# API terms of use

These terms apply to anyone using the Nepzio API, in addition to the [Nepzio Terms & Conditions](https://nepzio.com/terms).

## Access

- A store's owners and admins decide who may use the API for their store, by making keys. A key may be used only for the store it belongs to, and only as its owner allows.
- Keep keys secret. You are responsible for what is done with keys you hold. If one may have been exposed, roll or revoke it at once.

## Data

- Use the data you read only for the purpose the store allowed, and handle shoppers' personal details as carefully as the store must: keep them safe, only as long as needed, and never sell them.
- Don't try to reach data of a store you weren't given a key for.

## Fair use

- Stay within the [rate limits](/rate-limits), and don't try to get around them, for example by spreading one integration over many keys.
- Don't use the API to send spam, to break the law, or to harm Nepzio, its merchants or their customers.

## Changes and availability

- We aim to keep the API available and to change it only as described in [Versioning](/versioning). We may change these terms; significant changes are announced in the [changelog](/changelog).
- We may suspend keys or access that break these terms or put stores or shoppers at risk.

## Security

If you find a security problem, please tell us privately (see [Security](/security)) before telling anyone else.