These terms apply to anyone who accesses StayOnHire through an Authorised Interface other than the StayOnHire web and mobile applications (app.stayonhire.com, m.stayonhire.com, my.stayonhire.com and account.stayonhire.com): the StayOnHire MCP server at mcp.stayonhire.com, any application programming interface we document for customer use, and connectors or applications built on them. If you are a user of a StayOnHire customer, the Terms of Service also apply and prevail if they conflict. If you are a developer or integrator building for StayOnHire customers, these terms are your agreement with Idle Australia Pty Ltd (ACN 612 169 089). Effective: 3 November 2026
1.1 Access is granted only through the authorisation flow we provide (OAuth 2.1 with the StayOnHire identity service). You must register your application with us where we require it, keep client credentials confidential, and not share, sell or embed them in public code.
1.2 Each access token is bound to a user and an Organisation. Your application may act only as that user, within the scopes granted, and only for as long as the user's authorisation stands. You must not store or pass tokens through to any other party or service.
1.3 You must present an accurate name, publisher and description for your application at the consent screen and in any directory listing, and keep a working support contact.
You must not, and must not enable others to:
3.1 Requests are limited per user, per Organisation and per application. Current limits are published in the developer documentation and returned in response headers. Repeatedly exceeding them may lead to throttling or suspension.
3.2 Results are paginated. You must not present a page of results as complete, and you must honour the pagination cursor rather than re-querying from the start.
4.1 Data you receive through an Authorised Interface is Customer Data belonging to the authorising Organisation and may contain personal information. You may use it only to provide your application to that Organisation and its users, must protect it with appropriate security, and must delete it when the authorisation ends or the Organisation asks, except where law requires retention.
4.2 You must not use Customer Data to train or fine-tune machine-learning models, to profile individuals, or for advertising. If your application sends Customer Data to a third party (including a model provider), you must disclose that to the user before they connect and ensure that third party is bound to equivalent restrictions.
4.3 Text held in records (notes, descriptions, names) is data, not instructions. Your application must not act on instructions found in Customer Data, must not fetch URLs found in it, and must not let it choose email recipients.
4.4 You must notify us at support@stayonhire.com within 48 hours of becoming aware of unauthorised access to Customer Data obtained through your application.
5.1 Tools carry annotations stating whether they read, write, or are destructive. Your application must surface these to the user and must not suppress or automate the preview-and-confirm step we require for write, financial and send actions.
5.2 You are responsible for every action your application takes with a user's authorisation, including actions resulting from model error or prompt injection.
6.1 We own the Authorised Interfaces, their schemas, documentation and tool descriptions. We grant you a non-exclusive, revocable licence to use them to build and operate your application under these terms. You own your application.
6.2 You may describe your application as "works with StayOnHire" and use the StayOnHire name and logo in the form and size set out in our brand guidelines, solely to identify the integration. You must stop on request.
6.3 If you give us feedback or suggestions, we may use them without obligation to you.
7.1 We may add tools and fields at any time without notice. Changes that remove a tool, rename it, or change its behaviour in a way that may break applications are announced in the tool description and the developer changelog at least 60 days before they take effect, except where needed urgently for security or legal reasons.
7.2 We may release features in beta. Beta features may change or be withdrawn without notice and are excluded from any availability commitment.
8.1 Authorised Interfaces are provided on the same availability basis as the Platform. We do not offer a service-level agreement for them unless agreed in writing. Support is through the developer documentation and support@stayonhire.com.
9.1 We may suspend or revoke your application's access immediately where we reasonably believe it breaches these terms, threatens security or the service, or is required by law. We will tell you the reason unless law prevents it, and will restore access once the issue is resolved where that is appropriate.
9.2 Either party may end these terms on 30 days' written notice. On termination you must stop using the Authorised Interfaces, delete client credentials and Customer Data under clause 4.1, and remove StayOnHire branding.
10.1 Where your application, or StayOnHire's own connector, is listed in a third-party directory (such as an AI assistant provider's connector directory or app store), that directory's terms govern your relationship with its operator. We are not a party to them.
11.1 The Authorised Interfaces are provided as is. To the extent permitted by law we exclude all warranties and all liability for indirect or consequential loss, and our total liability under these terms is limited to AUD 1,000.
11.2 You indemnify us against claims and losses arising from your application's use of the Authorised Interfaces, your handling of Customer Data, or your breach of these terms.
12.1 We may update these terms with 30 days' notice through the developer changelog; continued use after the effective date is acceptance. Western Australian law applies and the dispute-resolution clause of the Terms of Service is incorporated. Definitions: Authorised Interface, Customer Data, Organisation and User have the meanings in the Terms of Service.
