API and Developer Terms
Last updated: 12 August 2026
1. Licence and authority
Subject to these terms and the documentation, YoopCart grants a limited, revocable, non-exclusive, non-transferable licence to access approved APIs solely to build and operate an integration for authorised merchants or YoopCart services. You must have authority from each merchant whose account or data you access.
2. Credentials and access
Register API clients accurately, request only necessary scopes, keep credentials secret, rotate compromised credentials, and use supported authentication. Do not share credentials except with bound service providers acting for you. YoopCart may revoke or rotate credentials for security, legal, or policy reasons.
3. Data and privacy
Use merchant and customer data only to provide the disclosed integration, follow merchant instructions, minimise collection, apply retention limits, honour deletion and access requests, and maintain a clear privacy notice. Do not sell data, build unrelated profiles, or combine data across merchants without a lawful basis and explicit authorisation.
4. Security
Maintain appropriate access control, encryption, vulnerability management, logging, dependency security, backups, incident response, and secure development. Notify security@yoopcart.com without undue delay of compromise affecting credentials, APIs, merchants, or customers and cooperate with remediation.
5. Technical restrictions
Follow rate limits, pagination, versioning, and deprecation notices. Do not bypass limits, scrape protected interfaces, interfere with services, reverse engineer non-public components, use APIs for benchmarking without permission, misrepresent an integration as YoopCart, or reproduce a substantial part of the platform.
6. Changes and termination
APIs evolve. We will provide reasonable notice of material breaking changes when practicable, but urgent security changes may be immediate. Access may be limited or terminated for risk, breach, inactivity, or discontinuation. On termination, stop calls, delete credentials, and delete data not lawfully retained.
7. Branding, support, and contact
Use YoopCart names and marks only under published brand rules and do not imply endorsement. You are responsible for supporting your integration unless agreed otherwise. Developer and security questions may be sent to developers@yoopcart.com and security@yoopcart.com.