TRITON API GENERAL TERMS OF USE
Account and Registration
Accepting the Terms. API Integrator may not use the APIs and may not accept the Terms if (a) API Integrator is not of legal age to form a binding contract with Triton, or (b) API Integrator is a person barred from using or receiving the APIs under the applicable laws of the United States or other countries including the country in which API Integrator is resident or from which API Integrator use the APIs.
Entity Level Acceptance. If API Integrator is an individual using the APIs on behalf of an entity, API Integrator represents and warrants that API Integrator has authority to bind that entity to the Terms and by accepting the Terms, API Integrator is doing so on behalf of that entity (and all references to “API Integrator” in the Terms refer to that entity).
Registration. In order to access certain APIs API Integrator may be required to provide certain information (such as identification or contact details) as part of the registration process for the APIs, or as part of API Integrator’s continued use of the APIs. Any registration information API Integrator give to Triton will always be accurate and up to date and API Integrator will inform Triton promptly of any updates.
Subsidiaries and Affiliates. Triton has subsidiaries and affiliated legal entities around the world. These companies may provide the APIs to API Integrator on behalf of Triton and the Terms will also govern API Integrator’s relationship with these companies.
Using Triton’s APIs
API Integrator’s End Users. API Integrator will require API Integrator’s end users to comply with (and not knowingly enable them to violate) applicable law, regulation, and the Terms.
Compliance with Law, Third Party Rights, and Other Triton Terms of Service. API Integrator will comply with all applicable law, regulation, and third party rights (including without limitation laws regarding the import or export of data or software, privacy, and local laws). API Integrator will not use the APIs to encourage or promote illegal activity or violation of third party rights. API Integrator will not violate any other terms of service with Triton (or its affiliates).
Permitted Access. API Integrator will only access (or attempt to access) an API by the means described in the documentation of that API. If Triton assigns API Integrator developer credentials (e.g. client IDs), API Integrator must use them with the applicable APIs. API Integrator will not misrepresent or mask either API Integrator’s identity or API Integrator’s websites and applications (“API Client(s)”) identity when using the APIs or developer accounts.
API Limitations. Triton sets and enforces limits on API Integrator’s use of the APIs (e.g. limiting the number of API requests that API Integrator may make or the number of users API Integrator may serve), in Triton’s sole discretion. API Integrator agrees to, and will not attempt to circumvent, such limitations documented with each API. If API Integrator would like to use any API beyond these limits, API Integrator must obtain Triton’s express consent (and Triton may decline such request or condition acceptance on API Integrator’s agreement to additional terms and/or charges for that use). To seek such approval, contact the relevant Triton API team for information.
Open Source Software. Some of the software required by or included in Triton’s APIs may be offered under an open source license. Open source software licenses constitute separate written agreements. For certain APIs, open source software is listed in the documentation. To the limited extent the open source software license expressly supersedes the Terms, the open source license instead sets forth API Integrator’s agreement with Triton for the applicable open source software.
Communication with Triton. Triton may send API Integrator certain communications in connection with API Integrator’s use of the APIs. API Integrator shall review the applicable API documentation for information about opting out of certain types of communication.
Feedback. If API Integrator provides feedback or suggestions about Triton’s APIs, then Triton may use such information without obligation to API Integrator.
Non-Exclusivity. The Terms are non-exclusive. API Integrator acknowledge that Triton may develop products or services that may compete with the API Clients or any other products or services.
API Integrator’s API Clients
API Clients and Monitoring. The APIs are designed to help API Integrator enhance API Integrator’s API Clients. API INTEGRATOR AGREES THAT TRITON MAY MONITOR USE OF THE APIS TO ENSURE QUALITY, IMPROVE TRITON PRODUCTS AND SERVICES, AND VERIFY API INTEGRATOR’S COMPLIANCE WITH THE TERMS. This monitoring may include Triton accessing and using API Integrator’s API Client, for example to identify security issues that could affect Triton or its users. API Integrator will not interfere with this monitoring. Triton may use any technical means to overcome such interference. Triton may suspend access to the APIs by API Integrator or API Integrator’s API Client without notice if Triton reasonably believes that API Integrator is in violation of the Terms.
