API & Webhooks — Acceptable Use

Rules for the developer features.

Version 1.0 — May 2026 — Schedaddle LLC

These API & Webhooks Acceptable-Use Terms (“API Terms”) govern your use of the Schedaddle REST API, API keys, and outbound webhooks (together, the “Developer Features”). They supplement and form part of the Terms of Service and the Data Processing Addendum. By generating an API key, registering a webhook endpoint, or otherwise using the Developer Features, the account owner accepts these API Terms on behalf of the store.

Eligibility

The Developer Features are available on The Full Sprint plan. We may set or adjust quotas, rate limits, and the set of available endpoints and event types at any time. Access is for your own store's data and your own integrations; you may not resell or expose the API to third parties as a standalone service.

Key & Secret Security

You are responsible for keeping API keys and webhook signing secrets confidential. In particular, you agree to:

  • Store keys and secrets securely (server-side, never in client-side code, public repositories, or shared documents).
  • Rotate or revoke a key promptly if it may have been exposed — you can do this anytime from Settings → Integrations → API & Webhooks.
  • Treat all activity authenticated by your key as your own; you are responsible for it.
  • Verify the X-Schedaddle-Signature header (HMAC-SHA256) on every webhook you receive before acting on it.

Acceptable Use

You agree not to:

  • Exceed published rate limits, or circumvent quotas, authentication, or tenant-isolation controls.
  • Use the API to access data belonging to any store other than your own.
  • Probe, scan, or load-test the API except against your own account and within reasonable limits.
  • Use the Developer Features to build or train a competing product, or to scrape data at a scale that degrades the Service for others.

Data You Export

When you pull data through the API or receive it via webhooks, that data leaves Schedaddle and enters systems you control or choose (your own applications, automation tools, or third-party services). For data once it leaves the Service, you act as the controller and are solely responsible for its security, lawful use, retention, and onward disclosure, and for the acts of any third party you send it to. Schedaddle's obligations as a processor under the DPA apply to processing within the Service; they do not extend to your downstream handling. You will indemnify Schedaddle against claims arising from your misuse of the Developer Features or your handling of exported data, as set out in the Terms of Service.

Webhooks

Webhook delivery is best-effort. We retry failed deliveries with backoff but do not guarantee delivery, ordering, or exactly-once semantics; design your endpoint to be idempotent. You are responsible for the security and availability of the HTTPS endpoint you register and for validating the signature on each event. We may disable an endpoint that repeatedly fails or that we reasonably believe is compromised or misconfigured.

Availability & Changes

The API is provided on an "as is" and "as available" basis, without warranties, as further described in the Terms of Service. We may add, change, deprecate, or remove endpoints, event types, and fields. We will make reasonable efforts to communicate breaking changes in advance, but you are responsible for keeping your integration current.

Suspension

We may suspend or revoke API keys or webhook endpoints, with or without notice, if we reasonably believe they are being used in violation of these API Terms, pose a security risk, or threaten the stability of the Service.

Relationship to Other Terms

These API Terms supplement the Terms of Service, Privacy Policy, and DPA. If there is a conflict specific to the Developer Features, these API Terms control; otherwise the Terms of Service control. We may update these API Terms and will revise the version above; continued use of the Developer Features after a material change requires renewed acceptance.

Contact

Questions about the API or these terms: support@schedaddle.co. Legal: legal@schedaddle.co.