This policy applies to everyone who uses Admin Tea, including business owners, managers, payroll officers, staff and contractors. For businesses, it forms part of the Terms of Service. For staff and contractors, it sets the conditions for using the account a business gives you.
Every Admin Tea account belongs to a single named individual.
You must not share your username, password or sign-in codes with anyone, including colleagues, managers, payroll bureaux, bookkeepers or Admin Tea staff. Nobody at Admin Tea will ever ask you for your password or a verification code.
If another person needs access to a business's information in Admin Tea, they must be invited as their own user, with their own account and permissions. You must not create an account in another person's name or hold an account on someone else's behalf.
Why this matters. Admin Tea records who did what: who approved a pay run, who changed an employee's bank details, who lodged a report with the ATO. If two people use one account, that record no longer identifies a person, and nobody can establish who was responsible. Shared passwords also cannot be revoked for one person without cutting off the others, so a departing employee's access outlives their employment.
Every account must complete a second step at sign-in. This applies to all users, including employees who only use Admin Tea to view their own roster, payslips or super information. Two-step sign-in cannot be switched off, by you or by the business you work for.
Every account must have a mobile number. When you first sign in, you add your mobile number and confirm it with a code we send by text message, and sign-in codes can then be texted to it. You can also add an authenticator app, which we recommend, and a passkey on a device you use.
You must keep a mobile number that you personally control on your account, and keep it current. The last mobile number on an account cannot be removed, so if your number changes, add the new number before removing the old one.
You must not:
If you lose access. If you can no longer use any of your sign-in methods, ask the owner of the business you work for to reset two-step sign-in for you. If you are a business owner, or you are linked to more than one business, contact us at yasir@admintea.com and we will reset it after verifying your identity. A reset removes all of your sign-in methods and passkeys and signs you out everywhere. You will need to add a mobile number again at your next sign-in.
If you are a business owner. Only reset two-step sign-in for a staff member after confirming the request with that person directly. Do not act on a request you cannot confirm came from them. Every reset is recorded in the audit log, and the person is emailed.
You must not use Admin Tea to:
If you find a security weakness, please tell us at yasir@admintea.com and give us a reasonable chance to fix it before telling anyone else.
We may suspend an account that breaks these rules, as far as reasonably needed to protect the service and the information in it, and tell the business that gave you access. Where an incident affects tax, payroll or super information, Admin Tea may also be required to report it to the ATO and, under the Notifiable Data Breaches scheme, to affected individuals and the Office of the Australian Information Commissioner.