IXXO API Terms and Conditions

Last Updated: January 22, 2025

These API Terms form an essential part of the IXXO Services Agreement. Any breach of these terms will constitute a material violation of the Agreement. Capitalized terms not defined herein have the meaning outlined in the Agreement.

1. API Access, Usage, and Monitoring

1.1 Permitted Use
Access to the IXXO API is granted solely for use in connection with IXXO’s services, in compliance with these terms, the Agreement, and applicable laws. Any unauthorized use or exploitation of the API outside the permitted scope is strictly prohibited.

1.2 Monitoring and Compliance
IXXO reserves the right to monitor API usage to ensure security, maintain system integrity, and verify compliance with these terms. This may include auditing API calls, inspecting data flows, and identifying potential security risks. Users must not attempt to disable or interfere with IXXO’s monitoring measures.

1.3 Usage Limits
API requests are subject to rate limits, access restrictions, and fair usage policies to maintain fair system performance. Users are prohibited from bypassing these limits, initiating excessive API calls, or engaging in abusive behaviors that could degrade API performance or availability.

2. Data Security and Privacy Obligations

2.1 Protection of User Data
Users must implement robust security measures to prevent unauthorized access, modification, or exposure of personal and business data obtained via the API. All sensitive information must be encrypted and stored securely.

2.2 Data Retention and Deletion

• Users must delete any personal or business data collected via the API:
• Upon request by the data owner.
• When the user ceases to use the API or terminates their service with IXXO.
• If required by data protection laws.

2.3 Security Breach Handling
In a security incident involving unauthorized data access or leakage, users must take immediate corrective actions, report the breach to IXXO without delay, and collaborate on necessary remedial measures. Any public disclosures regarding such breaches require prior written approval from IXXO unless legally mandated.

3. Prohibited Activities

• Users and their representatives must not:
• Share API credentials or permit unauthorized third parties to access the API.
• Develop or distribute applications that replicate or compete with IXXO’s API services.
• Introduce malicious code, including viruses, malware, or any disruptive technologies.
• Use the API to harass, defame, or threaten individuals or organizations.
• Reverse engineer, decompile or tamper with the API’s source code or architecture.
• Employ the API for high-risk activities where system failures could result in harm (e.g., medical, transportation, or critical infrastructure services).
• Engage in cryptocurrency mining, data scraping, or other activities unrelated to the intended API usage.
• Collect, store, or transmit personal data without the data owner's explicit consent.

4. Termination and API Access Revocation

• Upon termination of the Agreement or cancellation of API access, users must:
• Immediately cease all API usage.
• Delete all data, content, or information obtained via the API.
• Refrain from further interactions with IXXO’s API services.

IXXO reserves the right to suspend or revoke API access if a user violates these terms, abuses the system, or poses security risks.