Security. API Integrator will use commercially reasonable efforts to protect user information collected by API Integrator’s API Client, including Personal Data, from unauthorized access or use and will promptly report to API Integrator’s users any unauthorized access or use of such information to the extent required by applicable law.
Ownership. Triton does not acquire ownership in API Integrator’s API Clients, and by using Triton’s APIs, API Integrator does not acquire ownership of any rights in Triton’s APIs or the content that is accessed through Triton’s APIs.
User Privacy and API Clients.
API Integrator will comply with (1) all applicable Data Protection Laws and regulations including those applying to Personal Data and (2) the End User Data Policy attached here as Exhibit A, which governs API Integrator’s use of the APIs when API Integrator requests access to data (“End User Data”) from one or more Joint Customers’ end users (“End User”). API Integrator will provide and adhere to a privacy policy for API Integrator’s API Client that clearly and accurately describes to users of API Integrator’s API Client what user information API Integrator collects and how API Integrator uses and shares such information (including for advertising) with Triton and third parties.
Unless otherwise instructed by a Joint Customer, Triton and API Integrator agree that API Integrator will not extract any Personal Data from an API for any jurisdiction where a data processing addendum is required under applicable Data Protection Laws until such data processing addendum is entered into between Triton and API Integrator. As such, if Personal Data is provided to API Integrator for the business purposes set forth in the agreement(s) between Triton and API Integrator, API Integrator shall process Personal Data only as necessary for the purposes of such agreement(s), and shall not, under any circumstances, collect, use, retain, access, share, transfer, or otherwise process Personal Data for any purpose not related to such agreement(s).
Prohibitions and Confidentiality
API Prohibitions
When using the APIs, API Integrator may not (or allow those acting on API Integrator’s behalf to):
Sublicense an API for use by a third party. Consequently, API Integrator will not create an API Client that functions substantially the same as the APIs and offer it for use by third parties.
Perform an action with the intent of introducing to Triton products and services any viruses, worms, defects, Trojan horses, malware, or any items of a destructive nature.
Defame, abuse, harass, stalk, or threaten others.
Interfere with or disrupt the APIs or the servers or networks providing the APIs.
Promote or facilitate unlawful online gambling or disruptive commercial messages or advertisements.
Reverse engineer or attempt to extract the source code from any API or any related software, except to the extent that this restriction is expressly prohibited by applicable law.
Use the APIs for any activities where the use or failure of the APIs could lead to death, personal injury, or environmental damage (such as the operation of nuclear facilities, air traffic control, or life support systems).
Use the APIs to process or store any data that is subject to the International Traffic in Arms Regulations maintained by the U.S. Department of State.
Remove, obscure, or alter any Triton terms of service or any links to or notices of those terms.
Unless otherwise specified in writing by Triton, Triton does not intend use of the APIs to create obligations under the Health Insurance Portability and Accountability Act, as amended (“HIPAA”), and makes no representations that the APIs satisfy HIPAA requirements. If API Integrator is (or become) a “covered entity” or “business associate” as defined in HIPAA, API Integrator will not use the APIs for any purpose or in any manner involving transmitting protected health information to Triton unless API Integrator has received prior written consent to such use from Triton.
Confidential Matters
Developer credentials (such as passwords, keys, and client IDs) are intended to be used by API Integrator and identify API Integrator’s API Client. API Integrator will keep API Integrator’s credentials confidential and make reasonable efforts to prevent and discourage other API Clients from using API Integrator’s credentials. Developer credentials may not be embedded in open source projects.
Triton’s communications to API Integrator and Triton’s APIs may contain Triton confidential information. Triton confidential information includes any materials, communications, and information that are marked confidential or that would normally be considered confidential under the circumstances. If API Integrator receive any such information, then API Integrator will not disclose it to any third party without Triton’s prior written consent. Triton confidential information does not include information that API Integrator independently developed, that was rightfully given to API Integrator by a third party without confidentiality obligation, or that becomes public through no fault of API Integrator’s own. API Integrator may disclose Triton confidential information when compelled to do so by law if API Integrator provides Triton reasonable prior notice, unless a court orders that Triton not receive notice.
