Users of the iScriba API ("iScriba") application programming interface ("API") are required to comply with Vaxande's Terms of Service, API License Agreement and the terms and conditions of this Policy.
1. GENERAL
- Your use of the API, including the collection, use, maintenance and disclosure of user data shall comply with all applicable laws, rules and regulations and the terms of this Policy, and any advertising, marketing, privacy, or other self-regulatory code(s) applicable to your industry.
- You must not take any action that constitutes unauthorized or unsolicited advertising, junk or bulk e-mail.
- Each of your applications and websites that use the API ("applications and/or websites") must prominently include the following statement: "This [application/service] uses the iScriba® application programming interface but is not endorsed or certified by NRD Solutions SAS."
2. AUTHORIZATION
- You must take commercially reasonable steps, compliant with applicable laws, rules and regulations, to protect all data you collect through the API or that users submit to the iScriba service through your application and/or website ("iScriba Data") and your authentication key from unauthorized use, disclosure or access.
- You must not give your authentication key to another party.
- Vaxande may revoke your authentication credentials at any time, for any reason or no reason, with or without notice, and without liability to you or any other person.
- You must notify us immediately in the event of any unauthorized access to iScriba Data, your authentication key, and/or your application and/or website.
- If your application and/or website authenticates iScriba service users:
- You must not include functionality in your application and/or website that requests or collects iScriba username or passwords, and you may only permit users to log in via OAuth2.
- Your application and/or website must provide a link to the iScriba service settings page where the user can disconnect your application and/or website from the iScriba service.
3. ACCESS/USE
- You will only request the iScriba Data you need to operate your application and/or website and must make no further use of it and delete it when your application and/or website has no such further use for it, including, without limitation, when a user has withdrawn consent.
- Vaxande expressly reserves the right to limit the number and/or frequency of API requests in its sole discretion. If Vaxande reasonably believes that you have attempted to exceed or circumvent the rate limits (including, without limitation, through mass-registering of applications), your ability to use the API may be temporarily or permanently blocked, with or without notice, and without Vaxande liability to you or any other person.
- If your application and/or website requires or permits the transfer of user information outside of the user’s home country (including transfers to Vaxande's servers, which are in Europe), you must ensure that such transfer complies with applicable laws.
- If your application and/or website collects any information about iScriba service users or submits any user information to iScriba, whether acting as a user of your application and/or website or indirectly:
- You must obtain affirmative consent from the user who provided the data before using it for any purpose other than displaying it back to that user on your application and/or website.
- You must obtain affirmative consent from a user before you post any information on their behalf on your application and/or website, the iScriba service or through any third party service (including but not limited to Twitter or Facebook).
- Any information you submit, upload, post, create, or add to the iScriba service through your use of the API (including, without limitation, the use by users of your application and/or website) shall be deemed a User Submission (as defined in the Terms of Service).
- Access to the API is currently provided for free, but Vaxande reserves the right to charge for access to the API in the future, at its sole discretion. If we do charge a fee for using the API or any feature thereof, you do not have any obligation to continue to use the API or the applicable feature.
4. RETENTION
- Your application and/or website must offer a simple means for users to disable your application and/or website, upon which disabling, you shall permanently delete all data of such user.
- You may cache data you receive through use of the API in order to improve your application's and/or website's user experience, but you should try to keep the data up to date and must delete all old data. This permission does not give you any rights to cached data. For clarity, and without limitation,
- You may not cache or store any iScriba Data for more than 30 days.
- If you stop using the API or we disable your application and/or website, you must delete all iScriba Data.
- You must delete all data concerning a user that you receive from the API if the user asks you to do so, and you must provide a simple and easily accessible mechanism for users to make such a request. We may require you to delete data you receive from the API if you violate our terms. In the event that we do, we will have no liability to you or any other person.
5. NO TRANSFER
- You will not directly or indirectly transfer any iScriba Data, including user data or iScriba user IDs, to (or use such data in connection with) any ad network, ad exchange, data broker, or other advertising or monetization related toolset, even if a user consents to such transfer or use. By "indirectly," we mean you cannot, for example, transfer data to a third party who then transfers the data to an ad network. By "any iScriba Data," we mean all data obtained through use of the API, including aggregate, anonymous or derivative data.
- You will not sell, rent, or transfer any iScriba Data. If you are acquired by or merge with a third party, you may continue to use user data within your application and/or website, but you may not transfer data outside your application and/or website.
6. PRIVACY POLICY
- If you collect, use, store or disclose any iScriba Data:
- You must provide a privacy policy to users of your application and/or website that clearly discloses how you collect, use, store and disclose user data, including that:
- you receive and use iScriba service user data, including a description of the categories of user data received and how you use and disclose it;
- you share user data with iScriba, for use by Vaxande for its own purposes; and
- the user may read the iScriba Privacy Policy
- You must clearly and conspicuously present your privacy policy to each user at the point of application and/or download, installation, authorization or first-run, and you must also make the policy available from the application user interface or from the home page of your website.
7. TRADEMARKS
- Your application and/or website must not:
- Use business names and/or logos in a manner that can mislead, confuse or deceive users (e.g., do not copy the look and feel of the iScriba service);
- Confuse or mislead users about the source or purpose of your application and/or website;
- Impersonate or facilitate impersonation of others in a manner that can mislead, confuse or deceive users.
- You must not express or imply any affiliation or relationship with or endorsement by us.
- If your application and/or website displays any iScriba logos or trademarks, you must prominently include the following statement: "All of the iScriba® logos (including all badges) and trademarks displayed on this [application/service] are the property of NRD Solutions SAS".
Last updated on October 25, 2015.