API & Developer Terms

Effective date: 2026-09-05   Version: 1.0.0

This document forms part of the Astalias global legal framework. Astalias is an international software and digital services platform and is not presented as being directed exclusively to any single country. Mandatory rights and obligations that cannot lawfully be excluded remain unaffected.

1. API access

API access is provided according to the applicable product plan, documentation, authentication method and usage limits.

2. Keys and credentials

You must protect API keys, tokens and signing secrets and must not embed private credentials in public client code or repositories. You are responsible for requests made using your credentials until you revoke them or notify us of compromise.

3. Limits and abuse

You must respect documented rate limits, quotas and technical controls. You must not use automation to degrade service, evade limits, probe other customers, scrape restricted data or access undocumented private endpoints without authorisation.

4. Changes and versioning

We may version APIs, deprecate endpoints and introduce security requirements. Where reasonably possible, material breaking changes to supported APIs will be announced in advance.

5. Data responsibility

You are responsible for ensuring that data submitted through an API is lawfully obtained and that your integration provides notices, permissions and security appropriate to your users and applicable law.