Content
Content Accessible through Triton’s APIs. Triton’s APIs may contain some third party content (such as text, images, videos, audio, or software). This content is the sole responsibility of the person that makes it available. Triton may sometimes review content to determine whether it is illegal or violates Triton’s policies or the Terms, and Triton may remove or refuse to display content. Finally, content accessible through Triton’s APIs may be subject to intellectual property rights, and, if so, API Integrator may not use it unless API Integrator is licensed to do so by the owner of that content or are otherwise permitted by law. API Integrator’s access to the content provided by the API may be restricted, limited, or filtered in accordance with applicable law, regulation, and policy.
Submission of Content. Some of Triton’s APIs may allow the submission of content. Triton does not acquire any ownership of any intellectual property rights in the content that API Integrator submit to Triton’s APIs through API Integrator’s API Client, except as expressly provided in the Terms. For the sole purpose of enabling Triton to provide, secure, and improve the APIs (and the related service(s)) and only in accordance with the applicable Triton privacy policies, API Integrator give Triton a perpetual, irrevocable, worldwide, sublicensable, royalty-free, and non-exclusive license to Use content submitted, posted, or displayed to or from the APIs through API Integrator’s API Client. “Use” means use, host, store, modify, communicate, and publish. Before API Integrator submit content to Triton’s APIs through API Integrator’s API Client, API Integrator will ensure that API Integrator has the necessary rights (including the necessary rights from API Integrator’s end users) to grant Triton the license.
Retrieval of content. When a user’s non-public content is obtained through the APIs, API Integrator may not expose that content to other users or to third parties without explicit opt-in consent from that user.
Data Portability. Triton supports data portability. For as long as API Integrator use or store any user data that API Integrator obtained through the APIs, API Integrator agrees to enable API Integrator’s users to export their equivalent data to other services or applications of their choice in a way that’s substantially as fast and easy as exporting such data from Triton products and services, subject to applicable laws, and API Integrator agrees that API Integrator will not make that data available to third parties who do not also abide by this obligation.
Prohibitions on Content.Unless expressly permitted by the content owner or by applicable law, API Integrator shall not, and shall not permit API Integrator’s end users or others acting on API Integrator’s behalf to, do the following with content returned from the APIs:
Scrape, build databases, or otherwise create permanent copies of such content, or keep cached copies longer than permitted by the cache header;
Copy, translate, modify, create a derivative work of, sell, lease, lend, convey, distribute, publicly display, or sublicense to any third party;
Misrepresent the source or ownership; or
Remove, obscure, or alter any copyright, trademark, or other proprietary rights notices; or falsify or delete any author attributions, legal notices, or other labels of the origin or source of material.
Brand Features; Attribution
Brand Features. “Brand Features” is defined as the trade names, trademarks, service marks, logos, domain names, and other distinctive brand features of each party. Except where expressly stated, the Terms do not grant either party any right, title, or interest in or to the other party’s Brand Features. All use by API Integrator of Triton’s Brand Features (including any goodwill associated therewith) will inure to the benefit of Triton.
Attribution. API Integrator agrees to display any attribution(s) required by Triton as described in the documentation for the API. Triton hereby grants to API Integrator a nontransferable, nonsublicenseable, nonexclusive license while the Terms are in effect to display Triton’s Brand Features for the purpose of promoting or advertising that API Integrator use the APIs. API Integrator must only use the Triton Brand Features in accordance with the Terms and for the purpose of fulfilling API Integrator’s obligations under this Section. In using Triton’s Brand Features, API Integrator must follow and Triton Brand Features use guidelines provided by Triton to API Integrator from time to time (the “Triton Brand Features Use Guidelines”). API Integrator understand and agree that Triton has the sole discretion to determine whether API Integrator’s attribution(s) and use of Triton’s Brand Features are in accordance with the above requirements and guidelines.
