1. API Access
These API Terms govern your access to and use of the Masterlinq Application Programming Interface ("API"). These terms supplement our Platform Terms of Service and Acceptable Use Policy.
The Masterlinq API allows authorized developers to integrate with our platform programmatically. API access is available to:
- Retailers: Integrate inventory, orders, and product data with external systems
- Suppliers: Sync product catalogs, inventory, and fulfillment data
- Partners: Build integrations and applications for Masterlinq users
By accessing or using our API, you agree to these API Terms. If you do not agree, you may not use the API.
2. Authentication
All API requests must be authenticated using secure credentials:
- API keys are issued through your Masterlinq dashboard
- Each API key is associated with specific permissions and rate limits
- You may generate multiple keys for different applications or environments
- OAuth 2.0 is available for applications acting on behalf of users
Security Requirements:
- API keys must be kept confidential and stored securely
- Never expose API keys in client-side code, public repositories, or logs
- Use environment variables or secure secret management systems
- Rotate API keys periodically and immediately if compromised
- Report any suspected key compromise to security@masterlinq.io
You are responsible for all API activity using your credentials. We may suspend or revoke credentials if we detect suspicious activity or security concerns.
3. Rate Limits
API requests are subject to rate limits to ensure fair usage and platform stability:
- Standard tier: 100 requests per minute, 10,000 requests per day
- Professional tier: 500 requests per minute, 50,000 requests per day
- Enterprise tier: Custom limits based on your agreement
- Burst allowance: Short bursts above the per-minute limit may be allowed
Rate Limit Headers:
API responses include headers indicating your current rate limit status:
- X-RateLimit-Limit: Maximum requests allowed in the current window
- X-RateLimit-Remaining: Requests remaining in the current window
- X-RateLimit-Reset: Unix timestamp when the rate limit resets
Requests exceeding rate limits receive a 429 (Too Many Requests) response. Implement exponential backoff and respect the Retry-After header.
4. Permitted Uses
The Masterlinq API may be used for the following purposes:
- Synchronizing product catalogs and inventory with external systems
- Importing and exporting order data
- Integrating with point-of-sale (POS) systems
- Building custom reporting and analytics dashboards
- Automating fulfillment workflows
- Connecting with accounting and ERP software
- Developing applications that enhance the Masterlinq experience
All API use must comply with our Platform Terms of Service, Acceptable Use Policy, and applicable laws.
5. Restrictions
The following uses of the API are prohibited:
- Scraping or bulk downloading data for purposes other than your own account management
- Building competing products or services using our API
- Reselling or redistributing API access without authorization
- Circumventing rate limits, authentication, or security measures
- Accessing data belonging to other users without authorization
- Using the API in ways that degrade platform performance or availability
- Reverse engineering, decompiling, or deriving source code from the API
- Using the API for any illegal purpose or to violate third-party rights
We may monitor API usage for compliance and security. Violations may result in immediate suspension of API access without notice.
6. Data Handling
When accessing data through the API, you must handle it responsibly:
- Only access data necessary for your stated purpose
- Store data securely using industry-standard encryption
- Delete data when it is no longer needed or upon user request
- Do not share data with third parties without appropriate authorization
- Comply with all applicable privacy laws (GDPR, CCPA, etc.)
Personal Data:
If you access personal data (customer names, emails, addresses) through the API:
- You act as a data processor on behalf of the data controller (Retailer or Supplier)
- You must enter into a Data Processing Agreement if required
- You must implement appropriate technical and organizational security measures
- You must notify us immediately of any data breach
See our Privacy Policy and Data Processing Agreement for more information.
7. Intellectual Property
The Masterlinq API and all related documentation, code samples, and materials are owned by Masterlinq and protected by intellectual property laws.
- We grant you a limited, non-exclusive, revocable license to use the API
- This license is solely for the purposes described in these terms
- You may not sublicense, sell, or transfer your API access
- All rights not expressly granted are reserved by Masterlinq
Your Applications:
- You retain ownership of applications you build using the API
- You grant Masterlinq a license to use your application name and logo for promotional purposes
- You may not use Masterlinq's name, logo, or trademarks without permission
- Do not imply endorsement or partnership without written agreement
8. Disclaimer
THE API IS PROVIDED "AS IS" AND "AS AVAILABLE" WITHOUT WARRANTIES OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO:
- Warranties of merchantability or fitness for a particular purpose
- Warranties of non-infringement
- Warranties that the API will be uninterrupted, error-free, or secure
- Warranties regarding the accuracy or completeness of data
We may modify, suspend, or discontinue the API (or any part of it) at any time with or without notice. We will make reasonable efforts to provide advance notice of breaking changes.
You are solely responsible for your use of the API and any applications you build. Masterlinq is not liable for any damages arising from API use, including but not limited to data loss, business interruption, or third-party claims.
9. Term and Termination
Your API access continues until terminated:
- You may stop using the API at any time by deleting your API keys
- We may suspend or terminate API access for violation of these terms
- We may terminate API access if your Masterlinq account is terminated
- We may discontinue the API entirely with 90 days notice (except for security issues)
Upon Termination:
- Your API keys are immediately revoked
- You must stop making API requests
- You must delete any cached or stored data obtained through the API (unless required by law)
- Sections on intellectual property, disclaimer, and liability survive termination
10. Contact
For questions about the API or these terms:
- Developer Support: support@masterlinq.io
- API Documentation: docs.masterlinq.io
- Security Issues: security@masterlinq.io
- General Legal: support@masterlinq.io
For partnership or enterprise API inquiries, contact support@masterlinq.io.
For other platform terms and policies, visit our Legal Center.