Addendum D – API Terms of Use

1. Access & Authentication

• Access requires valid credentials (keys/tokens) issued by HIOX.
• Keys are confidential; sharing, embedding in client-side code, or exposing keys is prohibited.

2. Usage & Limits

• HIOX may impose rate limits, quotas, or usage caps.
• Exceeding limits may result in throttling, temporary blocks, or suspension.

3. Prohibited Uses

• No scraping, reselling, or reverse engineering of the APIs.
• No use to build competing services that replicate core functionality without written consent.
• No abuse that degrades stability or security of the Services.

4. Modifications & Deprecation

HIOX may modify, deprecate, or discontinue APIs with reasonable notice. Customer is responsible for updating integrations.

5. Security

Customer must store credentials securely and follow best practices. Suspected compromise must be reported to security@hiox.com without undue delay.

6. Availability

API availability and support targets are defined in the SLA.