Publicity. API Integrator will not make any statement regarding API Integrator’s use of an API which suggests partnership with, sponsorship by, or endorsement by Triton without Triton’s prior written approval.
Promotional and Marketing Use. In the course of promoting, marketing, or demonstrating the APIs API Integrator is using and the associated Triton products, Triton may produce and distribute incidental depictions, including screenshots, video, or other content from API Integrator’s API Client, and may use API Integrator’s company or product name. API Integrator grant Triton all necessary rights for the above purposes.
Privacy and Copyright Protection
Triton Privacy Policies. By using Triton’s APIs, Triton may use submitted information in accordance with Triton’s privacy policies.
Triton DMCA Policy. Triton may provide information to help copyright holders manage their intellectual property online, but Triton does not determine whether something is being used legally or not without their input. Triton responds to notices of alleged copyright infringement and terminate accounts of repeat infringers according to the process set out in the U.S. Digital Millennium Copyright Act. If API Integrator thinks somebody is violating API Integrator’s copyrights, API Integrator can notify Triton.
Termination
Termination. API Integrator may stop using Triton’s APIs at any time with or without notice. Further, if API Integrator want to terminate the Terms, API Integrator must provide Triton with prior written notice and upon termination, cease API Integrator’s use of the applicable APIs. Triton reserves the right to terminate the Terms with API Integrator or discontinue the APIs or any portion or feature or API Integrator’s access thereto for any reason and at any time without liability or other obligation to API Integrator.
API Integrator’s Obligations Post-Termination. Upon any termination of the Terms or discontinuation of API Integrator’s access to an API, API Integrator will immediately stop using the API, cease all use of the Triton Brand Features, and delete any cached or stored content that was permitted by the cache header under Section 5. Triton may independently communicate with any account owner whose account(s) are associated with API Integrator’s API Client and developer credentials to provide notice of the termination of API Integrator’s right to use an API.
Surviving Provisions. When the Terms come to an end, those terms that by their nature are intended to continue indefinitely will continue to apply, including but not limited to: Sections 4, 5, 8, 9 and 10.
Liability for Triton’s APIs
WARRANTIES
EXCEPT AS EXPRESSLY SET OUT IN THE TERMS, NEITHER TRITON NOR ITS SUPPLIERS OR DISTRIBUTORS MAKE ANY SPECIFIC PROMISES ABOUT THE APIS. FOR EXAMPLE, TRITON DOES NOT MAKE ANY COMMITMENTS ABOUT THE CONTENT ACCESSED THROUGH THE APIS, THE SPECIFIC FUNCTIONS OF THE APIS, OR THEIR RELIABILITY, AVAILABILITY, OR ABILITY TO MEET API INTEGRATOR’S NEEDS. TRITON PROVIDES THE APIS “AS IS”.
SOME JURISDICTIONS PROVIDE FOR CERTAIN WARRANTIES, LIKE THE IMPLIED WARRANTY OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND NON-INFRINGEMENT. EXCEPT AS EXPRESSLY PROVIDED FOR IN THE TERMS, TO THE EXTENT PERMITTED BY LAW, TRITON EXCLUDES ALL WARRANTIES, GUARANTEES, CONDITIONS, REPRESENTATIONS, AND UNDERTAKINGS.
LIMITATION OF LIABILITY
WHEN PERMITTED BY LAW, TRITON, AND TRITON’S SUPPLIERS AND DISTRIBUTORS, WILL NOT BE RESPONSIBLE FOR LOST PROFITS, REVENUES, OR DATA; FINANCIAL LOSSES; OR INDIRECT, SPECIAL, CONSEQUENTIAL, EXEMPLARY, OR PUNITIVE DAMAGES.
