Developer Terms

1. Introduction

These Developer Terms ("Terms") govern your use of the SilentID API and "Sign in with SilentID" integration ("API Services") provided by SILENTSALE LTD ("we", "us", "SilentID").

By registering an OAuth client or integrating with SilentID, you ("Developer", "you") agree to be bound by these Terms. If you do not agree, do not use our API Services.

These Terms are in addition to our general Terms & Conditions and Privacy Policy.

2. Registration and Access

2.1 Registration

To use the API Services, you must:

• Register your application through our developer portal or admin panel
• Provide accurate information about your application and organization
• Agree to these Developer Terms
• Wait for approval (if required for your application type)

2.2 Client Credentials

• You are responsible for keeping your client_id and client_secret secure
• Never expose client secrets in client-side code
• Notify us immediately if credentials are compromised
• We may revoke credentials at any time for security reasons

2.3 Application Review

We reserve the right to:

• Review your application before granting API access
• Request additional information about your use case
• Deny access for any reason
• Revoke access if these Terms are violated

3. Permitted Uses

You MAY use the API Services to:

• Authenticate users via "Sign in with SilentID"
• Display users' trust scores with their consent
• Verify users' identity verification status
• Show users' connected platform information
• Enhance trust and safety in your application

You agree to:

• Clearly explain to users why you are requesting their SilentID data
• Only request scopes you genuinely need
• Respect users' privacy preferences
• Handle user data securely and responsibly

4. Prohibited Uses

You must NOT:

4.1 Data Misuse

• Sell, rent, lease, or redistribute SilentID user data
• Use data for purposes not disclosed to users
• Aggregate data to create competing identity services
• Scrape, crawl, or bulk collect user information

4.2 Discrimination

• Deny services based solely on trust scores
• Make automated decisions that significantly affect users without human review
• Use trust scores for credit, employment, or housing decisions
• Discriminate against users with lower trust scores without legitimate justification

4.3 Misrepresentation

• Misrepresent your application's relationship with SilentID
• Display modified or fake trust scores
• Claim to be "verified by SilentID" without proper integration
• Use SilentID branding in misleading ways

4.4 Security Violations

• Attempt to circumvent rate limits or quotas
• Probe for security vulnerabilities
• Access data you are not authorized to access
• Store credentials or tokens insecurely

5. Data Handling Requirements

5.1 Data Minimization

• Only request data you need for your stated purpose
• Delete data you no longer need
• Do not retain trust scores for more than 24 hours without refresh

5.2 User Consent

• Clearly disclose what data you collect and why
• Obtain appropriate consent before collecting data
• Respect opt-out and deletion requests
• Provide users a way to disconnect from your application

5.3 Data Security

You must implement appropriate security measures including:

• Encryption of data in transit (TLS 1.2+)
• Encryption of data at rest
• Access controls and authentication
• Regular security assessments
• Incident response procedures

5.4 Data Deletion

When a user revokes access or requests deletion:

• Delete their SilentID data within 30 days
• Confirm deletion if requested
• Stop using their data immediately

6. Branding and Attribution

6.1 Required Attribution

When displaying SilentID data, you must:

• Clearly indicate the data comes from SilentID
• Link to the user's SilentID profile (if user consents)
• Not modify or misrepresent trust scores

6.2 Sign-In Button

If using our sign-in button:

• Use official SilentID branding assets
• Follow our brand guidelines
• Do not modify the button design significantly
• Include appropriate spacing and sizing

6.3 Trademark Use

• "SilentID" is a trademark of SILENTSALE LTD
• You may reference SilentID for integration purposes only
• Do not use our name to imply endorsement without permission

7. Rate Limits and Quotas

7.1 Rate Limits

API calls are subject to rate limits:

• Authentication endpoints: 10 requests per minute per IP
• Token endpoints: 100 requests per minute per client
• UserInfo endpoints: 1000 requests per hour per client

7.2 Quotas

Your application has a monthly API quota:

• Default: 1,000 requests per month
• Approved partners: Custom quotas available
• First-party apps: Unlimited

7.3 Exceeding Limits

If you exceed limits:

• Requests will be rejected with 429 status
• Repeated violations may result in temporary suspension
• Contact us to request quota increases

8. Privacy and Compliance

8.1 Your Privacy Policy

You must maintain a privacy policy that:

• Discloses your use of SilentID
• Explains what user data you collect and why
• Describes how you protect user data
• Provides contact information for privacy inquiries

8.2 Legal Compliance

You are responsible for:

• Complying with all applicable data protection laws (GDPR, UK GDPR, etc.)
• Obtaining necessary consents from users
• Responding to data subject requests
• Reporting data breaches as required by law

8.3 International Transfers

If transferring data internationally:

• Use appropriate safeguards (SCCs, adequacy decisions)
• Ensure destination provides adequate protection
• Inform users of international transfers

9. Liability and Indemnification

9.1 Limitation of Liability

TO THE MAXIMUM EXTENT PERMITTED BY LAW:

• API Services are provided "AS IS" without warranties
• We are not liable for indirect, incidental, or consequential damages
• Our total liability is limited to fees paid in the past 12 months
• We are not responsible for your use of user data

9.2 Indemnification

You agree to indemnify and hold harmless SILENTSALE LTD from:

• Claims arising from your use of the API Services
• Claims arising from your handling of user data
• Violations of these Terms or applicable laws
• Any harm caused to users by your application

10. Termination

10.1 Termination by You

You may stop using API Services at any time by:

• Deleting your OAuth client registration
• Removing integration from your application
• Notifying us at developers@silentid.co.uk

10.2 Termination by Us

We may suspend or terminate your access if:

• You violate these Terms
• Your application poses security risks
• We receive complaints about your use
• We discontinue the API Services
• Required by law

10.3 Effect of Termination

Upon termination:

• Your API credentials will be revoked
• You must delete all SilentID user data
• You must remove SilentID integration from your application
• Users will be notified their connection has been revoked

11. Changes to These Terms

We may update these Developer Terms from time to time.

For material changes:

• We will notify you via email at least 30 days in advance
• Continued use after changes constitutes acceptance
• If you disagree, you must stop using the API Services

For non-material changes:

• Changes will be posted to our developer documentation
• Continued use constitutes acceptance

12. General Provisions

12.1 Governing Law

These Terms are governed by the laws of England and Wales.

12.2 Dispute Resolution

Disputes will be resolved in the courts of England and Wales.

12.3 Entire Agreement

These Terms, along with our Terms & Conditions and Privacy Policy, constitute the entire agreement.

12.4 Severability

If any provision is unenforceable, the remainder remains in effect.

12.5 No Waiver

Failure to enforce any right does not waive that right.

12.6 Assignment

You may not assign these Terms without our consent.

13. Contact

For questions about these Developer Terms:

SILENTSALE LTD
Company No. 16457502
Address: 86-90 Paul Street, London EC2A 4NE
Email: developers@silentid.co.uk
Website: developers.silentid.co.uk