API Supplementary Terms

These API Terms are supplementary to the Core Terms and apply where You buy API access as a Product from Us. They form part of the Agreement and apply in addition to the Core Terms. Where a capitalised word is used in these terms but is not defined here, it has the meaning given to it in the Core Terms.

1. Accessing and using the APIs

1.1 For the Licence Term, We grant You a non-exclusive, non-transferable licence to access and use the APIs, in accordance with the Documentation, only for (a) Your own internal business purposes and (b) where appropriate, providing products and services to Your end customers.

1.2 Your use of the APIs is subject to the usage limits and rate limits set out in Your Order or otherwise notified to You in writing from time to time (API Limits). API Limits may include limits on the number of API calls in a period, data transfer, concurrent connections and storage quotas. If Your Order does not set API Limits, You must not use the APIs in a way that We reasonably consider excessive or abusive, or that is otherwise inconsistent with the Documentation.

1.3 You acknowledge that We may monitor Your use of the APIs to check compliance with the API Limits and this Agreement.

2. Authentication and security

2.1 Where access to the APIs requires authentication credentials (API Keys), We will provide them to You. You are responsible for keeping all API Keys confidential and secure.

2.2 We are under no obligation to monitor API use for fraudulent misuse. You are responsible for any misuse of Your applications that use the APIs. You must notify Us immediately of any suspected or actual unauthorised use of Your API Keys, and cooperate with Us to investigate and resolve any security incidents.

2.3 We can revoke, regenerate or modify API Keys at any time, including without notice where We suspect a security breach.

2.4 You must implement appropriate security measures when using the APIs, including secure storage of API Keys, use of encrypted connections, and protection against unauthorised access.

3. What You must not do with the APIs

3.1 You must not, and must ensure that Your Authorised Users do not:

(a) exceed the API Limits set out in Your Order, or attempt to circumvent those limits by any means (including by creating multiple accounts, using distributed systems, or coordinating access across multiple users or entities);

(b) use the APIs in any way that could damage, disable, overburden or impair the APIs, or interfere with anyone else's use of it - including monitoring or tracking other users' activities, attempting to access data belonging to other users, or anything that disrupts or degrades the service for others;

(d) reverse-engineer, decompile, disassemble or otherwise attempt to derive the source code of the APIs (or attempt to discover any algorithms, business rules or non-public features);

(e) use the APIs to build a competing product or service;

(f) resell, redistribute, sub-license or otherwise provide third-party access to the APIs without Our prior written consent;

(g) use the APIs for any unlawful purpose, or in breach of any applicable law or regulation, including to infringe any third party's intellectual property, privacy or other proprietary rights;

(h) use the APIs for data mining, scraping or similar data-gathering or extraction activities, including collecting or aggregating data about other users, their usage patterns, or competitive intelligence;

(i) use any automated means (such as bots, scrapers or scripts) to access the APIs beyond its intended programmatic use, or create multiple accounts to circumvent usage limits; or

(j) carry out, or attempt to carry out, any security testing, penetration testing or vulnerability scanning on the APIs without Our prior written consent and compliance with Our responsible disclosure policy.

4. Changes and versioning

4.1 We may update, modify or discontinue the APIs or any of their features at any time. We will use reasonable efforts to give You advance notice of material changes that may affect Your use of the APIs.

4.2 We will maintain backward compatibility for API versions for a reasonable period as set out in the Documentation, but We can deprecate older versions with appropriate notice.

4.3 You are responsible for updating Your integration to accommodate API changes and version updates within the timeframes set out in Our notices.

5. Usage monitoring and reporting

5.1 You acknowledge that We may collect and analyse API usage data to improve the service, plan capacity, and check compliance with this Agreement.

6. Going over the API Limits

6.1 If Your API use exceeds the API Limits, We may, at Our option, (a) temporarily throttle or suspend Your API access, (b) charge You overage Fees in accordance with Our then-current pricing, and/or (c) require You to upgrade to a higher service tier.

6.2 Overage Fees are calculated using Our standard rates in effect at the time of the excess use, and are invoiced in accordance with the payment terms of this Agreement.

6.3 You can ask Us to increase Your API Limits through the process set out in the Documentation, or by submitting a request via the form at https://pages.theaccessgroup.com/AccessGroup_ContactUs.html.

7. Technical support

7.1 Our technical support and the Access Success Plans do not apply to the APIs. The API does not include development services, custom integration work, or support for third-party systems that integrate with the APIs, unless We expressly agree otherwise in an Order for consulting services.

8. If We discontinue an API

If We discontinue an API:

(a) We will give You at least 90 days' prior written notice; and

(b) We will use reasonable efforts to provide migration assistance or alternative solutions.