API Terms of Service

1. Acceptance

By using the TrustDPV API, embeddable widgets, webhooks, or any other integration tool ("the Service"), you agree to these terms. If you don't agree, don't use the Service.

2. Definitions

• "API" — any TrustDPV endpoint, including public, verified, versioned, and batch endpoints.
• "Integrator" — you, the person or organisation using the API.
• "User Data" — profile information, trust scores, and verification status retrieved through the Service.
• "API Key" — a credential issued by TrustDPV to access versioned endpoints.

3. Access & Authentication

Public endpoints are available without authentication, subject to rate limits. Versioned endpoints (/api/v1/) require a valid API key. You must keep your API key confidential and are responsible for all activity under it.

4. Rate Limits

We enforce rate limits to protect the service for all users. Limits vary by tier (free: 60/min, pro: 1,000/min, enterprise: 10,000/min). Exceeding your limit will result in 429 responses. If you need higher limits, contact us.

5. Acceptable Use

You may use the Service to:

• Display trust scores and verification badges on your platform
• Verify user trust status for marketplace safety
• Integrate TrustDPV data into your user profiles

You may NOT:

• Scrape, harvest, or bulk-collect user data beyond what the API provides
• Resell, redistribute, or sublicense TrustDPV data
• Use the Service to harass, discriminate, or harm individuals
• Misrepresent trust scores or verification status
• Attempt to reverse-engineer the trust score algorithm
• Use the Service for any unlawful purpose

6. Data Accuracy

Trust scores and verification statuses reflect data available at the time of the request. They may change at any time as users add or remove platforms and endorsements. You should not cache trust data for longer than 5 minutes and must not present stale data as current.

7. Attribution

When displaying trust data from TrustDPV, you must include visible attribution: either the TrustDPV badge/widget, a link to the user's TrustDPV profile, or a "Powered by TrustDPV" notice. You may not present the data as your own.

8. Webhooks

Webhook delivery is best-effort. We are not liable for missed deliveries, delayed notifications, or failed connections to your endpoint. You should implement polling as a fallback if real-time data is critical.

9. Service Availability

We strive for high availability but do not guarantee uptime. We may modify, suspend, or discontinue the Service (or any part) at any time. We will endeavour to provide notice of breaking changes via the /api/health endpoint and developer documentation.

10. API Versioning

Versioned endpoints (/api/v1/) represent our stable contract. We will not make breaking changes within a version. Unversioned endpoints may change and should only be used for prototyping.

11. Termination

We may revoke API keys or block access for violations of these terms. You may delete your API keys at any time from your dashboard. Upon termination, you must stop using the Service and delete any cached TrustDPV data.

12. Limitation of Liability

The Service is provided "as is" without warranty of any kind. TrustDPV is not liable for any damages arising from your use of or reliance on the Service, including but not limited to decisions made based on trust scores.

13. Changes

We may update these terms at any time. Continued use of the Service after changes constitutes acceptance. Material changes will be noted on this page with an updated effective date.

14. Contact

Questions about these terms? Contact us.