, falsified, or inflated invoices for work that was never performed or gear that was never supplied;
• Bill any individual, production company, or studio that did not contract or authorize your services;
• Engage in invoice factoring fraud, double-invoicing, payment interception schemes, or fraudulent refund claims; or
• Use the platform to generate misleading sales documentation, falsify HST/GST remittances, or manipulate records intended for Canada Revenue Agency (CRA) filing.

(f) Load and Infrastructure Abuse

To preserve system stability on our Ontario server cluster, you must not:

• Hammer application programming interfaces (APIs), form handlers, or document generation endpoints with rapid, automated, or continuous scripts;
• Attempt to circumvent, bypass, or defeat application rate limits, bandwidth caps, or concurrency controls;
• Resell, rent, lease, sub-license, timeshare, or white-label access to Resonate to third parties without prior written agreement; or
• Misuse storage capacity on our MinIO clusters by storing video archives, media dailies, personal photo libraries, or non-invoicing files.

Monitoring and Content Review

<span class="pending-operator" title="Legal entity registration is pending">pending registration</span> (pending registration) does not actively inspect, monitor, or read your private invoice line items, client lists, or attached documents. We do not maintain automated surveillance tools, ad trackers, or marketing analytics on your workflows.

However, we reserve the right to review account metadata, transaction logs, and specific stored records when we receive a specific, credible complaint, when automated infrastructure monitors detect abnormal traffic or system abuse, or when required by Canadian law or court order.

Enforcement Ladder

If an account is found or reasonably suspected to be in violation of this Policy, we take corrective action according to an enforcement ladder. The ladder consists of four progressive tiers:

1. Written Warning: For minor, non-critical, or inadvertent infractions (such as improper formatting of recipient lists or minor rate-limit spikes). We identify the offending behavior and set a strict deadline to correct it.
2. Throttling and Rate Restriction: For automated traffic surges, repeated high-volume requests, or uncorrected non-critical behavior. We temporarily restrict API rates, export bandwidth, or background job processing to protect overall system stability.
3. Account Suspension: For deliberate policy violations, ongoing spam complaints under CASL, persistent non-compliance after a warning, or unverified identity information. During suspension, all outgoing services, email transmissions, and invoice generation are immediately halted.
4. Account Termination: For severe, illegal, or malicious conduct.

Selection of Enforcement Tier

We determine the appropriate enforcement tier at our sole discretion based on:

• The severity and legal implications of the violation;
• Whether the conduct creates an immediate security hazard to our servers or other tenants;
• Whether the violation involves active fraud, intrusion attempts, tenant-boundary exploitation, or illegal material;
• Whether the conduct was intentional, reckless, or repeated; and
• The responsiveness and cooperation of the account holder.

Active intrusion attempts, deliberate exploitation of database isolation, CSAM distribution, and financial fraud will bypass warning and throttling tiers, resulting in immediate suspension or termination without advance notice.

Reporting Suspected Abuse

We depend on our community to keep our infrastructure secure and trusted. If you identify an invoice, email, or activity originating from Resonate that violates this Policy, or if you suspect an account has been compromised, please report it immediately to:

[email protected]

Please include relevant dates, email headers, invoice links, or logs where possible. We investigate every credible report and take proportionate action. For privacy inquiries regarding PIPEDA compliance, you may contact [email protected].

Account Termination and Data Handling

When an account is terminated for a violation of this Policy, the following data rules apply:

• Write Access: All ability to generate new invoices, send emails via Resend, or upload files is revoked immediately upon termination.
• Export Window: Provided the termination was not triggered by active security attacks, malware distribution, CSAM, or severe fraud, we provide a 30-day read-only access window. During this window, you may download a full export of your records, including CSV summaries, PDF invoices, receipts, and machine-readable JSON files.
• Data Purge: Upon the expiration of the 30-day export window, all tenant data stored on our Proxmox servers and MinIO storage systems will be permanently purged from live databases, and overwritten in routine encrypted backups in Canada according to our standard backup rotation cycle.
• CRA Retention Carve-Out: In accordance with our Privacy Policy (/legal/privacy) and Canadian federal tax laws, specific core transaction logs, billing receipts, and fiscal audit records required by the Canada Revenue Agency (CRA) will be retained for the minimum statutory retention period (up to six years) before permanent destruction, even after live operational accounts are deleted.