API & Developer Terms

1. Purpose

These API and Developer Terms govern use of Align APIs, SDKs, embed tools, sandbox environments, developer documentation, webhooks, and related developer services.

2. API Access

Align may issue live and sandbox API keys. Customer is responsible for safeguarding keys and using scopes that reflect least privilege.

Align may revoke, rotate, suspend, or limit keys when necessary for security, abuse prevention, service integrity, non-payment, or breach of the Agreement.

3. Sandbox and Live Environments

Sandbox environments are for testing and development. Customer must not represent sandbox output as production evidence unless expressly permitted by Documentation.

Customer must use live credentials only for production workflows and must ensure that test data is not sent to live clients or contacts by mistake.

4. Developer Responsibilities

• Use the APIs only according to Documentation.
• Implement reasonable error handling, retry logic, idempotency, and webhook deduplication.
• Verify webhook signatures where available.
• Avoid exposing keys or secrets in client-side code, logs, repositories, screenshots, tickets, or support messages.
• Maintain accurate contact information for security and operational notices.
• Promptly report suspected credential compromise.
• Comply with applicable privacy, security, and consumer protection laws.

5. Rate Limits and Fair Use

Align may apply rate limits, quotas, concurrency limits, payload limits, timeout limits, and other technical controls. Align may change limits to protect security, reliability, or platform performance.

6. Webhooks

Customer is responsible for maintaining webhook endpoint availability, validating signatures, deduplicating delivery identifiers, handling retries, and ensuring that endpoint URLs do not expose secrets.

Webhook delivery is an asynchronous convenience mechanism. Customer should not rely on webhooks as the sole source of legally required notice unless Customer has validated the workflow and fallback process.

7. SDKs and Sample Code

SDKs, sample code, examples, and templates are provided for convenience. Customer is responsible for testing and validating its own implementation before production use.

8. Developer Applications

Customer is responsible for applications, integrations, websites, and services that Customer builds using Align. Customer must provide its own notices, consents, support, security, privacy compliance, and user documentation.

9. Monitoring and Logs

Align may monitor API activity for security, reliability, debugging, billing, abuse prevention, and compliance. Request logs and audit logs may include identifiers, timestamps, IP addresses, user agents, endpoint paths, status codes, and metadata.

10. Liability

API and developer use is subject to the Terms of Service liability cap. No API, SDK, sample code, sandbox feature, webhook, or documentation creates a separate warranty or separate liability pool.