TO THE EXTENT PERMITTED BY LAW, THE TOTAL LIABILITY OF TRITON, AND ITS SUPPLIERS AND DISTRIBUTORS, FOR ANY CLAIM UNDER THE TERMS, INCLUDING FOR ANY IMPLIED WARRANTIES, IS LIMITED TO THE AMOUNT API INTEGRATOR PAID US TO USE THE APPLICABLE APIS (OR, IF TRITON CHOOSES, TO SUPPLYING API INTEGRATOR THE APIS AGAIN) DURING THE SIX MONTHS PRIOR TO THE EVENT GIVING RISE TO THE LIABILITY.
IN ALL CASES, TRITON, AND ITS SUPPLIERS AND DISTRIBUTORS, WILL NOT BE LIABLE FOR ANY EXPENSE, LOSS, OR DAMAGE THAT IS NOT REASONABLY FORESEEABLE.
Indemnification.Unless prohibited by applicable law, if API Integrator is a business, API Integrator will defend and indemnify Triton, and its affiliates, directors, officers, employees, and users, against all liabilities, damages, losses, costs, fees (including legal fees), and expenses relating to any allegation or third-party legal proceeding to the extent arising from:
API Integrator’s misuse or API Integrator’s end user’s misuse of the APIs;
API Integrator’s violation or API Integrator’s end user’s violation of the Terms; or
any content or data routed into or used with the APIs by API Integrator, those acting on API Integrator’s behalf, or API Integrator’s end users.
General Provisions
Modification. Triton may modify the Terms or any portion to, for example, reflect changes to the law or changes to Triton’s APIs. API Integrator should look at the Terms regularly. Triton will post notice of modifications to the Terms within the documentation of each applicable API, and/or to this website. Changes will not apply retroactively and will become effective no sooner than 30 days after they are posted. But changes addressing new functions for an API or changes made for legal reasons will be effective immediately. If API Integrator does not agree to the modified Terms for an API, API Integrator should discontinue API Integrator’s use of that API. API Integrator’s continued use of the API constitutes API Integrator’s acceptance of the modified Terms.
U.S. Federal Agency Entities. The APIs were developed solely at private expense and are commercial computer software and related documentation within the meaning of the applicable U.S. Federal Acquisition Regulation and agency supplements thereto.
General Legal Terms. Triton and API Integrator each agree to contract in the English language. If Triton provides a translation of the Terms, Triton do so for API Integrator’s convenience only and the English Terms will solely govern Triton’s relationship. The Terms do not create any third party beneficiary rights or any agency, partnership, or joint venture. Nothing in the Terms will limit either party’s ability to seek injunctive relief. Triton is not liable for failure or delay in performance to the extent caused by circumstances beyond Triton’s reasonable control. If API Integrator does not comply with the Terms, and Triton does not take action right away, this does not mean that Triton is giving up any rights that it may have (such as taking action in the future). If it turns out that a particular term is not enforceable, this will not affect any other terms. The Terms are the entire agreement between API Integrator and Triton relating to its subject and supersede any prior or contemporaneous agreements on that subject. For information about how to contact Triton, API Integrator shall visit Triton’s contact page.
Governing Law.
Non-Government API Integrators. Except as set forth below: (i) the laws of California, U.S.A., excluding California’s conflict of laws rules, will apply to any disputes arising out of or related to the Terms or the APIs and (ii) ALL CLAIMS ARISING OUT OF OR RELATING TO THE TERMS OR THE APIS WILL BE LITIGATED EXCLUSIVELY IN THE FEDERAL OR STATE COURTS OF LOS ANGELES COUNTY, CALIFORNIA, USA, AND API INTEGRATOR AND TRITON CONSENT TO PERSONAL JURISDICTION IN THOSE COURTS.
Government API Integrators.
If API Integrator is accepting the Terms on behalf of a United States federal government entity, then the following applies instead of the paragraph above: the laws of the United States of America, excluding its conflict of laws rules, will apply to any disputes arising out of or related to the Terms or the APIs. Solely to the extent permitted by United States Federal law: (i) the laws of the State of California (excluding California’s conflict of laws rules) will apply in the absence of applicable federal law; and (ii) FOR ALL CLAIMS ARISING OUT OF OR RELATING TO THE TERMS OR THE APIS, THE PARTIES CONSENT TO PERSONAL JURISDICTION IN, AND THE EXCLUSIVE VENUE OF, THE COURTS IN LOS ANGELES COUNTY, CALIFORNIA.
If API Integrator is accepting the Terms on behalf of a United States city, county, or state government entity, then the following applies instead of the paragraph above: the parties agree to remain silent regarding governing law and venue.
Exhibit A
End User Data Policy
Accurately represent API Integrator’s identity and intent
If API Integrator wishes to access End User Data, API Integrator must provide End Users and Triton with clear and accurate information regarding API Integrator’s use of the APIs. This includes, without limitation, requirements to accurately represent:
Who is requesting End User Data? All permission requests must accurately represent the identity of the application that seeks access to End User Data. If API Integrator has obtained authorized client credentials to access APIs, keep these credentials confidential.
What End User Data is API Integrator requesting? API Integrator must provide clear and accurate information explaining the types of End User Data being requested. In addition, if API Integrator plan to access or use a type of End User Data that was not originally disclosed in API Integrator’s privacy policy (or in-product disclosures) when an End User initially authorized access, API Integrator must update API Integrator’s privacy policy and prompt the End User to consent to any changes before API Integrator may access that End User Data.
Why is API Integrator requesting End User Data? Be honest and transparent with End Users when API Integrator explains the purpose for which API Integrator’s application requests End User Data. If API Integrator’s application requests End User Data for one reason but the End User Data will also be utilized for a secondary purpose, API Integrator must notify End Users of both use cases. As a general matter, End Users should be able to readily understand the value of providing the End User Data that API Integrator’s application requests, as well as the consequences of sharing that End User Data with API Integrator’s application.
Be transparent about the End User Data API Integrator access with clear and prominent privacy disclosures
API Integrator must publish a privacy policy that fully documents how API Integrator’s application interacts with End User Data.
API Integrator’s Privacy Policy and all in-product privacy notifications should be accurate, comprehensive, and easily accessible. API Integrator’s privacy policy and in-product privacy notifications must thoroughly disclose the manner in which API Integrator’s application accesses, uses, stores, or shares End User Data. API Integrator’s use of End User Data must be limited to the practices explicitly disclosed in API Integrator’s published privacy policy, but API Integrator should consider the use of additional in- product notifications to ensure that End Users understand how API Integrator’s application will handle End User Data. If API Integrator changes the way API Integrator’s application uses End User Data, API Integrator must notify End Users and prompt them to consent to an updated privacy policy before API Integrator makes use of End User Data in a new way or for a different purpose than originally disclosed.
Disclosures about End User Data use should be prominent and timely. API Integrator’s privacy policy and any in-product notifications regarding End User Data use should be prominently displayed in API Integrator’s application interface so that End Users can find this information easily. Where possible, disclosures about End User Data use should be timely and shown in context.
Request the minimum relevant permissions
Permission requests should make sense to End Users, and should be limited to the critical information necessary to implement API Integrator’s application.
Do not request access to information that API Integrator does not need. Only request access to the permissions necessary to implement API Integrator’s application's features or services. If API Integrator’s application does not require access to specific permissions, then API Integrator must not request access to these permissions. Do not attempt to "future proof" API Integrator’s access to End User Data by requesting access to information that might benefit services or features that have not yet been implemented.
Request permissions in context where possible. Only request access to End User Data in context (via incremental auth) whenever API Integrator can, so that End Users understand why API Integrator need the End User Data.
Deceptive or unauthorized use of APIs is prohibited
API Integrator is strictly prohibited from engaging in any activity that may deceive End Users or Triton about API Integrator’s use of APIs.
This includes without limitation the following requirements:
Do not misrepresent what End User Data is collected or what API Integrator do with End User Data. Be up front with End Users so that they can make an informed decision to grant authorization. API Integrator must disclose all End User Data that API Integrator access, use, store, delete, or share, as well as any actions API Integrator take on an End User's behalf.
API Integrator is not permitted to access, aggregate, or analyze End User Data if the End User Data will be displayed, sold, or otherwise distributed to a third party conducting surveillance.
Overall there should be no surprises for End Users: hidden features, services, or actions that are inconsistent with the marketed purpose of API Integrator’s application may lead Triton to suspend API Integrator’s ability to access APIs.
Do not mislead Triton about an application's operating environment. API Integrator must accurately represent the environment in which the authentication page appears.
Do not use undocumented APIs without express permission. Do not reverse engineer undocumented APIs or otherwise attempt to derive or use the underlying source code of undocumented APIs. API Integrator may only access End User Data from APIs according to the means stipulated in the official documentation of that API Service, as provided by Triton.
Do not make false or misleading statements about any entities that have allegedly authorized or managed API Integrator’s application. API Integrator must accurately represent the company, organization, or other authority that manages API Integrator’s application. Making false representations about client credentials to Triton or End Users is grounds for suspension.
Child-directed apps
The Children's Online Privacy Protection Act, or COPPA, applies to websites, apps, and services directed to children under the age of 13 and general audience apps, websites, or services with End Users known to be under the age of 13. While child-directed apps may use some Triton services, developers are responsible for using these services according to their obligations under the law. Please review the FTC's guidance on COPPA (including information about the differences between mixed audience apps and apps directed primarily to children from the FTC's website) and consult with API Integrator’s own legal counsel.
Child-directed apps: If API Integrator’s application is directed primarily at children, it should not use any API that accesses End User Data associated with a Triton Account.
Mixed audience apps: Applications that are mixed audience shouldn't require End Users to sign in to a Triton account.
Maintain a secure operating environment
API Integrator shall ensure all End User Data is secure in transit and at rest. Take reasonable and appropriate steps to protect all applications or systems that make use of APIs and any End User Data derived from it against unauthorized or unlawful access, use, destruction, loss, alteration, or disclosure.
Additional Requirements for Specific API Scopes
Limited Use: API Integrator’s use of End User Data obtained via the product's specified scopes must comply with the below requirements. These requirements apply to the raw End User Data obtained from the scopes and End User Data aggregated, anonymized, or derived from them.
Limit API Integrator’s use of End User Data to providing or improving End User-facing features that are prominent in the requesting application's End User interface;
Transfers of End User Data are not allowed, except:
To provide or improve API Integrator’s appropriate access or End User-facing features that are visible and prominent in the requesting application's End User interface and only with the End User's consent;
For security purposes (for example, investigating abuse);
To comply with applicable laws; or,
As part of a merger, acquisition, or sale of assets of the developer after obtaining explicit prior consent from the End User.
Do not allow humans to read the End User Data, unless:
API Integrator first obtained the End User's affirmative agreement to view specific messages, files, or other End User Data, with the limited exception of use cases approved by Triton under additional terms applicable to the Nest Device Access program;
It is necessary for security purposes (for example, investigating a bug or abuse);
It is necessary to comply with applicable law; or
The End User Data (including derivations) is aggregated and used for internal operations in accordance with applicable privacy and other jurisdictional legal requirements.
All other transfers, uses, or sales of End User Data are prohibited, including:
Transferring or selling End User Data to third parties like advertising platforms, data brokers, or any information resellers.
Transferring, selling, or using End User Data for serving ads, including retargeting, personalized or interest-based advertising.
Transferring, selling, or using End User Data to determine credit-worthiness or for lending purposes.
API Integrator must ensure that API Integrator’s employees, agents, contractors, and successors comply with this API Integrator Data Policy.
Enforcement
API Integrator must access APIs in accordance with the Terms. If API Integrator is found to be out of compliance with the Terms, this End User Data Policy, or any Triton product policies that are applicable to the APIs API Integrator is using, Triton may revoke or suspend API Integrator’s access to APIs and other Triton products and services if API Integrator is found in violation of other product policies, terms of service, or other guidelines. API Integrator’s access to APIs may also be revoked if API Integrator’s application enables end-End Users or other parties to violate the Triton APIs Terms of Service and/or Triton policies.